[Bug]: Webui always asks for username/password

[kraM1tt]

Bug description

Even if I've only just closed the tab, it asks me to login again. Using default webui it never asks me to login as I've whitelisted my PC IP address and subnet. Older versions of VueTorrent worked, but I don't know which, currently using latest.

Expectations

To stay logged in.

Relevant debug informations

No response

How did you install VueTorrent?

Fetched from latest-release branch

Environment description

Device type and name: 
OS: Win !0

PWA: 
Running inside a container: No

qBittorrent version

4.6.3

VueTorrent version

2.6.0

Agreements

• The bug still occurs on the nightly build
• The bug still occurs on the latest version of qBittorrent
• A similar issue doesn't already exist

[Larsluph]

When opening the WebUI, a request is made to detect the current login state (authentication is cookie-based).

The login screen shows up if this request fails.

Open up the DevTools on a desktop (using F12) and go to the Network tab. You should find a request named "buildInfo" in the list. Could you please tell us the status code of that request?

[kraM1tt]

Hopefully this is correct?

[Larsluph]

The list is empty, try clearing your filters (the red funnel icon at the top)

[kraM1tt]

Hmmm I cleared the filters like you said and it still seems the same

Any idea?

[kraM1tt]

To be clear I'm trying to access qbit web that's on another PC on the network. If I run the test from the localhost PC that is running qbit it still asks to login every time but I seem to get proper logs for you

Request URL:
http://localhost:8080/api/v2/app/buildInfo
Request Method:
GET
Status Code:
404 Not Found
Remote Address:
[::1]:8080
Referrer Policy:
strict-origin-when-cross-origin
Connection:
keep-alive
Content-Length:
0
Content-Security-Policy:
frame-ancestors 'self';
Date:
Sun, 04 Feb 2024 22:53:01 GMT
X-Content-Type-Options:
nosniff
X-Frame-Options:
SAMEORIGIN
X-Xss-Protection:
1; mode=block
Accept:
application/json, text/plain, /
Accept-Encoding:
gzip, deflate, br
Accept-Language:
en-GB,en-US;q=0.9,en;q=0.8
Connection:
keep-alive
Cookie:
SID=fuyiiCEMfhYQGN5VbRy7toqKrCr8WnYI
Host:
localhost:8080
Referer:
http://localhost:8080/
Sec-Ch-Ua:
"Not A(Brand";v="99", "Google Chrome";v="121", "Chromium";v="121"
Sec-Ch-Ua-Mobile:
?0
Sec-Ch-Ua-Platform:
"Windows"
Sec-Fetch-Dest:
empty
Sec-Fetch-Mode:
cors
Sec-Fetch-Site:
same-origin
User-Agent:
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36

[Larsluph]

That's it!
The weird thing is that you receive some 404 on the buildInfo route (and tags for some reason). That's unusual 🤔, I didn't even know it was possible...

[parasiteoflife]

I get the same behavior when I'm using a self-signed cert and Firefox is not set to automatically trust third-party root certificates. Once the Firefox option is enabled I don't get asked for login anymore.

[Larsluph]

Is it still happening?
@kraM1tt @parasiteoflife

[kraM1tt]

It is unfortunately but now it's also doing it with default webui so I have no clue what's going on lol

[Larsluph]

In that case I'm not sure if we should keep it open...
@WDaan what do you think?

[hron]

This one happens to me as well in Firefox on Android. I have just tried to access qbittorrent via Brave Browser and it works without asking the login/password every time. My setup uses a self-signed certificate. Just FYI