[GH-ISSUE #240] Setting a protected website as new tab url shows login screen #31424

Closed
opened 2026-06-15 08:09:17 -05:00 by GiteaMirror · 4 comments
Owner

Originally created by @Boerny41 on GitHub (Feb 25, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/240

Current Behavior: When setting the "new tab URL" in a browser to a website protected by pangolin authentication, it shows the login screen even though it is not required. Refreshing the page without entering a password shows the actual website.

Tested on Edge (native support for custom URL) and Chrome (URL changed by add-on)

Expected Behavior: Website showing up directly, if user authenticated in the past 30 days.

Steps to Reproduce:

  1. Tell Edge to use a protected website as new tab
  2. Open a new tab
  3. press F5

Environment:

  • OS: Debian
  • Application Version: 1.0.0-beta.14
Originally created by @Boerny41 on GitHub (Feb 25, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/240 **Current Behavior:** When setting the "new tab URL" in a browser to a website protected by pangolin authentication, it shows the login screen even though it is not required. Refreshing the page without entering a password shows the actual website. Tested on Edge (native support for custom URL) and Chrome (URL changed by add-on) **Expected Behavior:** Website showing up directly, if user authenticated in the past 30 days. **Steps to Reproduce:** 1. Tell Edge to use a protected website as new tab 2. Open a new tab 3. press F5 **Environment:** - OS: Debian - Application Version: 1.0.0-beta.14
GiteaMirror added the stale label 2026-06-15 08:09:17 -05:00
Author
Owner

@miloschwartz commented on GitHub (Feb 26, 2025):

Hey, what is the URL of the bookmark? Does it end with /auth/resource/<id> (this is the auth portal), or is it the full URL of the resource itself? The auth portal will still show if you go to it directly (I think), but if you already have a session for the resource, it shouldn't redirect to the portal.

Let me know because otherwise, this could be a bug. :)

<!-- gh-comment-id:2683610524 --> @miloschwartz commented on GitHub (Feb 26, 2025): Hey, what is the URL of the bookmark? Does it end with `/auth/resource/<id>` (this is the auth portal), or is it the full URL of the resource itself? The auth portal will still show if you go to it directly (I think), but if you already have a session for the resource, it shouldn't redirect to the portal. Let me know because otherwise, this could be a bug. :)
Author
Owner

@Boerny41 commented on GitHub (Feb 26, 2025):

It's supposed to open just the URL e.g. https://sub.mydomain.com but it seems to auto redirect to https://sub.mydomain.com/auth/resource/...

A session for the resource already exists, but it still shows the portal if opened via the new tab button. However, it does not need a new login, just refreshing the page while it shows the login portal will redirect to the actual website.

<!-- gh-comment-id:2685060750 --> @Boerny41 commented on GitHub (Feb 26, 2025): It's supposed to open just the URL e.g. `https://sub.mydomain.com` but it seems to auto redirect to `https://sub.mydomain.com/auth/resource/...` A session for the resource already exists, but it still shows the portal if opened via the new tab button. However, it does not need a new login, just refreshing the page while it shows the login portal will redirect to the actual website.
Author
Owner

@github-actions[bot] commented on GitHub (Apr 26, 2025):

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

<!-- gh-comment-id:2831721722 --> @github-actions[bot] commented on GitHub (Apr 26, 2025): This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
Author
Owner

@github-actions[bot] commented on GitHub (May 11, 2025):

This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.

<!-- gh-comment-id:2869272622 --> @github-actions[bot] commented on GitHub (May 11, 2025): This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#31424