github-starred/pangolin
2
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-07-16 06:08:33 -05:00
Code Issues 1.6k Packages Projects Releases 79 Wiki Activity

[GH-ISSUE #2903] Android login hangs on "generating sign in code..." when browser is Firefox #9029

New Issue
Open
opened 2026-04-30 05:16:41 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-30 05:16:41 -05:00
Owner
Copy Link

Originally created by @Plecebo on GitHub (Apr 26, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2903

Describe the Bug

After completing OIDC authorization in the browser, the app stays on "generating sign in code..." indefinitely. The success page fires an Android deep link via window.location.href = "intent://auth-success#Intent;scheme=pangolin;package=net.pangolin.Pangolin;end" — but Firefox on Android silently ignores intent:// URIs (this scheme is Chrome-only). The app never receives the callback and never polls for the session token.
Server side completes correctly: deviceWebAuthCodes shows verified=1 with the correct userId populated. Zero network traffic from the device after the OIDC redirect — the app is simply never signaled.

Environment

  • Pangolin: 1.17.1
  • Android app: latest (Play Store)
  • Browser: Firefox for Android (reproduced); Chrome for Android (works)

To Reproduce

  1. Open the Pangolin Android app → tap Sign In
  2. When the browser opens, complete OIDC authorization (Authentik)
  3. Browser reaches the success page
  4. App remains on "generating sign in code..." spinner indefinitely

Expected Behavior

App receives the deep link callback, polls /api/v1/auth/device-web-auth/poll/, and completes login.

Originally created by @Plecebo on GitHub (Apr 26, 2026). Original GitHub issue: https://github.com/fosrl/pangolin/issues/2903 ### Describe the Bug After completing OIDC authorization in the browser, the app stays on "generating sign in code..." indefinitely. The success page fires an Android deep link via window.location.href = "intent://auth-success#Intent;scheme=pangolin;package=net.pangolin.Pangolin;end" — but Firefox on Android silently ignores intent:// URIs (this scheme is Chrome-only). The app never receives the callback and never polls for the session token. Server side completes correctly: deviceWebAuthCodes shows verified=1 with the correct userId populated. Zero network traffic from the device after the OIDC redirect — the app is simply never signaled. ### Environment - Pangolin: 1.17.1 - Android app: latest (Play Store) - Browser: Firefox for Android (reproduced); Chrome for Android (works) ### To Reproduce 1. Open the Pangolin Android app → tap Sign In 2. When the browser opens, complete OIDC authorization (Authentik) 3. Browser reaches the success page 4. App remains on "generating sign in code..." spinner indefinitely ### Expected Behavior App receives the deep link callback, polls /api/v1/auth/device-web-auth/poll/<code>, and completes login.
GiteaMirror commented 2026-04-30 05:16:43 -05:00
Author
Owner
Copy Link

@qroac commented on GitHub (Apr 30, 2026):

Same for me.
Tested with OIDC authentication (keycloak) and local admin user

Smartphone: Samsung S21

Worked after switching default browser from firefox to chrome.

<!-- gh-comment-id:4350672464 --> @qroac commented on GitHub (Apr 30, 2026): Same for me. Tested with OIDC authentication (keycloak) and local admin user Smartphone: Samsung S21 Worked after switching default browser from firefox to chrome.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
api
authentication
bug
config
dependencies
docker
documentation
enhancement
good first issue
help wanted
Improvement
Look Into
needs investigating
networking
new feature
non-critical bug
potential bug
pull-request
Mirrored from GitHub Pull Request
 question
reverse proxy
Security
stale
ui
wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#9029
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?