Console messages rejecting cookies
I'm unable to log in to my homarr instance currently and the Firefox console shows various messages for several cookies:
https://pastebin.com/F1uUQzq3
Firefox 129.0
Homarr running in Docker Compose on Ubuntu 24.04
Pastebin
Cookie “next-auth.csrf-token” has been rejected because it is in a ...
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
5 Replies
Thank you for submitting a support request.
Depending on the volume of requests, our team should get in contact with you shortly.
⚠️ Please include the following details in your post or we may reject your request without further comment: - Log (See https://homarr.dev/docs/community/faq#how-do-i-open-the-console--log) - Operating system (Unraid, TrueNAS, Ubuntu, ...) - Exact Homarr version (eg. 0.15.0, not latest) - Configuration (eg. docker-compose, screenshot or similar. Use ``your-text`` to format) - Other relevant information (eg. your devices, your browser, ...)
❓ Frequently Asked Questions | Homarr documentation
Can I install Homarr on a Raspberry Pi?
looks like a potential issue with your reverse proxy
actually no, maybe with your SSO
Wait no I'm confused, how are you getting CSRF issues within the same site. It's basically saying wherever you're trying to go, you're going there from outside of homarr, which doesn't make sense unless there's a problem with your SSO which redirects you to homarr after login, or your reverse proxy is having a stroke
Ok I'm glad it's confusing because that means (hopefully) I'm not completely inept.
I'm not using SSO, just local authentication within homarr.
I am using traefik v2 as a proxy. I'll take a look at those settings and see if something's wonky.
You're not using an SSO? that's even more confusing because that means you're not crossing sites
Have you set the NEAXTAUTH_URL?
Setting that won't help
This is 100% a configuration from your reverse proxy that is prohibiting Homarr from setting cookies.
Please set the policy to allow Homarr setting the cookies. This must be done in your proxy. See the documentation for your proxy for further instructions