3 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Coderbot	445da9f5fc	fix: cross-subdomain SSO auto-login for *arr services ... - Set Domain=.sami on session + CSRF cookies so browsers send them to all subdomains - This fixes Caddy forward_auth returning 401 for radarr/sonarr/prowlarr - Fix login URL concatenation bug (radarr.samilogin -> radarr.sami/login) - Fix getSetCookie() missing from _httpsFetch/_httpFetch response objects - Fix array/string handling for set-cookie header in session-handlers fallback - Refactor csrf-protection to createCSRFMiddleware() factory with cookieDomain support - Pass renewCSRFToken through middleware deps chain to TOTP route	2026-05-23 16:15:56 -07:00
Coderbot	fe0f52ce17	fix: services/status probe fails with self-signed certs when CA is missing in container ... The /api/v1/services/status endpoint (dashboard card ON/OFF) uses an HTTPS agent to probe each service. When /app/pki/root.crt is missing inside the container, it fell back to new https.Agent() which rejects self-signed certificates. This caused all .sami domain probes to fail with UNABLE_TO_GET_ISSUER_CERT_LOCALLY, making dashboard cards randomly flip between ON and OFF depending on whether the Pylon relay responded before the 10s deadline. Fix: use rejectUnauthorized: false as fallback when CA cert is absent.	2026-05-23 14:35:39 -07:00
Coderbot	8df5214a45	fix: fetchT() now handles self-signed HTTPS certs ... - Node.js native fetch() (undici) cannot use rejectUnauthorized:false - Added _httpsFetch() using raw https module for internal .sami endpoints - Fixes quality profile fetch for Sonarr/Radarr (was returning "fetch failed") - Also fixed corrupted proces..._KEY -> process.env.PYLON_KEY in pylon Coderbot fix #1	2026-05-23 14:16:18 -07:00