Issue with blocking URLs with "?" in Pangolin #1408

New Issue

MrUnknownDE · 2026-04-05T19:24:50+02:00

MrUnknownDE commented

2026-04-05 19:24:50 +02:00

Originally created by @rudoma on 6/4/2025

Hi everyone,

First of all, thanks for the great work on Pangolin — I’m new to the project and really enjoying it so far!

Today I tried to add a rule to block specific login URLs for my self-hosted services, starting with Audiobookshelf. I’d like to block all requests to:

/audiobookshelf/login/?autoLaunch=0

This URL allows bypassing the automatic redirect to the OAuth provider, which I neither want nor need. I’d like to prevent direct access via this query parameter.

I encountered the same issue with Immich:

/auth/login?autoLaunch=0

Unfortunately, I couldn’t get it to work — even when trying with wildcards.
Is there a recommended way to block requests with specific query parameters like this in Pangolin?

Thanks in advance for your help!

*Originally created by @rudoma on 6/4/2025* Hi everyone, First of all, thanks for the great work on Pangolin — I’m new to the project and really enjoying it so far! Today I tried to add a rule to block specific login URLs for my self-hosted services, starting with Audiobookshelf. I’d like to block all requests to: /audiobookshelf/login/?autoLaunch=0 This URL allows bypassing the automatic redirect to the OAuth provider, which I neither want nor need. I’d like to prevent direct access via this query parameter. I encountered the same issue with Immich: /auth/login?autoLaunch=0 Unfortunately, I couldn’t get it to work — even when trying with wildcards. Is there a recommended way to block requests with specific query parameters like this in Pangolin? Thanks in advance for your help!

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1408