"Application error" when using any form of authentication on services #668

New Issue

MrUnknownDE · 2026-04-05T17:32:46+02:00

MrUnknownDE commented

2026-04-05 17:32:46 +02:00

Originally created by @tealtxgr on 11/6/2025

Describe the Bug

Hi there, I left this as a discussion but the issue is getting worse and no one has been able to get to my post unfortunately. So I'm mirroring it here, with some updates: I'm running into an issue where if I try and connect to my services I just get the following error:

Application error: a client-side exception has occurred while loading pangolin.mysite.com (see the browser console for more information).

This only happens if I have any form of Authentication enabled-- Platform SSO, Pin code, or Password enabled. If I turn those off the service is perfectly accessible. This is for multiple services too-- after I update them they sometimes just become unreachable through Pangolin if they're behind authentication. I tried clearing cookies/site data for both Pangolin and the service but it still doesn't work.

This is what shows up in the browser console:

1255-26f05d8bf86e016d.js:1 Uncaught SecurityError: Failed to execute 'replaceState' on 'History': A history state object with URL 'https://auth/resource/524c80c5-5114-4249-b310-f038c207a2c6?redirect=https%3A%2F%2Fservice.mysite.com%2F' cannot be created in a document with origin 'https://pangolin.mysite.com' and URL 'https://pangolin.mysite.com//auth/resource/524c80c5-5114-4249-b310-f038c207a2c6?redirect=https%3A%2F%2Fservice.mysite.com%2F'.
at 1255-26f05d8bf86e016d.js:1:25545
at o1 (4bd1b696-100b9d70ed4e49c1.js:1:88957)
at uv (4bd1b696-100b9d70ed4e49c1.js:1:98481)
at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322)
at uv (4bd1b696-100b9d70ed4e49c1.js:1:98444)
at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322)
at uv (4bd1b696-100b9d70ed4e49c1.js:1:98520)
at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322)
at uv (4bd1b696-100b9d70ed4e49c1.js:1:98444)
at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322)

Nothing of value shows up in the docker log for the pangolin container or any of the associated containers. I do notice that it says https://pangolin.mysite.com//auth rather than https://pangolin.mysite.com/auth-- is this normal? A possible misconfiguration?

One-by-one services are no longer working with authentication and I'm not sure what's causing it.

Environment

OS Type & Version: (e.g., Ubuntu 22.04)
Ubuntu 24.04 & 25.04 (edit: now 25.10)
Pangolin Version:
1.12.1 (edit: now 1.12.2)
Gerbil Version:
1.2.2
Traefik Version:
3.4.0
Newt Version:
1.6.0
Olm Version: (if applicable)

To Reproduce

Turn on any form of authentication on services with the error showing up.

Expected Behavior

Access to service or redirect to login.

*Originally created by @tealtxgr on 11/6/2025* ### Describe the Bug Hi there, I left this as a discussion but the issue is getting worse and no one has been able to get to my post unfortunately. So I'm mirroring it here, with some updates: I'm running into an issue where if I try and connect to my services I just get the following error: Application error: a client-side exception has occurred while loading pangolin.mysite.com (see the browser console for more information). This only happens if I have **any** form of Authentication enabled-- Platform SSO, Pin code, or Password enabled. If I turn those off the service is perfectly accessible. This is for multiple services too-- after I update them they sometimes just become unreachable through Pangolin if they're behind authentication. I tried clearing cookies/site data for both Pangolin and the service but it still doesn't work. This is what shows up in the browser console: 1255-26f05d8bf86e016d.js:1 Uncaught SecurityError: Failed to execute 'replaceState' on 'History': A history state object with URL 'https://auth/resource/524c80c5-5114-4249-b310-f038c207a2c6?redirect=https%3A%2F%2Fservice.mysite.com%2F' cannot be created in a document with origin 'https://pangolin.mysite.com' and URL 'https://pangolin.mysite.com//auth/resource/524c80c5-5114-4249-b310-f038c207a2c6?redirect=https%3A%2F%2Fservice.mysite.com%2F'. at 1255-26f05d8bf86e016d.js:1:25545 at o1 (4bd1b696-100b9d70ed4e49c1.js:1:88957) at uv (4bd1b696-100b9d70ed4e49c1.js:1:98481) at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322) at uv (4bd1b696-100b9d70ed4e49c1.js:1:98444) at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322) at uv (4bd1b696-100b9d70ed4e49c1.js:1:98520) at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322) at uv (4bd1b696-100b9d70ed4e49c1.js:1:98444) at ug (4bd1b696-100b9d70ed4e49c1.js:1:98322) Nothing of value shows up in the docker log for the pangolin container or any of the associated containers. I do notice that it says https://pangolin.mysite.com//auth rather than https://pangolin.mysite.com/auth-- is this normal? A possible misconfiguration? One-by-one services are no longer working with authentication and I'm not sure what's causing it. ### Environment - OS Type & Version: (e.g., Ubuntu 22.04) Ubuntu 24.04 & 25.04 (edit: now 25.10) - Pangolin Version: 1.12.1 (edit: now 1.12.2) - Gerbil Version: 1.2.2 - Traefik Version: 3.4.0 - Newt Version: 1.6.0 - Olm Version: (if applicable) ### To Reproduce Turn on any form of authentication on services with the error showing up. ### Expected Behavior Access to service or redirect to login.

MrUnknownDE closed this issue

2026-04-05 17:32:46 +02:00

MrUnknownDE added the needs investigating potential bug needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating potential bug labels 2026-04-05 17:32:47 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating potential bug potential bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#668