anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-21 17:56:33 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

PWA failed because HTTP basic auth block static assets #8694

New Issue
Open
opened 2026-02-16 18:10:36 -05:00 by yindo · 1 comment
yindo commented 2026-02-16 18:10:36 -05:00
Owner
Copy Link
Copy Source

Originally created by @heimoshuiyu on GitHub (Feb 6, 2026).

Originally assigned to: @thdxr on GitHub.

Description

TLDR: Update the HTTP basic auth middleware to allow static resources through.

Reason: I run OPENCODE_SERVER_PASSWORD=iampassword opencode web to start the web service and configure an HTTPS certificate so I can access it via my phone browser outdoors (PWA requires HTTPS). But the browser wouldn’t recognize it as a PWA app.

After investigating, the issue is that OpenCode’s backend HTTP basic auth middleware at packages/opencode/src/server/server.ts blocks access to /site.webmanifest. After skipping auth for it, the browser correctly recognizes it as a PWA app.

Plugins

none

OpenCode version

dev

Steps to reproduce

  1. OPENCODE_SERVER_PASSWORD=iampassword opencode web
  2. Setup your HTTPS web proxy for it
  3. Navigate to the HTTPS website. Check chromium F12 tool "Application"

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

Originally created by @heimoshuiyu on GitHub (Feb 6, 2026). Originally assigned to: @thdxr on GitHub. ### Description TLDR: Update the HTTP basic auth middleware to allow static resources through. Reason: I run OPENCODE_SERVER_PASSWORD=iampassword opencode web to start the web service and configure an HTTPS certificate so I can access it via my phone browser outdoors (PWA requires HTTPS). But the browser wouldn’t recognize it as a PWA app. After investigating, the issue is that OpenCode’s backend HTTP basic auth middleware at `packages/opencode/src/server/server.ts` blocks access to `/site.webmanifest`. After skipping auth for it, the browser correctly recognizes it as a PWA app. ### Plugins none ### OpenCode version dev ### Steps to reproduce 1. OPENCODE_SERVER_PASSWORD=iampassword opencode web 2. Setup your HTTPS web proxy for it 3. Navigate to the HTTPS website. Check chromium F12 tool "Application" ### Screenshot and/or share link _No response_ ### Operating System _No response_ ### Terminal _No response_
yindo added the bugweb labels 2026-02-16 18:10:36 -05:00
yindo commented 2026-02-16 18:10:36 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Feb 6, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #9206: Web UI: Basic Auth incompatible with crossorigin attributes on assets - Similar issue where HTTP basic auth blocks static assets from loading
  • #10047: Basic Auth breaks the CORS support - Related issue about basic auth blocking asset access through CORS
  • #8676: Plugin client returns 401 Unauthorized when OPENCODE_SERVER_PASSWORD is set - Related issue about auth middleware blocking API calls

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Feb 6, 2026): This issue might be a duplicate of existing issues. Please check: - #9206: Web UI: Basic Auth incompatible with crossorigin attributes on assets - Similar issue where HTTP basic auth blocks static assets from loading - #10047: Basic Auth breaks the CORS support - Related issue about basic auth blocking asset access through CORS - #8676: Plugin client returns 401 Unauthorized when OPENCODE_SERVER_PASSWORD is set - Related issue about auth middleware blocking API calls Feel free to ignore if none of these address your specific case.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label bug web
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#8694
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?