🐛Can't login after registration...

[cbwilliamsnh]

I have a new installation running locally in Docker on my MacBook. I'm able to start the containers, and access the registration page. I'm also able to register a new account. When I try to use that account to login, I get a 401 error.

Logs

2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "POST /api/auth/login HTTP/1.1" 200 870 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | ::1 -  31/Mar/2025:14:21:56 +0000 "POST /index.php/auth/login" 200
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /welcome HTTP/1.1" 200 3067 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /logo-text-only-white-text.png HTTP/1.1" 200 16545 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-CnfNKJnK.css HTTP/1.1" 200 33238 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-BR3bUei1.js HTTP/1.1" 200 383024 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-BnN5mZlA.css HTTP/1.1" 200 305 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-D8ecOn3G.css HTTP/1.1" 200 89 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-CRRdRxpX.css HTTP/1.1" 200 148 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-BCj6QrzU.css HTTP/1.1" 200 350 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index--8UDBhmz.css HTTP/1.1" 200 160 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /api/users/me HTTP/1.1" 401 41 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /api/accounts HTTP/1.1" 401 41 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 127.0.0.1 -  31/Mar/2025:14:21:56 +0000 "GET /index.php/users/me" 401
2025-03-31 10:21:56 all-in-one  | ::1 -  31/Mar/2025:14:21:56 +0000 "GET /index.php/accounts" 401
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /api/organizers HTTP/1.1" 401 41 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 127.0.0.1 -  31/Mar/2025:14:21:56 +0000 "GET /index.php/organizers" 401
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /auth/login HTTP/1.1" 200 3757 "http://localhost:8123/welcome" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-EQBRe7_o.css HTTP/1.1" 200 448 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-DSGcEf6g.js HTTP/1.1" 200 1110 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /logo-dark.svg HTTP/1.1" 200 7517 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-EQBRe7_o.css HTTP/1.1" 200 448 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /assets/index-BDY7KP6C.css HTTP/1.1" 200 1089 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /login-background.jpg HTTP/1.1" 200 218868 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | 192.168.65.1 - - [31/Mar/2025:14:21:56 +0000] "GET /api/users/me HTTP/1.1" 401 41 "http://localhost:8123/auth/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
2025-03-31 10:21:56 all-in-one  | ::1 -  31/Mar/2025:14:21:56 +0000 "GET /index.php/users/me" 401

[JvictorMarques]

I'm also getting the same error too

[djet84]

I also get stuck at this point

[iotemylabs]

I am also getting the same error

[daveearley]

Can you please provide more information. Such as, are you all using localhost? What version are you using? Are there any console errors in the browser? What Docker image are you using?

Thank you

[djet84]

I use docker all-in-one and had to set the server_api Port to 8000 instead 80, after that everything was OK.

[laurens-moonens]

Late to the party. I'm having the same issue, and changing the VITE_API_URL_SERVER to port 8000 didn't fix it for me.
I'm also using the docker all-in-one. I am not using localhost. Instead, I set the url to be the local ip of my home server so I can connect to it from my desktop PC (on the same network of course).

all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "POST /api/auth/login HTTP/1.1" 200 883 "http://192.168.0.100:8123/auth/login" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | ::1 -  01/Oct/2025:17:31:45 +0000 "POST /index.php/auth/login" 200
all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "GET /manage/events HTTP/1.1" 200 4514 "http://192.168.0.100:8123/auth/login" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "GET /favicon.svg HTTP/1.1" 499 0 "http://192.168.0.100:8123/manage/events" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "GET /api/users/me HTTP/1.1" 401 41 "http://192.168.0.100:8123/manage/events" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | 127.0.0.1 -  01/Oct/2025:17:31:45 +0000 "GET /index.php/users/me" 401
all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "GET /api/events?page=1&per_page=20&query=&sort_by=&sort_direction=&eventsStatus=upcoming HTTP/1.1" 401 41 "http://192.168.0.100:8123/manage/events" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | ::1 -  01/Oct/2025:17:31:45 +0000 "GET /index.php/events" 401
all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "GET /api/organizers HTTP/1.1" 401 41 "http://192.168.0.100:8123/manage/events" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | 127.0.0.1 -  01/Oct/2025:17:31:45 +0000 "GET /index.php/organizers" 401
all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "GET /auth/login HTTP/1.1" 200 5551 "http://192.168.0.100:8123/manage/events" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | 192.168.0.231 - - [01/Oct/2025:17:31:45 +0000] "GET /api/users/me HTTP/1.1" 401 41 "http://192.168.0.100:8123/auth/login" "Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0"
all-in-one  | ::1 -  01/Oct/2025:17:31:45 +0000 "GET /index.php/users/me" 401

[alexandre-kakal]

You need to confirm your email to login the second time

[chuushi]

I am running into this error as well after painstackingly setting up separate frontend and backend. I created the first user, then I tried logging in.
After the backend sends 200 for the login request /auth/login, the /users/me request returns 401.

hi-events-backend-1  | <client_ip> - - [08/Dec/2025:10:36:28 +0000] "OPTIONS /auth/login HTTP/1.1" 204 0 "http://<frontend_ip>:5678/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" "-"
hi-events-backend-1  | <client_ip> - - [08/Dec/2025:10:36:28 +0000] "POST /auth/login HTTP/1.1" 200 602 "http://<frontend_ip>:5678/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" "-"
hi-events-backend-1  | <client_ip> - - [08/Dec/2025:10:36:29 +0000] "GET /users/me HTTP/1.1" 401 41 "http://<frontend_ip>:5678/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" "-"
hi-events-backend-1  | <client_ip> - - [08/Dec/2025:10:36:29 +0000] "GET /users/me HTTP/1.1" 401 41 "http://<frontend_ip>:5678/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" "-"

Visually, on the web, the login seems to succeed and the page changes for a split second, then it goes back to the login screen. I'm really not sure what I'm doing wrong. I created a second user and verified the email, but it doesn't change anything.

No matter which page I go, it redirects to the login screen. When I try to access the backend through the website, it redirects me to http://<backend_ip>:8080/auth/login and throws 405 Method Not Allowed error.

Is this by any chance happening because the request is not made over HTTPS? Haven't been able to test this yet because I'm out of time

[blackfoxsa]

Same issue here, can create an account and receive the confirmation email, but any time I try to access the /api/users/me endpoint I get a 401 unauthorized. Currently all http, within my LAN, using docker compose to run the 3x separate containers. I won't include my logs, they don't show anything new or exciting.

[blackfoxsa]

I had more of a look into this, the Set-Cookie was failing in my browser on login due to the cookie being served over http instead of https. Trying to use Laravel .env variables to override this didn't work so I proceeded to add my cloudflare tunnel and serve the app over https. No longer seeing any 401 errors.

[JSkye3293]

I had more of a look into this, the Set-Cookie was failing in my browser on login due to the cookie being served over http instead of https. Trying to use Laravel .env variables to override this didn't work so I proceeded to add my cloudflare tunnel and serve the app over https. No longer seeing any 401 errors.

See, I am also having the same issue but I used Nginx Proxy Manager to tunnel SSL and that didn't work. Still getting 401 unauthorized error after installing both separate front end and back end services. I avoided docker cause yarn would timeout trying to load the massive amount of packages needed for the front end. I would love to see this project work past the login screen lol. All my .env files are correct as far as I can tell and we are serving the backend on port 8000 with no apparent conflicts. I get very minimal output on the serverside other than when I run Curl to try and test whats being pulled. Any help would be much appreciated.

[blackfoxsa]

I had more of a look into this, the Set-Cookie was failing in my browser on login due to the cookie being served over http instead of https. Trying to use Laravel .env variables to override this didn't work so I proceeded to add my cloudflare tunnel and serve the app over https. No longer seeing any 401 errors.

See, I am also having the same issue but I used Nginx Proxy Manager to tunnel SSL and that didn't work. Still getting 401 unauthorized error after installing both separate front end and back end services. I avoided docker cause yarn would timeout trying to load the massive amount of packages needed for the front end. I would love to see this project work past the login screen lol. All my .env files are correct as far as I can tell and we are serving the backend on port 8000 with no apparent conflicts. I get very minimal output on the serverside other than when I run Curl to try and test whats being pulled. Any help would be much appreciated.

Well, even though I used a Cloudflare Tunnel rather than Nginx Proxy Manager, the behavior you’re describing sounds identical to what I ran into..

If the login request returns a 200, but the very next requests (like fetching the current user) immediately 401, that usually means the session cookie isn’t being stored by the browser rather than the auth itself failing. Basically the system accepts your login, but the browser doesn't store the associated metadata.

In my case, Set-Cookie was being sent without a secure context, so the browser silently dropped it (with a warning if you knew exactly where to look). Once the app was served over HTTPS, the cookie stuck and the 401s disappeared.

I’d suggest opening DevTools → Network, clicking the login request, and checking the response headers for Set-Cookie. Chrome showed a warning for me that the cookie had been rejected. I think it was “Secure cookie over insecure connection”.

If that’s what you’re seeing, the issue is likely between NPM and the browser (HTTPS / forwarded headers), rather than within Hi.Events itself. I've attached a screenshot of a "healthy" response in dev tools FWIW.

Good luck!