[BUG] AUTH_BASIC_LOCATION does not seem to work

[sbe-arg]

What happened?

https://docs.bunkerweb.io/latest/features/#auth-basic

Does not seem to respect /sign-up

      - prowler.${DOMAIN_NAME}_REVERSE_PROXY_URL=/
      - prowler.${DOMAIN_NAME}_REVERSE_PROXY_HOST=http://prowler-ui:3000
      - prowler.${DOMAIN_NAME}_USE_BAD_BEHAVIOR=no
      - prowler.${DOMAIN_NAME}_USE_MODSECURITY=no
      - prowler.${DOMAIN_NAME}_PROXY_BUFFER_SIZE=512k
      - prowler.${DOMAIN_NAME}_PROXY_BUFFERS=4 512k
      - prowler.${DOMAIN_NAME}_PROXY_BUSY_BUFFERS_SIZE=512k
      - prowler.${DOMAIN_NAME}_USE_AUTH_BASIC=yes # protect sign-ups
      - prowler.${DOMAIN_NAME}_AUTH_BASIC_LOCATION=/sign-up
      - prowler.${DOMAIN_NAME}_AUTH_BASIC_USER=${PROWLER_ADMIN_EMAIL}
      - prowler.${DOMAIN_NAME}_AUTH_BASIC_PASSWORD=${PROWLER_ADMIN_PASSWORD}

How to reproduce?

Compose a service and assign a AUTH_BASIC_LOCATION, does not seem to be respected

Configuration file(s) (yaml or .env)

Relevant log output

bunkerweb-1            | 2025/12/02 21:05:50 [error] 405#405: *357 open() "/nowhere/sign-up" failed (2: No such file or directory), client: 172.18.0.1, server: prowler.localhost, request: "GET /sign-up HTTP/2.0", host: "prowler.localhost"

BunkerWeb version

1.6.6

What integration are you using?

Docker

Linux distribution (if applicable)

No response

Removed private data

• I have removed all private data from the configuration file and the logs

Code of Conduct

• I agree to follow this project's Code of Conduct

[TheophileDiot]

Hi @sbe-arg, it looks like that authbasic (not in sitewide) is a bit broken with reverse proxies. We need to find an alternate solution to make it work 😄

[TheophileDiot]

Hi @sbe-arg, I'm happy to inform you that this feature have been fixed in the 1.6.7 version!