2FA login fails

[CaCO2]

What happened?

after entering 2FA code, user is redirected to login page again

Version Information

ghcr.io/danny-avila/librechat-dev latest 39874fae3d91 4 hours ago 1.56GB
ghcr.io/danny-avila/librechat-rag-api-dev-lite latest 174ed0a539bc 14 hours ago 1.6GB

Steps to Reproduce

1. (Create an account and enable 2FA)
2. Enter valid username/password from http://152.70.x.x:3080/login
3. On the 2FA screen, type the current TOTP code from Google Authenticator and verify
4. Observe the page redirect to http://152.70.x.x:3080/login

(It's likely this only happens when accessing the web interface on another machine via local LAN or public IP. localhost:3080/login seems to work fine)

What browsers are you seeing the problem on?

Firefox

Relevant log output

# (not sure if this is relevant but it's the only thing in debug logs. error log is empty)
2025-08-28T00:12:48.787Z debug: [requireLocalAuth] Error: No user
2025-08-28T00:12:55.280Z debug: [requireLocalAuth] Error: No user

Screenshots

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[danny-avila]

Are you able to reproduce this consistently? It works for me every time. Note, the following .env variables must match the access point of the app:

DOMAIN_CLIENT=http://localhost:3080
DOMAIN_SERVER=http://localhost:3080

So if it's accessed from http://152.70.x.x:3080, it should be:

DOMAIN_CLIENT=http://152.70.x.x:3080
DOMAIN_SERVER=http://152.70.x.x:3080

[CaCO2]

Thanks for the follow-up. I don’t have any login issues today, but I did encounter the problem previously on two of my servers—one of which was a fresh LibreChat deployment. Actually, I’ve never had to manually change the .env domain variables regardless of which address I use to access the web interface? It just works before yesterday and now.