[Bug]: Not redirected to APP_URL post-login (subpath)

[druexmachina]

Snipe-IT Version

v8.3.1 - build 19577 (master)

MySQL/MariaDB version

mariadb 10.11

How did you install Snipe-IT?

Git install

What happened?

Possibly related to #12772?

I host Snipe-IT on a subpath (against recommendations, but I unfortunately have very silly environment restrictions) behind an nginx reverse proxy. I've only encountered one minor navigation issue with a very specific trigger: the post-login redirect after navigating directly to APP_URL while logged out.

APP_URL=https://$host/snipe-it

To reproduce:
[No active session]

1. Navigate to APP_URL
2. Successfully log in
3. Redirected to / (https://$host/) instead of APP_URL

I'm correctly redirected to APP_URL in these cases:
[Active session]

1. Navigate to APP_URL
2. Log out
3. Redirected to APP_URL/login
4. [Optional] Refresh the page
5. Successfully log in
6. Redirected to APP_URL

[No active session]

1. Navigate to APP_URL/login
2. Successfully log in
3. Redirected to APP_URL

nginx config:

location /snipe-it {
    client_max_body_size 8M;
    root /home/snipeit/snipe-it/public;
    try_files $uri $uri/ /snipe-it/index.php$is_args$args;

    location = /snipe-it/ {
        return 301 /snipe-it;
    }

    location /snipe-it/ {
        rewrite ^/snipe-it(/.*)$ $1 break;
        try_files $uri /snipe-it/index.php$is_args$args;
    }

    location ~ \.php$ {
        include fastcgi_params;
        set $saved_request_uri $request_uri;
        if ($request_uri ~ ^/snipe-it(/.+)$) {
            set $saved_request_uri $1;
        }
        if ($request_uri = /snipe-it) {
            set $saved_request_uri /;
        }
        fastcgi_index /snipe-it/index.php;
        fastcgi_param REQUEST_URI $saved_request_uri;
        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
        fastcgi_keep_conn on;
        fastcgi_pass unix:/run/php/php8.2-fpm.sock;
    }
}

What browsers are you seeing the problem on?

No response

Application log output

Browser console output

Common Issues

• I have searched this repo for existing issues related to my issue (including closed issues)
• My APP_URL is set correctly in my .env file (including http or https and no trailing slash)
• I have searched the official Snipe-IT documentation and have checked the Common Issues documentation (where applicable)
• I have run database migrations (where applicable).
• I have attached screenshots and/or videos of the issue (where applicable)

Code of Conduct

• I agree to follow this project's Code of Conduct

[snipe]

The APP_URL must be the actual URL you access it from in the browser.

[druexmachina]

Yup, it is! $host is just how I obfuscated the URL for the post. All navigation works properly in the browser otherwise.

[druexmachina]

nginx access logs for the specific cases:

no active session, navigating to APP_URL

time_local             request                         status  body_bytes_sent  http_referer
[12/Sep/2025:17:17:52] "GET /snipe-it HTTP/1.1"        302     398              "-"
[12/Sep/2025:17:17:52] "GET /snipe-it/login HTTP/1.1"  200     1321             "-"
[12/Sep/2025:17:18:05] "POST /snipe-it/login HTTP/1.1" 302     338              "https://fqdn/snipe-it/login"
[12/Sep/2025:17:18:05] "GET / HTTP/1.1"                200     992              "https://fqdn/snipe-it/login"

no active session, navigating to APP_URL/login

time_local             request                         status  body_bytes_sent  http_referer
[12/Sep/2025:17:21:28] "GET /snipe-it/login HTTP/1.1"  200     1320             "-"
[12/Sep/2025:17:21:38] "POST /snipe-it/login HTTP/1.1" 302     374              "https://fqdn/snipe-it/login"
[12/Sep/2025:17:21:38] "GET /snipe-it HTTP/1.1"        200     22923            "https://fqdn/snipe-it/login"

[druexmachina]

I'm so sorry for wasting your time, I fixed this in the nginx config:

APP_URL=https://$host/snipe-it # No trailing slash

nginx config: /snipe-it must be redirected to /snipe-it/

location /snipe-it {
    client_max_body_size 8M;
    root /home/snipeit/snipe-it/public;
    try_files $uri $uri/ /snipe-it/index.php$is_args$args;

    location = /snipe-it {
        return 301 /snipe-it/;
    }

    location /snipe-it/ {
        rewrite ^/snipe-it(/.*)$ $1 break;
        try_files $uri /snipe-it/index.php$is_args$args;
    }

    location ~ \.php$ {
        include fastcgi_params;
        set $saved_request_uri $request_uri;
        if ($request_uri ~ ^/snipe-it(/.+)$) {
            set $saved_request_uri $1;
        }
        fastcgi_index /snipe-it/index.php;
        fastcgi_param REQUEST_URI $saved_request_uri;
        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
        fastcgi_keep_conn on;
        fastcgi_pass unix:/run/php/php8.2-fpm.sock;
    }
}

[snipe]

So glad you’re sorted!