unable to login

[rolikeusch]

Description

I start with a fresh installation and I was able to create a new account, but I'm not able to login afterward. I see the following message when I click login:

Attaching to ideon-app, ideon-db
Container ideon-db Waiting
ideon-db  |
ideon-db  | PostgreSQL Database directory appears to contain a database; Skipping initialization
ideon-db  |
ideon-db  | 2026-01-29 15:37:43.520 UTC [1] LOG:  starting PostgreSQL 16.11 on x86_64-pc-linux-musl, compiled by gcc (Alpine 15.2.0) 15.2.0, 64-bit
ideon-db  | 2026-01-29 15:37:43.520 UTC [1] LOG:  listening on IPv4 address "0.0.0.0", port 5432
ideon-db  | 2026-01-29 15:37:43.520 UTC [1] LOG:  listening on IPv6 address "::", port 5432
ideon-db  | 2026-01-29 15:37:43.522 UTC [1] LOG:  listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
ideon-db  | 2026-01-29 15:37:43.524 UTC [29] LOG:  database system was shut down at 2026-01-29 15:37:36 UTC
ideon-db  | 2026-01-29 15:37:43.528 UTC [1] LOG:  database system is ready to accept connections
Container ideon-db Healthy
ideon-app  |
ideon-app  | > ideon@0.1.3 start
ideon-app  | > NODE_OPTIONS='--max-old-space-size=8192' node dist/server.cjs
ideon-app  |
ideon-app  | {"level":30,"time":1769701066407,"pid":18,"hostname":"ab1f39a616b7","host":"ideon-db","msg":"Connected to PostgreSQL successfully"}
ideon-app  | {"level":30,"time":1769701067087,"pid":18,"hostname":"ab1f39a616b7","msg":"> Ready on http://0.0.0.0:3004"}
ideon-app  | a: Read more at https://errors.authjs.dev#callbackrouteerror
ideon-app  |     at nH (.next/server/chunks/_9fdd1b14._.js:404:43420)
ideon-app  |     at async nV (.next/server/chunks/_9fdd1b14._.js:404:51096)
ideon-app  |     at async nY (.next/server/chunks/_9fdd1b14._.js:404:55656)
ideon-app  |     at async a (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:14530)
ideon-app  |     at async c (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:18109)
ideon-app  |     at async l (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:19150) {
ideon-app  |   type: 'CallbackRouteError',
ideon-app  |   kind: 'error',
ideon-app  |   [cause]: [Object]
ideon-app  | }
ideon-app  | SMTP settings not configured in .env

also I have set all needed variables in .env for smtp, but when I click on "forgot password" I get the message "SMTP settings not configured in .env"

do I miss something?

[Phrenzy]

I'm having the same issue. I can set up a new site, create an account, but I can't login. I've tried it twice on two fresh installs.

[3xpyth0n]

Hi @rolikeusch @Phrenzy !

I think I have found the root cause and just pushed a fix in v0.1.4.

This is probably due to the rate limiter. It was IP-based and in the Docker environment, the app resolved the client IP to 127.0.0.1. That's expectedin development, but since the app ran in production mode, valid login attempts got blocked.

I also fixed an issue with parallel environment variable loading that might explain why SMTP settings were reported missing even though they were defined in the .env file.

Would you mind updating to v0.1.4 and seeing if everything's good thereafter?

[rolikeusch]

i started from scratch and now i have the following message in the browser:

Application error: a server-side exception has occurred while loading <ip address>  (see the server logs for more information).
Digest: [2406510994](tel:2406510994)

and in the logs i see this:

ideon-db  | 2026-01-31 10:38:41.591 UTC [57] LOG:  database system was shut down at 2026-01-31 10:38:41 UTC
ideon-db  | 2026-01-31 10:38:41.593 UTC [1] LOG:  database system is ready to accept connections
Container ideon-db Healthy 
ideon-app  | {"level":30,"time":1769855923693,"pid":1,"hostname":"78e332478d84","host":"ideon-db","msg":"Connected to PostgreSQL successfully"}
ideon-app  | [DB] Migration "01InitialSchema" was executed successfully
ideon-app  | [DB] Migration "02JacksonStore" was executed successfully
ideon-app  | [DB] Migration "03AddSsoRegistration" was executed successfully
ideon-app  | {"level":30,"time":1769855924490,"pid":1,"hostname":"78e332478d84","msg":"> Ready on http://0.0.0.0:3004"}
ideon-app  | ⨯ Error: ENOENT: no such file or directory, scandir '/app/src/app/i18n'
ideon-app  |     at async d (.next/server/chunks/ssr/[root-of-the-server]__e1ff9d82._.js:43:12988)
ideon-app  |     at async Module.n (.next/server/chunks/ssr/[root-of-the-server]__e1ff9d82._.js:43:13569) {
ideon-app  |   errno: -2,
ideon-app  |   code: 'ENOENT',
ideon-app  |   syscall: 'scandir',
ideon-app  |   path: '/app/src/app/i18n',
ideon-app  |   digest: '1468039948'
ideon-app  | }
ideon-app  | ⨯ Error: ENOENT: no such file or directory, scandir '/app/src/app/i18n'
ideon-app  |     at async d (.next/server/chunks/ssr/[root-of-the-server]__e1ff9d82._.js:43:12988)
ideon-app  |     at async o (.next/server/chunks/ssr/[root-of-the-server]__e1ff9d82._.js:43:14204) {
ideon-app  |   errno: -2,
ideon-app  |   code: 'ENOENT',
ideon-app  |   syscall: 'scandir',
ideon-app  |   path: '/app/src/app/i18n',
ideon-app  |   digest: '2406510994'
ideon-app  | }

[3xpyth0n]

The recent crash was a side effect of the merge refactoring the i18n system for better maintainability.

I have updated the Dockerfile to include these assets and recreated the image. Please try again.

[rolikeusch]

i have still no luck :( when I click on login now, no error message appears. but when I click on login six times (with my login details), this error message appears again:

ideon-db  | 2026-01-31 12:40:23.889 UTC [1] LOG:  database system is ready to accept connections
ideon-app  | a: Read more at https://errors.authjs.dev#callbackrouteerror
ideon-app  |     at nH (.next/server/chunks/_9fdd1b14._.js:404:43420)
ideon-app  |     at async nq (.next/server/chunks/_9fdd1b14._.js:404:51096)
ideon-app  |     at async nY (.next/server/chunks/_9fdd1b14._.js:404:55656)
ideon-app  |     at async a (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:14530)
ideon-app  |     at async c (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:18109)
ideon-app  |     at async l (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:19150) {
ideon-app  |   type: 'CallbackRouteError',
ideon-app  |   kind: 'error',
ideon-app  |   [cause]: [Object]
ideon-app  | }

but „forget password“ is working now.

[rockoo]

This issue is still present. Calling /api/auth gets 401. Same error message as the rest above

2026-01-31 18:42:49.987 | } |  
-- | -- | --
  |   | 2026-01-31 18:42:49.987 | [cause]: [Object] |  
  |   | 2026-01-31 18:42:49.987 | kind: 'error', |  
  |   | 2026-01-31 18:42:49.987 | type: 'CallbackRouteError', |  
  |   | 2026-01-31 18:42:49.987 | at async l (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:19150) { |  
  |   | 2026-01-31 18:42:49.987 | at async c (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:18109) |  
  |   | 2026-01-31 18:42:49.987 | at async a (.next/server/chunks/[root-of-the-server]__cefe5ddb._.js:1:14530) |  
  |   | 2026-01-31 18:42:49.987 | at async nY (.next/server/chunks/_9fdd1b14._.js:404:55656) |  
  |   | 2026-01-31 18:42:49.987 | at async nq (.next/server/chunks/_9fdd1b14._.js:404:51096) |  
  |   | 2026-01-31 18:42:49.987 | at nH (.next/server/chunks/_9fdd1b14._.js:404:43420) |  
  |   | 2026-01-31 18:42:49.987 | a: Read more at https://errors.authjs.dev#callbackrouteerror

[3xpyth0n]

I’m adding the help label as this issue appears to be environment-specific and not reproducible on my side so far.

My current hypothesis is related to Secure session cookies in production mode when the app is accessed over HTTP or behind a proxy that doesn’t correctly forward HTTPS. In that case, authentication succeeds, but the session cookie is dropped by the browser, causing an immediate redirect back to /login.

I’m continuing to investigate and work on a fix, but insights from people familiar with Auth.js or cookie handling behind proxies would be appreciated.

[3xpyth0n]

I have pushed a fix in v0.1.5 that, I hope, addresses both the persistent login loop (silent failure) and the server crash on rate limiting.

What was fixed:

• Silent Failure: The session cookie was being forced to Secure (HTTPS-only) in production mode, causing browsers to drop it if you were accessing the site via HTTP (e.g., via IP address). I’ve adjusted this to only enforce the Secure flag if your APP_URL actually starts with https.
• 500 Error: The rate limiter was throwing a generic error that caused the CallbackRouteError. It now correctly returns a handled error, so you will see a "Too many requests" message instead of a crash.

You normally don't need a fresh install. Simply pull the latest code and restart:

git pull origin main
# Rebuild and restart your containers
docker compose up --build

Please let me know if this resolves the issue for you

[rockoo]

v0.1.5

I can confirm that v0.1.5 resolves the login issue! However I can see another issue now loggedin. I will open a new ticket