Skip to content

Release v2.13.1

Choose a tag to compare

@github-actions github-actions released this 10 Aug 12:16
12b2518

Fixed

  • Fixed the login-selection page (and any other bundled wwwroot asset) rendering a blank page for anyone signing in or accepting an invite. UseIngress() never called app.UseRouting() explicitly, so once the reverse proxy had a configured backend — the case in every real deployment — ASP.NET Core's implicit routing insertion matched the proxy's catch-all route against every request, including AuthProxy's own bundled assets. UseStaticFiles() is endpoint-aware and skips serving a file once a route is already matched, so every asset request fell through to SelectProviderMiddleware, which refuses unauthenticated, non-navigating callers with a 401.