Upgrade authentication POST redirects without respecting YOURLS_SITE

[quozl]

Code of Conduct

• I agree to follow this project's Code of Conduct.

Submission validity

• This is not a personal support request, that should be posted on discussions community.
• I checked current issues and this request isn't a duplicate of an existing issue, opened or closed.

Self troubleshooting

• I've read the documentation and made sure to follow it.
• I've read the troubleshooting first steps and frequent issues guides.

Version

1.9.2

Description

A POST to admin/upgrade.php with user and password redirected to /admin/upgrade.php instead of /yourls/admin/upgrade.php

Expectation

A POST could redirect using YOURLS_SITE URI instead.

Reproduction steps

Docker containers were run for nginx, mysql, and yourls.

YOURLS_SITE was set to https://<OUTER-IP>/yourls

nginx was configured as a reverse proxy like this;

    location /yourls/ {
        proxy_pass http://<INNER-IP>/;
        proxy_redirect default;
    }

mysql was loaded using a mysqldump from previous version 1.7.2

https://<OUTER-IP>/yourls/admin was opened in browser, which showed authentication prompt, in which authentication details were added.

Not reproducible after initial authentication.

Context

Workaround was to edit the URL in browser and continue.

On the other hand, YOURLS_SITE is defined in README.html as a domain URL without mentioning a URI.