Repeated Auth Prompts when using Opencode Web from an authenticated Opencode Server

[OpeOginni]

Description

When making use of the Web on a broswer from an authenticated opencode server you are nromally prompted to put in a username and password. But when trying to use a terminal the prompt comes over and over again and never resoles making the whole web app experience not possible.

Note: This doesnt happen when the web is on a different url than the authed server, and it doesnt happen on the desktop app.

Plugins

None

OpenCode version

1.3.5

Steps to reproduce

1. Run opencode serve with an authenticated server
2. Try to make use of the web app on that URL, put in the right username and password when promted, and open a terminal.
3. Notice it just continues to be asked and never resolves.

Screenshot and/or share link

Screen.Recording.2026-03-29.at.18.04.27.mov

Operating System

macOS

Terminal

No response

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• [Web] Infinite Authentication Loop when opening Terminal in v1.2.25 #17376: Infinite authentication loop when opening Terminal in web UI with credentials configured (same symptoms - repeated auth prompts that never resolve when opening terminal)
• Terminal Failure & Authentication Loop on Mobile #18189: Terminal failure & authentication loop when accessing terminal in authenticated web session

If your issue is the same, please consider adding a +1 or additional context to those existing reports rather than opening a new one.

[onixau-go]

I have the same problem.
It occurred after updating to opencode version 1.3.5 - 1.3.6
Web - version 1.3.6

A WSS request is made to the wrong URL
wss://opencode@sdomain.com/pty/pty_d3 ...

opencode@ is substituted even though the username isn't specified at all, or a different one is specified via Environment OPENCODE_SERVER_USERNAME and OPENCODE_SERVER_PASSWORD
Error NS_ERROR_WEBSOCKET_CONNECTION_REFUSED

[OpeOginni]

@onixau-go Yeah, hopefully the PR fixes it, makes sure the entry you put in the browser auth prompt gets used