The login to the bundled server immediately expires.

[joshuabenuck]

If you login to the local bundled wiki, the lock will unlock, but the moment you try to do anything that requires being authenticated, the server rejects it.

It isn't the electron viewer as this happens even when hitting the bundled server from a web browser. I've also confirmed that the electron viewer can authenticate against remote servers without an issue.

[joshuabenuck]

Turns out that the login never succeeded. In client-sessions:updateCookie, an unknown cipher error was being thrown. client-sessions ate the exception so there was no way to see it had failed.

The unknown cipher error is caused by the fact that Electron 4 doesn't support aes256 due to a switch from OpenSSL to BoringSSL. The fix is to override requests for that algorithm to instead use aes-256-ctr.