Unable to access immich domain name via Android and iOS apps
Setup Details
- Immich v1.121.0 hosted on Unraid
- Immich v1.121.0 iOS app
- Immich v1.121.0 Android app
- OAuth setup with Google working fine on web
- Cloudflare Zero Trust tunnel setup similar to this video and this community guide
I'm unable to access mobile app Server Endpoint URL https://pics.mydomain.org/api. Mobile application logs say "Error while checking server availability" ApiException 403. On web browsers (local and remote) https://pics.mydomain.org works just fine. When I'm on my LAN, the usual http://my-server-ip:port/api works perfectly with authentication on both iOS and Android.
Details that may be relevant:
Cloudflare configuration
- Network >> Tunnels >> Public hostname pics.mydomain.org >> HTTP://my-server-ip:port
- Access >> Applications >> SAAS immich app >> Redirect URLs
1) https://pics.mydomain.org/api/oauth/mobile-redirect
2) https://pics.mydomain.org/auth/login
3) https://pics.mydomain.org/user-settings
4) http://my-server-ip:port/auth/login
5) http://my-server-ip:port/user-settings
- Access >> Applications >> SAAS immich app >> Allow policy Include
1) Login Methods: Google
2) Emails: [email protected]
Immich configuration
- Problem persists whether Mobile Redirect URI Override is enabled or disabled
- Mobile Redirect URI >> https://pics.mydomain.org/api/oauth/mobile-redirect
- Issuer URL, Client ID, Client Secret all match cloudflare application settings
4 Replies
:wave: Hey @cooc8616,
Thanks for reaching out to us. Please follow the recommended actions below; this will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker compose ps docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
Checklist
1. :ballot_box_with_check: I have verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: I have read applicable release notes.
3. :ballot_box_with_check: I have reviewed the FAQs for known issues.
4. :ballot_box_with_check: I have reviewed Github for known issues.
5. :ballot_box_with_check: I have tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: I have uploaded the relevant logs, docker compose, and .env files, making sure to use code formatting.
7. :ballot_box_with_check: I have tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
If this ticket can be closed you can use the /close command, and re-open it later if needed.
Successfully submitted, a tag has been added to inform contributors. :white_check_mark:Mobile App Stack Trace:
#0 ServerApi.pingServer (package:openapi/api/server_api.dart:494)
#1 Future.timeout. (dart:async/future_impl.dart:963)
#2 ApiService._isEndpointAvailable (package:immich_mobile/services/api.service.dart:106)
#3 ApiService._resolveEndpoint (package:immich_mobile/services/api.service.dart:87)
#4 ApiService.resolveAndSetEndpoint (package:immich_mobile/services/api.service.dart:69)
#5 LoginForm.build.getServerLoginCredential (package:immich_mobile/widgets/forms/login/login_form.dart:104)
The app doesn't support stuff with an extra login screen like that
Okay. Thanks. Wanted to ensure I wasn’t missing anything.