Bot Updating Package Versions

refactor: use x-tinyauth-location header and remove dupe auth modules in tinyauth auth request

README.md

@@ -436,6 +436,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **09.09.26:** - Use new X-Tinyauth-Location header in Tinyauth locations and remove duplicate auth module headers.
 * **19.07.26:** - Rebase to Alpine 3.24 with PHP 8.5.
 * **10.07.26:** - Add support for Let's Encrypt cert profiles. Run certbot twice daily with a random delay.
 * **19.06.26:** - Add support for mijn.host dns validation.

package_versions.txt

@@ -23,8 +23,8 @@ azure-mgmt-dns                  9.0.0             python
 backports-tarfile               1.2.0             python                   
 bash                            5.3.9-r1          apk                      
 beautifulsoup4                  4.15.0            python                   
-boto3                           1.43.93           python                   
-botocore                        1.43.93           python                   
+boto3                           1.43.98           python                   
+botocore                        1.43.98           python                   
 brotli-libs                     1.2.0-r1          apk                      
 bs4                             0.0.2             python                   
 busybox                         1.37.0-r31        apk                      
@@ -104,7 +104,7 @@ domeneshop                      0.4.4             python
 fail2ban                        1.1.0             python                   
 fail2ban                        1.1.0-r3          apk                      
 fail2ban-pyc                    1.1.0-r3          apk                      
-filelock                        3.32.6            python                   
+filelock                        4.0.1             python                   
 findutils                       4.10.0-r1         apk                      
 fontconfig                      2.17.1-r1         apk                      
 freetype                        2.14.3-r0         apk                      
@@ -121,7 +121,7 @@ gnupg-keyboxd                   2.4.9-r1          apk
 gnupg-utils                     2.4.9-r1          apk                      
 gnupg-wks-client                2.4.9-r1          apk                      
 gnutls                          3.8.13-r0         apk                      
-google-api-core                 2.36.0            python                   
+google-api-core                 2.38.0            python                   
 google-api-python-client        2.200.0           python                   
 google-auth                     2.58.0            python                   
 google-auth-httplib2            0.4.2             python                   
@@ -136,13 +136,13 @@ gui-32                          UNKNOWN           binary
 gui-64                          UNKNOWN           binary                   
 gui-arm64                       UNKNOWN           binary                   
 h11                             0.16.0            python                   
-hcloud                          2.24.0            python                   
+hcloud                          2.25.1            python                   
 httpcore                        1.0.9             python                   
 httplib2                        0.32.0            python                   
 httpx                           0.28.1            python                   
 icu-data-en                     78.1-r0           apk                      
 icu-libs                        78.1-r0           apk                      
-idna                            3.19              python                   
+idna                            3.20              python                   
 importlib-metadata              8.7.1             python                   
 inotify-tools                   4.23.9.0-r0       apk                      
 inotify-tools-libs              4.23.9.0-r0       apk                      
@@ -227,7 +227,7 @@ memcached                       1.6.42-r0         apk
 mock                            5.2.0             python                   
 more-itertools                  10.8.0            python                   
 mpdecimal                       4.0.1-r0          apk                      
-msal                            1.38.0            python                   
+msal                            1.39.0            python                   
 msal-extensions                 1.3.1             python                   
 musl                            1.2.6-r2          apk                      
 musl-utils                      1.2.6-r2          apk                      
@@ -320,7 +320,7 @@ platformdirs                    4.4.0             python
 popt                            1.19-r4           apk                      
 procps-ng                       4.0.6-r0          apk                      
 proto-plus                      1.28.4            python                   
-protobuf                        7.36.1            python                   
+protobuf                        7.36.2            python                   
 pyacmedns                       0.4               python                   
 pyasn1                          0.6.4             python                   
 pyasn1-modules                  0.4.2             python                   
@@ -364,7 +364,7 @@ typing-inspection               0.4.4             python
 tzdata                          2026c-r0          apk                      
 unixodbc                        2.3.14-r1         apk                      
 uritemplate                     4.2.0             python                   
-urllib3                         2.7.0             python                   
+urllib3                         2.8.0             python                   
 utmps-libs                      0.1.3.3-r0        apk                      
 wheel                           0.46.3            python                   
 wheel                           0.48.0            python                   

readme-vars.yml

@@ -220,6 +220,7 @@ init_diagram: |
   "swag:latest" <- Base Images
 # changelog
 changelogs:
+  - {date: "09.09.26:", desc: "Use new X-Tinyauth-Location header in Tinyauth locations and remove duplicate auth module headers."}
   - {date: "19.07.26:", desc: "Rebase to Alpine 3.24 with PHP 8.5."}
   - {date: "10.07.26:", desc: "Add support for Let's Encrypt cert profiles. Run certbot twice daily with a random delay."}
   - {date: "19.06.26:", desc: "Add support for mijn.host dns validation."}

root/defaults/nginx/tinyauth-location.conf.sample

@@ -1,12 +1,11 @@
-## Version 2025/12/17 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-location.conf.sample
+## Version 2026/07/19 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-location.conf.sample
 # Make sure that your tinyauth container is in the same user defined bridge network and is named tinyauth
 # Rename /config/nginx/proxy-confs/tinyauth.subdomain.conf.sample to /config/nginx/proxy-confs/tinyauth.subdomain.conf
 
 ## Send a subrequest to tinyauth to verify if the user is authenticated and has permission to access the resource
 auth_request /tinyauth;
-
-## If the subreqest returns 200 pass to the backend, if the subrequest returns 401 redirect to the portal
-error_page 401 = @tinyauth_login;
+auth_request_set $redirection_url $upstream_http_x_tinyauth_location;
+error_page 401 403 =302 $redirection_url;
 
 ## Translate the user information response headers from the auth subrequest into variables
 auth_request_set $email $upstream_http_remote_email;

root/defaults/nginx/tinyauth-server.conf.sample

@@ -1,4 +1,4 @@
-## Version 2025/06/08 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-server.conf.sample
+## Version 2026/09/08 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-server.conf.sample
 # Make sure that your tinyauth container is in the same user defined bridge network and is named tinyauth
 # Rename /config/nginx/proxy-confs/tinyauth.subdomain.conf.sample to /config/nginx/proxy-confs/tinyauth.subdomain.conf
 
@@ -6,30 +6,17 @@
 location /tinyauth {
     internal;
 
-    include /config/nginx/proxy.conf;
     include /config/nginx/resolver.conf;
     set $upstream_tinyauth tinyauth;
     proxy_pass http://$upstream_tinyauth:3000/api/auth/nginx;
 
-    proxy_set_header x-forwarded-proto $scheme;
-    proxy_set_header x-forwarded-host $http_host;
-    proxy_set_header x-forwarded-uri $request_uri;
-}
-
-# virtual location for tinyauth 401 redirects
-location @tinyauth_login {
-    internal;
-
-    ## Set the $target_url variable based on the original request
-    set_escape_uri $target_url $scheme://$http_host$request_uri;
-    
-    ## Set the $signin_url variable
-    set $domain $host;
-    if ($host ~* "^[^.]+\.([^.]+\..+)$") {
-        set $domain $1;
-    }
-    set $signin_url https://tinyauth.$domain/login?redirect_uri=$target_url;
-
-    ## Redirect to login
-    return 302 $signin_url;
+    # Don't send the body to the auth server
+    proxy_pass_request_body off;
+    proxy_set_header Content-Length "";
+
+    # Headers needed for authentication
+    proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
+    proxy_set_header X-Original-Method $request_method;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Real-IP $remote_addr;
 }