RaspAP change Authentication Password on WebGui There is no longer a login window

[FireDVB]

Hello my english not so good.

The RaspAP on Rpi 4B function is super with NordVPN.

I have change the password (secret) on the webgui over LAN IP and there is no longer a login window.

delete /etc/raspap/raspap.auth There is no longer a login window

WLAN is disabled
Hotspot is disabled
The router only works via LAN with NordVPN, but unfortunately there is no login window via the WebGui to enter the user and password.

Add RaspAP's speedtest server under WebGui --> Network -> Speedtest (Button)
Is that also possible?

is not present on the webgui
Or is this only available when WiFi is activated?

Who has a tip for me?

Greetings FireDVB

[billz]

There are several questions here, but I'll focus on the subject of this discussion. RaspAP uses HTTP basic authentication to manage logins. The login window not appearing is normal behavior due to the default credentials being cached by your browser. This is expected when removing /etc/raspap/raspap.auth per this FAQ.

Regarding everything else, this appears to be a very old version of Insiders. I'd suggest upgrading.

[FranziHH]

The login no longer works since version 3.0.8. You are always! logged in.

This is a very bad idea:

in 'raspap-webgui/src/RaspAP/Auth/HTTPAuth.php'
`public function getAuthConfig()
{
$config = $this->auth_default;

    if (file_exists(RASPI_CONFIG . '/raspap.auth')) {
        if ($auth_details = fopen(RASPI_CONFIG . '/raspap.auth', 'r')) {
            $config['admin_user'] = trim(fgets($auth_details));
            $config['admin_pass'] = trim(fgets($auth_details));
            $_SESSION['user_id'] = $config['admin_user'];
            fclose($auth_details);
        }
    }
    return $config;
}`

Statement
$_SESSION['user_id'] = $config['admin_user'];

ensures that a login is never requested

[billz]

@FranziHH perhaps you'd like to contribute a PR?

[jsantalo]

Correct, issue seems to be solved after commenting the abovementioned line.

[billz]

This introduces a new bug, so it is not a complete solution.

[FireDVB]

where can I find the file raspap-webgui/src/RaspAP/Auth/HTTPAuth.php on the Raspberry Pi (RaspAP). Gesendet von Outlook für Android<https://aka.ms/AAb9ysg>

…

________________________________ From: jsantalo ***@***.***> Sent: Thursday, February 22, 2024 3:58:18 PM To: RaspAP/raspap-webgui ***@***.***> Cc: FireDVB ***@***.***>; Author ***@***.***> Subject: Re: [RaspAP/raspap-webgui] RaspAP change Authentication Password on WebGui There is no longer a login window (Discussion #1522) Correct, issue seems to be solved after commenting the abovementioned line. — Reply to this email directly, view it on GitHub<#1522 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/A572NW4F5AAY2PYBLQZ3LZLYU5MIVAVCNFSM6AAAAABDP3PEQ6VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DKNJXHE3TK>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[jsantalo]

It can be found where the raspap-webgui is installed. In my case (raspberry pi OS), it was located in /var/www/html/src/RaspAP/Auth/HTTPAuth.php .

[FireDVB]

Thanks I'll take a look. What would you have to change to make it work again? Sorry for my english. Edit: I took Httpauth.php from version 3.0.7 and overwrote it on the Pi. Rights set to 755. Restarted the Pi but no change when there is a password in the raspap.auth which I entered via the web interface.

…

________________________________ From: jsantalo ***@***.***> Sent: Thursday, February 22, 2024 8:58:29 PM To: RaspAP/raspap-webgui ***@***.***> Cc: FireDVB ***@***.***>; Author ***@***.***> Subject: Re: [RaspAP/raspap-webgui] RaspAP change Authentication Password on WebGui There is no longer a login window (Discussion #1522) It can be found where the raspap-webgui is installed. In my case (raspberry pi OS), it was located in /var/www/html/src/RaspAP/Auth/HTTPAuth.php . — Reply to this email directly, view it on GitHub<#1522 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/A572NWYYU67LG5IM3A34BH3YU6POLAVCNFSM6AAAAABDP3PEQ6VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DKNRRGE2TG>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[FireDVB]

I've solved it temporarily like this for now.

I entered my generated password in the HTTPAuth.php file and deleted the raspap.auth file then at least the login window with my specified password is accepted.

private $auth_default = array(
'admin_user' => 'admin',
'admin_pass' => 'generated password from raspap.auth enter her '

[jsantalo]

It seems v3.0.9 solves the issue thanks to @billz 👏

Can you confirm it?