[Bug]: Im getting logged out after a certain time

[303inmyheart]

What happened?

On the android app I get logged out after a certain time.

Steps to reproduce

Login on the app
Watch videos or just wait without the app open
After 30 mins - 2 hours I need to login again

Area

Not sure

Channel

main (stable)

Anything else?

No response

[Priveetee]

Hello ! Are u using http or https, what version is ur instance, are u using cloudflared, are u using the public instance or ur instance ? Please give me more detail so I can help u !

[303inmyheart]

I use http with my own instance and the current version wich dropped today.

[Priveetee]

Ok that helps me a lot, please in the futur always give information to me or to another open source project, this help us a lot to reproduce and fix if there is a fix ;)

[303inmyheart]

ALR, its already behind a reverse proxy but if I try connect trough it in the app it says that. I use a self signed cert and the root cert is already on my phone

[Priveetee]

Ah ok, I understand now. You are already using HTTPS, so the refresh cookie is not the problem here.

The self-signed certificate is most likely causing the connection failure. Android apps do not automatically trust user-installed root certificates, even when the certificate works in the browser, and the app currently hides this TLS error behind the generic connection message.

Could u tell me which Android version u are using and confirm whether https://typetype.lan/api/health opens correctly in the browser? Don't switch back to HTTP for now, I will check how to properly support user-installed certificates and expose a useful certificate error in the Android app.

[303inmyheart]

Nono, over http I can connect but I get logged out after a certain time, with https I can't connect at all, thought this infos could help maybe. All my other apps work with the root cert.

I use android 16.

If I open the link it says status ok

[Priveetee]

Ok, this confirms two separate problems.

For HTTP-only instances, add this to the Server .env:

AUTH_ALLOW_INSECURE_COOKIES=true

Then restart the Server and log in again so it can issue a new refresh cookie. Only use this on a trusted local network, since HTTP does not encrypt the connection.

Your HTTPS setup is working because the health endpoint opens correctly and your other apps trust the root certificate. TypeType Android currently does not trust user-installed root certificates, so I found what needs to be fixed in the app.

I will add proper support for user-installed certificates and a clearer TLS error. Once HTTPS works in the app, session renewal should work normally too.

[303inmyheart]

Okay sounds good, where is the .env saved? Just in the typetype root?

[Priveetee]

Yep, exactly. It’s in the directory where u deployed your TypeType instance. If u used the all-in-one script, the file is /typetype/.env.

[303inmyheart]

Set it in the .yaml. If it works i tell you, so you can close this issue 👍