[GH-ISSUE #5016] webserver doesn't ask for password! (on Brave browser)

gitea-mirror commented

2026-05-05 14:30:54 -06:00

Owner

Originally created by @smac89 on GitHub (Oct 12, 2025).
Original GitHub issue: https://github.com/fatedier/frp/issues/5016

Bug Description

That can't be right. Configuring web server in the frps with a password doesn't prompt for a password on login. Even worse, the web sever for frpc reveals the contents of the config file, once again no password prompt!

frpc Version

0.65.0

frps Version

0.65.0

System Architecture

linux/amd64

Configurations

In frps.toml

[webServer]
addr = "127.7.7.7"
port = 8000
user = "admin"
password = "..."

Copy the above configuration to frpc.toml and you will experience the same.

Logs

No response

Steps to reproduce

...

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @smac89 on GitHub (Oct 12, 2025). Original GitHub issue: https://github.com/fatedier/frp/issues/5016 ### Bug Description That can't be right. Configuring web server in the frps with a password doesn't prompt for a password on login. Even worse, the web sever for frpc reveals the contents of the config file, once again no password prompt! ### frpc Version 0.65.0 ### frps Version 0.65.0 ### System Architecture linux/amd64 ### Configurations In frps.toml ```toml [webServer] addr = "127.7.7.7" port = 8000 user = "admin" password = "..." ``` Copy the above configuration to frpc.toml and you will experience the same. ### Logs _No response_ ### Steps to reproduce 1. 2. 3. ... ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [x] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [x] Client Plugin - [x] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror closed this issue

2026-05-05 14:30:55 -06:00

gitea-mirror commented

2026-05-05 14:30:57 -06:00

Author

Owner

@smac89 commented on GitHub (Oct 12, 2025):

Ok slight correction after further testing: On every other browser except for Brave, Frp prompts for password...wtf?

Tested on Edge, Firefox, and Brave. In all three cases, I'm using a private window. I have restarted brave numerous times, yet it has somehow obtained the credentials and is logging in automatically even in private mode. This is also the first time ever that I am accessing my frp dashboard on any of these browsers...

https://github.com/user-attachments/assets/8f11840d-78c0-44df-9659-b8d7f841d659

https://github.com/user-attachments/assets/b6c00df9-8771-44bc-b0e0-d5aff250e2c0

https://github.com/user-attachments/assets/4643049c-b8d1-46e1-8dcf-d780add4492d

@smac89 commented on GitHub (Oct 12, 2025): Ok slight correction after further testing: On every other browser except for Brave, Frp prompts for password...wtf? Tested on Edge, Firefox, and Brave. In all three cases, I'm using a private window. I have restarted brave numerous times, yet it has somehow obtained the credentials and is logging in automatically even in private mode. This is also the first time ever that I am accessing my frp dashboard on any of these browsers... https://github.com/user-attachments/assets/8f11840d-78c0-44df-9659-b8d7f841d659 https://github.com/user-attachments/assets/b6c00df9-8771-44bc-b0e0-d5aff250e2c0 https://github.com/user-attachments/assets/4643049c-b8d1-46e1-8dcf-d780add4492d

gitea-mirror commented

2026-05-05 14:30:57 -06:00

Author

Owner

@smac89 commented on GitHub (Oct 13, 2025):

Sorry false alarm. Looks like brave automatically uses Bitwarden to supply the login for the site without prompting me...

Took posting all three videos to discover the culprit smh.

@smac89 commented on GitHub (Oct 13, 2025): Sorry false alarm. Looks like brave automatically uses Bitwarden to supply the login for the site without prompting me... Took posting all three videos to discover the culprit smh.

gitea-mirror commented

2026-05-05 14:30:58 -06:00

Author

Owner

@linonetwo commented on GitHub (Dec 3, 2025):

Thanks, I also find this. And I find every browser's Bitwarden extension will auto provide username & password for bearar basic auth, this is a feature!

@linonetwo commented on GitHub (Dec 3, 2025): Thanks, I also find this. And I find every browser's Bitwarden extension will auto provide username & password for bearar basic auth, this is a feature!

gitea-mirror referenced this issue

2026-05-05 14:50:19 -06:00

[PR #3950] [MERGED] increase operations-per-run in stale workflow #4869

gitea-mirror referenced this issue

2026-05-05 14:50:25 -06:00

[PR #3968] [MERGED] bump version #4876