hoarder-app / hoarder

A self-hostable bookmark-everything app (links, notes and images) with AI-based automatic tagging and full text search
https://hoarder.app
GNU Affero General Public License v3.0
6.62k stars 240 forks source link

Can't sign in #600

Closed krcha closed 4 weeks ago

krcha commented 4 weeks ago

Describe the Bug

I installed and launched on my server docker image of hoarder, all went fine, get to the sign in page and cant log in.

I managed to sign up (few accounts) checked them in db.db they are there but i cant sign in.

page behaviour is like i am refreshing it.

I'm using Brave, tried Chrome and Safari same behaviour. Didnt get email when i tried to sign up with real email.

I saw this error in the inspect page

An element doesn't have an autocomplete attribute Content Security Policy of your site blocks the use of 'eval' in JavaScript` The Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site.

To solve this issue, avoid using eval(), new Function(), setTimeout([string], ...) and setInterval([string], ...) for evaluating strings.

If you absolutely must: you can enable string evaluation by adding unsafe-eval as an allowed source in a script-src directive.

⚠️ Allowing string evaluation comes at the risk of inline script injection.

1 directive Source location Directive Status script-src blocked Learn more: Content Security Policy - Eval

Steps to Reproduce

go to hoarderd sing in page enter email and pass that you used to sign up

Expected Behaviour

log in successfully

Screenshots or Additional Context

No response

Device Details

linode server

Exact Hoarder Version

0.18.0

krcha commented 4 weeks ago

i tried couple accounts to sing up they get created in the db.db but cant sing in, none of them i just keep stuck on the /sign in page

krcha commented 4 weeks ago

Solved it with deleting hoarder images, reinstalling completely and running it again