You don’t have permission to access this page [HTTP Remote-User=]

[mhfowler]

After installing FreshRss,

on navigating to domain.tld,

I see the error message:

Error 403 - Forbidden
You don’t have permission to access this page [HTTP Remote-User=]

Context

• Hardware: Running on Digital Ocean VPS
• YunoHost version: 4.3.6.3
• I have access to my server: through SSH

Steps to reproduce

• install freshrss
• navigate to example.tld (in my case, rss.commoninternet.net)
• it redirects to https://rss.commoninternet.net/i/ and displays the error message. if I click, login, it also shows this page again

[kannthus]

Heya,

I had the same issue and eventually noticed when you install the app, you need to ensure that "Should this app be exposed to anonymous visitors?" is set to No.

Otherwise, you will get this 403 issue, this does not cause any issues with the API, so don't fret.

[pepeciseaux]

Same issue here, it seems.

Steps:

• I made a fresh install of the app (pure "vanilla" install from Yunohost admin panel)
• I carefully checked the box noticed by @kannthus to expose the app to anonymous users
• I went to the app domain in the browser in order to log in
• I got the same message as reported by @mhfowler (as my server is in French, the message reads: "Error 403 - Forbidden / Vous n’avez pas le droit d’accéder à cette page ! [HTTP Remote-User=]").

Context:

• FreshRSS-ynh: 1.20.1~ynh1
• YunoHost: 4.4.2.14 (stable)

[pepeciseaux]

Workaround⁽*⁾:

1. set auth mode to 'none' in FreshRSS config file (that was /var/www/freshrss/data/config.php for me)
2. go to the web page of the app, you are logged in
3. in the app go to Authentication and set to "Use a form" or something like that
4. log in through the app home page

⁽*⁾ At least that worked for me. Based on this tip.

It might be useful to note that in this Authentication menu the option "HTTP" was shaded (grey text). Indeed HTTP auth mode was the one activated initially, leading to the 403 error.

Now I can log in with the chosen password.

---

Edit 2024-05-07:

Between points 2 and 3 I initially wrote a step saying "in the app go to Profile and set a password". It seems unrelevant because I just used the workaround without doing that step and it worked.