SOLVED: Issues logging in WebOS App

SOLVED: Issues logging in WebOS App - Printable Version

+- Jellyfin Forum (https://forum.jellyfin.org)
+-- Forum: Support (https://forum.jellyfin.org/f-support)
+--- Forum: Troubleshooting (https://forum.jellyfin.org/f-troubleshooting)
+---- Forum: Networking & Access (https://forum.jellyfin.org/f-networking-access)
+---- Thread: SOLVED: Issues logging in WebOS App (/t-solved-issues-logging-in-webos-app)

Issues logging in WebOS App - ndom91 - 2024-03-30

Hey folks, so I can no longer login with the WebOS (LG) app anymore.. One day about 3 days ago I found myself logged out and when trying to log back in, I enter my jellyfin host URL (i.e. https://jellyfin.company.com), press continue, and then get bumped out to this LG-native looking screen that says "Unable to Load" "Error Code: -27".

The issue began happening on WebOS 22 (4.40.90), but I've since upgraded to 23 (13.30.55) and the issue persists. Some more relevant version numbers:

- Model: OLED48C27LA
- WebOS 23 13.30.55
- Jellyfin WebOS App Version: 1.2.2 (from 18.03.24)
- Jellyfin Server: 10.8.13

I've uninstalled and re-installed Jellyfin on the TV a few times. I can also confirm that everything else works on other clients like the browser on my PC or the Android client.

Looking into the logs, these two lines appear any time I try to re-add the server in the LG App, but unfortunately no more details:

Code:
[2024-03-30 16:13:03.362 +00:00] [DBG] AuthenticationScheme: "CustomAuthentication" was not authenticated.

[2024-03-30 16:13:03.362 +00:00] [INF] "10.0.1.1/32": Using BindAddress "https://jellyfin.company.com":null

Error screen after trying to re-add server:

[Image: lg-jellyfin-error.jpg]

RE: Issues logging in WebOS App - Serge K - 2024-03-30

may it will help
https://github.com/jellyfin/jellyfin-webos/issues/52

RE: Issues logging in WebOS App - ndom91 - 2024-03-30

Thanks for the quick response! The security headers thing put me on the right track.. I'd recently enabled some additional cloudflare security options I'd forgotten about. There's one that'll inject the same XSS / CSP headers that others have referred to which break the WebOS app.

Can be found at: https://dash.cloudflare.com/rules/transform-rules/managed-transforms

[Image: swappy-20240330-175659.png]

Disabling this option fixed it 🎉