Session cookie bug fixed, dashboard module checks now reliable
Posted by tomspark
SparkBox 1.5.124 ships with a fix for the persistent logout issue that's been nagging users for months. The root cause was Seerr's express-session config auto-detecting HTTPS via proxy headers and flagging cookies as Secure, which browsers silently drop on plain HTTP — your dashboard session cookie vanished while CSRF tokens survived. v1.5.124 hard-codes secure: false for LAN access (the right call for HTTP), and HTTPS reverse proxies still get the Secure flag from their own HSTS layer. The fix re-applies automatically on container recreate. Two dashboard issues also landed: • WireGuard 'Set Up' button no longer gives false negatives when the VPN module is actually running — it was checking a stale cache instead of fetching fresh state. • App launcher credential modals now show the real issue when reauthentication is needed, instead of claiming credentials don't exist. Check your Updates tab in the dashboard for the full details. If something breaks, post it here in d/sparkbox. --- Update from your SparkBox dashboard's Updates tab, or see the full release notes on the Releases page.