Unifi widget - 401 Unauthorized, no matter what I try

[moostmartijn]

Somehow the Unifi widget stopped working a few days or weeks ago and today I tried to fix is, but unfortunately I keep receiving the 401 Unauthorized error. I'm 100% sure I entered the correct credentials.

I tried to execute the following command in Container Manager terminal:
curl -L --insecure -X POST --data-binary '{ "username": "homepage_account", "password": "my_password", "remember": true }' -c cookies.txt --header 'Content-Type: application/json' [https://192.168.1.1:443/api/auth/login](https://192.168.1.1/api/auth/login)

This is the output:

{
   "unique_id":"fc2eef3a-c33f-4963-a26c-f7dcfc0126bd",
   "first_name":"homepage_account",
   "last_name":" ",
   "alias":"",
   "full_name":"homepage_account  ",
   "email":"",
   "email_status":"UNVERIFIED",
   "email_is_null":true,
   "phone":"",
   "avatar_relative_path":"",
   "avatar_rpath2":"",
   "status":"ACTIVE",
   "employee_number":"",
   "create_time":1702814402,
   "login_time":1702822043,
   "extras":{
      
   },
   "username":"homepage_account",
   "local_account_exist":true,
   "password_revision":1702820260,
   "sso_account":"",
   "sso_uuid":"",
   "sso_username":"",
   "sso_picture":"",
   "uid_sso_id":"",
   "uid_sso_account":"",
   "uid_account_status":"",
   "groups":[
      {
         "unique_id":"c8e181e1-71d5-43ff-be4e-314bb499b521",
         "name":"Dream-Machine-Special-Edition",
         "up_id":"",
         "up_ids":[
            
         ],
         "system_name":"Dream-Machine-Special-Edition",
         "create_time":"2022-11-28T17:03:24+01:00"
      }
   ],
   "roles":[
      {
         "unique_id":"29e9205a-6006-4ed6-a4ac-b2e7990f8fd9",
         "name":"role_private_1702822172",
         "system_role":false,
         "system_key":"custom_administrator_69ce5fe2-f2a9-4f43-be54-ec6f10ef2b8d",
         "level":5,
         "create_time":"2023-12-17T14:37:39+01:00",
         "update_time":"2023-12-17T15:09:33+01:00",
         "is_private":true
      }
   ],
   "permissions":{
      "network.management":[
         "admin"
      ],
      "protect.management":[
         "admin"
      ],
      "system.management.user":[
         "admin"
      ]
   },
   "scopes":[
      "write:protect.viewer",
      "write:protect.user:$",
      "write:protect.user",
      "write:protect.sensor",
      "write:protect.schedule",
      "write:protect.nvr",
      "write:protect.light",
      "write:protect.legacyUFV",
      "write:protect.group",
      "write:protect.doorlock",
      "write:protect.display",
      "write:protect.deviceGroup",
      "write:protect.chime",
      "write:protect.camera",
      "write:protect.bridge",
      "view:wifi",
      "view:vpn",
      "view:user",
      "view:unifi-os:user",
      "view:systemlog",
      "view:settings",
      "view:role",
      "view:permission",
      "view:os-menu:user",
      "view:os-menu:system-log",
      "view:os-menu:storage",
      "view:os-menu:settings",
      "view:os-menu:notify-settings",
      "view:os-menu:map",
      "view:os-menu:devices",
      "view:os-menu:about",
      "view:group",
      "view:controller:protect",
      "view:controller:network",
      "view:app:users",
      "view:app:settings",
      "view:access.settings",
      "view:access.policy",
      "view:access.pin_code",
      "view:access.nfc_card",
      "view:access.device",
      "view:access.dashboard",
      "systemlog:user",
      "systemlog:system",
      "systemlog:network",
      "systemlog:location",
      "systemlog:connect",
      "systemlog:access",
      "readmedia:protect.camera",
      "read:protect.viewer",
      "read:protect.user:$",
      "read:protect.user",
      "read:protect.sensor",
      "read:protect.schedule",
      "read:protect.nvr",
      "read:protect.light",
      "read:protect.legacyUFV",
      "read:protect.group",
      "read:protect.doorlock",
      "read:protect.display",
      "read:protect.deviceGroup",
      "read:protect.chime",
      "read:protect.camera",
      "read:protect.bridge",
      "notify:user",
      "manage:controller:protect",
      "manage:controller:network",
      "edit:wifi",
      "edit:vpn",
      "edit:user",
      "edit:unifi-os:user_group",
      "edit:unifi-os:user",
      "edit:settings",
      "edit:role",
      "edit:os-settings:update_install",
      "edit:os-settings:support_file",
      "edit:os-settings:ssh",
      "edit:os-settings:send_diagnostics",
      "edit:os-settings:restart",
      "edit:os-settings:raid",
      "edit:os-settings:poweroff",
      "edit:os-settings:notify",
      "edit:os-settings:hotspare",
      "edit:os-settings:general",
      "edit:os-settings:client_network",
      "edit:os-settings:auto_update",
      "edit:group",
      "edit:access.policy",
      "edit:access.pin_code",
      "edit:access.nfc_card",
      "deletemedia:protect.camera",
      "delete:protect.viewer",
      "delete:protect.user:$",
      "delete:protect.user",
      "delete:protect.sensor",
      "delete:protect.schedule",
      "delete:protect.nvr",
      "delete:protect.light",
      "delete:protect.legacyUFV",
      "delete:protect.group",
      "delete:protect.doorlock",
      "delete:protect.display",
      "delete:protect.deviceGroup",
      "delete:protect.chime",
      "delete:protect.camera",
      "delete:protect.bridge",
      "credential:send_email",
      "create:protect.viewer",
      "create:protect.user",
      "create:protect.sensor",
      "create:protect.schedule",
      "create:protect.liveview",
      "create:protect.light",
      "create:protect.group",
      "create:protect.doorlock",
      "create:protect.display",
      "create:protect.deviceGroup",
      "create:protect.chime",
      "create:protect.camera",
      "create:protect.bridge",
      "assign:wifi",
      "assign:vpn",
      "assign:role",
      "assign:evstation"
   ],
   "cloud_access_granted":false,
   "only_local_account":true,
   "update_time":1702814402,
   "avatar":null,
   "nfc_token":"",
   "nfc_display_id":"",
   "nfc_card_type":"",
   "nfc_card_status":"",
   "role":"custom",
   "roleId":"29e9205a-6006-4ed6-a4ac-b2e7990f8fd9",
   "id":"fc2eef3a-c33f-4963-a26c-f7dcfc0126bd",
   "isOwner":false,
   "isSuperAdmin":false,
   "isMember":false,
   "maskedEmail":"",
   "accessMask":1216,
   "permissionMask":8012,
   "deviceToken":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiI3MzE2OWY2MS0zODU1LTRiYTMtOGMwYi0zZDFjMTM4MDBjMGMiLCJpYXQiOjE3MDI4MjIxNzcsImlzcyI6IlVMUC1HTyIsInVzZXJfaWQiOiJmYzJlZWYzYS1jMzNmLTQ5NjMtYTI2Yy1mN2RjZmMwMTI2YmQifQ.bXjcbn0NT6aYo-RPG-11wx3lMGKcx7PzGr_gNq3-PxM",
   "ssoAuth":{
      
   }
}

And the output of curl -i -v -k https://192.168.1.1/

"*   Trying 192.168.1.1":443...
* Connected to 192.168.1.1 ("192.168.1.1) port 443
* ALPN":curl offers h2,
http/1.1
* TLSv1.3 (OUT),
"TLS handshake",
"Client hello (1)":* TLSv1.3 (IN),
"TLS handshake",
"Server hello (2)":* TLSv1.3 (IN),
"TLS handshake",
"Encrypted Extensions (8)":* TLSv1.3 (IN),
"TLS handshake",
"Certificate (11)":* TLSv1.3 (IN),
"TLS handshake",
"CERT verify (15)":* TLSv1.3 (IN),
"TLS handshake",
"Finished (20)":* TLSv1.3 (OUT),
"TLS change cipher",
"Change cipher spec (1)":* TLSv1.3 (OUT),
"TLS handshake",
"Finished (20)":"* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519 / RSASSA-PSS
* ALPN":"server accepted h2
* Server certificate":"*  subject":"CN=unifi.local
*  start date":"Nov 30 15":"15":"13 2022 GMT
*  expire date":"Mar  4 15":"15":"13 2025 GMT
*  issuer":"CN=unifi.local
*  SSL certificate verify result":self-signed certificate (18),
"continuing anyway.
*   Certificate level 0":Public key type RSA (2048/112 Bits/secBits),
signed using sha256WithRSAEncryption
* using HTTP/2
*[
   HTTP/2
][
   1
]"OPENED stream for https"://192.168.1.1/
*[
   HTTP/2
][
   1
][
   :"method":"GET"
]"*"[
   HTTP/2
][
   1
][
   :"scheme":"https"
]"*"[
   HTTP/2
][
   1
][
   :"authority":192.168.1.1
]"*"[
   HTTP/2
][
   1
][
   :"path":"/"
]"*"[
   HTTP/2
][
   1
][
   "user-agent":curl/8.5.0
]"*"[
   HTTP/2
][
   1
][
   "accept":"*/*"
]"> GET / HTTP/2
> Host":"192.168.1.1
> User-Agent":"curl/8.5.0
> Accept":*/*
> 
* TLSv1.3 (IN),
"TLS handshake",
"Newsession Ticket (4)":* TLSv1.3 (IN),
"TLS handshake",
"Newsession Ticket (4)":"* old SSL session ID is stale",
"removing
< HTTP/2 200 
HTTP/2 200 
< server":"nginx
server":"nginx
< date":"Sun",
"17 Dec 2023 14":"11":"58 GMT
date":"Sun",
"17 Dec 2023 14":"11":"58 GMT
< content-type":"text/html
content-type":"text/html
< content-length":"826
content-length":"826
< last-modified":"Fri",
"08 Dec 2023 14":"15":"29 GMT
last-modified":"Fri",
"08 Dec 2023 14":"15":"29 GMT
< etag":"65732501-33a""etag":"65732501-33a""< expires":"Sun",
"17 Dec 2023 14":"11":"57 GMT
expires":"Sun",
"17 Dec 2023 14":"11":"57 GMT
< cache-control":"no-cache
cache-control":"no-cache
< access-control-allow-credentials":"false
access-control-allow-credentials":"false
< access-control-expose-headers":"Content-Disposition",
"Content-Range",
"Filename",
"Location",
"Range",
"Upload-Length",
"Upload-Offset",
"X-Connection-Type",
"X-Csrf-Token",
"X-File-Id",
"X-Token-Expire-Time",
"X-Updated-Csrf-Token
access-control-expose-headers":"Content-Disposition",
"Content-Range",
"Filename",
"Location",
"Range",
"Upload-Length",
"Upload-Offset",
"X-Connection-Type",
"X-Csrf-Token",
"X-File-Id",
"X-Token-Expire-Time",
"X-Updated-Csrf-Token
< referrer-policy":"no-referrer
referrer-policy":"no-referrer
< strict-transport-security":"max-age=15552000; includeSubDomains
strict-transport-security":"max-age=15552000; includeSubDomains
< x-content-type-options":"nosniff
x-content-type-options":"nosniff
< x-dns-prefetch-control":"off
x-dns-prefetch-control":"off
< x-frame-options":"SAMEORIGIN
x-frame-options":"SAMEORIGIN
< x-xss-protection":"1; mode=block
x-xss-protection":"1; mode=block
< accept-ranges":"bytes
accept-ranges":bytes

< 
* Connection #0 to host 192.168.1.1 left intact
<!doctype html><html lang="en""><head><meta charset=""utf-8""><link rel=""icon""href=""/favicon.ico?v3""sizes=""any""><link rel=""icon""href=""/favicon.svg?v3""type=""image/svg+xml""><link rel=""apple-touch-icon""href=""/apple-touch-icon.png?v3""><title>UniFi OS</title><meta name=""viewport""content=""width=device-width,initial-scale=1""><script>window.UNIFI_OS_MANIFEST ="{
   "model":{
      "id":"UDMPROSE",
      "shortName":"UDM SE",
      "longName":"UniFi Dream Machine SE"
   },
   "images":{
      "small":"/assets/images/small.png?udmprose-2.0.0",
      "medium":"/assets/images/medium.png?udmprose-2.0.0",
      "large":"/assets/images/large.png?udmprose-2.0.0",
      "huge":"/assets/images/huge.png?udmprose-2.0.0"
   }
}"</script><script defer=""defer""src=""/main.8aa98e7b9c40b76fd5bf.js""></script><link href=""/main.0e9197a3.css""rel=""stylesheet""></head><body><div id=""root""></div></body></html>"

This is the widget's config:

        widget:
          type: unifi
          url: https://192.168.1.1
          fields: ["uptime", "wan", "lan_users", "wlan_users"]
          username: homepage_account
          password: *my_password*

I also tried numerous different links, created new accounts and deleting and recreating the container, but the result is always 401 Unauthorized.

I have a Dream Machine Special Edition
OS Version: V3.2.7
Docker image: ghcr.io/benphelps/homepage:main

I'm pulling my hair out for the last two hours as I can't find the problem with this widget and I'm hoping someone can help me out.

Thanks in advance.

[shamoon]

Have you tried re-creating (not just restarting) the container?

[moostmartijn]

Yes, I also recreated the container. Didn't help unfortunately.

Could it be that Unifi OS 3.2.7, which is a release candidate, is not supported yet? Unfortunately there seems no way to downgrade the Unifi OS

[shamoon]

Well there already was #2280 ( #2281 ) which looking at your output above, should still work

Can you enabled DEBUG and post the homepage container logs

I really think applying RC updates of Unifi is a dangerous game, but thats me...

[moostmartijn]

Yes, I enabled it a few months ago and totally forgot about it. I set it back to official release now.

I wanted to enable debug and send you the logs, but during reading the documentation I came across the official image (?)

So I changed the Docker image from ghcr.io/benphelps/homepage:main to ghcr.io/gethomepage/homepage:latest and the widget works now, so this issue can be closed.

Thanks for your help/time.

[github-actions[bot]]

This discussion has been automatically locked since there has not been any recent activity after it was closed. Please open a new discussion for related concerns.