Pairing failure

[schklom]

What did you do?

1. Create the Docker container (latest version) and serve it with HTTPS via Traefik
2. Register a user with password only
3. Create a pairing code
4. Open the Android app (version 1.3.9)
5. Paste the server domain (mygym.subdomain.domain.com) and the invite code
6. Click Connect

What did you expect to happen?

Android app: to work
Traefik (with logs at max level): a connection attempt

What happened instead?

The Connect button refreshes itself, and a Toast notification says Failed to fetch then disappears after 2 seconds. Nothing else changes

How are you running openGym?

Self-hosted (docker compose)

Browser & OS

Firefox on Windows 11, your app v1.3.9 on Android

Is this about login / passkeys?

• Yes, this is a login/passkey issue and I've already checked RP_ID/ORIGIN

[seals187]

does it work on mobile in a browser ?

[schklom]

I can connect via a browser on mobile, but pairing also fails if done via a browser on mobile

[seals187]

a) you are running the app with full https right ?
b) login on PC is working ?
c) you said "pairing also fails if done via a browser on mobile" , what do you mean with "pairing" , login ?

[schklom]

a) Yes, Traefik handles https
b) login with password is working well on browser (pc+mobile)
c) I mean pairing the app to the code generated by the browser's session. Whether it's the browser on PC or mobile doesn't change the failure

[seals187]

thats not helping ?

[schklom]

Sadly no. I did these exact steps, but I get a Toast saying "Failed to fetch" and no connection logs on Traefik or your containers.

My web container is exposed on port 8081 instead of 8080. Could that be the problem?

[seals187]

you should then change the port here in the .env file, did you did that ?

[schklom]

Yes, otherwise the browser wouldn't even be able to connect.

[seals187]

ok I understand , have you set the logs to: - --accesslog=true in Traefik ?
If not, can you do it and show us what it logs ?

[schklom]

Sure

<PHONE IP> - - [28/Sep/2026:22:03:06 +0000] "OPTIONS /api/pair/redeem HTTP/2.0" 200 0 "https://localhost/" "Mozilla/5.0 (Linux; Android 10; K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/154.0.0.0 Mobile Safari/537.36" 16011 "websecure-opengym_rtr@file" "-" 0ms

Is this expected?

The entrypoint is websecure and traefik router is opengym_rtr.

When that happens, opengym's api and web containers do not show extra logs, if that matters

[seals187]

I dont think that openGym has an issue / bug, but I'm not 100% sure,.
Would it be possible to post your traefik, docker-compose etc file configs here ?

[LaDaniWapa]

I've got the same issue. This is my phone trying to connect (proxy local ip)

192.168.1.5 - - [05/Oct/2026:07:42:23 +0000] "OPTIONS /api/pair/redeem HTTP/1.1" 204 0 "https://localhost/" "Mozilla/5.0 (Linux; Android 16; SM-S911B Build/BP4A.251205.006; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/153.0.8010.36 Mobile Safari/537.36" "<server public ip>"

Im not sure why it says "https://localhost/"

This is from my docker compose logs

api-1 | gym-api on :3000 (rpID=gym.domain.es, origin=https://gym.domain.es)

and my .env file

  RP_ID=gym.domain.es
  ORIGIN=https://gym.domain.es
  WEB_PORT=3000
  RP_NAME=openGym

finally, in my proxy, I do gym.domain.es => 192.168.1.200:3000 (proxy and opengym are in different servers)

[jdpiqueras1979]

Hello,
I have exactly the same issue. in case this could help: I see in the logs that the API generates everything but there is no evidence from the android app trying to redeem the code in the endpoint. My config is traefik as reverse proxy and then opengym

Thank you so much for your help

[seals187]

Thank you for your answers. I can't promise you that this will be fixed in the next days.
Anyway the person who can fix this was informed. So lets see for the next weeks

As workaround, you could use the web-version instead of the app ?