Fix OIDC redirect with host query string

Tidy up error messages

Author: DigitallyRefined

.env.default

@@ -24,7 +24,7 @@ GHCR_TOKEN="ghp_..."
 CONTAINER_REGISTRY_USERNAME=""
 CONTAINER_REGISTRY_TOKEN=""
 
-# Optional OIDC authentication, App callback: https://containers-up.example.com/auth-callback*
+# Optional OIDC authentication, App callback: https://containers-up.example.com/auth-callback
 # ENV_PUBLIC_OIDC_ISSUER_URI="https://auth.example.com"
 # ENV_PUBLIC_OIDC_CLIENT_ID="..."
 # OIDC_CLIENT_SECRET="..."

README.md

@@ -38,7 +38,7 @@ The app can be started using the following `compose.yml`:
 services:
   containers-up:
     # https://github.com/DigitallyRefined/containers-up/releases
-    image: ghcr.io/digitallyrefined/containers-up:1.3.7
+    image: ghcr.io/digitallyrefined/containers-up:1.3.8
     restart: unless-stopped
     ports:
       - 3000:3000
@@ -62,7 +62,7 @@ Optional system wide configuration can be changed by copying `.env.default` to `
 services:
   containers-up:
     # https://github.com/DigitallyRefined/containers-up/releases
-    image: ghcr.io/digitallyrefined/containers-up:1.3.7
+    image: ghcr.io/digitallyrefined/containers-up:1.3.8
     restart: unless-stopped
     volumes:
       - ./containers-up/storage:/storage
@@ -129,7 +129,7 @@ networks:
 
 2. Create the network `docker network create traefik` and start the services `docker compose up -d`
 3. Once Traefik and Pocket ID are up and running, set up a [new user via Pocket ID](https://pocket-id.org/docs/setup/installation) and optionally add them to an admin group
-4. In the Pocket ID admin account create a new OIDC client and set up the callback URL as `https://containers-up.example.com/auth-callback*` and optionally only allow the admin group
+4. In the Pocket ID admin account create a new OIDC client and set up the callback URL as `https://containers-up.example.com/auth-callback` and optionally only allow the admin group
 5. In the Containers Up! `.env` file (see `.env.default`) uncomment the OIDC config section, add the URI of Pocket ID (without any trailing paths) then copy and paste the client ID and secret (JWKS certificate URL can be set manually if auto-discovery fails via `OIDC_JWKS_URL`)
 6. After restarting the app, accessing `https://containers-up.example.com` should now require you to login
 

biome.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.3.11/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.3.12/schema.json",
   "vcs": {
     "enabled": true,
     "clientKind": "git",

bun.lock

@@ -1,7 +1,7 @@
 services:
   containers-up:
     # https://github.com/DigitallyRefined/containers-up/releases
-    image: ghcr.io/digitallyrefined/containers-up:1.3.7
+    image: ghcr.io/digitallyrefined/containers-up:1.3.8
     container_name: containers-up
     restart: unless-stopped
     volumes:

compose.yml

@@ -1,6 +1,6 @@
 {
   "name": "containers-up",
-  "version": "1.3.7",
+  "version": "1.3.8",
   "description": "Containers Up! a web based platform designed to manage and update containers",
   "author": "DigitallyRefined",
   "license": "ISC",
@@ -30,31 +30,31 @@
     "@radix-ui/react-slot": "^1.2.4",
     "@radix-ui/react-toast": "^1.2.15",
     "@radix-ui/react-tooltip": "^1.2.8",
-    "@tanstack/react-query": "^5.90.18",
+    "@tanstack/react-query": "^5.90.20",
     "@tanstack/react-query-devtools": "^5.91.2",
     "bun-plugin-tailwind": "^0.1.2",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "jose": "^6.1.3",
     "lucide-react": "^0.563.0",
     "oidc-client-ts": "^3.4.1",
-    "pino": "^10.2.0",
+    "pino": "^10.3.0",
     "pino-pretty": "^13.1.3",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "react-hook-form": "^7.71.1",
     "tailwind-merge": "^3.4.0",
     "tailwindcss": "^4.1.18",
     "tailwindcss-animate": "^1.0.7",
-    "zod": "^4.3.5"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@biomejs/biome": "2.3.12",
     "@tailwindcss/cli": "^4.1.18",
     "@types/bun": "^1.3.6",
     "@types/pino": "^7.0.5",
     "@types/pino-pretty": "^5.0.0",
-    "@types/react": "^19.2.8",
+    "@types/react": "^19.2.9",
     "@types/react-dom": "^19.2.3"
   }
 }

package.json

@@ -43,9 +43,11 @@ export const commonWebhookHandler = async (
 
   const saveLogs = async () => {
     const logs = [getLogs(event), containersCleanupLogs].filter(Boolean).flat();
-    return Promise.all(logs.map(async (log) => {
-      await logDb.create({ jobId, hostId: hostConfig.id, ...log });
-    }));
+    return Promise.all(
+      logs.map(async (log) => {
+        await logDb.create({ jobId, hostId: hostConfig.id, ...log });
+      })
+    );
   };
 
   if (!isBot && options.eventName !== 'manual-restart') {

src/backend/endpoints/webhook/common.ts

@@ -496,7 +496,7 @@ export const startServer = () => {
             )}/.well-known/openid-configuration`;
             const metadataRes = await fetch(metadataUrl);
             if (!metadataRes.ok) {
-              mainLogger.error(`Failed to fetch OIDC metadata: ${metadataRes.statusText}`);
+              mainLogger.error(`Failed to fetch OIDC metadata: ${metadataRes.statusText ?? ''}`);
               return Response.json({ error: `Failed to fetch OIDC metadata` }, { status: 500 });
             }
             const metadata = await metadataRes.json();

src/backend/index.ts

@@ -102,12 +102,12 @@ const getAuthToken = async (
     const url = `${realm}?service=${service}&scope=${scope}`;
     const response = await fetch(url, { headers });
     if (!response.ok) {
-      throw new Error(`HTTP error! status: ${response.status}`);
+      throw new Error(`HTTP error! status: ${response.status ?? ''}`);
     }
     const data = await response.json();
     return data.token || data.access_token;
   } catch (error) {
-    throw new Error(`Failed to get auth token: ${error.message}`);
+    throw new Error(`Failed to get auth token: ${error.message ?? ''}`);
   }
 };
 
@@ -167,7 +167,9 @@ const getRemoteImageDigest = async ({
   }
 
   if (!response.ok) {
-    throw new Error(`Failed to fetch manifest: ${response.status} ${response.statusText}`);
+    throw new Error(
+      `Failed to fetch manifest: ${response.status ?? ''} ${response.statusText ?? ''}`
+    );
   }
 
   const digest = response.headers.get('docker-content-digest');

src/backend/utils/docker/remote-image-digest.ts

@@ -21,7 +21,9 @@ export const createExec = (logger: Logger) => {
         code: typeof error.code === 'number' ? error.code : 1,
       };
       if (throwOnError) {
-        logger.error(`${command} ${errorData.stderr} ${errorData.stdout} ${errorData.code}`);
+        logger.error(
+          `${command} ${errorData?.stderr ?? ''} ${errorData?.stdout ?? ''} ${errorData?.code ?? ''}`
+        );
         throw errorData;
       }
       return errorData;