Can't connect to app from iOS device using Basic Authentication

Summary

I launched streamlit app by using ngrok. Almost device (like windows, mac, Android) can access to the app through ngrok link, but iOS device (iPhone & iPad) cannot access it. ( Freeze with text “Please wait …”. )

Steps to reproduce

1. Run streamlit hello
2. Access to ngrok link from iOS device

Expected behavior:

Access the hello-example in the browser on iOS device.

Actual behavior:

Freeze with text “Please wait …”.

Is this a regression?

no

Debug info

• Streamlit version: 0.69.1
• Python version: 3.8.5
• Using Conda
• OS version: iPadOS 14.4 , Windows 10 (server)
• Browser version: chrome, safari

Additional information

I tried to setup config.toml like below, but it doesn’t work.

[server]
enableCORS = false
enableXsrfProtection = false

If I don’t set enableXsrfProtection = false, enableCORS is overwrited into true. reference : #443

[kmcgrady]

Thanks for the response @raijin0704 That was really helpful. I see the issue when using the auth feature. This implements a Basic Authentication method on the http website.

Safari unfortunately does not forward the basic auth to the web socket connection. This can be confirmed that Safari doesn’t work, but it works on Chrome on macOS.

Reading https://stackoverflow.com/a/4361358 it seems that this may be more intentional in an attempt to deprecate Basic Authentication being very insecure. There might be a solution where we make a pretend request, observe the Auth Header sent, decode it, and connect to the web socket properly. Given the pain of the implementation for a very specific situation and the motivation of trying to discourage Basic Authentication, this is probably low in priority. I’ll leave this issue open in case we see more use cases pop up.

[jucor]

Hit the same problem here with both chrome and safari on iPadOS, stream lit 0.8.0 behind reverse proxy on nginx with basic auth. Works like a charm on macOS, on Windows, and on android. Seems that iPadOS network stack is the problem — even With chrome.

is there a workaround please? Some of my users use iPads and iPhones. Thanks for any idea!