[GH-ISSUE #1671] Header Click / X-Click url resets the PHP session #1166

New issue

Closed

opened 2026-05-07 00:30:45 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-07 00:30:45 +02:00

Owner

Originally created by @pfranclik-sabai on GitHub (Mar 22, 2026).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1671

🐞 Describe the bug

After clicking the notification, the url specified in header as X-Click / Click redirects to default browser and logs out the current user from the web page. Seems like the PHP Session Cookie is removed.

💻 Components impacted

Tested clicking notification on Android 15 in app v1.24.0 (play) with two browsers: Google Chrome and Brave.

💡 Screenshots and/or logs

log is here:
https://nopaste.net/Ci3ueNT7Re
screen video is attached
https://github.com/user-attachments/assets/3b78b42e-02db-486b-9bd6-fac77753cd79

🔮 Additional context

I like ntfy very much, I plan to incorporate it with our IS. In this case we surely subscribe to PRO plan, but the bug could make the thing less useful. Thank you.

Originally created by @pfranclik-sabai on GitHub (Mar 22, 2026). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1671 :lady_beetle: **Describe the bug**  After clicking the notification, the url specified in header as X-Click / Click redirects to default browser and logs out the current user from the web page. Seems like the PHP Session Cookie is removed. :computer: **Components impacted**  Tested clicking notification on Android 15 in app v1.24.0 (play) with two browsers: Google Chrome and Brave. :bulb: **Screenshots and/or logs**  log is here: https://nopaste.net/Ci3ueNT7Re screen video is attached https://github.com/user-attachments/assets/3b78b42e-02db-486b-9bd6-fac77753cd79 :crystal_ball: **Additional context**  I like ntfy very much, I plan to incorporate it with our IS. In this case we surely subscribe to PRO plan, but the bug could make the thing less useful. Thank you.

BreizhHardware

2026-05-07 00:30:45 +02:00

closed this issue
added the
🪲 bug
label

BreizhHardware commented

2026-05-07 00:30:45 +02:00

Author

Owner

@binwiederhier commented on GitHub (Apr 4, 2026):

ntfy just opens the browser. It cannot log out of any sessions. That's simply not possible. It must be something else, sorry.

@binwiederhier commented on GitHub (Apr 4, 2026): ntfy just opens the browser. It cannot log out of any sessions. That's simply not possible. It must be something else, sorry.