So I changed the authentication to http and I could not login using the Web Interface. I received the following error:

“Error 403 – Forbidden

You don’t have permission to access this page [HTTP Remote-User= ; Remote IP address=172.17.0.1]”

Solution:

1. ~ > sudo docker exec -t -i 324e7833ba21 /bin/bash (to browse the docker container config files)
2. apt-get update && apt-get install vim (to be able to modify config files)
3. vim ./data/config.php
4. Change the variable ‘auth_type’ => ‘none’
5. Login and rechange the authentication to web form

This is a security-focussed release for FreshRSS 1.26.x, addressing several CVEs (thanks @Inverle) 🛡

A few highlights ✨:

• Implement JSON string concatenation with & operator
• Support multiple JSON fragments in HTML+XPath+JSON mode (e.g. JSON-LD)
• Multiple security fixes with CVEs
• Bug fixes

Notes ℹ:

• Favicons will be reconstructed automatically when feeds gets refreshed. After that, you may need to refresh your Web browser as well.

https://github.com/FreshRSS/FreshRSS/releases/tag/1.26.2

1.25.0 key changes:

1. Require PHP 8.1+ (and improved support of PHP 8.4+)
2. Require PostgreSQL 10+ or MariaDB 10.0.5+ or MySQL 8+

# Rebuild an image (see build section below) or get a new online version:
docker pull freshrss/freshrss
# And then
docker stop freshrss
docker rename freshrss freshrss_old
docker run -d --restart unless-stopped --log-opt max-size=10m \
  -p 8080:80 \
  -e TZ=Europe/Berlin \
  -e 'CRON_MIN=1,31' \
  -v freshrss_data:/var/www/FreshRSS/data \
  -v freshrss_extensions:/var/www/FreshRSS/extensions \
  --name freshrss \
  freshrss/freshrss
# If everything is working, delete the old container
docker rm freshrss_old

https://github.com/FreshRSS/FreshRSS/blob/edge/Docker/README.md

https://github.com/FreshRSS/FreshRSS/releases/tag/1.25.0