App with public access: Permission error 403 on XHR PUT call to API

Your Setup:

  • SeaTable Enterprise self-hosted 6.0.10 (also on 5.3.12, had to wait for upgrade before reporting it)
  • Could not verify on Seatable Cloud due to free license

Describe the Problem/Error/Question:

Gallery pages in publicly accessible Apps produce an error as a toast message (see below) when clicked in the navigation. Does not seem to be functional, App works.

Steps to reproduce:

  • Create a simple base with a simple table (I tried Text + Select + Number column)
    • Fill in a few entries - I did 3
  • Create a Universal App
    • Add any number of different pages for the table - I used table and kanban
    • Add a gallery page for the same table
  • In the “Open Access“ setting of the app, set the option “Enable Public Access“
  • Open the App by its standard URL (or any custom) in a private browser window to ensure anonymous access
    • Click all the pages one by one in the navigation
    • Only on the gallery page, you should see the error messages below

Since we are running Seatable behind Traefik as an Edge Router, header settings and cookie handling might be a bit different from the recommended Caddy. Therefore, please verify independently. If it is an isolated issue on our server, I’d be grateful for debugging hints.

Error Messages:

A toast appears when the gallery page is clicked (German in this case)

Berechtigungsfehler. Bitte aktualisieren Sie die Seite.

In the browser’s developer console, a PUT call to an URL like

https://my.domain/api/v2.1/workspace/1/dtable/MyBaseName/external-apps/123/

produces an Error code 403 Bad Request, the JSON return code

{"detail":"Authentication credentials were not provided."}

when PUTting a request body like:

------geckoformboundarycbad97e66f7111f7b5f2e038fdcff65c
Content-Disposition: form-data; name="app_config"

{"app_type":"universal-app"
*** JSON Details redacted ***
"auto_archive_table_ids":[]}
------geckoformboundarycbad97e66f7111f7b5f2e038fdcff65c
Content-Disposition: form-data; name="page_id"

2dv0
------geckoformboundarycbad97e66f7111f7b5f2e038fdcff65c--

Can anyone verify this issue who has a Premium Seatable cloud license and can create publicly accessible apps? Or is this an on-prem Enterprise feature? My private on-prem installation is only the free version, so I have no idea whether this is a general problem.