🌍
English
Pages: 1
I updated one of my testing sites to the new release today and ran into an issue with the web service API. When I try to authenticate with my API key it appears the server is seeing the connection as guest so none of the admin only functions are allowed (error 401).
The web service API overall seems to be working because I can invoke the pwg.getVersion method without any issues.
But now if I go to /tools/ws.htm and put in my API key and invoke pwg.session.getStatus I get back the guest user information. The user has webmaster status and I also tried to create a new API key but the result was the same.
I was able to invoke admin only methods earlier today on this exact server before the update.
At the moment the personal plugin only has one active line of code that invokes "error_log()" to verify that my PHP error logs are being updated. I am not seeing any other errors in the log other than that string and as far as I can tell everything else in the gallery is functioning correctly.
If I switch the PHP version to 8.4 on the hosting control panel the behaviour does not change. Invoking an admin only API method using curl from another server also produces the same results.
I have not yet tried the update on my other testing server, nor have I tried a manual reinstall of Piwigo.
Environment
Piwigo 16.1.0 Check for upgrade
Installed on 30 November 2025, 2 days ago
Operating system: Linux (container)
PHP: 7.4.33 (Show info) [2025-12-02 14:44:36]
MySQL: 10.6.23-MariaDB-cll-lve [2025-12-02 14:44:36]
Graphics Library: External ImageMagick 6.9.13-25
Cache size 0.41 Mo calculated 8 hours ago Refresh
Activated plugin list 3
Admin Tools
LocalFiles Editor
Personal Plugin
Offline
I have now done a manual update back to 16.0.0 and am able to invoke the admin only web services methods again without making any other changes.
I will probably try the update to 16.1.0 again later. Or maybe a manual update to 16.1.0 instead of the automatic one.
Environment
Piwigo 16.0.0 Check for upgrade
Installed on 30 November 2025, 2 days ago
Operating system: Linux (container)
PHP: 7.4.33 (Show info) [2025-12-02 16:07:56]
MySQL: 5.5.5-10.6.23-MariaDB-cll-lve [2025-12-02 16:07:56]
Graphics Library: External ImageMagick 6.9.13-25
Cache size 0.41 Mo calculated 9 hours ago Refresh
Activated plugin list 3
Admin Tools
LocalFiles Editor
Personal Plugin
Offline
After another attempt at the automatic update, reverting to 16.0.0, and then trying a manual update after that the behaviour has remained consistent on my test server where I can't authenticate to the API on 16.1.0 and reverting to 16.0.0 makes it work again.
Offline
Apparently I didn't properly read into the changelog details so I didn't notice the change to the Authorization header in 16.1.0. Now that I am using X-PIWIGO-API instead of Authorization it is working again. Sorry.
Offline
Hello,
In the new Piwigo 16.1.0 release, we changed the header from "Authorization" to "X-PIWIGO-API". I think your issue may be related to that. But you mentioned that the problem also occurs in tools/ws.htm?
When making these changes, I had to clear my browser cache on the ws.htm page because the JavaScript was still cached, which caused an error. Try testing again in a private window, with a new API key. I’ve just tested on our Docker image and on my dev install (on vps), and I’m not seeing the issue
Last edited by Linty (2025-12-02 23:57:28)
Offline
Oh, that's great, you've solved your problem. Excellent news! :-D
Last edited by Linty (2025-12-02 23:59:06)
Offline
Yes it was happening on the tools/ws.htm page. I did have to clear the browser cache for it to start working there again. Thank you for that hint.
Offline
I have the same problem with ver 16.1.0 just now.
Can someone help me how to revert back to the previous version of 16.0,0 or before please?
Thanks
Offline
Pages: 1