[Bug]: HTTP Basic Authentication password fails for passwords longer than 31 characters (encrypted value overflows varchar(255))

[Jared87]

Error Message and Logs

SQLSTATE[22001]: String data, right truncated: 7
ERROR: value too long for type character varying(255)
(Connection: pgsql, Host: coolify-db, Port: 5432, Database: coolify,
 SQL: update "applications"
      set "custom_labels" = <base64 label block>,
          "http_basic_auth_username" = <username>,
          "http_basic_auth_password" = <encrypted, base64 ciphertext>,
          "updated_at" = 2026-04-18 22:29:44
      where "id" = <id>)

The value stored in http_basic_auth_password is Laravel-encrypted (eyJpdiI6... format — JSON with IV, ciphertext, MAC, base64-wrapped). The encryption overhead pushes even short passwords past the 255 character column limit. Confirmed by testing: a 31-character password saves successfully, a 32-character password fails with the error above.

Steps to Reproduce

1. Open any standard application in Coolify.
2. Go to Configuration → General → HTTP Basic Authentication.
3. Enable it, set a username, and set a password of 32 characters (e.g. 32 × a).
4. Click Save.
5. Observe HTTP 500 with the SQL error above.
6. Repeat with 31 characters — saves successfully.

Example Repository URL

No response

Coolify Version

v4.0.0-beta.473

Are you using Coolify Cloud?

No (self-hosted)

Operating System and Version (self-hosted)

Ubuntu 24.04

Additional Information

This is a follow-up to #6683. That issue was closed because the maintainer clarified that the HTTP Basic Authentication field is not intended for protecting Docker image pulls but for protecting the deployed app via the proxy. However, the underlying SQL error in that report is still reproducible — even when using the field for its intended purpose, any password longer than 31 characters fails to save.

Related: #6048, #4732 — same root cause in different columns.

[coderabbitai]

⚠️ Possible Duplicate Issue(s)

• [Bug]: DOCKER IMAGE - HTTP Basic Authentication - too long password #6683

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!

[appmakesuporte]

Confirmando na v4.1.1 + duas colunas a mais no escopo.

Tropecei nisso num curl install recém-feito de v4.1.1 + PostgreSQL 16 (o coolify-db empacotado). Ativar HTTP Basic Authentication em qualquer Application falha o
Save com:

SQLSTATE[22001]: String data, right truncated: 7
ERROR: value too long for type character varying(255)

Crypt::encrypt() retorna um envelope {iv, value, mac, tag} em base64 — mesmo uma senha curta serializa a ~270 chars. $table->string() em 2025_04_17_110026_add_ap plication_http_basic_auth_fields.php
cria varchar(255), então estoura imediatamente.

Além de http_basic_auth_password, outras duas colunas estavam em varchar(255) na minha instância e também estouraram no Save quando Basic Auth é ativado:

| Coluna | Tipo atual | Por que estoura |
| applications.http_basic_auth_password | varchar(255) | envelope encriptado de ~270+ chars |
| applications.http_basic_auth_username | varchar(255) | mesmo caminho de criptografia, mesmo envelope |
| applications.custom_labels | varchar(255) na minha instância | Coolify gera ~1.5KB de labels Traefik+Caddy (http-basic-auth-... middleware + caddy_0.basicauth.<user>) ao ligar Basic Auth |

Nota sobre custom_labels: a migration original usa text(), e o testing-schema.sql também já tem como TEXT. Minha instância v4.1.1 ainda mostrava varchar(255) — provavelmente drift de upgrade. De qualquer forma, o tipo desejado em produção é TEXT.

Workaround (sem restart)

sudo docker exec coolify-db psql -U coolify -d coolify -c "
ALTER TABLE applications ALTER COLUMN custom_labels TYPE TEXT;
ALTER TABLE applications ALTER COLUMN http_basic_auth_password TYPE TEXT;
ALTER TABLE applications ALTER COLUMN http_basic_auth_username TYPE TEXT;
"

Depois disso o Save passa e Basic Auth funciona normal.

[bendtherules]

Please fix this. I faced the same thing as well and had to run the migrations manually to make it work.
This is a great feature, please make it work. Everyone will be facing this issue - even if the password is small, they will still face it because of the custom labels being too long.