[bug] Unable to add new user to android client on 0.20.0

[ahmed-mohamed01]

Describe the Bug

After migrating to pangolin version 0.20.0, when a user attempts to login to a new device and enters the pangolin URL, app hangs while displaying Generating sign in code... and displays an error. Unable to progress from this point.

Works again after reverting to 0.19.4

Logs from Newt after upgrading:
INFO: 2026/07/10 16:43:08 Target 17 initial status: healthy ERROR: 2026/07/10 17:06:15 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... INFO: 2026/07/10 17:06:16 Failed to report peer bandwidth: failed to send bandwidth data: not connected ERROR: 2026/07/10 17:06:18 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:21 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:24 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... INFO: 2026/07/10 17:06:26 Failed to report peer bandwidth: failed to send bandwidth data: not connected ERROR: 2026/07/10 17:06:27 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:30 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:33 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... INFO: 2026/07/10 17:06:36 Failed to report peer bandwidth: failed to send bandwidth data: not connected ERROR: 2026/07/10 17:06:36 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:39 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:42 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:45 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... INFO: 2026/07/10 17:06:46 Failed to report peer bandwidth: failed to send bandwidth data: not connected ERROR: 2026/07/10 17:06:48 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... ERROR: 2026/07/10 17:06:51 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... WARN: 2026/07/10 17:06:53 Periodic ping failed (2 consecutive failures): all 2 ping attempts failed, last error: failed to read ICMP packet: i/o timeout ERROR: 2026/07/10 17:06:54 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": dial tcp <redacted>:443: connect: connection refused. Retrying in 3s... INFO: 2026/07/10 17:06:56 Failed to report peer bandwidth: failed to send bandwidth data: not connected ERROR: 2026/07/10 17:06:57 Failed to connect: failed to get token: failed to request new token: Post "https://pangolin.<redacted>/api/v1/auth/newt/get-token": tls: failed to verify certificate: x509: certificate is valid for 8504dab1b7e<redacted>d2c9.traefik.default, not pangolin.<redacted>. Retrying in 3s... INFO: 2026/07/10 17:07:01 Server version: 1.19.4 INFO: 2026/07/10 17:07:01 Websocket connected INFO: 2026/07/10 17:14:49 Peer <redacted> removed successfully INFO: 2026/07/10 17:14:49 Triggering on-demand hole punch to 1 exit nodes INFO: 2026/07/10 17:14:49 Successfully sent on-demand hole punch to 1/1 exit nodes INFO: 2026/07/10 17:14:49 Peer <redacted> added successfully INFO: 2026/07/10 17:18:33 Closing clients...

Environment

• OS Type & Version: Android
• Pangolin Version: 0.20.0
• Edition (Community or Enterprise): Enterprise
• Gerbil Version: 1.4.2
• Traefik Version: 3.7.6
• Newt Version: 1.14.0
• Client Version: 0.32.0

To Reproduce

Migrate from 0.19.0 to 0.20.0.
Attempt to connect to selfhosted pangolin instance to add a user from android client, either from a new android install or by clicking add account.

Expected Behavior

Pangolin client should display the login page .

[AstralDestiny]

You have a valid cert over there on the pangolin host?

docker compose ps on the pangolin side, and anything within docker logs pangolin, docker logs traefik, docker logs gerbil. Mostly asking for the traefik ones if any.

[github-actions]

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.