[homeassistant.components.websocket_api.http.connection] Error handling message: Unauthorized (unauthorized)

[mobs99]

Model Name: 14 pro max (also happening on my sons 15 pro)
Software Version: 26.1
App Version: 2025.12.0 (2025.1543) and 2025.12.1 (2025.1546)

Home Assistant Core Version
2025.12.0

Every time IoS user (non-admin) uses the mobile app, I get the following error appearing in my logs: (this is an example of the 2025.12.1 (14 pro max device)
ERROR (MainThread) [homeassistant.components.websocket_api.http.connection] [140366218142368] Error handling message: Unauthorized (unauthorized) from (Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Home Assistant/2025.12.1 (io.robbie.HomeAssistant; build:2025.1546; iOS 26.1.0) Mobile/HomeAssistant, like Safari)

To Reproduce
User on iOS opens HA app

Expected behavior
Dont get the error.

Screenshots
N/A

Additional context
Everything in dashboard/display, cards, etc all work fine, doesn't seem to break anything.

[geobogb]

I get similar messages, both from iPhone, iPad and web browser on a computer. Despite the messages, everything seems to be working. This is from a user that is not an administrator.

2025-12-05 09:38:03.975 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from X.X.X (X.X.X.X). Requested URL: '/auth/token'. (Home Assistant/2025.12.1 (io.robbie.HomeAssistant; build:2025.1546; iOS 26.1.0) Alamofire/5.8.0)

2025-12-05 09:35:29.539 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from X.X.X (X.X.X.X). Requested URL: '/api/websocket'. (Mozilla/5.0 (iPad; CPU OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Home Assistant/2025.12.1 (io.robbie.HomeAssistant; build:2025.1546; iPadOS 26.1.0) Mobile/HomeAssistant, like Safari)

2025-12-05 10:20:35.958 ERROR (MainThread) [homeassistant.components.websocket_api.http.connection] [139784345938112] Error handling message: Unauthorized (unauthorized) USERNAME from X.X.X.X (Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0)

[bgoncal]

Any chance there is some old home assistant server configured in app settings? I would try removing all servers, rebooting the phone and adding back the server you use.

[geobogb]

It's not only from iOS. I got this a few minutes ago from Firefox on a computer.

2025-12-05 10:59:32.615 ERROR (MainThread) [homeassistant.components.websocket_api.http.connection] [139783714692192] Error handling message: Unauthorized (unauthorized) USERNAME from X.X.X.X (Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0)

[bgoncal]

Do you know from which device the IP is from?

[geobogb]

The last log messages I posted is from accessing Home Assistant from Firefox web browser on a Linux computer. More or less the same below from Chrome on the same computer.

2025-12-05 11:20:29.873 ERROR (MainThread) [homeassistant.components.websocket_api.http.connection] [139783683787648] Error handling message: Unauthorized (unauthorized) USERNAME from 192.168.X.X (Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36)

No log messages att all when connecting as an administrator. Seem to be related to user without admin rights.

But, repeating myself, everything (I think) seem to be working despite the error message.

[bgoncal]

So it's a known device to you right? That was my question, to prevent this is coming from an unknown device, which would be more critical.

[bgoncal]

Since it is happening not only from the App itself, I will transfer this issue to Core

[geobogb]

Yes, a very well known device, the same computer I use myself as admin all the time. Transfer to core is probably correct, because the messages are definitely not only related to iOS devices.

[geobogb]

I fired up an old unused Android tablet. This device is normally not used for Home Assistant. I Installed the Home Assistant app on the tablet and logged in as a non admin user. This is the result:

2025-12-05 12:03:54.894 ERROR (MainThread) [homeassistant.components.websocket_api.http.connection] [139783685679488] Error handling message: Unauthorized (unauthorized) USERNAME from 192.168.X.X (Mozilla/5.0 (Linux; Android 13; TB310FU Build/TP1A.220624.014; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.158 Safari/537.36 Home Assistant/2025.11.4-19134 (Android 13; TB310FU))

I then logged out and logged in as myself/admin. No errors in the log.

[bgoncal]

For some reason when I try to transfer to core it fails, I have asked some co workers to transfer for me but if it doesn't happen soon, feel free to open an issue there yourself.