1) If you are using an SSL enabled reverse proxy which you seem to be, then use --auth-mode=basic
2) length=1;index=1 isn't an actual error so unless you can get better error messages, I'm not sure how to help you. OPDS has no separate authentication from the rest of the server.
3) You can try using curl to test the authentication outside a browser.
|