Release: 2.0.9.107 (Canary) 2024-09-11

I’m not sure what that means. Is that what you use or does it fail?

How are you running the test? Is this a LAN or remote, e.g. SSH?

Note that SSH and other remote access tools can forward a port for use by local browser.

Assuming editing is permitted. Still need developer input, but it works better for me today.

Meaning host name? Did you set up the --webservice-allowed-hostnames= to let it in?

Not doing it gave me a different popup than yours though – Signin failed: Forbidden

Waiting too long gets Signin failed : Signin token expired which you also didn’t get.

FWIW I tested in the other direction, browsing from Linux since my Duplicati Windows, but developer input on the error is still probably what we’re awaiting to explain your token issue.

I’m still looking for documentation on initial setup which has gotten harder than it used to be.

Documentation on which version to use would be nice too. Have you figured out differences?
Are you doing a CLI start of the Server? If so, maybe you don’t need to rely on token access.
Password and other needed things (see help) can be passed in on the startup command line.