Repository navigation
Hide from Application Dashboard (meta_hide) has no effect; app still shown #27404
Description
Describe the bug
The “Hide from Application Dashboard” toggle (meta_hide, added in 2026.5) has no effect. The API returns meta_hide: true, but the application still appears on the Application Dashboard for both admin and non-admin users. Setting Launch URL to blank://blank hides it immediately; clearing it shows it again immediately. Not a caching issue (see #25297 ), since Launch URL changes apply instantly in both directions. API responses for both states attached below; only launch_url/meta_launch_url differ.
How to reproduce
- Edit an application, enable “Hide from Application Dashboard”, leave Launch URL empty, save.
GET /api/v3/core/applications/<slug>/returnsmeta_hide: true.- Open the Application Dashboard as a non-admin user who has access. The app is shown.
- Set Launch URL to
blank://blank, save. The app disappears immediately.
Expected behavior
The app is hidden when meta_hide is true, regardless of Launch URL.
Screenshots
Additional context
Without blank://blank in the Launch URL
{
"pk": "<REDACTED_UUID>",
"pbm_uuid": "<REDACTED_UUID>",
"name": "Cloudflare Access",
"slug": "cloudflare-access",
"provider": 1,
"provider_obj": {
"pk": 1,
"name": "cloudflare-oidc",
"authentication_flow": null,
"authorization_flow": "<REDACTED_UUID>",
"invalidation_flow": "<REDACTED_UUID>",
"property_mappings": [
"<REDACTED_UUID>",
"<REDACTED_UUID>",
"<REDACTED_UUID>",
"<REDACTED_UUID>"
],
"component": "ak-provider-oauth2-form",
"assigned_application_slug": "cloudflare-access",
"assigned_application_name": "Cloudflare Access",
"assigned_backchannel_application_slug": null,
"assigned_backchannel_application_name": null,
"verbose_name": "OAuth2/OpenID Provider",
"verbose_name_plural": "OAuth2/OpenID Providers",
"meta_model_name": "authentik_providers_oauth2.oauth2provider"
},
"backchannel_providers": [],
"backchannel_providers_obj": [],
"launch_url": "https://<REDACTED>.cloudflareaccess.com",
"open_in_new_tab": true,
"meta_launch_url": "",
"meta_icon": "cloudflare.svg",
"meta_icon_url": "/files/media/public/cloudflare.svg?token=<REDACTED>",
"meta_icon_themed_urls": null,
"meta_description": "",
"meta_publisher": "",
"policy_engine_mode": "all",
"group": "Admin",
"meta_hide": true
}
With blank://blank in the Launch URL
{
"pk": "<REDACTED_UUID>",
"pbm_uuid": "<REDACTED_UUID>",
"name": "Cloudflare Access",
"slug": "cloudflare-access",
"provider": 1,
"provider_obj": {
"pk": 1,
"name": "cloudflare-oidc",
"authentication_flow": null,
"authorization_flow": "<REDACTED_UUID>",
"invalidation_flow": "<REDACTED_UUID>",
"property_mappings": [
"<REDACTED_UUID>",
"<REDACTED_UUID>",
"<REDACTED_UUID>",
"<REDACTED_UUID>"
],
"component": "ak-provider-oauth2-form",
"assigned_application_slug": "cloudflare-access",
"assigned_application_name": "Cloudflare Access",
"assigned_backchannel_application_slug": null,
"assigned_backchannel_application_name": null,
"verbose_name": "OAuth2/OpenID Provider",
"verbose_name_plural": "OAuth2/OpenID Providers",
"meta_model_name": "authentik_providers_oauth2.oauth2provider"
},
"backchannel_providers": [],
"backchannel_providers_obj": [],
"launch_url": "blank://blank",
"open_in_new_tab": true,
"meta_launch_url": "blank://blank",
"meta_icon": "cloudflare.svg",
"meta_icon_url": "/files/media/public/cloudflare.svg?token=<REDACTED>",
"meta_icon_themed_urls": null,
"meta_description": "",
"meta_publisher": "",
"policy_engine_mode": "all",
"group": "Admin",
"meta_hide": true
}
Only these two fields differ:
{
"launch_url": "blank://blank",
"meta_launch_url": "blank://blank"
}
Deployment Method
Docker
Version
2025.8.5
Activity