Confirming setup of Home Assistant using unauthenticated paths

[Swiftnesses]

Hello,

I initially had issues with the iOS application (too many redirects error when not connected via LAN).

I now have this in my unauthenticated paths:

^/api.*
^/auth/token.*
^/.external_auth=.
^/service_worker.js
^/static.*
^/local.*
^/hacsfiles.*
^/frontend_latest.*

Things appear to be working (finally!). I just wanted a sanity check if this is the suggested setup?

Many thanks in advance.

[Swiftnesses]

Thought I had it, but adding a new device, I see the server (the local address), and I'm presented with the HA login, clicking login just says "login aborted" and I can't login using SSO (desktop works). This is a maze!

Update: I reinstalled the app and used my https://domain address for the initial config screen rather than the found http://local:8123 address and it seems to work... perhaps 😄