fix(mobile): sync custom headers back to widget

[robinwit]

Description

Sets kWidgetCustomHeaders when changing the headers in the app (advanced settings), similar as in saveAuthInfo(), otherwise widgets keep using the old credentials.

This fixes "No assets available" shown in widgets when a certain header is required and it was correctly set in the app. Should I create an issue for this?

How Has This Been Tested?

On my iPhone with my Immich instance behind an Nginx with auth_request that is configured to be skipped if a certain header is set (otherwise the app doesn't work: #3118):

Nginx config:

    location @noauth {
      proxy_pass http://immich_server:2283;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
    }

    location @error401 {
        return 302 https://oidc_server/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
    }

    location / {
        error_page 599 = @noauth;

        if ($http_x_immich_bypass = "YOUR_SECRET_VALUE_HERE") {
            return 599;
        }

        auth_request /validate;
        error_page 401 = @error401;

        proxy_pass http://immich_server:2283;
        proxy_set_header   Upgrade    $http_upgrade;
        proxy_set_header   Connection "upgrade";
    }

Checklist:

• I have performed a self-review of my own code
• I have made corresponding changes to the documentation if applicable
• I have no unrelated changes in the PR.
• I have confirmed that any new dependencies are strictly necessary.
• I have written tests for new code (if applicable)
• I have followed naming conventions/patterns in the surrounding code
• All code in src/services/ uses repositories implementations for database calls, filesystem operations, etc.
• All code in src/repositories/ is pretty basic/simple and does not have any immich specific logic (that belongs in src/services/)

Please describe to which degree, if any, an LLM was used in creating this pull request.

Claude Opus 4.5 for pinpointing the issue.

[bwees]

LGTM

[bwees]

@robinwit can you give this a test on your setup after the refactorings that we made?

[mertalev]

I'd really like to minimize the number of places that need these headers to be kept in sync. With #25942, headers are set and persisted platform-side. Widgets have access to them with UserDefaults and SharedPreferences, so they could use this without needing to also sync here.

[bwees]

I'd really like to minimize the number of places that need these headers to be kept in sync. With #25942, headers are set and persisted platform-side. Widgets have access to them with UserDefaults and SharedPreferences, so they could use this without needing to also sync here.

Ah perfect. @robinwit can you adjust the implementation for widgets to use the headers that are already persisted? We can delete the existing header sync that is exclusive to widgets in favor of the new platform side header source.