nickvergessen
commented
8 months ago Do you see the matching user in these logs in the original, or are they censored on the disk already:
{
"file": "/var/www/**domain1**/nextcloud/lib/private/Authentication/Token/Manager.php",
"line": 154,
"function": "getTokenById",
"class": "OC\\Authentication\\Token\\PublicKeyTokenProvider",
"type": "->",
"args": [
"*** sensitive parameters replaced ***"
]
},
{
"file": "/var/www/**domain1**/nextcloud/apps/notifications/lib/Push.php",
"line": 580,
"function": "getTokenById",
"class": "OC\\Authentication\\Token\\Manager",
"type": "->",
"args": [
"*** sensitive parameters replaced ***"
]
},
{
"file": "/var/www/**domain1**/nextcloud/apps/notifications/lib/Push.php",
"line": 337,
"function": "validateToken",
"class": "OCA\\Notifications\\Push",
"type": "->",
"args": [
"*** sensitive parameters replaced ***"
]
},
{
"file": "/var/www/**domain1**/nextcloud/apps/notifications/lib/App.php",
"line": 58,
"function": "pushToDevice",
"class": "OCA\\Notifications\\Push",
"type": "->",
"args": [
"*** sensitive parameters replaced ***"
]
},As far as I understand the password of the access token was marked invalid as it might have changed in the user backend: https://github.com/nextcloud/server/blob/ffdf49a9c2f90f404628232f8b1756db7fdf4603/lib/private/User/Session.php#L773
It should heal automatically after the user logged in via the web interface using the new password: https://github.com/nextcloud/server/blob/ffdf49a9c2f90f404628232f8b1756db7fdf4603/lib/private/Authentication/Listeners/UserLoggedInListener.php#L60
It's a bit strange that no one complained about this for such a long time, so I assume some path changed somewhere recently. However I'm not sure this is really fixable on the notifications side neither on any of the other apps.
The only option I see is: clients need to be able to "get to know" this state and then need to ask the user to perform a login on the web view.
drpetersen
On two different Nextcloud instances, I experience problems with the notifications app which manifest themselves as problems with other apps which are triggering notifications. I am filing this here because in both cases I observed, the problems go away when the
notificationsapp is disabled (or, in the case of the calendar app malfunctioning, theevent_update_notificationapp).Problem scenario A (calendar):
Steps to reproduce
calendar, thenotifications, and theevent_update_notificationapps.Expected behaviour
The data entry sidebar should close and the new appointment should be saved in the calendar.
Actual behaviour
The spinner displaying progress spins infinitely in the now empty data entry sidebar. When I refresh the page, the data entry sidebar is still open with the unsaved appointment.
Problem scenario B (files_pdfviewer):
Steps to reproduce
files_pdfviewerand thenotificationsappExpected behavior
The PDF file should be displayed in the PDF viewer app.
Actual behaviour
The sharing page opens, but the PDF viewer pane remains empty.
I can reproduce the
calendarproblem reliably on one of the two Nextcloud instances, but not on the other; thefiles_pdfviewerproblem on the other hand happens consistently on the latter instance, but cannot be reproduced on the former. Both instances run on the same server, in the same nginx + php8.2-fpm stack.A problem similar to scenario A has been reported as an issue against the calendar app:
Also, these two issues might be related, as they also involve
TokenPasswordExpiredExceptions:Server configuration (identical for both instances, unless otherwise specified)
Operating system: Linux 6.1.0-18-amd64 x86_64 (Debian trixie/sid)
Web server: nginx 1.24.0-2+b1
Database: mysql 10.11.6
PHP version: 8.2.7
Nextcloud version: Nextcloud Hub 7 (28.0.3 RC1)
Where did you install Nextcloud from: via the built-in updater (originally, from Github, ages ago)
Signing status:
List of activated apps:
For the instance from scenario A:
For the instance in scenario B:
Nextcloud configuration:
Instance from scenario A:
Instance from scenario B:
Are you using an external user-backend, if yes which one:
user_oidc, and also LDAP in the first instance.Client configuration
Browser: Any of Firefox (122.0.1), Brave
[Version 1.64.74 Chromium: 122.0.6261.43 (Offizieller Build) beta (64-Bit)](https://brave.com/latest/), Chromium Version121.0.6167.160 (Official Build) built on Debian trixie/sid, running on Debian trixie/sid (64-bit)Operating system:
Linux 6.6.15-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.6.15-2 (2024-02-04) x86_64 GNU/LinuxLogs
Nextcloud log (data/nextcloud.log)
Scenario A:
Scenario B:
Browser log
Scenario A (browser console log):
Scenario B (browser console log):
Thank you for looking into this. If it would have been better to file two separate issues, please advise me to do so. Also, if there is anything else I can do to help debug this, let me know.