Open kmille opened 1 year ago
Some debugging (log level: 0, checked nextcloud.log). If I run this:
If I replace Basic
with Bearer
:
as we are using the social plugin, maybe @zorn-v can help a bit.
Hi @kmille - Thanks for your report. I assume the same thing happens if you do any sort of WebDAV based access not just Cal/CardDAV, correct? - e.g. To get the properties of files in the folder /testing123
:
curl -X PROPFIND -H "Depth: 1" -u USERNAME:PASSWORD https://example.com/nextcloud/remote.php/dav/files/USERNAME/testing123/
This is what I get:
(venv) kmille@linbox: bash test-caldav-sso.sh
<?xml version="1.0" encoding="utf-8"?>
<d:error xmlns:d="DAV:" xmlns:s="http://sabredav.org/ns">
<s:exception>Sabre\DAV\Exception\NotFound</s:exception>
<s:message>File with name //testing123 could not be located</s:message>
</d:error>
(venv) kmille@linbox: bash test-caldav-sso.sh
<?xml version="1.0" encoding="utf-8"?>
<d:error xmlns:d="DAV:" xmlns:s="http://sabredav.org/ns">
<s:exception>Sabre\DAV\Exception\NotAuthenticated</s:exception>
<s:message>No public access to this resource., No 'Authorization: Bearer' header found. Either the client didn't send one, or the server is mis-configured, Username or password was incorrect</s:message>
</d:error>
It works If you use the NC password (occ user:resetpasword), with the SSO password, login fails.
⚠️ This issue respects the following points: ⚠️
Bug description
This is a reopen of #20646. Quote We are using Keycloak as authentication backend. Authentication works in the browser if people are using /login. If Android/Thunderbird wants to subscribe a calendar, it gets a 401. If we reset the "local nextcloud" password with occ user:resetpassword, the Cal/CardDav login works. Username can be found with occ user:list | grep. Why does Card/CaldDav authentication not work with third party authentication?
I used this for testing.
Also interesting: the 401 takes ~30 seconds (it's always the same).So it seems like there is a timeout involved.~~Installed version: 25.0.1.1
What user-backends are you using?
List of activated Apps