joshtrichards
commented
1 year ago Unable to reproduce.
~$ curl -X POST http://ncadmin:ncadminpass@INT.XXX/ocs/v1.php/cloud/users -d userid="frank" -d password="frankpasswordXXX" -H "OCS-APIRequest: true"
<?xml version="1.0"?>
<ocs>
<meta>
<status>ok</status>
<statuscode>100</statuscode>
<message>OK</message>
<totalitems></totalitems>
<itemsperpage></itemsperpage>
</meta>
<data>
<id>frank</id>
</data>
</ocs>
~$ curl -X POST http://ncadmin:ncadminpass@INT.XXX/ocs/v1.php/cloud/groups -d groupid="newgroup" -H "OCS-APIRequest: true"
<?xml version="1.0"?>
<ocs>
<meta>
<status>ok</status>
<statuscode>100</statuscode>
<message>OK</message>
<totalitems></totalitems>
<itemsperpage></itemsperpage>
</meta>
<data/>
</ocs>
~$ curl -X POST http://ncadmin:ncadminpass@INT.XXX/ocs/v1.php/cloud/users/frank/groups -d groupid="newgroup" -H "OCS-APIRequest: true"
<?xml version="1.0"?>
<ocs>
<meta>
<status>ok</status>
<statuscode>100</statuscode>
<message>OK</message>
<totalitems></totalitems>
<itemsperpage></itemsperpage>
</meta>
<data/>
</ocs>(logged in to UI and confired that user frank now exists and is a member of newgroup)
Maybe it has something to do with your use of Social Login
'social_login_auto_redirect' => true- https://github.com/zorn-v/nextcloud-social-login#config
- The docs make it sound like you have to use
noredir=1to login as a local admin. I have zero idea what implications that has for API requests - Might try that and/or disable the app outright to confirm it's the cause or not
krakazyabra
j-ed
shawnhaywood
Sieboldianus
BenS89
CampusCityNord
BloodyIron
⚠️ This issue respects the following points: ⚠️
Bug description
Get error
during API call
full error (debug)
```json { "reqId":"3oiQeu62mqcKZhIUB3g8", "level":0, "time":"2023-06-06T15:52:12+02:00", "remoteAddr":"10.31.1.173", "user":"--", "app":"no app in context", "method":"POST", "url":"/ocs/v1.php/cloud/users/Frank/groups", "message":"Token is not valid: Token is too short for a generated token, should be the password during basic auth", "userAgent":"curl/7.86.0", "version":"26.0.2.1", "exception":{ "Exception":"OC\\Authentication\\Exceptions\\InvalidTokenException", "Message":"Token is too short for a generated token, should be the password during basic auth", "Code":0, "Trace":[ { "file":"/var/www/nextcloud/lib/private/Authentication/Token/Manager.php", "line":132, "function":"getToken", "class":"OC\\Authentication\\Token\\PublicKeyTokenProvider", "type":"->", "args":[ "*** sensitive parameters replaced ***" ] }, { "file":"/var/www/nextcloud/lib/private/User/Session.php", "line":528, "function":"getToken", "class":"OC\\Authentication\\Token\\Manager", "type":"->", "args":[ "*** sensitive parameters replaced ***" ] }, { "file":"/var/www/nextcloud/lib/private/User/Session.php", "line":438, "function":"isTokenPassword", "class":"OC\\User\\Session", "type":"->", "args":[ "*** sensitive parameters replaced ***" ] }, { "file":"/var/www/nextcloud/lib/private/User/Session.php", "line":580, "function":"logClientIn", "class":"OC\\User\\Session", "type":"->", "args":[ "*** sensitive parameters replaced ***" ] }, { "file":"/var/www/nextcloud/lib/base.php", "line":1137, "function":"tryBasicAuthLogin", "class":"OC\\User\\Session", "type":"->" }, { "file":"/var/www/nextcloud/ocs/v1.php", "line":61, "function":"handleLogin", "class":"OC", "type":"::" } ], "File":"/var/www/nextcloud/lib/private/Authentication/Token/PublicKeyTokenProvider.php", "Line":155, "message":"Token is not valid: Token is too short for a generated token, should be the password during basic auth", "exception":{ }, "CustomMessage":"Token is not valid: Token is too short for a generated token, should be the password during basic auth" } } ```
Login and password are valid. Also tried to create app password and use it - same result. Seems, application expects some token, but I'm using plain password. To prepare requests I used official documentation https://docs.nextcloud.com/server/latest/admin_manual/configuration_user/user_provisioning_api.html
Steps to reproduce
Expected behavior
User Frank is now member on group "new group" API request returns 200 code and message OK
Installation method
Community Manual installation with Archive
Nextcloud Server version
26
Operating system
Debian/Ubuntu
PHP engine version
PHP 8.1
Web server
Nginx
Database engine version
MariaDB
Is this bug present after an update or on a fresh install?
Fresh Nextcloud Server install
Are you using the Nextcloud Server Encryption module?
Encryption is Disabled
What user-backends are you using?
Configuration report
List of activated Apps
Nextcloud Signing status
Nextcloud Logs
Additional info
No response