[Bug]: Login not working anymore after update to 25.x

[Sommerwiesel]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• Nextcloud Server is running on 64bit capable CPU, PHP and OS.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

Users cannot login anymore

Steps to reproduce

1. Try to login
2. Page reloads without login

Expected behavior

User is logged in

Installation method

Community Manual installation with Archive

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.0

Web server

Nginx

Database engine version

MySQL

Is this bug present after an update or on a fresh install?

Updated to a major version (ex. 22.2.3 to 23.0.1)

Are you using the Nextcloud Server Encryption module?

Encryption is Enabled

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
    "system": {
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "78.46.129.83",
            "nerdvpn.de"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "25.0.1.1",
        "overwrite.cli.url": "https:\/\/nerdvpn.de\/",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "htaccess.RewriteBase": "\/",
        "maintenance": false,
        "theme": "",
        "loglevel": 2,
        "logtimezone": "Europe\/Berlin",
        "default_phone_region": "DE",
        "mail_smtpmode": "smtp",
        "mail_smtpsecure": "tls",
        "mail_sendmailmode": "smtp",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauthtype": "LOGIN",
        "mail_smtpauth": 1,
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "587",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "app_install_overwrite": [
            "end_to_end_encryption",
            "issuetemplate",
            "files_antivirus"
        ],
        "has_rebuilt_cache": true,
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 0,
            "dbindex": 0,
            "password": "***REMOVED SENSITIVE VALUE***",
            "timeout": 1.5
        },
        "updater.release.channel": "stable",
        "lost_password_link": "disabled"
    }
}

List of activated Apps

Enabled:
  - activity: 2.17.0
  - announcementcenter: 6.4.0
  - calendar: 4.1.0
  - circles: 25.0.0
  - cloud_federation_api: 1.8.0
  - comments: 1.15.0
  - contacts: 5.0.1
  - contactsinteraction: 1.6.0
  - dashboard: 7.5.0
  - dav: 1.24.0
  - deck: 1.8.2
  - encryption: 2.13.0
  - external: 5.0.0
  - federatedfilesharing: 1.15.0
  - files: 1.20.1
  - files_antivirus: 4.0.1
  - files_downloadactivity: 1.15.0
  - files_pdfviewer: 2.6.0
  - files_rightclick: 1.4.0
  - files_sharing: 1.17.0
  - files_trashbin: 1.15.0
  - files_versions: 1.18.0
  - fileslibreofficeedit: 1.1.0
  - firstrunwizard: 2.14.0
  - forms: 3.0.1
  - groupfolders: 13.1.0
  - health: 1.6.1
  - integration_dropbox: 1.0.5
  - logreader: 2.10.0
  - lookup_server_connector: 1.13.0
  - maps: 0.2.1
  - music: 1.7.0
  - news: 19.0.1
  - notes: 4.6.0
  - notifications: 2.13.1
  - oauth2: 1.13.0
  - password_policy: 1.15.0
  - photos: 2.0.0
  - polls: 4.0.0
  - provisioning_api: 1.15.0
  - quota_warning: 1.15.0
  - recommendations: 1.4.0
  - related_resources: 1.0.3
  - serverinfo: 1.15.0
  - settings: 1.7.0
  - sharebymail: 1.15.0
  - side_menu: 3.4.1
  - systemtags: 1.15.0
  - tasks: 0.14.5
  - text: 3.6.0
  - theming: 2.0.1
  - twofactor_backupcodes: 1.14.0
  - twofactor_totp: 7.0.0
  - updatenotification: 1.15.0
  - user_status: 1.5.0
  - viewer: 1.9.0
  - weather_status: 1.5.0
  - workflowengine: 2.7.0
Disabled:
  - admin_audit
  - bruteforcesettings: 2.3.0
  - federation: 1.13.0
  - files_external
  - nextcloud_announcements: 1.12.0
  - privacy: 1.7.0
  - registration: 2.0.0
  - support: 1.6.0
  - survey_client: 1.11.0
  - suspicious_login
  - user_ldap

Nextcloud Signing status

No errors have been found

Nextcloud Logs

"reqId":"werJNGrg8XwIfJ0CDiBq","level":3,"time":"2022-12-15T10:21:38+01:00","remoteAddr":"[REDACTED],"user":"--","app":"core","method":"GET","url":"/apps/theming/icon?v=39","message":"Tried to log in [REDACTED] but could not verify token","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0","version":"25.0.1.1","data":{"app":"core"}}

Additional info

Console javascript error:
Uncaught TypeError: nextcloud is null
https://nerdvpn.de/apps/side_menu/js/script?v=3:96
https://nerdvpn.de/apps/side_menu/js/script?v=3:97

Tested on vanilla Firefox that has been reset to default settings, no extensions.

[Sommerwiesel]

Honestly, 25.x has been, so far, a total clusterfuck of bugs for me and the users...
I'm currently thinking of downgrading to 24.x and staying there.

[szaimen]

Hi, please try 25.0.2 and check if that works better.

[Sommerwiesel]

The update didn't show up until now. But I will first duplicate the whole thing into a staging env, downgrade production back to 24.x and go from there.
25.x has not been a good time for me, there was a plethora of little things that broke down, including caldav, several apps that were listed as supported, the desktop clients all broke and failed to sync, etc etc...
Memo to self, for the next major release, I'll wait a few months

[kesselb]

Closing as duplicate of #33919

[kesselb]

Could you also have a look at #35419? Should address a similar issue, but is not released yet.