[Bug]: Can't login from iOS client app

[digletthat]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

I can't log in with iOS client app in Nextcloud 31, starting from some beta (I don't remember what beta exactly) and up to RC5 (update: also stable 30.0.6). I enter my instance URL, system browser (Safari) opens. After logging in in browser, "Your client should now be connected! You can close this window." appears. After switching back to Nextcloud client app, it still shows "Please complete the log in process in your browser" with spinning indicator and client continuosly doing periodic requests to /login/v2/poll and receives 404 response.

I encountered it after update to some of 31.0.0 betas and retested it on fresh installation. Data here is from fresh installation.

Steps to reproduce

1. Do fresh installation of 31.0.0.RC2 (unpack nextcloud-31.0.0rc2.zip to web server dir, open it in browser, finish installation process in web UI including creating of admin account)
2. Create new user with admin account (I'm using username: test)
3. Start Nextcloud iOS app 6.2.4
4. Press "Log in", enter URL of Nextcloud installation (I'm using http://zubat.local:8083/nextcloud_test)
5. System browser app opens (Safari)
6. Log in to Nextcloud in this opened browser tab (if not logged in already)
7. Press "Grant access" in dialog:
   Account Access
   Currently logged in as test (test)
   You are about to grant Nextcloud/6.2.4 (it.twsweb.Nextcloud; build 7; iOS 18.1.1) Alamofire/5.10.2 access to your Nextcloud account
8. "Account connected", "Your client should now be connected! You can close this window" message appears
9. Switch back to Nextcloud app
10. It still shows "Please complete the log in process in your browser" with spinning indicator

The same is reproducible with stable 30.0.6.

Expected behavior

Expected to be logged in in Nextcloud app in step 10.

Nextcloud Server version

31

Operating system

Other

PHP engine version

PHP 8.3

Web server

Apache (supported)

Database engine version

SQlite

Is this bug present after an update or on a fresh install?

Fresh Nextcloud Server install

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "zubat.local:8083"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "sqlite3",
        "version": "31.0.0.13",
        "overwrite.cli.url": "http:\/\/zubat.local:8083\/nextcloud_test",
        "installed": true
    }
}

List of activated Apps

Enabled:
  - activity: 4.0.0
  - app_api: 5.0.2
  - bruteforcesettings: 4.0.0
  - circles: 31.0.0-dev.0
  - cloud_federation_api: 1.14.0
  - comments: 1.21.0
  - contactsinteraction: 1.12.0
  - dashboard: 7.11.0
  - dav: 1.33.0
  - federatedfilesharing: 1.21.0
  - federation: 1.21.0
  - files: 2.3.1
  - files_downloadlimit: 4.0.0
  - files_pdfviewer: 4.0.0
  - files_reminders: 1.4.0
  - files_sharing: 1.23.1
  - files_trashbin: 1.21.0
  - files_versions: 1.24.0
  - firstrunwizard: 4.0.0
  - logreader: 4.0.0
  - lookup_server_connector: 1.19.0
  - nextcloud_announcements: 3.0.0
  - notifications: 4.0.0
  - oauth2: 1.19.1
  - photos: 4.0.0-dev.1
  - privacy: 3.0.0
  - profile: 1.0.0
  - provisioning_api: 1.21.0
  - recommendations: 4.0.0
  - related_resources: 2.0.0
  - serverinfo: 3.0.0
  - settings: 1.14.0
  - sharebymail: 1.21.0
  - support: 3.0.0
  - survey_client: 3.0.0
  - systemtags: 1.21.1
  - text: 5.0.0
  - theming: 2.6.1
  - twofactor_backupcodes: 1.20.0
  - updatenotification: 1.21.0
  - user_status: 1.11.0
  - viewer: 4.0.0
  - weather_status: 1.11.0
  - webhook_listeners: 1.2.0
  - workflowengine: 2.13.0
Disabled:
  - admin_audit: 1.21.0
  - encryption: 2.19.0
  - files_external: 1.23.0
  - password_policy: 3.0.0 (installed 3.0.0)
  - suspicious_login: 9.0.1
  - twofactor_nextcloud_notification: 5.0.0
  - twofactor_totp: 13.0.0-dev.0
  - user_ldap: 1.22.0

Nextcloud Signing status

No errors have been found.

Nextcloud Logs

• Log contents from 31.0.0, for regular login and QR code login: https://gist.github.com/digletthat/4c427c2c626457eae7fb2d40521c56e2

Additional info

Requests that happen during this login session:

• GET http://zubat.local:8083/nextcloud_test/status.php HTTP/1.1 by app (Nextcloud/6.2.4 … UA)
  Response (200):

  {
      "installed": true,
      "maintenance": false,
      "needsDbUpgrade": false,
      "version": "31.0.0.13",
      "versionstring": "31.0.0 RC2",
      "edition": "",
      "productname": "Nextcloud",
      "extendedSupport": false
  }

• POST http://zubat.local:8083/nextcloud_test/index.php/login/v2 HTTP/1.1 by app
  No request body
  Response (200):

  {
      "poll": {
          "token": "3w1BUKpzLnzCdfwNcZ1hpOLbChWtZpgmmzXnPzMmBBVrtgnltOS0eO4egmDm34QyipQg1PdBiRL65WuVJgiYvLyvESbiHQJ3UIKCYK5JVDDtOxtsWXb7pgLebJFW3OdJ",
          "endpoint": "http://zubat.local:8083/nextcloud_test/index.php/login/v2/poll"
      },
      "login": "http://zubat.local:8083/nextcloud_test/index.php/login/v2/flow/Y2uvuV2oByBPb8jSLkqsdwcDZdRhleEay1VvcbqjD1bJVzE4iuVIv76EgPtapFyFbjB5o3xM1jra2J2puOImznFJ4xQAQEgMlrfVV7ARVH0tCNqfdH7IXP98smIFurPS"
  }

• POST http://zubat.local:8083/nextcloud_test/index.php/login/v2/poll?token=3w1BUKpzLnzCdfwNcZ1hpOLbChWtZpgmmzXnPzMmBBVrtgnltOS0eO4egmDm34QyipQg1PdBiRL65WuVJgiYvLyvESbiHQJ3UIKCYK5JVDDtOxtsWXb7pgLebJFW3OdJ HTTP/1.1 by app
  No request body
  Response is 404, body: []

Here browser opens and subsequent requests are made by browser, Nextcloud app now is in background and apparently can't make requests due to it. User agent is Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1

• GET http://zubat.local:8083/nextcloud_test/index.php/login/v2/flow/Y2uvuV2oByBPb8jSLkqsdwcDZdRhleEay1VvcbqjD1bJVzE4iuVIv76EgPtapFyFbjB5o3xM1jra2J2puOImznFJ4xQAQEgMlrfVV7ARVH0tCNqfdH7IXP98smIFurPS HTTP/1.1
  Response: 303 See Other with Location: http://zubat.local:8083/nextcloud_test/index.php/login/v2/flow?user=&direct=0
• GET http://zubat.local:8083/nextcloud_test/index.php/login/v2/flow?user=&direct=0 HTTP/1.1
  Response is 200 Ok with "Connect to your account" page (I was already logged in so no login page, but the same happens if this flow contains login page)
• GET http://zubat.local:8083/nextcloud_test/index.php/apps/theming/manifest?v=7b319bc0 HTTP/1.1 (probably irrelevant)
• GET http://zubat.local:8083/nextcloud_test/index.php/csrftoken HTTP/1.1
  Response: 200 Ok

  {
      "token": "k9kVVqtFhAeTtkeG0ysAz3txn2QkVbpAwTcfJFimjys=:2LhPJoAuxjPY9A384kczqQ4n1wEPE4oI9E5SEwDDvkU="
  }

• Few requests to cron.php
• GET http://zubat.local:8083/nextcloud_test/index.php/login/v2/grant?stateToken=KbTAF2DJXghqOsjHDL289gxuhtUlGtQFPG931cmKTqyLdoACUka8G3tGxvnJlkdn&user=&direct=0 HTTP/1.1
  Response is 200 Ok with "You are about to grant … access to your Nextcloud account" (step 7 in How to reproduce)
• POST http://zubat.local:8083/nextcloud_test/index.php/login/v2/grant HTTP/1.1
  Request body (urlencoded form):

  requesttoken: Br/23JZ+YEGr6zjXWoS9o+Bdnp5s2Axc//Og6Smj8pA=:Td6srL0VInXgqXKta+iOxZUL1vtHnjwUyort3nHGw/4=
  stateToken:   KbTAF2DJXghqOsjHDL289gxuhtUlGtQFPG931cmKTqyLdoACUka8G3tGxvnJlkdn
  

  Response is 200 Ok with "Your client should now be connected!" page (step 8 in How to reproduce)

Here I switched back from Safari to Nextcloud app and subsequent requests are made by app (Nextcloud/6.2.4 (it.twsweb.Nextcloud; build:7; iOS 18.1.1) Alamofire/5.10.2):

• POST http://zubat.local:8083/nextcloud_test/index.php/login/v2/poll?token=3w1BUKpzLnzCdfwNcZ1hpOLbChWtZpgmmzXnPzMmBBVrtgnltOS0eO4egmDm34QyipQg1PdBiRL65WuVJgiYvLyvESbiHQJ3UIKCYK5JVDDtOxtsWXb7pgLebJFW3OdJ HTTP/1.1
  No request body
  Response is 200 Ok (hmm, seems that app received its token)
  Response body:

  {
      "server": "http://zubat.local:8083/nextcloud_test",
      "loginName": "test",
      "appPassword": "v3U4avFpCVElNJLQuneoJ8sItyDUkYGZRKlF1diXwp66jLFKT1TRydsLPwcVVcQzAyNJ2FZJ"
  }

• GET http://zubat.local:8083/nextcloud_test/ocs/v2.php/cloud/user HTTP/1.1
  Response is 401 Unauthorized
  Response body:

  {
      "ocs": {
          "meta": {
              "status": "failure",
              "statuscode": 997,
              "message": "Current user is not logged in"
          },
          "data": []
      }
  }

• POST http://zubat.local:8083/nextcloud_test/index.php/login/v2/poll?token=3w1BUKpzLnzCdfwNcZ1hpOLbChWtZpgmmzXnPzMmBBVrtgnltOS0eO4egmDm34QyipQg1PdBiRL65WuVJgiYvLyvESbiHQJ3UIKCYK5JVDDtOxtsWXb7pgLebJFW3OdJ HTTP/1.1
  No request body
  Response is 404 Not found
  Response body: []

The last request repeats approximelly every second, at this time app shows "Please complete the log in process in your browser" (step 10 in How to reproduce)

After this flow, "Devices and sessions" in /nextcloud_test/index.php/settings/user/security looks like this:

Contents of oc_authtoken table:

Details

sqlite> select * from oc_authtoken;
              id = 7
             uid = test
      login_name = test
        password = PHHrBu/bVHKupi/ONWgHYwEEDZjI0SGh/wohVypnQODWjHgKDnu6kD+g41sm3QIMKG+Ew9KPTdwFVAeqiOgqnWaF0/++aoRpDpPhUhTAQmxuj57sBXTIEmyUF/QFcH2j13GPueP0UGFqZui0esEhja12wQNnEDGz+NiQGp9IFmQqdrmfpBjQxbnbmYIKX7M671fHkjZGfmCY6F29YRkeHubT86c5XJZaYog0l7IQ9sbYuZrME3F6jeKTQ4+x53WhcJra8EaGmzmMj/T1sWUjbSAM8C6+PA5xZpxc/OC9cjLK//XxOl41rnuNk8wgmtfNOCxOMUrpJbKE8w0ZKg8GGw==
            name = Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/…
           token = 46c2359d1ecdc938707fccbc6c5db539593bbe2fc45f9f31b42dd1b44a1677ac7a730fd38009c966f46d5d525fcaadac9226dd24e042a9f401aa5a92167abf04
            type = 0
        remember = 1
   last_activity = 1738419198
      last_check = 1738419071
           scope = 
         expires = 
     private_key = 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|d204c2b6d4aace3fd4494652f9c2ece9|d1df864545503665099d08c02bc0dc8019cfb4a86f06ac8b85d46d0e20824fd80e4fd08254edbd11975541eca6994eaa1c6481f0c01a1975a9d6ce23635e2f45|3
      public_key = -----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeNmO080l/ZfKDcd2ZIw
5FNzh6UYDVb3lgKF+gSGl/5UqrsiPdupe2pc+YyLW+xYRklJUvyyGvsX4+MMAa2a
78nxDlla9XG3EAejr38OK602/gvLhAqb7Cm4cMgHmOqld/DJu8KWS3XmUNovdUcT
K75bVVJVEMqAtkLCBUvSVfhOfIV7OCP/mYDJFKjgLV30xCnGm5tPrkDVhBHtxsnY
vkXLt/UTIb4/6vpTb5Gr9jbPC0BcrprzrA8+aa8JIUD4SDiPnZF7Zejdd+EHhmdo
iRRMZcQurOJg5xzJ6+31JivTdorTtlMkV4NJYG80EA3KdYhQ60jCevg7++gJPYuI
YQIDAQAB
-----END PUBLIC KEY-----

         version = 2
password_invalid = 0
   password_hash = 3|$argon2id$v=19$m=65536,t=4,p=1$dkxxMjJ6L2M2aHRLZXR6RQ$jkpkp0vCCzzpBEcghsqX2mzAt3uXZo9r8ry6zcEEGL8

              id = 8
             uid = test
      login_name = test
        password = Jak+aQVJgAm3KtmzxlB2fwbQfDtbVJ68Bu3LBQZB2hfVn9SM7ZVk0aACyQeHNUP7kUuoWUNPqT6cqKQJL9h6HeHdb71E0AfzzMRr+EuIylfIQAZrx6j24hOsMb2gqITsG4xCXnjjNiWuUGz+UKJt5mgKBCDPrZ/zDqKL13SIPXRvWFE0Ib3lkQyd4yT5Jf1RiCVZI0zHjYL7rcAv093mk1WYjA6N4yYuSKmeRGUi923mfV8Rbi8axzr+4CYRBzdpPRnZtJmSTABX51lGI25GFCKyyjCXcD2BRhWk4KOqq+3cF1Zgc+XE92l7vc2vyxigSVfekhANbebsQCX975JBxQ==
            name = Nextcloud/6.2.4 (it.twsweb.Nextcloud; build:7; iOS 18.1.1) Alamofire/5.10.2
           token = 604bc689716e665a81f85ca9fde9f2eee20cb55fa94d02329b5744e289bc78c5b1057273fa41d5adeffe44d982bff4afc9b4a9a76e9942cd4db3e39a825634b3
            type = 1
        remember = 0
   last_activity = 1738419198
      last_check = 1738419198
           scope = 
         expires = 
     private_key = 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|aa55647108252fdbc6c7fdedd93e4698|240c45c38450e4550209a55a9bd65c0f97bd3de828779ede43327fbd329ba877a39119a1b65b0232986aa74c444cb084b62cf5259c832be962c6bb722a4d83ab|3
      public_key = -----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns1GC10Ln5nkZj5TgtiI
LkViwM2M8uc2Rt0IUM0hCBLWr0ma4tM8Sz0IY+Imw/OygJSMmBxX3cR5QYlcNC07
/5nww7bwRjAcnADZrkkHKoMXkMzKb92/Era4kkcPORgt/snj5rLRCnZjK6gcQZ/2
X79Hr5qN/we8M3clGkA2XsyoQqSrMAIOrweUkJBEWLf5P/nqVja0IhJy2hMdJmvN
WUcHEUh/PXM1l4OXgKOHYEIakQ+jHRtNcshqwBHwqyOfhw9okksfjbUz53+4iAp2
B2bxzR6Fvqfd2LZkJGBSTeGuTwLKZkbtv964m0uulIdQUJOk2GgBFOYrPxMUAkKr
CwIDAQAB
-----END PUBLIC KEY-----

         version = 2
password_invalid = 0
   password_hash = 3|$argon2id$v=19$m=65536,t=4,p=1$dkxxMjJ6L2M2aHRLZXR6RQ$jkpkp0vCCzzpBEcghsqX2mzAt3uXZo9r8ry6zcEEGL8

              id = 9
             uid = test
      login_name = test
        password = Ei/GDo6Gfp8RTshrGmUszRNMUzBdkiz1+RDBU3quNWAdnZR8OTEw5cc8MzLiO4zHJy0lcUoefABcJN9gqkIM95EqmqNwc6+daXGkWtzhTO30TVMY9o8MfNJT3HTUDv5DIQ9t1losdEA9GJofkqR3Qq7a1iW1HTfuyiohxvAIXkaH3BL73vUYFWZSX+XMvIUTo/hf2tfZzoiTMGL3Iy/jW2ZZ7wIdldJxiF5PfMGfCmSzjcmv7SmhiovhjGtiwF5vku8NcSsiMZp/MeCgjsDEY1t66MJsABtQQ2E9tzSOSxk0TBuVfJkcRQT6SOmlLbyoKMSMnrGs1n/RPjIHQ5RK/g==
            name = Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
           token = 7b7a1932a887ee45c052ccd54442f705fd5dfd9aebee74be34b692e6c57f51370d198bb107ecee306ef5434e4edc017f1f2251da239927a29d48dd4515dbd07f
            type = 0
        remember = 1
   last_activity = 1738420639
      last_check = 1738420572
           scope = 
         expires = 
     private_key = 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|e2aa381490ab53a2cffc0369423d3e2c|5766277bb0399a00719f098583891abce306fbf68fba23d4324acb50e2194ace3f9e1ffbe212df5225708ae0d8e256ae60951878914fe0e0ea6f7fc7fb9d2855|3
      public_key = -----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/VtX2t8YcOtlhC6Q34d
cghraEOg8anIgxj1g8s0xNuqDvjjp/cbIIuWJhXX/i6qLGOGw9TfPDRLecdVr5tN
jH5q5pHY/VlhnCTerJnziqz4N1mueQbvrDgavRAyWHKNLfzC43zIg6MyRKx1GSHW
88Oc8sWS/HisbXtZv10KZfnF5jQUZWb2VzJjChICzi9H7/Q7ddLe3C93Zsm4tt4U
fDk+SKPtYNYW8X5CKKVoi+/hQe4Obuc2fymLd5kn4YbtHPFejYKgIv8qs4RPqBCO
8DH+ww9Gg0GWn8pie29zWtf0d1dztb+xAtVUOhcTVYIIUSwhmP7vEhuY0srqy31G
rQIDAQAB
-----END PUBLIC KEY-----

         version = 2
password_invalid = 0
   password_hash = 3|$argon2id$v=19$m=65536,t=4,p=1$dkxxMjJ6L2M2aHRLZXR6RQ$jkpkp0vCCzzpBEcghsqX2mzAt3uXZo9r8ry6zcEEGL8

Attached requests dump captured with mitmproxy: flows(5).gz

I created a thread at help forum about this before.

Update: confirmed the same in 31.0.0 RC3 and stable 30.0.6 (fresh installation).
Update: confirmed in 31.0.0 RC5

[k-matti]

I have the same problem with Nextcloud 30.0.5 and ios app v6.2.4

Edit: reinstall ios app fix the problem

[digletthat]

I tried reinstalling iOS app, the problem remained.

[lhsei]

Same error on android app. The client shows a 401 error and shows waiting for the finish of authentication in browser, while the app is correct registered under security inside the nextcloud preferences.

Actually there is no way to register the server. With a server-version 30.0.5 the app works without problems.

After doing some more investigations, it's the same with Nextcloud 31 RC3. The authentication ends in the android app with the error "Operation finished with HTTP status code 401 (fail)".

[lhsei]

The error exists in Nextcloud 31.0.0 RC4 too.

[bfentor]

Just ran into this on an iPhone with nextcloud-snap

[inet-cologne]

Same issue here!! --> Need this got fixed!!

Nextcloud Server 30.0.6.2, several instances, installed on Ionos web hoster account.
iPhone 16 Pro - iOS 18.3.1, iPadPro - iPadOS 18.3.1

There are currently more and more users reporting that they cannot log in anymore via the Nextcloud app or the Nextcloud talk app.

With both the iOS Nextcloud app and the Nextcloud Talk app (iOS up to date and apps up to date!).

What is Nextcloud files app you can still use the browser, but with the Talk app communication via browser makes little to no sense and deprives us of the possibility of communicating. A real catastrophe!!!

I run several Nextcloud instances at Ionos (all up to date on Nextcloud 30.0.6). Recently (the last updates, servers and also Nextcloud app and Nextcloud Talk app) I have had massive problems and now exactly the above behavior: no login possible any more.

At first I was able to fix it by reinstalling the app. Meanwhile that doesn't work anymore either. Despite a successful login, the Nextcloud app gets stuck on "Please complete the login process in your browser". That's it!

I urgently need a solution for this and am very grateful for any help!

[lhsei]

I think it's a regression from PR#49208 "fix: Redirect user to login if session is terminated." or PR#49560 "feat(login): add origin check at login".

[digletthat]

I can confirm the same in 30.0.6, fresh installation (downgraded PHP to 8.2.27).

[inet-cologne]

I have the same problem with Nextcloud 30.0.5 and ios app v6.2.4

Edit: reinstall ios app fix the problem

Indeed, in most cases but not all!, with 30.0.5 it was possible to fix the situation by deleting and reinstalling the app!

BTW:
The same problem actually exists with Nextcloud Talk app! It uses presumably the same authentication process.
Meanwhile: it seems that Nextcloud caldav calendar subscription fails too!
I'm not sure if there's perhaps a problem in Nextcloud sync client.

Current situation is that only access via browser is working without any issues.