Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Client does not reauthenticate when token becomes invalid #3278

Open
juliusknorr opened this issue Jan 22, 2025 · 2 comments
Open

Client does not reauthenticate when token becomes invalid #3278

juliusknorr opened this issue Jan 22, 2025 · 2 comments

Comments

@juliusknorr
Copy link
Member

How to use GitHub

  • Please use the 👍 reaction to show that you are affected by the same issue.
  • Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
  • Subscribe to receive notifications on status change and new comments.

Steps to reproduce

  1. Connect the iOS app to a Nextcloud instance
  2. Go the security settings and delete the app password of the client
  3. Continue to use the client

Expected behaviour

The client asks to reauthenticate with login flow or at least show an error.
It should not send more requests to the server

Actual behaviour

The client continues to send requests which fail to authenticate with a 401, this then leads to brute force protection at some point.

Logs

If applicable, you can post the iOS app or server logs (removing any sensitive information).

Reasoning or why should it be changed/implemented?

Environment data

iOS version: 18.2.1

Nextcloud iOS app version: 6.2.3.1

Nextcloud server: daily

@juliusknorr
Copy link
Member Author

As noted by @marinofaggiana this seems to only happen if the iOS app is in the background while revoking the password

@marinofaggiana
Copy link
Member

@juliusknorr we will improve the NextclouKit routine ASAP

@marinofaggiana marinofaggiana self-assigned this Jan 26, 2025
@mpivchev mpivchev self-assigned this Jan 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants