App Passwords in Nexcloud no longer work

[bazinga]

Hi,

The functionality of App Passwords in NextCloud after migration to OIDC no longer works:

• Existing app passwords are not accepted by NextCloud anymore
• Create a new app password doesn't work - clicking on "Create new app password" does nothing. The server returns HTTP503 upon clicking the button.

[jdaviescoates]

Please could you share some more logs or something?

Because that button is working fine for me (I just created a new app pw for DAV5x a couple of minutes ago).

What version are you on?

I'm currently on Nextcloud 31.0.0 (Cloudron Package 5.3.0)... but I'm about to update again...

I'll test again tomorrow once that's done (already 1:42am here and the backup is big so it takes ages).

[bazinga]

I'm on the whatever is latest in Cloudron (did about 6-7 updated back-to-back yesterday when I finally decided to upgrade the OIDC version).

App Title and Version
Nextcloud 31.0.1
Package Version
com.nextcloud.cloudronapp@5.3.1
Installed At
02/26/2019
Last Updated
Yesterday

[jdaviescoates]

@bazinga ah, so you're one version ahead of me... maybe mine will break once it's updated!

I've actually hit a different issue...

Since updating to OIDC made all my existing logins stop working the Nextcloud app on my Linux laptop has stopped working due to too many failed attempts from my laptop and phone trying and failing to sync calendar and contacts!

I'm going to try this: https://help.nextcloud.com/t/cannot-login-too-many-requests/100905/28

But I can't right now as the app is trying to update... but is waiting for my overall Cloudron backup to complete first... and trying to cancel the task isn't working

[bazinga]

I had to re-connect all the apps from scratch - eg. remove accounts, even apps on Android. On my Linux desktop I only had to log out / log in.

[bazinga]

I couldn't revoke any sessions from NextCloud console. I had to log out on every device I have (as if that should make any difference), then restarted NC in Cloudron again (did it before reporting). Now I'm able to create the app passwords. Have no idea what this was, NC logs in Cloudron only showed 503 error with no further details. I don't know if I can close this issue somehow.

[BrutalBirdie]

@staff I just brainstormed this Issue with some experts.
It might be an issue with the internet Nextcloud user migration.
Since a user that exists with ldap e.g. username "uid" tina.testing has 3 app-password before the oidc migration.

Now migrates, username "uid" is now my.DOMAIN.TLD-tina.testing with still existing app-passwords.
But these app-passwords might be briked because it is "linked" to tina.testing not my.DOMAIN.TLD-tina.testing but exists in the accounts.

Sounds confusing. Will have to do some testing to reproduce this. But this might even be an issue within Nextcloud.

If I can't reproduce this, can I take a look at your DB of Nextcloud @bazinga ?

[bazinga]

@BrutalBirdie Yes, you can. And FYI - all previously existing app passwords no longer work after OIDC migration. I can create new ones.