Steps to reproduce
- Open https:///owncloud/index.php/settings/personal?sectionid=security
- Scroll down to last section “App passwords / tokens” (“App-Passwörter / Token”) in German
- Add a new token
- Reload page and see the token vanished
- Try to use the token, password gets rejected
Expected behaviour
New tokens should persist and be accepted
Actual behaviour
The tokens are obviously being saved in the database table oc_authtoken, but they are neither displayed on the security page, nor accepted as a password. Since there are existing and working tokens in my database, I was able to compare new and existing tokens: The only difference I noticed: New token passwords are prefixed “v2|”, the old, working ones are not. Manually removing the v2| prefix did not help the situation.
Server configuration
Operating system: Debian 9.13
Web server: Apache/2.4.25 (Debian)
Database: mysqld 10.1.48-MariaDB-0+deb9u2
PHP version: 7.4.23
ownCloud version: 10.8.0.4
Updated from an older ownCloud or fresh install: updated, don’t remember previous version
Where did you install ownCloud from: Debian package from apt source: Index of /repositories/isv:/ownCloud:/server:/10/Debian_9.0
Signing status (ownCloud 9.0 and above): ?
No errors have been found.
The content of config/config.php:
List of activated apps:
Enabled:
- activity:
- Version: 2.6.1
- Path: /usr/share/owncloud/apps/activity
- calendar:
- Version: 1.6.4
- Path: /usr/share/owncloud/apps/calendar
- comments:
- Version: 0.3.0
- Path: /usr/share/owncloud/apps/comments
- configreport:
- Version: 0.2.0
- Path: /usr/share/owncloud/apps/configreport
- contacts:
- Version: 1.5.5
- Path: /usr/share/owncloud/apps/contacts
- dav:
- Version: 0.6.0
- Path: /usr/share/owncloud/apps/dav
- federatedfilesharing:
- Version: 0.5.0
- Path: /usr/share/owncloud/apps/federatedfilesharing
- federation:
- Version: 0.1.0
- Path: /usr/share/owncloud/apps/federation
- files:
- Version: 1.5.2
- Path: /usr/share/owncloud/apps/files
- files_external:
- Version: 0.8.0
- Path: /usr/share/owncloud/apps/files_external
- files_mediaviewer:
- Version: 1.0.4
- Path: /usr/share/owncloud/apps/files_mediaviewer
- files_sharing:
- Version: 0.14.0
- Path: /usr/share/owncloud/apps/files_sharing
- files_texteditor:
- Version: 2.3.1
- Path: /usr/share/owncloud/apps/files_texteditor
- files_trashbin:
- Version: 0.9.1
- Path: /usr/share/owncloud/apps/files_trashbin
- files_versions:
- Version: 1.3.0
- Path: /usr/share/owncloud/apps/files_versions
- firstrunwizard:
- Version: 1.2.0
- Path: /usr/share/owncloud/apps/firstrunwizard
- gallery:
- Version: 16.1.1
- Path: /usr/share/owncloud/apps/gallery
- market:
- Version: 0.6.1
- Path: /usr/share/owncloud/apps/market
- notifications:
- Version: 0.5.4
- Path: /usr/share/owncloud/apps/notifications
- provisioning_api:
- Version: 0.5.0
- Path: /usr/share/owncloud/apps/provisioning_api
- systemtags:
- Version: 0.3.0
- Path: /usr/share/owncloud/apps/systemtags
- tasks:
- Version: 0.9.7
- Path: /usr/share/owncloud/apps/tasks
- templateeditor:
- Version: 0.4.0
- Path: /usr/share/owncloud/apps/templateeditor
- twofactor_totp:
- Version: 0.7.2
- Path: /usr/share/owncloud/apps/twofactor_totp
- updatenotification:
- Version: 0.2.1
- Path: /usr/share/owncloud/apps/updatenotification
Disabled:
- admin_audit:
- Path: /usr/share/owncloud/apps/admin_audit
- announcementcenter:
- Path: /usr/share/owncloud/apps/announcementcenter
- customgroups:
- Path: /usr/share/owncloud/apps/customgroups
- encryption:
- Path: /usr/share/owncloud/apps/encryption
- enterprise_key:
- Path: /usr/share/owncloud/apps/enterprise_key
- external:
- Path: /usr/share/owncloud/apps/external
- files_antivirus:
- Path: /usr/share/owncloud/apps/files_antivirus
- files_classifier:
- Path: /usr/share/owncloud/apps/files_classifier
- files_external_dropbox:
- Path: /usr/share/owncloud/apps/files_external_dropbox
- files_external_ftp:
- Path: /usr/share/owncloud/apps/files_external_ftp
- files_ldap_home:
- Path: /usr/share/owncloud/apps/files_ldap_home
- files_lifecycle:
- Path: /usr/share/owncloud/apps/files_lifecycle
- files_pdfviewer:
- Path: /usr/share/owncloud/apps/files_pdfviewer
- firewall:
- Path: /usr/share/owncloud/apps/firewall
- graphapi:
- Path: /usr/share/owncloud/apps/graphapi
- guests:
- Path: /usr/share/owncloud/apps/guests
- metrics:
- Path: /usr/share/owncloud/apps/metrics
- oauth2:
- Path: /usr/share/owncloud/apps/oauth2
- openidconnect:
- Path: /usr/share/owncloud/apps/openidconnect
- password_policy:
- Path: /usr/share/owncloud/apps/password_policy
- ransomware_protection:
- Path: /usr/share/owncloud/apps/ransomware_protection
- sharepoint:
- Path: /usr/share/owncloud/apps/sharepoint
- systemtags_management:
- Path: /usr/share/owncloud/apps/systemtags_management
- theme-enterprise:
- Path: /usr/share/owncloud/apps/theme-enterprise
- theme-example:
- Path: /usr/share/owncloud/apps/theme-example
- user_external:
- Path: /usr/share/owncloud/apps/user_external
- user_ldap:
- Path: /usr/share/owncloud/apps/user_ldap
- user_shibboleth:
- Path: /usr/share/owncloud/apps/user_shibboleth
- web:
- Path: /usr/share/owncloud/apps/web
- windows_network_drive:
- Path: /usr/share/owncloud/apps/windows_network_drive
- wopi:
- Path: /usr/share/owncloud/apps/wopi
- workflow:
- Path: /usr/share/owncloud/apps/workflow
Are you using external storage, if yes which one: local/smb/sftp/…
no
Are you using encryption: yes/no
no
Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/…
no
Client configuration
Browser: Mozilla Firefox 92.0
Operating system: Windows 10 64
Logs
Web server error log
nothing interesting
ownCloud log (data/owncloud.log)
Repeating hundreds of times:
{“reqId”:“quYhDmOI0nAfksvNOTLE”,“level”:3,“time”:“2021-09-14T07:30:01+00:00”,“remoteAddr”:"",“user”:"–",“app”:“PHP”,“method”:"–",“url”:"–",“message”:"Function libxml_disable_entity_loader() is deprecated at /usr/share/owncloud/lib
Browser log
a) The javascript console log
empty
b) The network log
- authtokes: {“token”:“xxx-xxx-xxx-xxx”,“loginName”:“xxx”,“deviceToken”:{“id”:xxxxxx,“name”:“test6”,“lastActivity”:1631605076,“type”:1,“canDelete”:true}}
- notifications: {“ocs”:{“meta”:{“status”:“ok”,“statuscode”:200,“message”:null,“totalitems”:"",“itemsperpage”:""},“data”:[]}}
I SUSPECT it might have to do with my (failed) try to enable ownCloud Web (including OAuth2, which is now disabled again) a few weeks ago, but that is just a wild guess.
Does anyone have any idea?