since v2.25.0 login with qrcode does not work

[solkmaaker]

Expected behavior

Login with QRCODE is successful

Actual behaviour

since v2.25.0 login with qrcode does not work

Steps to reproduce

Install version >2.25 ant try to log in

Reasoning or why should it be changed/implemented?

It's a bug

iOS version

12.4

App version

2.250 (does not matter which version, as long as it is bigger than 2.24.4

Server configuration

Operating system:
Linux

Web server:
Nginx

Database:
Mariadb

PHP version:
7.3.11

Nextcloud version: (see Nextcloud admin page)
17.0.3

Result ia app is:
Error: It is not possible to connect to the server at this time. forbidden

Server log:
"GET /ocs/v2.php/core/getapppassword HTTP/2.0" 403 198 "-" "Mozilla/5.0 (iOS) Nextcloud-iOS/2.25.6"

Revert to web login method works OK, also If i install ios app v2.24.X then qrcode login also works OK.

I can test login with different versions and produce logs/video etc if needed.

[marinofaggiana]

Hi, I have create a test and don't exists for we an issue (v 2.25.8)

[solkmaaker]

Hi, tested with v2.25.8.

After scanning QR code, spall spinner rotates a bit, and then, nothing happens, app displays login screen with filled fields (server, username and password), by pressing eye icon, i can see that password field is filled with app password (not main password of user).
I see some requests that have come in to server, all seems to be OK on server side.

At this point login screen (with prefilled credentials) is on phone side. Now i press login button and i'll get same message: "It is not possible to connect to the server at this time. forbidden".
At that time, server log says: "GET /ocs/v2.php/core/getapppassword HTTP/1.1" 403 198 "-" "Mozilla/5.0 (iOS) Nextcloud-iOS/2.25.8"
But when i close app (swipe it up) and then reopen app again - i'm logged in and everything seems to be working.

As for this server log line "GET /ocs/v2.php/core/getapppassword", why does app try to get app password from api?
Since i tried QR code login which contains generated app password (i did not select revert to web login method), app should not try to get app password via api, since i did not give app my main user password (which is needed for generating app passwords according to nextcloud login flow mainual).
Actual responce from server to this api request is:
<?xml version="1.0"?> <ocs> <meta> <status>failure</status> <statuscode>403</statuscode> <message>You cannot request an new apppassword with an apppassword</message> </meta> <data/> </ocs>
Quote: "If the client is authenticated with an app password a 403 will be returned. If the client is authenticating with a real password an app password will be generated and returned."
https://docs.nextcloud.com/server/17/developer_manual/client_apis/LoginFlow/index.html

[Volker-K]

It's not only login with QR code, here even the "real" password doesn't work properly.
Oviously same problem as in #1156

[diesl]

After scanning QR code, spall spinner rotates a bit, and then, nothing happens, app displays login screen with filled fields (server, username and password), by pressing eye icon, i can see that password field is filled with app password (not main password of user).

At this point login screen (with prefilled credentials) is on phone side. Now i press login button and i'll get same message: "It is not possible to connect to the server at this time. forbidden".
But when i close app (swipe it up) and then reopen app again - i'm logged in and everything seems to be working.

Exactly the same behaviour here, app version 2.25.9

[marinofaggiana]

Hi, I will do some tests to understand.
Thanks

[marinofaggiana]

TestFlight 2.26.0 <<

[when available]

[cronoself]

Hi, same behavior here. QR code login stucks, token login stucks, credential login works but stucks at grant access. NC 18.0.3 iOS-app 2.25.9

[arnski]

Same Problem here. Except: All Methods do not work. NC 18.0.3. iOS App just downloaded today, don't know where to find the version. Only Login-Screen visible.

[SupRavII]

Hi,
Same problem:
Mozilla/5.0 (iOS) Nextcloud-iOS/2.25.9
get 403 to connect

Request URI: GET /ocs/v2.php/core/getapppassword HTTP/1.1

Message on Iphone: "It is not possible to connect to the server at this time. forbidden".

[solkmaaker]

Seems to be fixed in IOS app 3.0.1 and nextcloud server 18.0.7
Can anybody else confirm?