Auth window popup when opening web interface randomly

Nextcloud 28.0.2
ArchLinux 2024-01-31
nginx/1.24.0
PHP 8.1.27

When starting browser (firefox) and opening my nextcloud installation authentication window popup (http auth style, not regular login page) at random. This started to happen after latest update. Happens randomly.

php-fpm log:

{"reqId":"***id***","level":0,"time":"***date_time***","remoteAddr":"***ip***","user":"--","app":"webdav","method":"PROPFIND","url":"***/remote.php/dav/files/***uuid***/","message":"{\"Exception\":\"Sabre\\\\DAV\\\\Exception\\\\NotAuthenticated\",\"Message\":\"No public access to this resource., No 'Authorization: Basic' header found. Either the client didn't send one, or the server is misconfigured, No 'Authorization: Bearer' header found. Either the client didn't send one, or the server is mis-configured, No 'Authorization: Basic' header found. Either the client didn't send one, or the server is misconfigured\",\"Code\":0,\"Trace\":[{\"file\":\"/***site_path***/3rdparty/sabre/event/lib/WildcardEmitterTrait.php\",\"line\":89,\"function\":\"beforeMethod\",\"class\":\"Sabre\\\\DAV\\\\Auth\\\\Plugin\",\"type\":\"->\",\"args\":[[\"Sabre\\\\HTTP\\\\Request\"],[\"Sabre\\\\HTTP\\\\Response\"]]},{\"file\":\"/***site_path***/3rdparty/sabre/dav/lib/DAV/Server.php\",\"line\":456,\"function\":\"emit\",\"class\":\"Sabre\\\\DAV\\\\Server\",\"type\":\"->\",\"args\":[\"beforeMethod:PROPFIND\",[[\"Sabre\\\\HTTP\\\\Request\"],[\"Sabre\\\\HTTP\\\\Response\"]]]},{\"file\":\"/***site_path***/3rdparty/sabre/dav/lib/DAV/Server.php\",\"line\":253,\"function\":\"invokeMethod\",\"class\":\"Sabre\\\\DAV\\\\Server\",\"type\":\"->\",\"args\":[[\"Sabre\\\\HTTP\\\\Request\"],[\"Sabre\\\\HTTP\\\\Response\"]]},{\"file\":\"/***site_path***/3rdparty/sabre/dav/lib/DAV/Server.php\",\"line\":321,\"function\":\"start\",\"class\":\"Sabre\\\\DAV\\\\Server\",\"type\":\"->\",\"args\":[]},{\"file\":\"/***site_path***/apps/dav/lib/Server.php\",\"line\":370,\"function\":\"exec\",\"class\":\"Sabre\\\\DAV\\\\Server\",\"type\":\"->\",\"args\":[]},{\"file\":\"/***site_path***/apps/dav/appinfo/v2/remote.php\",\"line\":35,\"function\":\"exec\",\"class\":\"OCA\\\\DAV\\\\Server\",\"type\":\"->\",\"args\":[]},{\"file\":\"/***site_path***/remote.php\",\"line\":172,\"args\":[\"/***site_path***/apps/dav/appinfo/v2/remote.php\"],\"function\":\"require_once\"}],\"File\":\"/***site_path***/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php\",\"Line\":152,\"message\":\"No public access to this resource., No 'Authorization: Basic' header found. Either the client didn't send one, or the server is misconfigured, No 'Authorization: Bearer' header found. Either the client didn't send one, or the server is mis-configured, No 'Authorization: Basic' header found. Either the client didn't send one, or the server is misconfigured\",\"exception\":{},\"CustomMessage\":\"No public access to this resource., No 'Authorization: Basic' header found. Either the client didn't send one, or the server is misconfigured, No 'Authorization: Bearer' header found. Either the client didn't send one, or the server is mis-configured, No 'Authorization: Basic' header found. Either the client didn't send one, or the server is misconfigured\"}","userAgent":"Mozilla/5.0 (Windows NT 10.0; rv:122.0) Gecko/20100101 Firefox/122.0","version":"28.0.2.5"}

nginx log (notice error 401):

"GET /***/index.php/apps/files/files HTTP/1.1" 200 14009 "-" "***"
"GET /***/index.php/apps/files/preview-service-worker.js HTTP/1.1" 200 14670 "-" "***"
"GET /***/core/css/server.css?v=d233662f-13 HTTP/1.1" 200 125569 "-" "***"
"GET /***/apps/spreed/css/icons.css?v=1090b214-13 HTTP/1.1" 200 2798 "-" "***"
"GET /***/apps/notes/css/global.css?v=dc793878-13 HTTP/1.1" 200 221 "-" "***"
"GET /***/apps/spreed/css/unified-search.css?v=1090b214-13 HTTP/1.1" 200 1097 "-" "***"
"GET /***/apps/files/css/merged.css?v=d233662f-13 HTTP/1.1" 200 32554 "-" "***"
"GET /***/apps/circles/css/files/circles.filelist.css?v=2ede015a-13 HTTP/1.1" 200 1530 "-" "***"
"GET /***/apps/files_sharing/css/icons.css?v=22670a56-13 HTTP/1.1" 200 195 "-" "***"
"GET /***/apps/activity/css/style.css?v=2e275d50-13 HTTP/1.1" 200 4063 "-" "***"
"GET /***/apps/user_status/css/user-status-menu.css?v=5dbcc382-13 HTTP/1.1" 200 525 "-" "***"
"GET /***/dist/comments-init.js?v=37409c19-13 HTTP/1.1" 200 14403 "-" "***"
"GET /***/dist/files_reminders-init.js?v=37409c19-13 HTTP/1.1" 200 38708 "-" "***"
"GET /***/dist/files-init.js?v=37409c19-13 HTTP/1.1" 200 126165 "-" "***"
"GET /***/apps/contacts/js/contacts-files-action.js?v=37409c19-13 HTTP/1.1" 200 292692 "-" "***"
"GET /***/dist/files_sharing-init.js?v=37409c19-13 HTTP/1.1" 200 52230 "-" "***"
"GET /***/dist/core-common.js?v=37409c19-13 HTTP/1.1" 200 4533185 "-" "***"
"GET /***/apps/text/js/text-init.js?v=37409c19-13 HTTP/1.1" 200 605961 "-" "***"
"GET /***/dist/core-main.js?v=37409c19-13 HTTP/1.1" 200 944737 "-" "***"
"GET /***/dist/systemtags-init.js?v=37409c19-13 HTTP/1.1" 200 71116 "-" "***"
"GET /***/apps/activity/js/activity-api.mjs?v=37409c19-13 HTTP/1.1" 200 154 "-" "***"
"GET /***/dist/core-files_fileinfo.js?v=37409c19-13 HTTP/1.1" 200 936 "-" "***"
"GET /***/dist/core-files_client.js?v=37409c19-13 HTTP/1.1" 200 12355 "-" "***"
"GET /***/dist/core-systemtags.js?v=37409c19-13 HTTP/1.1" 200 21251 "-" "***"
"GET /***/dist/core-unsupported-browser-redirect.js?v=37409c19-13 HTTP/1.1" 200 3745 "-" "***"
"GET /***/dist/core-unified-search.js?v=37409c19-13 HTTP/1.1" 200 42094 "-" "***"
"GET /***/dist/files-main.js?v=37409c19-13 HTTP/1.1" 200 633178 "-" "***"
"GET /***/dist/files-sidebar.js?v=37409c19-13 HTTP/1.1" 200 49981 "-" "***"
"GET /***/apps/files/js/fileinfomodel.js?v=37409c19-13 HTTP/1.1" 200 3608 "-" "***"
"GET /***/index.php/js/core/merged-template-prepend.js?v=37409c19-13 HTTP/1.1" 200 3119 "-" "***"
"GET /***/dist/files-reference-files.js?v=37409c19-13 HTTP/1.1" 200 10575 "-" "***"
"GET /***/apps/circles/js/files/circles.files.app.js?v=37409c19-13 HTTP/1.1" 200 2987 "-" "***"
"GET /***/apps/circles/js/files/circles.files.list.js?v=37409c19-13 HTTP/1.1" 200 8134 "-" "***"
"GET /***/dist/comments-comments.js?v=37409c19-13 HTTP/1.1" 200 2110 "-" "***"
"GET /***/dist/comments-comments-app.js?v=37409c19-13 HTTP/1.1" 200 131966 "-" "***"
"GET /***/dist/comments-comments-tab.js?v=37409c19-13 HTTP/1.1" 200 111509 "-" "***"
"GET /***/dist/files_trashbin-main.js?v=37409c19-13 HTTP/1.1" 200 46126 "-" "***"
"GET /***/apps/recommendations/js/recommendations-main.js?v=37409c19-13 HTTP/1.1" 200 481961 "-" "***"
"GET /***/apps/text/js/text-files.js?v=37409c19-13 HTTP/1.1" 200 259117 "-" "***"
"GET /***/apps/text/js/text-viewer.js?v=37409c19-13 HTTP/1.1" 200 75943 "-" "***"
"GET /***/dist/files_sharing-additionalScripts.js?v=37409c19-13 HTTP/1.1" 200 13901 "-" "***"
"GET /***/dist/files_sharing-collaboration.js?v=37409c19-13 HTTP/1.1" 200 523 "-" "***"
"GET /***/dist/files_sharing-files_sharing_tab.js?v=37409c19-13 HTTP/1.1" 200 8084 "-" "***"
"GET /***/dist/files_sharing-main.js?v=37409c19-13 HTTP/1.1" 200 453 "-" "***"
"GET /***/apps/spreed/js/talk-collections.js?v=37409c19-13 HTTP/1.1" 200 85334 "-" "***"
"GET /***/apps/spreed/js/talk-files-sidebar.js?v=37409c19-13 HTTP/1.1" 200 2083349 "-" "***"
"GET /***/apps/viewer/js/viewer-main.js?v=37409c19-13 HTTP/1.1" 200 4005329 "-" "***"
"GET /***/apps/activity/js/activity-sidebar.mjs?v=37409c19-13 HTTP/1.1" 200 2560 "-" "***"
"GET /***/apps/related_resources/js/related_resources.js?v=37409c19-13 HTTP/1.1" 200 97164 "-" "***"
"GET /***/apps/files_pdfviewer/js/files_pdfviewer-main.js?v=37409c19-13 HTTP/1.1" 200 651633 "-" "***"
"GET /***/apps/notifications/js/notifications-main.js?v=37409c19-13 HTTP/1.1" 200 112103 "-" "***"
"GET /***/apps/bookmarks/js/bookmarks-references.js?v=37409c19-13 HTTP/1.1" 200 4025444 "-" "***"
"GET /***/apps/firstrunwizard/js/about.js?v=37409c19-13 HTTP/1.1" 200 690 "-" "***"
"GET /***/apps/theming/js/theming.js?v=37409c19-13 HTTP/1.1" 200 60 "-" "***"
"GET /***/dist/user_status-menu.js?v=37409c19-13 HTTP/1.1" 200 20414 "-" "***"
"GET /***/index.php/apps/theming/theme/light.css?plain=1&v=8a7f68d7 HTTP/1.1" 200 3382 "-" "***"
"GET /***/index.php/apps/theming/theme/default.css?plain=1&v=8a7f68d7 HTTP/1.1" 200 3382 "-" "***"
"GET /***/index.php/apps/theming/theme/light.css?plain=0&v=8a7f68d7 HTTP/1.1" 200 3564 "-" "***"
"GET /***/dist/icons.css HTTP/1.1" 200 218509 "-" "***"
"GET /***/index.php/apps/theming/theme/dark.css?plain=0&v=8a7f68d7 HTTP/1.1" 200 3511 "-" "***"
"GET /***/apps/activity/js/index-224ad6c5.mjs HTTP/1.1" 200 102299 "-" "***"
"GET /***/apps/activity/js/index-65a5f423.mjs HTTP/1.1" 200 30319 "-" "***"
"GET /***/index.php/apps/theming/theme/dark-highcontrast.css?plain=0&v=8a7f68d7 HTTP/1.1" 200 3877 "-" "***"
"GET /***/index.php/apps/theming/theme/opendyslexic.css?plain=0&v=8a7f68d7 HTTP/1.1" 200 926 "-" "***"
"GET /***/index.php/apps/theming/theme/light-highcontrast.css?plain=0&v=8a7f68d7 HTTP/1.1" 200 3813 "-" "***"
"GET /***/apps/activity/js/api-00dfc954.mjs HTTP/1.1" 200 1065 "-" "***"
"GET /***/apps/activity/js/logger-a53a57b5.mjs HTTP/1.1" 200 44123 "-" "***"
"GET /***/apps/theming/img/background/stefanus-martanto-setyo-husodo-underwater-ocean.jpg HTTP/1.1" 200 625610 "-" "***"
"GET /***/core/img/logo/logo.svg HTTP/1.1" 200 815 "-" "***"
"POST /***/index.php/contactsmenu/contacts HTTP/1.1" 401 43 "-" "***"
"GET /***/ocs/v2.php/search/providers?from=%2Ffiles%2Fapps%2Ffiles%2Ffiles HTTP/1.1" 401 106 "-" "***"
"PROPFIND /***/remote.php/dav/files/***uuid***/ HTTP/1.1" 401 569 "-" "***"
"GET /***/apps/notifications/js/notifications-vendors-node_modules_nextcloud_auth_dist_index_js-node_modules_nextcloud_vue_dist_Components_-304b96.js?v=0e747abe6bc793505a20 HTTP/1.1" 200 598815 "-" "***"
"GET /***/apps/notifications/js/notifications-vendors-node_modules_nextcloud_moment_dist_index_js-node_modules_nextcloud_notify_push_dist_i-4dbea9.js?v=7bdb98c46b177d12d464 HTTP/1.1" 200 1040187 "-" "***"
"GET /***/apps/notifications/js/notifications-node_modules_moment_locale_sync_recursive_-src_NotificationsApp_vue-data_image_svg_xml_base64-ab95a3.js?v=d2bcd364ee99056941f0 HTTP/1.1" 200 33895 "-" "***"
"GET /***/apps/text/js/vendors-node_modules_vue_dist_vue_runtime_esm_js.js?v=7d29da165aea47b6c71e HTTP/1.1" 200 76949 "-" "***"
"GET /***/apps/user_status/img/app.svg?v=37409c19 HTTP/1.1" 200 413 "-" "***"
"GET /***/apps/theming/img/accessibility-dark.svg?v=37409c19 HTTP/1.1" 200 338 "-" "***"
"GET /***/ocs/v2.php/apps/user_status/api/v1/user_status HTTP/1.1" 200 5 "-" "***"
"GET /***/apps/activity/js/ActivityTab-9ecb040a.mjs HTTP/1.1" 200 3699 "-" "***"
"GET /***/apps/activity/js/index.es-479f5d11.mjs HTTP/1.1" 200 242043 "-" "***"
"GET /***/apps/activity/js/Activity-095c590c.mjs HTTP/1.1" 200 533295 "-" "***"
"GET /***/dist/7816-7816.js?v=a61178997c93b13df85e HTTP/1.1" 200 211186 "-" "***"
"PUT /***/ocs/v2.php/apps/user_status/api/v1/heartbeat?format=json HTTP/1.1" 401 106 "-" "***"
"GET /***/apps/related_resources/js/vendors-node_modules_nextcloud_vue_dist_Components_NcRelatedResourcesPanel_js.related_resources.js HTTP/1.1" 200 247146 "-" "***"
"GET /***/apps/activity/js/activity-sidebar.mjs HTTP/1.1" 200 2560 "-" "***"
"GET /***/apps/dashboard/img/dashboard.svg HTTP/1.1" 200 475 "-" "***"
"GET /***/apps/files/img/app.svg HTTP/1.1" 200 200 "-" "***"
"GET /***/apps/photos/img/app.svg HTTP/1.1" 200 493 "-" "***"
"GET /***/apps/activity/img/activity.svg HTTP/1.1" 200 217 "-" "***"
"GET /***/apps/spreed/img/app.svg HTTP/1.1" 200 551 "-" "***"
"GET /***/apps/contacts/img/app.svg HTTP/1.1" 200 2802 "-" "***"
"GET /***/apps/calendar/img/calendar.svg HTTP/1.1" 200 820 "-" "***"
"GET /***/apps/notes/img/notes.svg HTTP/1.1" 200 286 "-" "***"
"GET /***/apps/bookmarks/img/bookmarks.svg HTTP/1.1" 200 1986 "-" "***"
"GET /***/apps/tasks/img/tasks.svg HTTP/1.1" 200 662 "-" "***"
"GET /***/apps/settings/img/admin.svg?v=37409c19 HTTP/1.1" 200 223 "-" "***"
"GET /***/index.php/apps/theming/theme/dark.css?plain=1&v=8a7f68d7 HTTP/1.1" 200 3330 "-" "***"
"GET /***/apps/firstrunwizard/img/info.svg?v=37409c19 HTTP/1.1" 200 374 "-" "***"
"GET /***/apps/settings/img/help.svg?v=37409c19 HTTP/1.1" 200 539 "-" "***"
"GET /***/core/img/actions/logout.svg?v=37409c19 HTTP/1.1" 200 338 "-" "***"
"GET /***/index.php/apps/theming/theme/light-highcontrast.css?plain=1&v=8a7f68d7 HTTP/1.1" 200 3454 "-" "***"
"GET /***/index.php/apps/theming/theme/dark-highcontrast.css?plain=1&v=8a7f68d7 HTTP/1.1" 200 3501 "-" "***"
"GET /***/index.php/apps/theming/icon/files?v=8a7f68d7 HTTP/1.1" 200 10272 "-" "***"
"GET /***/index.php/apps/theming/favicon/files?v=8a7f68d7 HTTP/1.1" 200 90022 "-" "***"
"GET /***/index.php/apps/files/preview-service-worker.js HTTP/1.1" 200 14670 "-" "***"

nextcloud log currently disabled

nextcloud config:

<?php
$CONFIG = array (
  'instanceid' => '***',
  'passwordsalt' => '***',
  'trusted_domains' => 
  array (
    0 => '***',
  ),
  'datadirectory' => '***',
  'overwrite.cli.url' => '***',
  'overwritewebroot' => '***',
  'dbtype' => 'mysql',
  'version' => '28.0.2.5',
  'dbname' => '***',
  'dbhost' => 'localhost:/run/mysqld/mysqld.sock',
  'dbtableprefix' => '***',
  'dbuser' => '***',
  'dbpassword' => '***',
  'installed' => true,
  'forcessl' => true,
  'enable_previews' => true,
  'preview_max_scale_factor' => 10,
  'preview_max_filesize_image' => 50,
  'preview_max_y' => 4096,
  'preview_max_x' => 4096,
  'preview_libreoffice_path' => '/usr/bin/libreoffice',
  'preview_office_cl_parameters' => '',
  'enable_avatars' => true,
  'theme' => '',
  'maintenance' => false,
  'secret' => '***',
  'log_type' => 'syslog',
  'logfile' => '',
  'logtimezone' => '***',
  'log_authfailip' => true,
  'loglevel' => 0,
  'log_rotate_size' => 1048576,
  'trashbin_retention_obligation' => 'auto',
  'appstore.experimental.enabled' => true,
  'filelocking.enabled' => 'true',
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' => 
  array (
    'host' => '/run/redis/redis.sock',
    'port' => 0,
    'timeout' => 0.0,
  ),
  'ldapIgnoreNamingRules' => false,
  'htaccess.RewriteBase' => '***',
  'mail_smtpmode' => 'smtp',
  'mail_domain' => '***',
  'mail_smtpsecure' => 'tls',
  'mail_smtpauth' => 1,
  'mail_from_address' => '***',
  'mail_smtpauthtype' => 'PLAIN',
  'mail_smtphost' => '***',
  'mail_smtpport' => '***',
  'mail_smtpname' => '***',
  'mail_smtppassword' => '***',
  'ldapProviderFactory' => '\\OCA\\User_LDAP\\LDAPProviderFactory',
  'auth.bruteforce.protection.enabled' => false,
  'updater.release.channel' => 'stable',
  'app_install_overwrite' => 
  array (
    0 => 'audioplayer',
    1 => 'tasks',
  ),
);

Are you using the documented Nginx configuration or some other run? There are various things that can cause this. One that comes to mind is inappropriate caching of js and other assets due to a misconfigured web server or proxy.