Cannot grant access

đŸ“± Desktop & mobile clients đŸ’» Desktop
1

Hello,

I have a Nextcloud server running since some time now, everything working fine until two days ago.
As far as I can see, everything is working except the connection with the Nextcloud desktop app.
When I add a new account (I did that because I thought it could help me in my problem), the app send me to the login page, which is working, then the “Grant access” page, which does nothing. I can click on the “Grant access” button but it’s useless.
I’ve tried this process with Firefox, Chromium and Edge, nothing change. I’ve also tried on Debian and on Windows 10, same problem.

Nextcloud version : 17.0.1
OS : Debian Buster with some parts of Bullseye
Apache : 2.4.38
PHP : 7.3.11-1

I’ve check the access.log and error.log, nothing seems to be relevant to this problem.

Can someone help me?

3 Likes
2

Ok, I think I have the solution.
When I’m on the “Grant access” page, my firefox consol says:
Content Security Policy: The page’s settings blocked the loading of a resource at http://cloud.vulgarisons.info/index.php/login/v2/grant (“form-action”).

The problem seems to be related to my new Haproxy installation.
I had to add overwriteprotocol => "https"

Thanks to Tiontion24 on #debian-facile for the help.

8 Likes
3

Same issue here and your solution worked as well.
Should this reported as an issue or could it be some server misconfiguration?
http instead of https is uncommon!

4

If one is using a proxy before like ha proxy you usually have http between the proxy and the webserver. Thus creating a problem. You need to know how to configure that in that case. This is a configuration error and not an issue.

5

I didn’t use a proxy though

And even I would have, which I do from time to time on Firefox: I tried different browsers, the same result with all of them. And surely I didn’t touch the windows proxy settings.

6

Same issue here with nextcloud inside a Docker and behind a nginx reverse-proxy. I’ve set 'overwriteprotocol' => 'https' but it doesn’t solve the issue.

I managed to login with windows desktop app with the old login system, but I can’t log into the macos app.

1 Like
7

I have the same setup, and I’m having the same problem. If this is an nginx configuration error, does anyone have a suggestion as to what I need to change?

9

I got the same issue. Grant access button is not working. Only android client can connect. iOS win and linux all can not connect. Chrome console says that

Refused to send form data to ‘’ because it violates the following Content Security Policy directive: “form-action ‘self’”.

1 Like
10

I have the same issue. On a company provided macbook on which I am not allowed to modify networking/proxy configuration, I’m completely blocked for the installation of the nextcloud client due to this.
IMHO this is a bug in the client, because there’s simply nothing happening when you press the button, no error message, nothing.

11

i 've got the same problem!
last time i used an older client to login but that doesn’t work anymore


grant access is doing nothing


server: 17.0.2
client: 2.6

i am using nextcloud as docker with letsencrypt companion docker and nginx reverse proxy docker

‘overwriteprotocol’ => ‘https’ does not help

please help us!

1 Like
12

Hello All,

to solve this issue you need to add ‘overwriteprotocol’ => ‘https’ in config/config.php in nextcloud, I tested and solving the issue, here the explaination

/**

  • When generating URLs, Nextcloud attempts to detect whether the server is
  • accessed via https or http. However, if Nextcloud is behind a proxy
  • and the proxy handles the https calls, Nextcloud would not know that
  • ssl is in use, which would result in incorrect URLs being generated.
  • Valid values are http and https.
    */
    ‘overwriteprotocol’ => ‘’,
5 Likes
13

EDIT: Installed the 18.0.0.3 docker and added:
‘overwriteprotocol’ => ‘https’,
Which indeed did work!

I have the same problem:

Behind an Nginx reverse proxy; and no app works. When adding overwriteprotocol https nothing works anymore. which is logical I gues because: nextcloud -> nginx is http


Any solution to this?

[edit] Strangely: it did work before installing two factor authentication
 but now after uninstalling it; it still doesn’t work. [/edit]

1 Like
14

I’m running nextcloud in docker containers and finally got this too work.

Upgraded to 18.01 and then added following to config/config.php

‘overwriteprotocol’ => ‘https’,

1 Like
15

'overwriteprotocol' => 'https' does not work when Nextcloud is running behind a reverse proxy. The system returns:

Content Security Policy: The page’s settings blocked the loading of a resource
at http://wherever.com (“form-action”).

Editing the trusted domains and trusted proxies settings in config.php does not work, either.

Still waiting for a solution on this one.

16

I still have the same problem here with nextcloud in docker behind a traefik2 in docker.
There really is a error message missing.
I will try to add 'overwriteprotocol’ => ‘https’ to my docker-compose file - i’ll report if that helps.

17

yeah - that worked but how to Integrate this into a docker-compose file

18

Big trouble whith the “grant acces” procedure from the 2.5.XX version of th client on Debian Buster.
Adding the PPA won’t work since the last version will only be available for xenial distros.
had to compile from source the 2.7.xx with no difficulty at all.
Work’s very well !
Please publish some adapted ppa :wink:

1 Like
19

I’m having the same issue and overwrite and trusted configs do not work. In a desktop browser I have to refresh the the tab to login as I get the ‘Content Security Policy’ error messge. In the iOS app I’m stuck on the grant access screen as it does not redirect.

20

Just wanted to say thanks - this solved my ios issues. Just completed installing via k8s and I was oh no why isn’t this working. excellent forum thanks y’all :grinning:

21

Editing a config.php file is not possible on my docker servers, everything is stateless regarding nextcloud itself.
I tried using the documented environment variable “OVERWRITEPROTOCOL” (set to https) but with no difference.