Firefox 118.0.1 initially Unable to login after logging out user after performing upgrades from 25.0.3 to 27.1.1

I needed to clear the browser cache just to load the website while already logged in.

When using Firefox 118.0.1 win10 attempting login via Valid user credentials are not accepted nor is any error message displayed until a few repeated login attempts. Again using valid user credentials the following message appears

We have detected multiple invalid login attempts from your IP. Therefore your next login is throttled up to 30 seconds.

The error message is erroneous because there were valid credentials provided, only multiple attempts is correct.

I am not seeing any server side errors, this issue is related to Browser compatibility when using security based settings on Firefox. There also appears to the issues related to browser cached data from former versions of nextcloud interfering loading the UI.

Nextcloud was updated/upgraded from 25.0.3 to 26.x and then to 27.1.1 via the following steps on the command line

cd updater

sudo -u REMOVED php updater.phar
Should the “occ upgrade” command be executed? [Y/n] y
Keep maintenance mode active? [y/N] n

sudo -u REMOVED …/occ db:add-missing-indices

Nextcloud version 27.1.1
Operating system and version FreeBSD (Nextcloud source not ports)
Nginx/1.24.0
PHP 8.1.19

The issue you are facing:
Is this the first time you’ve seen this error? (Y/N): N
previously I had to login twice, now it was prevented to login at all and triggered the brute force attack prevention system.

Steps to replicate it:

  1. use Firefox and logout user after cli upgrade from 25.0.3 to 27.1.1
  2. use Firefox and attempt login user using valid credentials

The output of your Nextcloud log in Admin > Logging:


Error	jsresourceloader	Could not find resource unsplash/js/user.js to load		44 minutes ago
Error	jsresourceloader	Could not find resource unsplash/js/user.js to load		an hour ago
Error	jsresourceloader	Could not find resource unsplash/js/user.js to load		an hour ago
Error	PHP	include(): Failed opening '/usr/local/www/nextcloudav/apps/unsplash/templates/partials/license.php' for inclusion (include_path='/usr/local/www/nextcloudav/apps/news/vendor/pear/net_url2:/usr/local/www/nextcloudav/3rdparty/pear/archive_tar:/usr/local/www/nextcloudav/3rdparty/pear/console_getopt:/usr/local/www/nextcloudav/3rdparty/pear/pear-core-minimal/src:/usr/local/www/nextcloudav/3rdparty/pear/pear_exception:/usr/local/www/nextcloudav/apps') at /usr/local/www/nextcloudav/lib/private/Template/Base.php#180		an hour ago
Error	PHP	include(/usr/local/www/nextcloudav/apps/unsplash/templates/partials/license.php): Failed to open stream: No such file or directory at /usr/local/www/nextcloudav/lib/private/Template/Base.php#180		an hour ago
Error	PHP	include(): Failed opening '/usr/local/www/nextcloudav/apps/unsplash/templates/partials/license.php' for inclusion (include_path='/usr/local/www/nextcloudav/apps/news/vendor/pear/net_url2:/usr/local/www/nextcloudav/3rdparty/pear/archive_tar:/usr/local/www/nextcloudav/3rdparty/pear/console_getopt:/usr/local/www/nextcloudav/3rdparty/pear/pear-core-minimal/src:/usr/local/www/nextcloudav/3rdparty/pear/pear_exception:/usr/local/www/nextcloudav/apps') at /usr/local/www/nextcloudav/lib/private/Template/Base.php#180		an hour ago
Error	PHP	include(/usr/local/www/nextcloudav/apps/unsplash/templates/partials/license.php): Failed to open stream: No such file or directory at /usr/local/www/nextcloudav/lib/private/Template/Base.php#180		an hour ago
Info	updater	\OC\Updater::resetLogLevel: Reset log level to Warning(2)		an hour ago
Info	updater	\OC\Updater::maintenanceActive: Maintenance mode is kept active		an hour ago
Info	updater	\OC\Updater::updateEnd: Update successful		an hour ago
Info	updater	\OC\Updater::finishedCheckCodeIntegrity: Finished code integrity check		an hour ago
Info	no app in context	Symfony\Component\Routing\Exception\RouteNotFoundException: Unable to generate a URL for the named route "photos.page.index" as such route does not exist.		an hour ago
Info	no app in context	Symfony\Component\Routing\Exception\RouteNotFoundException: Unable to generate a URL for the named route "news.page.index" as such route does not exist.		an hour ago
Info	no app in context	Symfony\Component\Routing\Exception\RouteNotFoundException: Unable to generate a URL for the named route "music.page.index" as such route does not exist.		an hour ago
Info	no app in context	Symfony\Component\Routing\Exception\RouteNotFoundException: Unable to generate a URL for the named route "maps.page.index" as such route does not exist.		an hour ago
Info	no app in context	Symfony\Component\Routing\Exception\RouteNotFoundException: Unable to generate a URL for the named route "files.view.index" as such route does not exist.		an hour ago

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

  'passwordsalt' => 'REMOVED',
  'secret' => 'REMOVED',
  'trusted_domains' =>
  array (
    0 => 'localhost',
    1 => 'REMOVED',
  ),
  'datadirectory' => '/usr/local/www/nextcloudav/data',
  'dbtype' => 'mysql',
  'version' => '27.1.1.0',
  'maintenance' => false,
  'enable_previews' => true,
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'overwrite.cli.url' => 'http://localhost',
  'simpleSignUpLink.shown' => false,
  'dbname' => 'REMOVED',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'REMOVED',
  'mysql.utf8mb4' => true,
  'dbuser' => 'REMOVED',
  'dbpassword' => 'REMOVED',
  'tempdirectory' => '/usr/local/www/nextcloudTMP',
  'upload_tmp_dir' => '/usr/local/www/nextcloudTMP',
  'installed' => true,
  'instanceid' => 'REMOVED',
  'loglevel' => 2,
  'encryption.legacy_format_support' => false,
  'encryption.key_storage_migrated' => false,
  'mail_from_address' => 'REMOVED',
  'mail_smtpmode' => 'smtp',
  'mail_sendmailmode' => 'smtp',
  'mail_domain' => 'REMOVED',
  'mail_smtpauthtype' => 'PLAIN',
  'mail_smtpauth' => 1,
  'mail_smtphost' => 'REMOVED',
  'mail_smtpname' => 'REMOVED',
  'mail_smtppassword' => 'REMOVED',
  'mail_smtpport' => '25',
  'theme' => '',
  'bulkupload.enabled' => false,
  'updater.secret' => 'REMOVED',

The output of your Apache/nginx/system log in /var/log/____:

IP - - [03/Oct/2023:13:07:06 +0000] "GET /login?direct=1&user=REMOVED HTTP/2.0" 200 8131 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0"

This issue lingers perhaps is related to an app misbehaving and triggered by a user with a large dataset. The admin account does not trigger the endless logins.

I updated to 27.1.2, disabled any apps which were not featured, and then cleared the cache in Firefox and now things seem to be ok for now…