Sorry forgetting the http rather https result:
I have to say. I’m really a fool.
I shut the nginx(for reverse proxy) down for applying ssl certificate using certbot. However, I forgot to run the nginx later.
Maybe you are wondering why I not found it a long time. It’s cause I set the domain to a LAN IP in my hosts in order not allow the webDAV goes the Internet otherwise it costs my traffic fees.
After I run the nginx, it’s encounter a 403 Forbidden. But I’m luck, it was caused by “Download empty without jwt”.
If you also stuck by this, you can check if you set onlyoffice’s local.json all token.enable to true and the header in value “Authorization” rather than “AuthorizationJwt”