Nextcloud with OnlyOffice Document Server

ℹ️ Support 📄 Office
, ,
1
Hi everyone,I’m having a persistent issue integrating Nextcloud with OnlyOffice Document Server, and I’ve exhausted most troubleshooting steps. I’ve tested this on three separate Nextcloud instances, all with the same result.EnvironmentNextcloud version: 33.0.1OnlyOffice Document Server (Docker)Web server: Apache (aaPanel)PHP: 8.3Internal networkURLs (sanitized)Nextcloud: https://files1.xxx.local⁠� / https://files2.xxx.local⁠�OnlyOffice: https://onlyoffice.xxx.local⁠�All services are reachable internally and resolve correctly.SSLUsing internal CA (xxxEnterpriseCA)Root + Intermediate certificates installed on:host systemOnlyOffice containerTest from container:curl -vk https://files2.xxx.local/status.php⁠�Result: OK (valid JSON returned)DNS / ConnectivityFrom OnlyOffice container:curl -vk https://files2.xxx.local/status.php⁠�Works correctly.Also added entries in /etc/hosts inside container.JWT ConfigurationOnlyOffice (local.json)“token”: { “enable”: { “request”: { “inbox”: true, “outbox”: true }, “browser”: true }, “inbox”: { “header”: “Authorization”, “inBody”: false }, “outbox”: { “header”: “Authorization”, “inBody”: false } }, “secret”: { “inbox”: { “string”: “SuperSecret123” }, “outbox”: { “string”: “SuperSecret123” }, “browser”: { “string”: “SuperSecret123” } }Container ENVJWT_ENABLED=trueJWT_SECRET=SuperSecret123JWT_HEADER=AuthorizationJWT_IN_BODY=falseNextcloudocc config:app:set onlyoffice jwt_secret --value=“SuperSecret123”occ config:app:set onlyoffice jwt_header --value=“Authorization”Verification:occ config:app:get onlyoffice jwt_secretReturns correct value.Apache (Nextcloud)Minimal config used for testing:SetEnvIf Authorization “(.\*)” HTTP_AUTHORIZATION=$1RequestHeader set Authorization “%{HTTP:Authorization}e”TestFrom OnlyOffice container:curl -vk https://files2.xxx.local/index.php/apps/onlyoffice/empty⁠�Response:{“message”:“Access denied”}Nextcloud LogsError:Error occurred in the document service:Error while downloading the document file to be converted.Also:getConvertedUri on check errorObservationsNetwork connectivity OKSSL trustedDNS workingJWT secret identicalUsing header (inBody=false)Same issue on 3 fresh Nextcloud installsQuestionWhy does Nextcloud still return:{“message”:“Access denied”}even when:JWT secret matchesAuthorization header is configuredOnlyOffice can reach NextcloudCould Apache (aaPanel) still be blocking or not forwarding the Authorization header properly?Any help would be greatly appreciated.