The file was downloaded without logging in.

Sorry to hear you’re facing problems :slightly_frowning_face:

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example
Or for longer, use three backticks above and below the code snippet:

longer
example
here
Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version (eg, 20.0.5): 24.04
Operating system and version (eg, Ubuntu 20.04): dabian10
Apache or nginx version (eg, Apache 2.4.25): 2.4.54
PHP version (eg, 7.4): 8.0.22

The issue you are facing: Get and download files without logging in

Is this the first time you’ve seen this error? (Y/N):Y

Steps to replicate it:

The output of your Nextcloud log in Admin > Logging:

PASTE HERE
The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'instanceid' => '*****',
  'passwordsalt' => '****',
  'secret' => '*****',
  'trusted_domains' => 
  array (
    0 => 'my.domain.com',
  ),
  'datadirectory' => '/var/www/nextcloud/data',
  'dbtype' => 'mysql',
  'version' => '24.0.4.1',
  'overwrite.cli.url' => 'https://my.domain.com/',
  'dbname' => 'nextcloud',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud',
  'dbpassword' => '****',
  'installed' => true,
  'default_phone_region' => 'CN',
  'htaccess.RewriteBase' => '/',
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' => 
  array (
    'host' => 'localhost',
    'port' => 6379,
  ),
);

PASTE HERE
The output of your Apache/nginx/system log in /var/log/____:

18.177.157.135 - - [08/Sep/2022:09:34:03 -0400] "GET /index.php/apps/richdocuments/wopi/files/324_ocd1uyn3038u?access_token=WZmS9HJZYA6xjtKSnrC4HwFxqHEYPJB8&access_token_ttl=0 HTTP/1.1" 200 5660 "-" "COOLWSD HTTP Agent 22.05.5.4snapshot"
18.177.157.135 - - [08/Sep/2022:09:34:03 -0400] "GET /index.php/apps/richdocuments/wopi/files/324_ocd1uyn3038u/contents?access_token=WZmS9HJZYA6xjtKSnrC4HwFxqHEYPJB8&access_token_ttl=0 HTTP/1.1" 200 396790 "-" "COOLWSD HTTP Agent 22.05.5.4snapshot"

Please describe IN DETAIL where the files reside, who owns the files, who tries to download the file, from what device, if the file has been shared via a link, where your server is running, which tool you’re using to download it, etc., etc. Best would be if you could provide a step-by-step procedure which can be followed to understand what you’re doing and how to replicate the issue.