The Basics
- Nextcloud Server version (e.g., 29.x.x):
30.0.10
- Operating system and version (e.g., Ubuntu 24.04):
Ubuntu 24.04
- Web server and version (e.g, Apache 2.4.25):
Apache 2.4.58
- Reverse proxy and version _(e.g. nginx 1.27.2)
none
- PHP version (e.g, 8.3):
8.3
- Is this the first time you’ve seen this error? (Yes / No):
yes
- When did this problem seem to first start?
Memories app login to Nextcloud
- Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
Apache virtual site
- Are you using CloudfIare, mod_security, or similar? (Yes / No)
yes, Cloudflare
Summary of the issue you are facing:
I’ve Memories application installed into Nextcloud and it’s working well via web interface.
I’ve tried to link Memories Android app installed from Google Play Store but, after inserting the FQDN of my Nextcloud instance, it opens the default browser and it lands on https://nc.mydomain.org/index.php/login/v2/flow?user=&direct=0 and shows “Access denied” page.
Steps to replicate it (hint: details matter!):
- Open “Memories” android app
- Insert FQDN of my Nextcloud instance and click on “Continue to Login” button
- Default browser opens and show the “Access denied” page
Log entries
Apache SSL access log (when accessing from local network):
10.0.0.163 - - [19/Apr/2025:20:42:27 +0200] "GET /index.php/apps/memories/api/describe HTTP/1.1" 200 136
10.0.0.163 - - [19/Apr/2025:20:42:27 +0200] "POST /index.php/login/v2 HTTP/1.1" 200 332
10.0.0.163 - - [19/Apr/2025:20:42:28 +0200] "GET /index.php/login/v2/flow/TtVdPYI495h9XG3dKiItJlfpk5wcXXEIeCCz7cknt1cCmKUTFlp6WPcGFCRVelShNTetU28kFmeDOV8ouvdudnRKrx57abULWGaMcbusAuLMjUyCZ6Nt4XfBQYfLIE8K HTTP/1.1" 303 -
10.0.0.163 - - [19/Apr/2025:20:42:28 +0200] "GET /index.php/login/v2/flow?user=&direct=0 HTTP/1.1" 403 21652
while accessing from external network (through Cloudflare):
37.161.245.150 - - [19/Apr/2025:20:48:18 +0200] "GET /index.php/apps/memories/api/describe HTTP/1.1" 200 136
37.161.245.150 - - [19/Apr/2025:20:48:18 +0200] "POST /index.php/login/v2 HTTP/1.1" 200 334
37.161.245.150 - - [19/Apr/2025:20:48:19 +0200] "GET /index.php/csrftoken HTTP/1.1" 200 123
37.161.245.150 - - [19/Apr/2025:20:48:19 +0200] "GET /index.php/login/v2/flow/fALELNb84XZpunvMms79B1BOYX0SPRrA9M5O2thh2X2mV9UIHf6YawBECZxzXi9I3kif8N934reBxwjX2p7WYvojlbkbgrRQTnvz7kS4mOOHw8ru4FGD4vG2vDQdLvOJ HTTP/1.1" 303 -
37.161.245.150 - - [19/Apr/2025:20:48:19 +0200] "GET /index.php/login/v2/flow?user=&direct=0 HTTP/1.1" 403 21652
Nextcloud
No rows are written in the Nextcloud log file
Configuration
Nextcloud
The output of occ config:list system:
{
"system": {
"instanceid": "***REMOVED SENSITIVE VALUE***",
"passwordsalt": "***REMOVED SENSITIVE VALUE***",
"secret": "***REMOVED SENSITIVE VALUE***",
"trusted_domains": [
"nc.mydomain.org",
"amc-family.mywire.org"
],
"datadirectory": "***REMOVED SENSITIVE VALUE***",
"dbtype": "mysql",
"version": "30.0.10.1",
"overwrite.cli.url": "https:\/\/nc.mydomain.org",
"overwritehost": "nc.mydomain.org",
"overwriteprotocol": "https",
"memcache.local": "\\OC\\Memcache\\APCu",
"memcache.distributed": "\\OC\\Memcache\\Redis",
"memcache.locking": "\\OC\\Memcache\\Redis",
"redis": {
"host": "***REMOVED SENSITIVE VALUE***",
"port": 0,
"dbindex": 0,
"timeout": 0
},
"dbhost": "***REMOVED SENSITIVE VALUE***",
"dbport": "",
"dbname": "***REMOVED SENSITIVE VALUE***",
"dbtableprefix": "oc_",
"mysql.utf8mb4": true,
"dbuser": "***REMOVED SENSITIVE VALUE***",
"dbpassword": "***REMOVED SENSITIVE VALUE***",
"installed": true,
"default_phone_region": "IT",
"mail_smtpmode": "sendmail",
"mail_smtpsecure": "ssl",
"mail_sendmailmode": "pipe",
"maintenance": false,
"memories.exiftool": "\/var\/www\/nextcloud\/apps\/memories\/bin-ext\/exiftool-amd64-glibc",
"memories.ffmpeg_path": "\/usr\/bin\/ffmpeg",
"memories.ffprobe_path": "\/usr\/bin\/ffprobe",
"memories.no_transcode": true,
"preview_max_memory": 4096,
"preview_max_filesize_image": 256,
"enabledPreviewProviders": [
"OC\\Preview\\Image",
"OC\\Preview\\HEIC",
"OC\\Preview\\TIFF",
"OC\\Preview\\Movie",
"OC\\Preview\\MKV",
"OC\\Preview\\MP4",
"OC\\Preview\\AVI"
],
"loglevel": 2,
"bulkupload.enabled": false,
"memories.vod.path": "\/var\/www\/nextcloud\/apps\/memories\/bin-ext\/go-vod-amd64",
"memories.vod.ffmpeg": "\/usr\/bin\/ffmpeg",
"memories.vod.ffprobe": "\/usr\/bin\/ffprobe",
"theme": "",
"mail_from_address": "***REMOVED SENSITIVE VALUE***",
"mail_domain": "***REMOVED SENSITIVE VALUE***",
"memories.db.triggers.fcu": true,
"maintenance_window_start": 1
}
}
Apps
The output of occ app:list:
Enabled:
- admin_audit: 1.20.0
- app_api: 4.0.6
- bruteforcesettings: 3.0.0
- calendar: 5.2.1
- circles: 30.0.0
- cloud_federation_api: 1.13.0
- comments: 1.20.1
- contacts: 7.0.6
- contactsinteraction: 1.11.0
- dashboard: 7.10.0
- dav: 1.31.1
- duplicatefinder: 1.7.1
- external: 5.5.2
- facerecognition: 0.9.60
- federatedfilesharing: 1.20.0
- federation: 1.20.0
- files: 2.2.0
- files_downloadlimit: 3.0.0
- files_pdfviewer: 3.0.0
- files_reminders: 1.3.0
- files_sharing: 1.22.0
- files_trashbin: 1.20.1
- files_versions: 1.23.0
- firstrunwizard: 3.0.0
- groupfolders: 18.1.2
- logreader: 3.0.0
- lookup_server_connector: 1.18.0
- maps: 1.5.0
- memories: 7.5.2
- nextcloud_announcements: 2.0.0
- notes: 4.12.0
- notifications: 3.0.0
- oauth2: 1.18.1
- password_policy: 2.0.0
- photos: 3.0.2
- previewgenerator: 5.8.0
- privacy: 2.0.0
- provisioning_api: 1.20.0
- qownnotesapi: 25.2.0
- quota_warning: 1.21.0
- recommendations: 3.0.0
- related_resources: 1.5.0
- richdocuments: 8.5.6
- richdocumentscode: 24.4.1303
- serverinfo: 2.0.0
- settings: 1.13.0
- sharebymail: 1.20.0
- side_menu: 4.1.1
- support: 2.0.0
- survey_client: 2.0.0
- systemtags: 1.20.0
- tasks: 0.16.1
- text: 4.1.0
- theming: 2.6.0
- theming_customcss: 1.18.0
- twofactor_backupcodes: 1.19.0
- twofactor_nextcloud_notification: 4.0.0
- twofactor_totp: 12.0.0-dev
- unroundedcorners: 1.1.4
- updatenotification: 1.20.0
- user_status: 1.10.0
- viewer: 3.0.0
- weather_status: 1.10.0
- webhook_listeners: 1.1.0-dev
- workflowengine: 2.12.0
Disabled:
- activity: 3.0.0 (installed 2.17.0)
- encryption: 2.18.0
- files_external: 1.22.0
- recognize: 8.2.0 (installed 8.2.0)
- suspicious_login: 8.0.0 (installed 4.3.0)
- user_ldap: 1.21.0
Help me!!!
Please help me, this is driving me crazy!!!
I’ve made so much tries, so much googling, but to no avail!
Thanks!