nextcloud / nextcloud/ios

Multiple Accounts; App mixes login credentials

Open
#1,423 3 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Swift
Stars
2.5k
Forks
1k
Avg merge
2d 18h
Merged PRs (30d)
13

Description

Expected behaviour

Separate accounts, which have different credentials. Switching accounts. App is only fetching information from the currently selected account; uses only the credentials of the current account

Actual behaviour

I'm running to accounts. One username is "strubel". Other nextcloud domain & installation, the name is m.strubel.

On the domain using "strubel", I see error messages from fetching an avatar or other informations:

192.168.56.107 - strubel [18/Sep/2020:20:31:27 +0200] "GET /nextcloud/index.php/avatar/m.strubel/128 HTTP/1.1" 404 2 "-" "Mozilla/5.0 (iOS) Nextcloud-iOS/3.0.6"

Worst case, the happens with login credentials and the nextcloud instance/fail2ban blocks your IP. (happened twice to me).

After switching, it is not possible to use the switched-to account correctly.

Steps to reproduce

use two nextcloud instances, different domain (maybe), different login credentials.

Reasoning or why should it be changed/implemented?

Fixes are nice :-)

iOS version

14.0 (maybe happened earlier, too)

App version

App, Nextcloud Coherence for iOS 3.0.6.8 @ 2020

Server configuration

not relevant, because the URL requested is already wrong

Nextcloud version: (see Nextcloud admin page)
18.0.1 & 18.0.7

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the issue with two Nextcloud instances and different credentials, then trace account switching and the requests made when fetching avatars or other account information. Confirm that requests after switching use only the selected account's instance and credentials, including the avatar request shown in the report.

Written by the indexing model from the issue text.

Assessment

Tech stack
swift
Domain
authentication, mobile-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.