nextcloud / nextcloud/server

[Bug]: Too many authentication attempts on logout

Open
#59,696 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

0. Needs triage 33-feedback bug
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

⚠️ This issue respects the following points: ⚠️
Bug description

I logged out from my Nextcloud instance. It got back to the login page (index.php/login?clear=1), but, strangely, displayed a red message saying there were too many authentication attempts and to wait 30 seconds before trying again.

Although I had not recently tried to authenticate (I logged out), and moreover I have never failed to authenticate when I wanted to.

Steps to reproduce
  1. Log out of Nextcloud.
Expected behavior

The login page should be displayed without a message about authentication attempts.

Nextcloud Server version

33

Operating system

Debian/Ubuntu

PHP engine version

None

Web server

None

Database engine version

None

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?
  • Default user-backend (database)
  • LDAP/ Active Directory
  • SSO - SAML
  • Other
Configuration report

List of activated Apps

Nextcloud Signing status
No errors have been found.
Nextcloud Logs

Additional info

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the logout flow and inspect the index.php/login?clear=1 entry point reached afterward. Trace why logout produces the authentication-attempts warning; done when logging out returns to the login page without that message.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.