login issues since upgrading to 3.4.0~ynh1

[trendless]

Since 3.4.0~ynh1 I've been having a verrrry similar issue to #4; it persists in 3.6.0~ynh1

I've been successfully using opencloud_ynh for months; unlike #4, I've been using a proper domain with an LE cert. I've not made any manual tweaks.

All of a sudden I cannot login with my ynh user:

"level":"error","service":"proxy","error":"failed to verify access token: token signature is invalid: crypto/rsa: verification error","authenticator":"oidc","path":"/ocs/v1.php/cloud/capabilities","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 Edg/141.0.0.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"33206","time":"2025-10-28T22:24:09-06:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: token signature is invalid: crypto/rsa: verification error","authenticator":"oidc","path":"/api/v0/settings/roles-list","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 Edg/141.0.0.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"33226","time":"2025-10-28T22:24:09-06:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: token signature is invalid: crypto/rsa: verification error","authenticator":"oidc","path":"/graph/v1.0/me","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 Edg/141.0.0.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"33240","time":"2025-10-28T22:24:09-06:00","message":"failed to authenticate the request"}
{"level":"error","service":"auth-app","server":"http","time":"2025-10-28T22:25:27-06:00","message":"shutting down server"}

[p3x]

Any update on a solution to this problem ?

[trendless]

Not as far as I'm aware. I went back through some previous ~ynh versions and couldn't log in after fresh install, either, so it may be an issue with my specific system.

[p3x]

why completed issue ?
from what you say it's the opposite of "completed"...

I'm having exactly the same issue on a different system than yours.

[trendless]

Ah gotcha. And though I can login with the 'admin' user on a fresh install, it looks like I'm still having issues logging in via ldap and storage -- which I think there's a post about on the ynh forum, as well.

{"level":"error","service":"storage-users","host.name":"server.local","pkg":"rgrpc","driver":"posix","error":"could not find space for path /home/yunohost.app/opencloud/storage/users","path":"/home/yunohost.app/opencloud/storage/users/nodes","time":"2025-11-18T10:40:02-07:00","message":"could not assimilate item"}
{"level":"error","service":"storage-users","host.name":"server.local","pkg":"rgrpc","driver":"posix","error":"could not find space for path /home/yunohost.app/opencloud/storage/users","path":"/home/yunohost.app/opencloud/storage/users/trash","time":"2025-11-18T10:40:02-07:00","message":"could not assimilate item"}
{"level":"error","service":"proxy","error":"failed to verify access token: token signature is invalid: crypto/rsa: verification error","authenticator":"oidc","path":"/ocs/v1.php/cloud/capabilities","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"51562","time":"2025-11-18T10:40:37-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: token signature is invalid: crypto/rsa: verification error","authenticator":"oidc","path":"/api/v0/settings/roles-list","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"51600","time":"2025-11-18T10:40:37-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: token signature is invalid: crypto/rsa: verification error","authenticator":"oidc","path":"/graph/v1.0/me","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"51614","time":"2025-11-18T10:40:37-07:00","message":"failed to authenticate the request"}

$ sudo yunohost diagnosis get systemresources
cached_for: 300
id: systemresources
items:
  0:
    data:
      available: 2.3 GiB
      available_percent: 29
      total: 7.7 GiB
    meta:
      test: ram
    status: SUCCESS
    summary: diagnosis_ram_ok
  1:
    data:
      recommended: 512 MiB
      total: 976 MiB
    details: diagnosis_swap_tip
    meta:
      test: swap
    status: SUCCESS
    summary: diagnosis_swap_ok
  2:
    data:
      device: /dev/mapper/system-root
      free: 154 GiB
      free_percent: 54
      total: 282 GiB
    meta:
      mountpoint: /
      test: diskusage
    status: SUCCESS
    summary: diagnosis_diskusage_ok
  3:
    data:
      device: /dev/sda1
      free: 109 MiB
      free_percent: 51
      total: 213 MiB
    meta:
      mountpoint: /boot
      test: diskusage
    status: SUCCESS
    summary: diagnosis_diskusage_ok
  4:
    data:
      device: /dev/sdb1
      free: 143 GiB
      free_percent: 65
      total: 222 GiB
    meta:
      mountpoint: /mnt/backup
      test: diskusage
    status: SUCCESS
    summary: diagnosis_diskusage_ok
timestamp: 1763474624

If it's not just me, I'll reopen it.

[p3x]

Similar to my situation in #4

[p3x]

after some investigation (i'm no expert at all so please understand my noobness) :
seems like no user or groups named opencloud exist after install, no clue if that might cause a problem.

[trendless]

All good! I don't think OpenCloud uses or needs Yunohost users/groups (the ones you'd see in your https://.../yunohost/admin web interface), but there should be a linux opencloud user and a linux opencloud group in the underlying OS itself -- you can check for users/groups that start with the letter 'o' from the command line using these:

echo "Users:"; grep '^o' /etc/passwd | cut -d: -f1

echo "Groups:"; grep '^o' /etc/group | cut -d: -f1

For me it looks like this:

[trendless]

I'd managed to get opencloud reinstalled fresh and was able to login with the admin account (though ldap still not working). Now with the upgrade to v4.0 I'm getting a login issue with the admin account (last time I had login issues after an upgrade, the admin account did this as well):

When trying to login:

{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/ocs/v1.php/cloud/capabilities","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"42236","time":"2025-12-01T08:31:35-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/api/v0/settings/roles-list","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"42250","time":"2025-12-01T08:31:35-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/graph/v1.0/me","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"42262","time":"2025-12-01T08:31:35-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/ocs/v1.php/cloud/capabilities","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"53330","time":"2025-12-01T08:31:42-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/graph/v1.0/me","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"53336","time":"2025-12-01T08:31:42-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/api/v0/settings/roles-list","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"53344","time":"2025-12-01T08:31:42-07:00","message":"failed to authenticate the request"}

Errors during server restart:

{"level":"error","service":"storage-users","host.name":"ynhadmindomain.tld","pkg":"rgrpc","driver":"posix","error":"could not find space for path /home/yunohost.app/opencloud/storage/users","path":"/home/yunohost.app/opencloud/storage/users/nodes","time":"2025-12-01T08:35:59-07:00","message":"could not assimilate item"}
{"level":"error","service":"storage-users","host.name":"ynhadmindomain.tld","pkg":"rgrpc","driver":"posix","error":"could not find space for path /home/yunohost.app/opencloud/storage/users","path":"/home/yunohost.app/opencloud/storage/users/trash","time":"2025-12-01T08:35:59-07:00","message":"could not assimilate item"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/ocs/v2.php/apps/notifications/api/v1/notifications/sse","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"48128","time":"2025-12-01T08:36:44-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/api/v0/settings/roles-list","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"48142","time":"2025-12-01T08:36:44-07:00","message":"failed to authenticate the request"}
{"level":"error","service":"proxy","error":"failed to verify access token: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": <nil>","authenticator":"oidc","path":"/graph/v1.0/me","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:145.0) Gecko/20100101 Firefox/145.0","client.address":"","network.peer.address":"127.0.0.1","network.peer.port":"48148","time":"2025-12-01T08:36:44-07:00","message":"failed to authenticate the request"}