fix: don't tell the remote their token is lower

icewind1991 · icewind1991 · commit 705abc2dcef0 · 2026-05-19T17:08:22.000+02:00
Signed-off-by: Robin Appelman &lt;robin@icewind.nl&gt;
diff --git a/apps/federation/lib/Controller/OCSAuthAPIController.php b/apps/federation/lib/Controller/OCSAuthAPIController.php
@@ -109,7 +109,7 @@ public function requestSharedSecret(string $url, string $token): DataResponse {
 			$this->logger->info(
 				'remote server (' . $url . ') presented lower token. We will initiate the exchange of the shared secret.'
 			);
-			throw new OCSForbiddenException();
+			return new DataResponse();
 		}
 
 		$this->jobList->add(

Original file line number	Diff line number	Diff line change
`@@ -109,7 +109,7 @@ public function requestSharedSecret(string $url, string $token): DataResponse {`
`109`	`109`	`$this->logger->info(`
`110`	`110`	`'remote server (' . $url . ') presented lower token. We will initiate the exchange of the shared secret.'`
`111`	`111`	`);`
`112`		`- throw new OCSForbiddenException();`
	`112`	`+ return new DataResponse();`
`113`	`113`	`}`
`114`	`114`
`115`	`115`	`$this->jobList->add(`