fix: don't tell the remote their token is lower

icewind1991 · backportbot[bot] · commit 8613dd77368d · 2026-05-19T15:49:22.000Z
Signed-off-by: Robin Appelman &lt;robin@icewind.nl&gt;
diff --git a/apps/federation/lib/Controller/OCSAuthAPIController.php b/apps/federation/lib/Controller/OCSAuthAPIController.php
@@ -126,7 +126,7 @@ public function requestSharedSecret(string $url, string $token): DataResponse {
 				'remote server (' . $url . ') presented lower token. We will initiate the exchange of the shared secret.',
 				['app' => 'federation']
 			);
-			throw new OCSForbiddenException();
+			return new DataResponse();
 		}
 
 		$this->jobList->add(

Original file line number	Diff line number	Diff line change
`@@ -126,7 +126,7 @@ public function requestSharedSecret(string $url, string $token): DataResponse {`
`126`	`126`	`'remote server (' . $url . ') presented lower token. We will initiate the exchange of the shared secret.',`
`127`	`127`	`['app' => 'federation']`
`128`	`128`	`);`
`129`		`- throw new OCSForbiddenException();`
	`129`	`+ return new DataResponse();`
`130`	`130`	`}`
`131`	`131`
`132`	`132`	`$this->jobList->add(`