-
-
Notifications
You must be signed in to change notification settings - Fork 4.8k
Pyocclient and NC 13 don't error on false login #13561
Copy link
Copy link
Closed
Labels
0. Needs triagePending check for reproducibility or if it fits our roadmapPending check for reproducibility or if it fits our roadmapbugneeds info
Description
Steps to reproduce
- Get
pyocclient - Try connect to your Nextcloud with wrong credentials
import owncloud
oc = owncloud.Client("https://example.org/nextcloud")
oc.login("non-existing-user", "randomPw")
Expected behaviour
Like for ownCloud, I expect a 401 authentication error.
Actual behaviour
Nothing, you can't tell if the login was successful or not.
The login()-procedure tries to gather the capabilities of the server, that is where the ownCloud server throws an error, Nextcloud just returns a result:
{'bruteforce': {'delay': '400'},
'theming': {'background': 'https://example.org/nextcloud/core/img/background.png?v=3',
'background-default': '1',
'background-plain': None,
'color': '#057BC9',
'color-element': '#057BC9',
'color-text': '#ffffff',
'logo': 'https://example.org/nextcloud/core/img/logo.svg?v=3',
'name': 'Nextcloud',
'slogan': 'a safe home for all your data',
'url': 'https://nextcloud.com'}}
Is there a reason why this information is available without authentication? It does not seem to include useful information for unauthenticated access like if federated sharing or something is supported.
Nextcloud version: NC 13.0.8
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
0. Needs triagePending check for reproducibility or if it fits our roadmapPending check for reproducibility or if it fits our roadmapbugneeds info