Login not working on Chrome 54 Android

[juliushaertl]

Steps to reproduce

1. Try to login

Expected behaviour

Login should succeed

Actual behaviour

Login fails and user gets redirected to the login page

Server configuration

Operating system: Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64

Web server: Apache/2.4.10 (Debian) (apache2handler)

Database: mysql 5.5.53

PHP version: 7.0.12-1~dotdeb+8.1
Modules loaded: Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, apache2handler, igbinary, mysqlnd, PDO, xml, apcu, apc, calendar, ctype, curl, dom, mbstring, fileinfo, ftp, gd, gettext, iconv, imagick, json, exif, mysqli, pdo_mysql, Phar, posix, readline, redis, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, wddx, xmlreader, xmlwriter, xsl, zip, Zend OPcache

Nextcloud version: 11.0 beta () - 11.0.0.2 (master)

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from: git

List of activated apps:

App list

Enabled:
 - audioplayer: 1.2.2
 - calendar: 1
 - comments: 1.1.0
 - contacts: 1
 - dav: 1.1.1
 - federatedfilesharing: 1.1.1
 - federation: 1.1.1
 - files: 1.6.1
 - files_sharing: 1.1.1
 - files_trashbin: 1.1.0
 - files_versions: 1.4.0
 - issuetemplate: 0.0.1
 - lookup_server_connector: 1.0.0
 - provisioning_api: 1.1.0
 - sharebymail: 1.0.0
 - systemtags: 1.1.3
 - theming: 1.1.1
 - twofactor_backupcodes: 1.0.0
 - updatenotification: 1.1.1
 - workflowengine: 1.1.1

Disabled:
 - admin_audit
 - apporder
 - db_slow
 - direct_menu
 - encryption
 - files_external
 - files_slow
 - mail
 - podcasts
 - richdocuments
 - spreed
 - tasks
 - testing
 - user_ldap

The content of config/config.php:

Config report

{
    "instanceid": "octgi7nlcd5b",
    "passwordsalt": "***REMOVED SENSITIVE VALUE***",
    "secret": "***REMOVED SENSITIVE VALUE***",
    "trusted_domains": [
        "xxxxxx"
    ],
    "datadirectory": "\/var\/www\/develop\/master\/data",
    "htaccess.RewriteBase": "\/",
    "dbtype": "mysql",
    "version": "11.0.0.2",
    "dbname": "devncmaster",
    "dbhost": "localhost",
    "dbport": "",
    "dbtableprefix": "oc_",
    "dbuser": "***REMOVED SENSITIVE VALUE***",
    "dbpassword": "***REMOVED SENSITIVE VALUE***",
    "logtimezone": "UTC",
    "installed": true,
    "apps_paths": [
        {
            "path": "\/var\/www\/develop\/master\/apps",
            "url": "\/apps",
            "writable": false
        },
        {
            "path": "\/var\/www\/develop\/master\/apps2",
            "url": "\/apps2",
            "writable": true
        }
    ],
    "appstore.experimental.enabled": true,
    "theme": "",
    "loglevel": 2,
    "maintenance": false,
    "debug": true,
    "mysql.utf8mb4": true
}

Are you using external storage, if yes which one: files_external is disabled

Are you using encryption: no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...

Client configuration

Browser: Chrome 54.0.2840.85

Operating system: Android 6.0.1, Nexus 5 Build/MOB30Z

Logs

Web server error log

Web server error log

127.0.0.1 - - [24/Nov/2016:20:25:54 +0100] "GET /core/img/loading-small.gif HTTP/1.1" 200 5489 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5 Build/MOB30Z) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.85 Mobile Safari/537.36"
127.0.0.1 - - [24/Nov/2016:20:25:54 +0100] "POST /index.php/login?redirect_url=%252Findex.php%252Fapps%252Ffiles%252F HTTP/1.1" 303 4712 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5 Build/MOB30Z) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.85 Mobile Safari/537.36"
127.0.0.1 - - [24/Nov/2016:20:25:55 +0100] "GET /index.php/apps/files/ HTTP/1.1" 303 986 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5 Build/MOB30Z) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.85 Mobile Safari/537.36"
127.0.0.1 - - [24/Nov/2016:20:25:55 +0100] "GET /index.php/login?redirect_url=%252Findex.php%252Fapps%252Ffiles%252F HTTP/1.1" 200 20052 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5 Build/MOB30Z) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.85 Mobile Safari/537.36"

Nextcloud log (data/nextcloud.log)

Nextcloud log

nothing here

Browser log

Browser log

Data from Network console for files index page:
Request URL:
https://master.nextcloud/index.php/apps/files/
Request Method:GET
Status Code:303 See Other
Remote Address:xxxxx
Response Headers
view source
Cache-Control:no-cache, must-revalidate
Connection:Keep-Alive
Content-Length:0
Content-Security-Policy:default-src 'none';script-src 'nonce-c25TdXFvMXBjMmVGWFoxdWR1bXB0aEFWUmNPMldSeGxIbC96cnU0MmVuTT06K2tIQXp2cFlHVlhpQmVzV1I0cWY0VHRoTTVQbE5Ga1ZlamVoNnFFQ0dTcz0=' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self'
Content-Type:text/html; charset=UTF-8
Date:Thu, 24 Nov 2016 19:25:55 GMT
Expires:Thu, 19 Nov 1981 08:52:00 GMT
Keep-Alive:timeout=3, max=99
Location:/index.php/login?redirect_url=%252Findex.php%252Fapps%252Ffiles%252F
Pragma:no-cache
Server:Apache/2.4.10 (Debian)
Strict-Transport-Security:max-age=15768000; includeSubDomains; preload
X-Content-Type-Options:nosniff
X-Download-Options:noopen
X-Frame-Options:SAMEORIGIN
X-Permitted-Cross-Domain-Policies:none
X-Robots-Tag:none
X-XSS-Protection:1; mode=block

[juliushaertl]

The 303 status code (see browser log) looks quite strange to me.

Maybe @ChristophWurst can help, since you've touched the login code with the remember me stuff?

[LukasReschke]

Please test #2322