Windows Desktop App used token gets lost

[elbae]

Hi, I am reporting here an Issue (probably wrongly) opened in /core (owncloud/core#37748) since I see no answer there.

The scenario is the following:

• 2FA authentication, first with LDAP second Google Auth
• App token created in /index.php/settings/personal?sectionid=security
• App token randomly lost

This issue might be related to: #7857

Client configuration

Client version: 2.6.3 (build 13551)
Operating system: Microsoft Windows 10 Pro

[michaelstingl]

Did the app token disappear from the web UI?

[TheOneRing]

For 2FA I recommend to use oauth.
The web interface will still ask you every second time for a key, but the desktop client will run just fine after the initial auth.

[elbae]

@michaelstingl exactly, they disappear.

[michaelstingl]

@michaelstingl exactly, they disappear.

Hm, then it needs to be solved in owncloud/core#37748 . Nothing the ownCloud desktop team can fix.

Did you consider migrate to OAuth 2.0? Then web browser opens for login, you can enter 2FA in web view, and you no longer need to rely on app token… Much better user experience!

You could give it a try with demo.owncloud.com (demo:demo, test:test or admin:admin)

[elbae]

Thank you @michaelstingl and @TheOneRing for your support.
We are going to verify whether it is feasible or not.

[elbae]

Hello, we tried to implement Oauth for ownCloud desktop app.
Unfortunately no one is able to sync documents anymore since we receive the following error:

403 Forbidden .... (Encryption not ready: Private key missing: please try to log-out and log-in again)

This might be related (as stated in owncloud/oauth2#213)

As stated here https://doc.owncloud.com/server/admin_manual/configuration/files/encryption/encryption_configuration.html
Oauth2 doesn't work with User-Key Based Encryption, hence my issue.

and I think we are in the User-Key situation.

[TheOneRing]

Where you able to find a solution

[elbae]

Hi, unfortunately we could not follow your suggestions (for reasons).
Closing the issue since I can't provide update anymore (maybe our misconfiguration).