[BUG] Webdav 401 with verified account on 0.8.3

[Cherryblue]

Description

I've been trying to sync my files using a webdav client.
I've tried multiple clients, on multiple computers, using multiple connections, and multiple oxicloud accounts.
It never worked.

I'm on v0.8.3 (docker).

Console logs give me this :
[cloud-oxi-app] 2026-07-13T19:54:27.374981962Z 2026-07-13T19:54:27.374064Z WARN req{request_id="019f5d0b-9288-7c72-a9ca-355423883dcf" client_ip=[fd28:2c3a:f719:e::1]:37738 method=PROPFIND uri=/webdav/}: oxicloud::interfaces::middleware::auth: App password verification failed: Access Denied: Invalid username or app password

To Reproduce

So I've searched if this issue already existed, and lastly tried the shell script proposed in this topic

I've created a test account "test2026:test2026" (id:pwd) on my personal instance, but all I get using the shell script (and any other client) is 401.

base64=$(echo -n "test2026:test2026" | base64)
curl -k -X PROPFIND https://my-instance-url/webdav/ \
-H "Authorization: Basic $base64" \
-H "Depth: 1" \
-H "Content-Type: application/xml" \
-d '<?xml version="1.0" encoding="utf-8" ?>
<D:propfind xmlns:D="DAV:">
<D:allprop/>
</D:propfind>

I should add that using the same account (id: test2026, pwd : test2026), I have no problem using oxicloud standard web access.

Expected Behavior

Welp... Webdav access 🗡️

Screenshots

NA

Environment

• OS: PikaOS (debian sid) with Nemo, Nextcloud Sync App, Shell script / Android 16 smartphone with FolderSync
• Browser: Firefox last version
• OxiCloud Version: 0.8.3 (docker official image)
• Rust Version: .

Additional Context

My service is behind a reverse proxy for public access. I use HAPROXY. Oxicloud webpage IS accessible, and I can connect to it via Firefox (appart from webdav).
Haproxy is configured as such :
backend oxicloud
server oxi ::1:8086 check
Didn't find any specific requirement for reverse proxying on the github.

I'm also IPv6 only, my internet provider doesn't give me a fixed ipv4.it's IPv6 + IPv4 CGNAT, meaning I can only host for ipv6 (at least for now).

I have used the account password. Must we use something else, like a generated app password instead of the general password ? If yes, how ? I haven't seen any option for this, nor any guide.

Possible Solution

.

[EdouardVanbelle]

Hello you can connect using app password (to create them please go in your profile section)

[Cherryblue]

Hello Edouard,

Based on your instructions I was able to connect using Nemo (my file explorer).

I saw #583 and I completely agree, I didn't find the place to generate the app password before by myself (be it in the docs or on the app).

Thank you !

[Cherryblue]

@EdouardVanbelle sorry to bother you again, webdav does work on Nemo (Nautilus equivalent), FolderSync on phone, but I'm still unable to connect via NextCloud Desktop App.
Yet it seems to be mentionned here and there that it's possible.

I've tried https://myinstance, I've tried https://myinstance/webdav, I've tried https://myinstance/webdav/, but nothing works.
Each time it tells me "Impossible to connect to this url".

Is there some specific configuration or url to set up ? (Here again, I checked but wasn't able to find the specific information needed for this in documentation)

Mention : I now have both ipv4 & ipv6 internet provider, dns works and was tested, web portal accessible...

[Cherryblue]

Based on this and that, I've also tried https://myinstance/remote.php/dav/files/test2026 with no success

[EdouardVanbelle]

Hello
https://myinstance/remote.php/dav/... is only for Nextcloud application
If you have issue whith some applications connecting to https://myinstance/webdav/, please provide associated logs from your server, and if possible logs from your application

note that #521 is not yet merged

[Cherryblue]

Right :

• I'm trying to access oxicloud using Nextcloud Desktop APP. I thought it was possible reading oxicloud's docs and releases, but the procedure isn't entirely described. Do tell me if it isn't possible yet.
• I'm on linux, using Nextcloud Desktop AppImage.
• When starting it, I am asked to fill in the server URL.
• Based on information I was able to glean here and there, I tried to connect using https://myinstance/remote.php/dav/
• With this, I was able to get logs on oxicloud's side.

Here are the requested logs :
[cloud-oxi-app] 2026-07-17T06:49:27.064700163Z 2026-07-17T06:49:27.063073Z WARN req{request_id="83cf1854-1d9b-451c-b91c-11a0ea6244e4" client_ip=[fd28:2c3a:f719:e::1]:42710 method=GET uri=/webdav/status.php}: http::dav: client_error status=401 latency_ms=0 content_length=0 content_type="text/plain; charset=utf-8" user_agent="Mozilla/5.0 (Linux) mirall/33.0.7 (build 40389) (Nextcloud, pika-7.1.3-pikaos ClientArchitecture: x86_64 OsArchitecture: x86_64)" [cloud-oxi-app] 2026-07-17T06:49:27.080214904Z 2026-07-17T06:49:27.079468Z WARN req{request_id="83cf1854-1d9b-451c-b91c-11a0ea6244e4" client_ip=[fd28:2c3a:f719:e::1]:42710 method=GET uri=/webdav/status.php}: oxicloud::interfaces::middleware::auth: App password verification failed: Access Denied: Invalid username or app password

I have the same server logs if using URL https://myinstance/webdav.
It clearly feels like I should fill in the user and the password, but I don't know how, nor am I requested to by the app.

I've also tried this based on this link :
https://myinstance/webdav /user:test2026 oxicloud-passkey

But didn't work.

Do I have a problem with the nextcloud app I'm using, or is it something specific to do for it to work with oxicloud, which I wasn't able to gather from the docs ?

Thanks.

[funboytwo]

On the Nextcloud desktop/mobile clients you're supposed to use only the server URL (https://myinstance), same behavior as Nextcloud servers.

[Cherryblue]

On the Nextcloud desktop/mobile clients you're supposed to use only the server URL (https://myinstance), same behavior as Nextcloud servers.

Hi there,
if I only set "https://myinstance" in the nextcloud app and try to connect, I get the same error client-side, and it doesn't log anything server side (oxicloud).
I only get something (401) on the server-side (oxicloud) if I set /webdav, or /remove.php/dav. Without being able to fill user/appPwd

[funboytwo]

Would you mind sharing your reverse proxy configuration? I've had no issues on nginx with the desktop client and I've been using it since the feature first came out.

[Cherryblue]

Would you mind sharing your reverse proxy configuration? I've had no issues on nginx with the desktop client and I've been using it since the feature first came out.

No problem @funboytwo, as said in the first post I use HAPROXY, and the configuration is only these few lines :

frontend web-secured-in
bind :::443 v4v6 ssl crt /certs/
acl host_cloud hdr(host) -i my.instance.domain.name
use_backend oxicloud if host_cloud

backend oxicloud
server oxi ::1:8086 check

This works for web access, webdav through nemo or slidesync (using https://my.instance/webdav).
This however doesn't work for nextcloud sync app.