Encryption OCA\DAV\Connector\Sabre\Exception\Forbidden: client not allowed to access end-to-end encrypted content about end_to_end_encryption

[tobiasKaminsky]

With which client do you try to access the encrypted folder? Only latest android and iOS version are working. Desktop client is not ready yet. And any web browser accessing UI is intended to be forbidden as encryption/decryption in browser cannot be guarenteed to be secure.

same issue server is on NC 13 Beta 3 IOS version is 2.19.2

[sulliwane]

My TECH PREVIEW nextcloud-client on linux cannot finish the intial setup:

and here are the server logs:
OCA\DAV\Connector\Sabre\Exception\Forbidden: client not allowed to access end-to-end encrypted content /var/www/html/custom_apps/end_to_end_encryption/lib/Connector/Sabre/LockPlugin.php - line 124: OCA\EndToEndEncryption\Connector\Sabre\LockPlugin->checkUserAgent('Mozilla/5.0 (X1...', '/Documents') [internal function] OCA\EndToEndEncryption\Connector\Sabre\LockPlugin->checkLock(Object(Sabre\HTTP\Request), Object(Sabre\HTTP\Response)) /var/www/html/3rdparty/sabre/event/lib/EventEmitterTrait.php - line 105: call_user_func_array(Array, Array) /var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php - line 466: Sabre\Event\EventEmitter->emit('beforeMethod', Array) /var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php - line 254: Sabre\DAV\Server->invokeMethod(Object(Sabre\HTTP\Request), Object(Sabre\HTTP\Response)) /var/www/html/apps/dav/appinfo/v1/webdav.php - line 80: Sabre\DAV\Server->exec() /var/www/html/remote.php - line 164: require_once('/var/www/html/a...') {main}

[schiessle]

With the lastest version of the Android and iOS apps and the e2ee server app v 1.0.4 this problems should be solved. Does it still exists for the desktop client @sulliwane if you have everything up to date.

[sulliwane]

Nextcloud 15.0.0
e2e app: 1.1.0

From my desktop browser, I get this error when trying to open an ecnrypted folder: This operation is forbidden (but I can open from my Android nextcloud app):

[webdav] Fatal: OCA\DAV\Connector\Sabre\Exception\Forbidden: client "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:63.0) Gecko/20100101 Firefox/63.0" is not allowed to access end-to-end encrypted content at <<closure>>

0. /var/www/html/custom_apps/end_to_end_encryption/lib/Connector/Sabre/LockPlugin.php line 125
   checkUserAgent("Mozilla/5.0 (X1 ... 0", "/Documents")
1. <<closure>>
   checkLock(Sabre\HTTP\Reque ... "}, Sabre\HTTP\Response {})
2. /var/www/html/3rdparty/sabre/event/lib/EventEmitterTrait.php line 105
   call_user_func_array([OCA\EndToEndEnc ... "], [Sabre\HTTP\Requ ... }])
3. /var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php line 466
   emit("beforeMethod", [Sabre\HTTP\Requ ... }])
4. /var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php line 254
   invokeMethod(Sabre\HTTP\Reque ... "}, Sabre\HTTP\Response {})
5. /var/www/html/apps/dav/lib/Server.php line 298
   exec()
6. /var/www/html/apps/dav/appinfo/v2/remote.php line 35
   exec()
7. /var/www/html/remote.php line 163
   require_once("/var/www/html/a ... p")

PROPFIND /remote.php/dav/files/me/Documents

[georgehrke]

same issue server is on NC 13 Beta 3 IOS version is 2.19.2

2.19 is too old. You require at least 2.20.0
https://github.com/nextcloud/end_to_end_encryption/blob/master/lib/UserAgentManager.php#L41

[georgehrke]

From my desktop browser, I get this error when trying to open an ecnrypted folder: This operation is forbidden (but I can open from my Android nextcloud app):

That is the expected behaviour. The folder is end to end encrypted, you are not supposed to be able to open it in the browser.

[georgehrke]

Closing due to missing feedback by original reporter.

If you experience a similar issue, please open a new issue.