[GH-ISSUE #658] Does floccus bypass my nextcloud 2FA setup? #432

New issue

Closed

opened 2026-02-25 22:37:07 +03:00 by kerem · 2 comments

kerem commented

2026-02-25 22:37:07 +03:00

Owner

Originally created by @ghost on GitHub (Sep 14, 2020).
Original GitHub issue: https://github.com/floccusaddon/floccus/issues/658

hello i have seen that floccus have successfully logged himself to my Nexcloud, my question is how does it do that
since there is passwordless and 2fa enabled on my servers.

Does that mean the bookmarks app (so the API for floccus) bypass totally my security in two step ? (i understand technical language i just want to understand the security mechanism for this connection))

Originally created by @ghost on GitHub (Sep 14, 2020). Original GitHub issue: https://github.com/floccusaddon/floccus/issues/658 hello i have seen that floccus have successfully logged himself to my Nexcloud, my question is how does it do that since there is passwordless and 2fa enabled on my servers. Does that mean the bookmarks app (so the API for floccus) bypass totally my security in two step ? (i understand technical language i just want to understand the security mechanism for this connection))

kerem

2026-02-25 22:37:07 +03:00

closed this issue
added the
question
label

kerem commented

2026-02-25 22:37:08 +03:00

Author

Owner

@marcelklehr commented on GitHub (Sep 15, 2020):

Hello @aelisya
By signing in once to setup floccus (possibly with 2fa) , a token ("app password" in nextcloud speak) is created for floccus, which it uses to connect to your nextcloud. You can review and revoke all your app passwords in your personal settings in nextcloud.

I hope this clears things up.

@marcelklehr commented on GitHub (Sep 15, 2020): Hello @aelisya By signing in once to setup floccus (possibly with 2fa) , a token ("app password" in nextcloud speak) is created for floccus, which it uses to connect to your nextcloud. You can review and revoke all your app passwords in your personal settings in nextcloud. I hope this clears things up.

kerem commented

2026-02-25 22:37:08 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Mar 21, 2023):

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions[bot] commented on GitHub (Mar 21, 2023): This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

kerem referenced this issue

2026-02-25 22:40:38 +03:00

[PR #432] [CLOSED] Bump @babel/preset-env from 7.7.1 to 7.8.3 #1569

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/floccus#432

No description provided.

Rows
Columns