[GH-ISSUE #539] PlaySMS can't verify, gets immediate 500 Internal Server Error #112

New issue

Closed

opened 2026-02-26 05:33:19 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 05:33:19 +03:00

Owner

Originally created by @tilghman on GitHub (Oct 19, 2022).
Original GitHub issue: https://github.com/nextcloud/twofactor_gateway/issues/539

PlaySMS sends messages correctly, but when attempting to initiate the verification, it never prompts me for the code, it simply replies "Could not verify your code. Please try again."

Further examination reveals that the request is getting a 500 Internal Server error:

https://cloud.example.com/index.php/apps/twofactor_gateway/settings/sms/verification/start
Host: cloud.example.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
requesttoken: ==
X-Requested-With: XMLHttpRequest
Content-Length: 27
Origin: https://cloud.example.com
DNT: 1
Connection: keep-alive
Cookie: _ga=GA1.2.1832505431.1628105617; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true; _pk_id.12.7dcf=; ociwvqedexer=; oc_sessionPassphrase=; nc_username=tlesher; nc_token=; nc_session_id=; _pk_ses.12.7dcf=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
{"identifier":"+161504"}
POST: HTTP/1.1 500 Internal Server Error
Date: Wed, 19 Oct 2022 15:58:39 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.32
Strict-Transport-Security: max-age=15552000; includeSubDomains
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/7.4.32
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-*****='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Content-Length: 4157
Connection: close
Content-Type: text/html; charset=UTF-8

There are no relevant errors in the error log from my IP address, just this one:
[access_compat:error] [pid 27473] [client 10.3.0.2:33876] AH01797: client denied by server configuration: /var/www/html/data/.ocdata

Plugin version string shows "0.20.0". Nextcloud version "24.0.6".

Originally created by @tilghman on GitHub (Oct 19, 2022). Original GitHub issue: https://github.com/nextcloud/twofactor_gateway/issues/539 PlaySMS sends messages correctly, but when attempting to initiate the verification, it never prompts me for the code, it simply replies "Could not verify your code. Please try again." Further examination reveals that the request is getting a 500 Internal Server error: https://cloud.example.com/index.php/apps/twofactor_gateway/settings/sms/verification/start Host: cloud.example.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json requesttoken: *****=*****= X-Requested-With: XMLHttpRequest Content-Length: 27 Origin: https://cloud.example.com DNT: 1 Connection: keep-alive Cookie: _ga=GA1.2.1832505431.1628105617; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true; _pk_id.12.7dcf=*****; ociwvqedexer=*****; oc_sessionPassphrase=*****; nc_username=tlesher; nc_token=*****; nc_session_id=*****; _pk_ses.12.7dcf=1 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin {"identifier":"+1615*****04"} POST: HTTP/1.1 500 Internal Server Error Date: Wed, 19 Oct 2022 15:58:39 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.32 Strict-Transport-Security: max-age=15552000; includeSubDomains Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: none X-XSS-Protection: 1; mode=block X-Powered-By: PHP/7.4.32 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-*****='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self'; Content-Length: 4157 Connection: close Content-Type: text/html; charset=UTF-8 There are no relevant errors in the error log from my IP address, just this one: [access_compat:error] [pid 27473] [client 10.3.0.2:33876] AH01797: client denied by server configuration: /var/www/html/data/.ocdata Plugin version string shows "0.20.0". Nextcloud version "24.0.6".

kerem closed this issue

2026-02-26 05:33:19 +03:00

kerem referenced this issue

2026-02-26 05:34:00 +03:00

[PR #112] [MERGED] Update composer deps #216

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/twofactor_gateway-nextcloud#112

No description provided.

Rows
Columns