Clicking on profile picture cause logout

[puschie286]

Clicking on the profile picture in an conversion cause a logout (in SSO with LDAP).
Also, the profile picture is broken/invalid

---

Steps to reproduce

1. Login (SSO with LDAP account)
2. Open a conversion with anyone
3. Click on the profile pricture

Web-App seems fine

Expected behaviour

Correct profile picture shown and a context menu should be open on click on it

Actual behaviour

Logout, required to re-enter server address and re-authorize

Diagnosis and logs

Diagnosis report

### Diagnosis report

APPLICATION	––––––––––––––––––––––––––––––––––––––––––––––––––––––––––––
Version	v2.0.6
Built-in Talk version	v22.0.8
Release channel	stable
SYSTEM	––––––––––––––––––––––––––––––––––––––––––––––––––––––––––––
Operating system	Windows_NT 10.0.19044 (Windows 10 Pro)
Executable path	C:\Program Files\Nextcloud Talk\app-2.0.6\Nextcloud Talk.exe
SERVER	––––––––––––––––––––––––––––––––––––––––––––––––––––––––––––
Server version	v32.0.5
talk app	v22.0.8
notifications app	✅ Enabled
notify_push app	⚠️ Not available

Application config

{
  "launchAtStartup": true,
  "theme": "default",
  "systemTitleBar": false,
  "monochromeTrayIcon": false,
  "zoomFactor": 1,
  "playSoundChat": "respect-dnd",
  "playSoundCall": "respect-dnd",
  "enableCallbox": "respect-dnd",
  "secondarySpeaker": false,
  "secondarySpeakerDevice": null,
  "trustedFingerprints": [
    "sha256/5IynHHgsO4O9wzZnY0gdHoOr10WLap4GjRVmCcHz6gM="
  ],
  "lastAppVersion": "2.0.6"
}

Client logs

Using locale "en_US" for language "de_DE"
index.js:24 Language pack "de_DE" for "talk_desktop" loaded...
index.js:24 Language pack "de_DE" for "spreed" loaded...
5515.js?v=19cece4dbaf7240bdfc4:12 Registering notifications container as a menu
5515.js?v=19cece4dbaf7240bdfc4:12 Notifications permissions granted
5515.js?v=19cece4dbaf7240bdfc4:12 Refetching data in lgfzai (prev: null age: NaN)
5515.js?v=19cece4dbaf7240bdfc4:12 Polling interval updated to 30000
5515.js?v=19cece4dbaf7240bdfc4:12 Started background fetcher as session_keepalive is enabled
/index.php/avatar/potas/512/dark:1  Failed to load resource: the server responded with a status of 401 (Unauthorized)
5515.js?v=19cece4dbaf7240bdfc4:12 Got notification data
5515.js?v=19cece4dbaf7240bdfc4:12 Polling interval updated to 30000
4053.js?v=bb181e2db7ad8c1de441:5 Setting current user
5515.js?v=19cece4dbaf7240bdfc4:1 X-Nextcloud-Talk-Hash initialised:  65bc21837478b62ca1305ef4bbf9821fa1b5b868
4053.js?v=bb181e2db7ad8c1de441:7 Conversations were saved to BrowserStorage. Estimated object size: 3.14 kB
dark:1  Failed to load resource: the server responded with a status of 401 (Unauthorized)
dark:1  Failed to load resource: the server responded with a status of 401 (Unauthorized)
/ocs/v2.php/profile/gatz:1  Failed to load resource: the server responded with a status of 400 (Bad Request)
4053.js?v=bb181e2db7ad8c1de441:7 B
getUserProfileInformation @ 4053.js?v=bb181e2db7ad8c1de441:7
4053.js?v=bb181e2db7ad8c1de441:8 [DEBUG] spreed: m4qpg4k8 | get context |  118.60 ms first chunk
4053.js?v=bb181e2db7ad8c1de441:10 Joined
4053.js?v=bb181e2db7ad8c1de441:8 [DEBUG] spreed: m4qpg4k8 | get context |  115.20 ms status 304
4053.js?v=bb181e2db7ad8c1de441:235 Scrolling to a focused message programmatically
dark:1  Failed to load resource: the server responded with a status of 401 (Unauthorized)
4053.js?v=bb181e2db7ad8c1de441:235 setVisualLastReadMessageId token=m4qpg4k8 id=233
4053.js?v=bb181e2db7ad8c1de441:8 [DEBUG] spreed: m4qpg4k8 | long polling | 4 603.40 ms cancelled
4053.js?v=bb181e2db7ad8c1de441:235 The request has been canceled yi
4053.js?v=bb181e2db7ad8c1de441:8 [DEBUG] spreed: 3ju6i2ve | get context |  92.20 ms first chunk
4053.js?v=bb181e2db7ad8c1de441:10 Joined
4053.js?v=bb181e2db7ad8c1de441:8 [DEBUG] spreed: 3ju6i2ve | get context |  70.50 ms status 304
4053.js?v=bb181e2db7ad8c1de441:235 Scrolling to a focused message programmatically
4053.js?v=bb181e2db7ad8c1de441:235 setVisualLastReadMessageId token=3ju6i2ve id=212
4053.js?v=bb181e2db7ad8c1de441:235 Scrolling to a focused message programmatically
4053.js?v=bb181e2db7ad8c1de441:8 [DEBUG] spreed: 3ju6i2ve | long polling | 10 718.00 ms cancelled
4053.js?v=bb181e2db7ad8c1de441:235 The request has been canceled yi
dark:1  Failed to load resource: the server responded with a status of 401 (Unauthorized)
4053.js?v=bb181e2db7ad8c1de441:235 Scrolling to a focused message programmatically
/ocs/v2.php/profile/gatz:1  Failed to load resource: the server responded with a status of 400 (Bad Request)
4053.js?v=bb181e2db7ad8c1de441:7 B
getUserProfileInformation @ 4053.js?v=bb181e2db7ad8c1de441:7
4053.js?v=bb181e2db7ad8c1de441:10 Joined
4053.js?v=bb181e2db7ad8c1de441:235 setVisualLastReadMessageId token=m4qpg4k8 id=233
5515.js?v=19cece4dbaf7240bdfc4:12 Refetching data in lgfzai (prev: lgfzai age: 30)

The app seems to restart after logout/login so there are no entries for the time that cause the logout

[ShGKme]

This means, getting contacts menu returns 401...

Does it happen in any other scenarios, during a call, for example, or after a long time?
Do you have an access to the server logs?

[puschie286]

Yes. the apache error shows the following when clicking on the icon

[Thu Feb 05 13:53:00.977990 2026] [auth_gssapi:debug] [pid 412751:tid 124358882940608] mod_auth_gssapi.c(1005): [remote 192.168.100.186:61758] URI: /index.php/avatar/gatz/512/dark, no main, no prev
[Thu Feb 05 13:53:03.276517 2026] [auth_gssapi:debug] [pid 412751:tid 124358899726016] mod_auth_gssapi.c(1005): [remote 192.168.100.186:61758] URI: /index.php/contactsmenu/findOne, no main, no prev

But there are a lot of NO AUTH DATA Client did not send any authentication headers messages when starting the talk app

Im not sure if this happen somewhere else, we are currently evaluating nextcloud for our company so the usage is low. But had no disconnect in calls/chats so far (on windows)

[ShGKme]

Do you have access to the nextcloud.log file?

[puschie286]

Yes. But there were no related entries in there (the last entry is from yesterday)

[puschie286]

It seems that this problem affect all images. For each image i get an '401 (Unauthorized)' exception.
Send images are shown like this