Doesn't fully work with mutual TLS (client TLS certificates)

[mintsoft]

This issue respects the following points:

• I have read the FAQ
• I have searched for existing issues
• The issue affects the Deck Android app, neither the Deck server app nor the Nextcloud Android app.

Describe the bug

1. Configure nextcloud behind m-TLS
2. Login to deck on android
3. Try and sync the boards

Expected behavior

This is kind of unusual, the login seems to work (I assume this is because it's handed off to the Nextcloud app?) however deck is unable to sync anything itself or save any changes to cards/boards etc. I did have a quick look at the logs, however it seems like it's just hanging rather than throwing an error?

Deck Android version

1.24.5

Deck server version

1.15.6

Nextcloud Android version

3.34.1

Nextcloud version

31.0.12

Device

Pixel 8a

Android Version

15

App Store

• Google Play Store
• Google Play Store (Beta channel)
• F-Droid
• Huawei App Gallery

Stacktrace

I don't have one at current but I'll gather some better diagnostics later on

[desperateCoder]

Hi @mintsoft, thanks for your report!

I assume this is because it's handed off to the Nextcloud app?

correct.

I don't have one at current but I'll gather some better diagnostics later on

that would be very helpful! :)

[mintsoft]

I did some debugging and I can see that it definitely doesn't look like it'll work (assuming Android doesn't just automagically send TLS client certificates around, which I assume it doesn't). I think if memory serves I ended up inside retrofit and there wasn't anything specific adding or handling TLS certs. But I got lost a few times, so I might have ended up completely backasswards.

The behaviour is that it ends up just hanging on syncing boards after it has been redirected back to the app after login. The weird thing is, I can't really see any HTTPS request errors in my webserver when it's hanging, I was expecting there to be near-constant retry requests, but I couldn't see anything (although it's a little difficult to separate out my debugging traffic from real traffic)

[mintsoft]

OK, it does work. There is basically a weird condition that occurs if the main nextcloud app hasn't prompted to select a user certificate it will cause deck to hang when attempting to communicate with the nextcloud backend. If you've got the nextcloud app all connecting fine then the app does actually work.

I'd say there is a bug here, although not what I originally thought and whether it's in deck or nextcloud itself is debatable?