This issue has been created
There are 2 updates.
 
 
Cristal / cid:jira-generated-image-avatar-db7ddbc6-815e-44b6-94a2-260b1a0a7249 CRISTAL-760 Open

All authentified Nextcloud requests should include OCS-APIRequest header

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-9c196d2a-5dd8-4c9e-bc01-4681889284f7 Pierre Jeanjean created this issue on 28/Nov/25 17:10
 
Summary: All Nextcloud requests with side-effects should include OCS-APIRequest header
Issue Type: cid:jira-generated-image-avatar-db7ddbc6-815e-44b6-94a2-260b1a0a7249 Bug
Assignee: Unassigned
Components: Backend - NextCloud
Created: 28/Nov/25 17:10
Priority: cid:jira-generated-image-static-major-460916a4-948b-48eb-9b2c-fbe6b4d8725b Major
Reporter: Pierre Jeanjean
Description:

This is especially important when relying on session cookies for authentication, for example if Cristal is embedded in Nextcloud as an app.

 
 

2 updates

 
cid:jira-generated-image-avatar-9c196d2a-5dd8-4c9e-bc01-4681889284f7 Changes by Pierre Jeanjean on 28/Nov/25 17:10
 
Summary: All authentified Nextcloud requests with side-effects should include OCS-APIRequest header
Assignee: Pierre Jeanjean