[NC15 RC2] Update button in app details doesn't work

[Schmuuu]

Steps to reproduce

1. Open App Store
2. Find app with available update and click the app name (not the update button) so that the app details open
3. See the update button in the app details and click that update button

Expected behaviour

The app should update

Actual behaviour

Nothing happens when I click the update button inside the app details:

Only the Update button (outside of the app details) work.

Server configuration

NC VM by user enoch85 with Ubuntu 16.04 LTS, Apache 2.4.18, mariadb 5.7.24 and PHP 7.0.32.

Updated from an older Nextcloud/ownCloud or fresh install:
Updated from NC 14.0.4

Where did you install Nextcloud from:
Via web updater

Signing status:

Signing status

    Some files have not passed the integrity check. Further information on how to resolve this issue can be found in the documentation. (List of invalid files… / Rescan…)

    Accessing site insecurely via HTTP. You are strongly adviced to set up your server to require HTTPS instead, as described in the security tips ↗.

    Your web server is not properly set up to resolve "/.well-known/caldav". Further information can be found in the documentation.
    Your web server is not properly set up to resolve "/.well-known/carddav". Further information can be found in the documentation.

Integrity check fails

Integrity check fails

``` Array ( [core] => Array ( [INVALID_HASH] => Array ( [core/js/mimetypelist.js] => Array ( [expected] => dc48de7ad4baa030c5e563350c9a80b274bad783f6f5adbf1595ecef6c6a32e52890a24cb26cddb0aa20193ba52c001150c68d8bfb567f0aed566f4029a190a3 [current] => 53613657e01ad07fb878200f174a72a8ac062f6f3d52624034c85157a2bd7517b6b79b18ddad5b312319e7d9bec6b1d409c8ec9098480a356777e0dcee2f39f8 ```

List of activated apps:

App list

Enabled:
  - accessibility: 1.1.0
  - activity: 2.8.2
  - admin_audit: 1.5.0
  - apporder: 0.6.0
  - bruteforcesettings: 1.2.0
  - calendar: 1.6.4
  - cloud_federation_api: 0.1.0
  - comments: 1.5.0
  - contacts: 2.1.7
  - dav: 1.8.0
  - deck: 0.5.0
  - dropit: 0.1.3
  - federatedfilesharing: 1.5.0
  - federation: 1.5.0
  - files: 1.10.0
  - files_external: 1.6.0
  - files_markdown: 2.0.5
  - files_pdfviewer: 1.4.0
  - files_sharing: 1.7.0
  - files_texteditor: 2.7.0
  - files_trashbin: 1.5.0
  - files_versions: 1.8.0
  - files_videoplayer: 1.4.0
  - firstrunwizard: 2.4.0
  - gallery: 18.2.0
  - logreader: 2.0.0
  - lookup_server_connector: 1.3.0
  - metadata: 0.8.0
  - nextcloud_announcements: 1.4.0
  - notes: 2.5.1
  - notifications: 2.3.0
  - oauth2: 1.3.0
  - password_policy: 1.5.0
  - provisioning_api: 1.5.0
  - serverinfo: 1.5.0
  - sharebymail: 1.5.0
  - support: 1.0.0
  - survey_client: 1.3.0
  - systemtags: 1.5.0
  - theming: 1.6.0
  - twofactor_backupcodes: 1.4.1
  - updatenotification: 1.5.0
  - workflowengine: 1.5.0
Disabled:
  - admin_notifications
  - announcementcenter
  - circles
  - encryption
  - external
  - files_accesscontrol
  - files_automatedtagging
  - files_downloadactivity
  - files_mindmap
  - files_reader
  - files_retention
  - groupfolders
  - issuetemplate
  - nextant
  - polls
  - quota_warning
  - ransomware_protection
  - socialsharing_email
  - spreed
  - spreedme
  - user_external
  - user_ldap

Nextcloud configuration:

Config report

{
    "system": {
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost",
            "192.168.178.232",
            "nextcloud",
            "nextcloud"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "overwrite.cli.url": "https:\/\/nextcloud\/",
        "dbtype": "mysql",
        "version": "15.0.0.8",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "appstore.experimental.enabled": "true",
        "preview_libreoffice_path": "\/usr\/bin\/libreoffice",
        "memcache.local": "\\OC\\Memcache\\Redis",
        "filelocking.enabled": true,
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 0,
            "timeout": 0,
            "dbindex": 0,
            "password": "***REMOVED SENSITIVE VALUE***"
        },
        "htaccess.RewriteBase": "\/",
        "maintenance": false,
        "loglevel": 1,
        "updater.release.channel": "beta",
        "theme": "",
        "logtimezone": "CET",
        "updater.server.url": "https:\/\/updates.nextcloud.com\/updater_server\/",
        "updater.secret": "***REMOVED SENSITIVE VALUE***",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauth": 1,
        "mail_smtpsecure": "tls",
        "mail_smtpauthtype": "LOGIN",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "587"
    }
}

Are you using external storage, if yes which one: local/smb/sftp/...
no

Are you using encryption: yes/no
no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...
no

Client configuration

Browser: Firefox

Operating system:
Windows 10 1809

Logs

Browser log

Browser log

Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAJd6AB… blockiert ("font-src").
Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAKD5AB… blockiert ("font-src").
Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAJd6AB… blockiert ("font-src").
JQMIGRATE: Migrate is installed, version 1.4.0 core.js:7:542
Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf inline blockiert ("script-src"). apps:1:1
@babel/polyfill is loaded more than once on this page. This is probably not desirable/intended and may have consequences if different versions of the polyfills are applied sequentially. If you do need to load the polyfill more than once, use @babel/polyfill/noConflict instead to bypass the warning. ncvuecomponents.js:33:58705
New search handler registered

[MorrisJobke]

cc @skjnldsv

[skjnldsv]

Hello!
I will need your browser console log to investigate this issue.
Open your console, reload your page and/or do the action leading to this issue and copy/paste the log in this thread.

How to access your browser console (Click to expand)

Chrome

• Press either CTRL + SHIFT + J to open the “console” tab of the Developer Tools.
• Alternative method:
  1. Press either CTRL + SHIFT + I or F12 to open the Developer Tools.
  2. Click the “console” tab.

Safari

• Press CTRL + ALT + I to open the Web Inspector.
• See Chrome’s step 2. (Chrome and Safari have pretty much identical dev tools.)

IE9

1. Press F12 to open the developer tools.
2. Click the “console” tab.

Firefox

• Press CTRL + SHIFT + K to open the Web console (COMMAND + SHIFT + K on Macs).
• or, if Firebug is installed (recommended):
  1. Press F12 to open Firebug.
  2. Click on the “console” tab.

Opera

1. Press CTRL + SHIFT + I to open Dragonfly.
2. Click on the “console” tab.

[Schmuuu]

Hi, I had posted them above in my initial post.

Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAJd6AB… blockiert ("font-src").
Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAKD5AB… blockiert ("font-src").
Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAJd6AB… blockiert ("font-src").
JQMIGRATE: Migrate is installed, version 1.4.0 core.js:7:542
Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf inline blockiert ("script-src"). apps:1:1
@babel/polyfill is loaded more than once on this page. This is probably not desirable/intended and may have consequences if different versions of the polyfills are applied sequentially. If you do need to load the polyfill more than once, use @babel/polyfill/noConflict instead to bypass the warning. ncvuecomponents.js:33:58705
New search handler registered

By the way, I noticed this issue on my production server running on NC 14.0.4 as well.

[skjnldsv]

@Schmuuu my appologies!
I'm so used to people ignoring the template that I forgot we had this :)
Thanks a lot!

Could I have your network log as well?
Before you do anything, still on the development tools, there is a tab called network. Click on it and then the xhr filter. Do your action and screenshot the network log like this:

If there is one request specifically failing, I could also use the response of this request (click on it, click the response tab and copy the content here) 😉

[Schmuuu]

@skjnldsv :) that's alright, no problem.

I would need an app update for another test ;)
Regarding the data request, I will collect them as you requested. I just have to wait for the next app update.
While I have more apps enabled on my test server, I'll check it, as soon as I come home. I'll update this thread asap.

And by the way: you don't see this issue on your servers? I really thought this is rather a general issue than an issue with my system.

[skjnldsv]

I cannot reproduce no, the update are going ok on my setup. 😕
I'll wait for your feedback then :)
If you want to speed things up, you can also try to install an old version manually and try again. I'll suggest doing it with an app that you do not use so you don't care about the app itself 😉

[Schmuuu]

I uploaded an older version of a new app to my production server and performed the steps.
Please be aware, that this test was now done on NC 14.0.4.

My steps

via ssh:

• moved the app to the app folder

via web:

• went to app overview and found uploaded app as disabled in the "Your apps" overview
• clicked the app to open details view on the right
• clicked "Enable" (that worked fine)
• clicked in the left navigation pane on "Updates"
• clicked again the app to open the details on the right
• clicked the button "Update to x.x.x"

Nothing happened. There wasn't any new entry to the network tab in the browser console. So no request was sent out. Only the notifications come up:

It seems as if the button is not reacting to the click action.

You can see the disable and enable action, but nothing from my (many) clicks to the update button.

Here is the full console output again:

``` Content Security Policy: Die Direktive 'child-src' sollte nicht mehr verwendet werden. Bitte verwenden Sie stattdessen die Direktive 'worker-src' zum Kontrollieren von Workern bzw. die Direktive 'frame-src' zum Kontrollieren von Frames. JQMIGRATE: Migrate is installed, version 1.4.0 core.js:7:542 @babel/polyfill is loaded more than once on this page. This is probably not desirable/intended and may have consequences if different versions of the polyfills are applied sequentially. If you do need to load the polyfill more than once, use @babel/polyfill/noConflict instead to bypass the warning. settings-vue.js:7:234062 New search handler registered search.js:66:4 Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAIw4AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAEzMAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAI7kAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAI3gAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAIt0AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAIw4AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAEzMAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAI7kAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAI3gAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAIt0AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAG1gAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAGvEAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAGz8AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAGVUAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAG1gAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAGvEAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAGz8AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAGVUAB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAKD5AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAJd6AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAKD5AB… blockiert ("font-src"). Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf data:font/woff;base64,d09GRgABAAAAAJd6AB… blockiert ("font-src"). New search handler registered ```

[skjnldsv]

Okay, this might sound silly, can you clear your browser cache as well? :)

@juliushaertl any similar issues in mind?

[juliusknorr]

No idea so far. @Schmuuu Is there a difference in the behaviour between the two update buttons (in the list and in the sidebar)?

[Schmuuu]

I cleared the browser cache before (sorry, didn't mention it), but it doesn't solve the issue.

And yes, there is a difference between both buttons @juliushaertl
The obvious difference :D
the update button in the list (left) works and the update button in the sidebar (right) doesn't work.
But you made me wonder and I further checked in the browser's developer tools. I found that there seems to be no event for the button in the sidebar.

So the left button looks like this in the inspector

The right button is missing the event

I hope this helps.

[juliusknorr]

I could reproduce, the click event was actually missing. Fix is in #12815