Sporadic authentication failure caldav/carddav

[Diekos]

Hi all,

I'm running OpenCloud via the Docker Compose method.
I'm using Pocket ID as OIDC provider and Caddy as reverse proxy instead of Traefik, and I use the radicale shipped with OpenCloud.
I use an app token.

Currently I sync my calendar and address book on android with davx5. (I have also used the OpenSync app, and I have the same issue when using that app.)
This works around ~90% of the time, manual sync works and I sync every 15 minutes, but I get an "authentication failure" around 10 times a day (roughly?).

This evening I had the time to monitor the logs and extract the error messages and when the sync fails, the opencloud container generates the following logs:
2025-11-26T20:34:02Z ERR unexpected error error="Decomposedfs: error download blob '8ef6a84b-62fb-4069-8d8a-3b76369a7f93': could not read blob '/var/lib/opencloud/storage/metadata/spaces/js/oncs3-appauth-data/blobs/1a/4c/a5/10/-27bb-4cab-8601-6dd5a0d285b7': open /var/lib/opencloud/storage/metadata/spaces/js/oncs3-appauth-data/blobs/1a/4c/a5/10/-27bb-4cab-8601-6dd5a0d285b7: no such file or directory" action=download datatx=spaces handler=download host.name=f0d02068942a line=github.com/opencloud-eu/reva/v2@v2.39.2-0.20251030154544-cac8a0257da6/pkg/rhttp/datatx/utils/download/download.go:279 path=/396a55a4-aaaf-4a69-9feb-adc288fcee71.json pkg=rhttp service=storage-system spaceid=jsoncs3-appauth-data!jsoncs3-appauth-data svc=datatx
2025-11-26T20:34:02Z ERR http end="26/Nov/2025:20:34:02 +0000" host=127.0.0.1 host.name=f0d02068942a line=github.com/opencloud-eu/reva/v2@v2.39.2-0.20251030154544-cac8a0257da6/internal/http/interceptors/log/log.go:112 method=GET pkg=rhttp proto=HTTP/1.1 service=storage-system size=0 start="26/Nov/2025:20:34:02 +0000" status=500 time_ns=1334381 traceid=bc2e1d8190aa0da7d8ed5d56e1809581 uri=/data/spaces/jsoncs3-appauth-data%21jsoncs3-appauth-data/396a55a4-aaaf-4a69-9feb-adc288fcee71.json url=/396a55a4-aaaf-4a69-9feb-adc288fcee71.json

The radicale container does not contain any errors.

The error message that Davx5 generates is:
Authentication failed (check login credentials)

I have no idea where to begin in resolving this issue. It cannot be a credential error because without changing a thing, a manual sync works fine and consecutive automatic syncs every 15 minutes works just fine as well. It just fails randomly sometimes.

Can someone help me troubleshoot this issue? If I need to provide additional info or configuration files or anything, please let me know.

Thank you in advance!

[Diekos]

After the update to version 4.0.0 I still see this behavior.
The logs I got this time are:
opencloud-1 | {"level":"error","service":"storage-system","host.name":"009034e44495","pkg":"rhttp","driver":"decomposed","pid":1,"error":"error: aborted: etag mismatch","time":"2025-12-01T21:53:28Z","line":"github.com/opencloud-eu/reva/v2@v2.40.1/pkg/storage/pkg/decomposedfs/upload/store.go:238","message":"failed to update existing node"}
opencloud-1 | {"level":"warn","service":"storage-system","host.name":"009034e44495","pkg":"rhttp","traceid":"00f2b010fb80f2bc8ec3555ab21cbbad","host":"127.0.0.1","method":"PUT","uri":"/data/simple/3b5cbaae-7d6e-4b74-a649-bd74054ab31b","url":"/3b5cbaae-7d6e-4b74-a649-bd74054ab31b","proto":"HTTP/1.1","status":412,"size":0,"start":"01/Dec/2025:21:53:28 +0000","end":"01/Dec/2025:21:53:28 +0000","time_ns":8907422,"time":"2025-12-01T21:53:28Z","line":"github.com/opencloud-eu/reva/v2@v2.40.1/internal/http/interceptors/log/log.go:112","message":"http"}

Anybody has any idea how I can further troubleshoot this to find the root cause?

Thanks in advance!

[micbar]

@aduffeck that looks worth investigating.

[Diekos]

If I can help by providing configuration files or logs or something, please let me know.
Currently I'm the only one using my instance and there is no important data on it so I can do whatever is needed to help.

[Diekos]

Any update on this?
I notice that I get the sync error a lot less but it's not completely gone.
Sometimes the caldav fails, sometimes the carddav, I can't really find any reason for the error.