nextcloud/server · error · Sabre\DAV\Exception\PreconditionFailed

Strict cookie check failed

Error message

Strict cookie check failed

What it means

Error "Strict cookie check failed" thrown in nextcloud/server.

Source

Thrown at apps/dav/lib/Connector/Sabre/PublicAuth.php:67

		private IURLGenerator $urlGenerator,
	) {
		// setup realm
		$defaults = new Defaults();
		$this->realm = $defaults->getName();
	}

	/**
	 * @throws NotAuthenticated
	 * @throws MaxDelayReached
	 * @throws ServiceUnavailable
	 */
	#[\Override]
	public function check(RequestInterface $request, ResponseInterface $response): array {
		try {
			$this->throttler->sleepDelayOrThrowOnMax($this->request->getRemoteAddress(), self::BRUTEFORCE_ACTION);

			if (count($_COOKIE) > 0 && !$this->request->passesStrictCookieCheck() && $this->getShare()->isPasswordProtected()) {
				throw new PreconditionFailed('Strict cookie check failed');
			}

			$auth = new HTTP\Auth\Basic(
				$this->realm,
				$request,
				$response
			);

			$userpass = $auth->getCredentials();
			// If authentication provided, checking its validity
			if ($userpass && !$this->validateUserPass($userpass[0], $userpass[1])) {
				return [false, 'Username or password was incorrect'];
			}

			return $this->checkToken();
		} catch (NotAuthenticated|MaxDelayReached $e) {
			$this->throttler->registerAttempt(self::BRUTEFORCE_ACTION, $this->request->getRemoteAddress());
			throw $e;

View on GitHub (pinned to ecdeb153ff)

When it happens

Trigger: Thrown at apps/dav/lib/Connector/Sabre/PublicAuth.php:67 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of nextcloud/server@ecdeb153ff (2026-08-17). Data as JSON: /api/errors/f1f949f53ce74c01. Report an issue: GitHub.