push checker uses wrong url for cookie - leads to 403

[nivadis]

the command occ notify_push:setup http://nextcloud.url/push

produeces requests to

127.0.0.1 - - [16/Mar/2026:15:04:01 +0100] "GET /push/test/cookie HTTP/1.1" 301 162 "-" "Nextcloud Server Crawler"
127.0.0.1 - - [16/Mar/2026:15:04:01 +0100] "GET /push/test/cookie HTTP/1.1" 200 9 "-" "Nextcloud Server Crawler"
127.0.0.1 - - [16/Mar/2026:15:04:01 +0100] "GET /push/test/mapping/1 HTTP/1.1" 301 162 "-" "Nextcloud Server Crawler"
127.0.0.1 - - [16/Mar/2026:15:04:01 +0100] "GET /push/test/mapping/1 HTTP/1.1" 200 1 "-" "Nextcloud Server Crawler"
127.0.0.1 - - [16/Mar/2026:15:04:01 +0100] "GET /push/test/reverse_cookie HTTP/1.1" 301 162 "-" "Nextcloud Server Crawler"
127.0.0.1 - - [16/Mar/2026:15:04:01 +0100] "GET /index.php/apps/notify_push/test/cookie HTTP/1.1" 403 0 "-" "-"
127.0.0.1 - - [16/Mar/2026:15:04:01 +0100] "GET /push/test/reverse_cookie HTTP/1.1" 200 27 "-" "Nextcloud Server Crawler"

shouldn't the second cookie url be /push/test/cookie instead of /index.php/apps/notify_push/test/cookie

as the redirect only works for /push/

with a rewrite in nginx it validates the second cookie with 200

		location ^~ /index.php/apps/notify_push/test/cookie {
			rewrite ^ https://nextcloud.url/push/test/cookie permanent;
		}

probably because of
https://github.com/nextcloud/notify_push/blob/main/src/nc.rs#L88

[pabzm]

index.php/apps/… is supposed to be rewritten by nginx and thus should also reach the notify_push app. See https://docs.nextcloud.com/server/stable/admin_manual/installation/nginx.html

The line you linked to also was changed 6 years ago, so this is not new behaviour, as far as I can tell.

Can you show us your nginx config?