Notification icon shows new notifications when there are no new notifications when Nextcloud is accessed via HTTP

[knuxify]

How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

Steps to reproduce

1. Disable HTTPS enforcing and redirects from HTTP to HTTPS.
2. Clear all notifications (if any).
3. While connected via HTTP, load any app or reload the page.

Expected behaviour

The notification icon does not show the "new messages" icon.

Actual behaviour

The notification icon is the "new messages" icon. After opening and closing the notification menu the icon returns to normal until the next reload. There's an error in the console saying "The Notification permission may only be requested in a secure context." (Displaying notifications, if there are any, works just fine.)

Server configuration

Operating system: Debian Buster

Web server: nginx

Database: MariaDB

PHP version: 7.3

Nextcloud version: 19.0.1

Updated from an older Nextcloud/ownCloud or fresh install: Fresh install

Where did you install Nextcloud from: ZIP file

Signing status:

Signing status

No errors have been found.

List of activated apps:

App list

  - accessibility: 1.5.0
  - activity: 2.12.0
  - announcementcenter: 3.8.1
  - apporder: 0.10.0
  - breezedark: 19.0.4
  - bruteforcesettings: 1.6.0
  - calendar: 2.0.3
  - cloud_federation_api: 1.2.0
  - comments: 1.9.0
  - contacts: 3.3.0
  - contactsinteraction: 1.0.0
  - cookbook: 0.7.6
  - dav: 1.15.0
  - federatedfilesharing: 1.9.0
  - files: 1.14.0
  - files_external: 1.10.0
  - files_pdfviewer: 1.8.0
  - files_rightclick: 0.16.0
  - files_sharing: 1.11.0
  - files_trashbin: 1.9.0
  - files_versions: 1.12.0
  - files_videoplayer: 1.8.0
  - firstrunwizard: 2.8.0
  - groupfolders: 7.0.0
  - logreader: 2.4.0
  - lookup_server_connector: 1.7.0
  - maps: 0.1.6
  - metadata: 0.12.0
  - nextcloud_announcements: 1.8.0
  - notes: 3.6.2
  - notifications: 2.7.0
  - oauth2: 1.7.0
  - onlyoffice: 4.3.0
  - password_policy: 1.9.1
  - photos: 1.1.0
  - previewgenerator: 2.3.0
  - privacy: 1.3.0
  - provisioning_api: 1.9.0
  - recommendations: 0.7.0
  - serverinfo: 1.9.0
  - settings: 1.1.0
  - sharebymail: 1.9.0
  - spreed: 9.0.3
  - support: 1.2.1
  - systemtags: 1.9.0
  - tasks: 0.13.3
  - text: 3.0.1
  - theming: 1.10.0
  - twofactor_backupcodes: 1.8.0
  - updatenotification: 1.9.0
  - viewer: 1.3.0
  - workflowengine: 2.1.0

Nextcloud configuration:

Config report

    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "192.168.1.104"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "19.0.1.1",
        "overwrite.cli.url": "https:\/\/192.168.1.104\/nextcloud",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "maintenance": false,
        "filelocking.enabled": true,
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "memcache.local": "\\OC\\Memcache\\Redis",
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 0,
            "dbindex": 0,
            "password": "***REMOVED SENSITIVE VALUE***",
            "timeout": 1.5
        },
        "preview_ffmpeg_path": "\/usr\/bin\/ffmpeg",
        "enable_previews": true,
        "enabledPreviewProviders": [
            "OC\\Preview\\TXT",
            "OC\\Preview\\MarkDown",
            "OC\\Preview\\OpenDocument",
            "OC\\Preview\\PDF",
            "OC\\Preview\\MSOffice2003",
            "OC\\Preview\\MSOfficeDoc",
            "OC\\Preview\\PDF",
            "OC\\Preview\\Image",
            "OC\\Preview\\Photoshop",
            "OC\\Preview\\TIFF",
            "OC\\Preview\\SVG",
            "OC\\Preview\\Font",
            "OC\\Preview\\MP3",
            "OC\\Preview\\Movie",
            "OC\\Preview\\MKV",
            "OC\\Preview\\MP4",
            "OC\\Preview\\AVI"
        ],
        "app_install_overwrite": [
            "gallery"
        ]
    }
}

Are you using external storage, if yes which one: local

Are you using encryption: no

Are you using an external user-backend, if yes which one: no

Client configuration

Browser: Firefox 78.0.2

Operating system: Arch Linux

Logs

Browser log

Browser log

Requesting notifications permissions (App.vue:312)
The Notification permission may only be requested in a secure context. (files)

[cloo]

Confirming.
http://ciri.institute/index.php/s/2XJd6AAM5b22F3n

[szaimen]

This is due to requesting the notification permission when logging in -> not a bug but a feature.

[cloo]

@szaimen, I have to argue.
Causality does not make anything a feature. Purpose does.
For users, a permanent notification kills understanding, if there are any notifications or not. They have to spare a click and some attention for it to come back to normal, until next login. This is counter-usability.

[nickvergessen]

Oh, i didn't know notifications only work with https.

Yeah needs fixing in notifications app to ignore insecure pages