[Bug]: Cannot disable active apps in App store (34.0.2)

[MadsBen]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

When trying to disable an active app by clicking the "Disable" button in https://<nextcloud instance>/settings/apps/enabled nothing happens. The app is still active.

Steps to reproduce

1. Login as admin and go to https://<nextcloud instance>/settings/apps/enabled
2. Click the "Disable" button for an app.

Expected behavior

I expect the app to be disabled. Nothing happens.

Nextcloud Server version

34

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.5

Web server

Other

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

Updated from a MINOR version (ex. 32.0.1 to 32.0.2)

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
    "system": {
        "memcache.local": "\\OC\\Memcache\\APCu",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 6379,
            "password": "***REMOVED SENSITIVE VALUE***"
        },
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "***REMOVED SENSITIVE VALUE***",
            "***REMOVED SENSITIVE VALUE***",
            "***REMOVED SENSITIVE VALUE***"
        ],
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "overwrite.cli.url": "***REMOVED SENSITIVE VALUE***",
        "overwriteprotocol": "https",
        "dbtype": "mysql",
        "version": "34.0.2.1",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "logtimezone": "UTC",
        "installed": true,
        "maintenance": false,
        "theme": "",
        "loglevel": 2,
        "updater.release.channel": "stable",
        "trashbin_retention_obligation": "30, 35",
        "twofactor_enforced": "true",
        "twofactor_enforced_groups": [
            "admin"
        ],
        "twofactor_enforced_excluded_groups": [],
        "mysql.utf8mb4": true,
        "config_is_read_only": false,
        "app_install_overwrite": {
            "0": "drawio",
            "1": "keeweb",
            "forwarded_for_headers": [
                "HTTP_X_FORWARDED_FOR"
            ]
        },
        "default_phone_region": "DK",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauthtype": "LOGIN",
        "mail_smtpauth": 1,
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "587",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "allow_local_remote_servers": "1",
        "memories.exiftool": "\/var\/www\/html\/custom_apps\/memories\/bin-ext\/exiftool-amd64-musl",
        "enabledPreviewProviders": [
            "OC\\Preview\\Image",
            "OC\\Preview\\HEIC",
            "OC\\Preview\\TIFF"
        ],
        "preview_max_memory": 4096,
        "preview_max_filesize_image": 256,
        "memories.vod.path": "\/var\/www\/html\/custom_apps\/memories\/bin-ext\/go-vod-amd64",
        "maintenance_window_start": 1,
        "memories.db.triggers.fcu": true,
        "memories.gis_type": 1,
        "memories.vod.disable": false,
        "memories.vod.external": true,
        "memories.vod.bind": "go-vod:47788",
        "memories.vod.connect": "go-vod:47788",
        "memories.vod.vaapi": true,
        "upgrade.disable-web": true,
        "openmetrics_allowed_clients": [
            "***REMOVED SENSITIVE VALUE***",
            "***REMOVED SENSITIVE VALUE***"
        ]
    }
}

List of activated Apps

Enabled:
  - activity: 7.0.0
  - admin_audit: 1.24.0
  - app_api: 34.0.0
  - appstore: 1.0.0
  - circles: 34.0.0
  - cloud_federation_api: 1.18.0
  - comments: 1.24.0
  - contactsinteraction: 1.15.0
  - dashboard: 7.14.0
  - dav: 1.39.0
  - drawio: 4.3.5
  - eurooffice: 11.0.1
  - federatedfilesharing: 1.24.0
  - federation: 1.24.0
  - files: 2.6.0
  - files_downloadlimit: 5.2.0
  - files_external: 1.26.0
  - files_lock: 34.0.1
  - files_pdfviewer: 7.0.0-dev.0
  - files_reminders: 1.7.0
  - files_sharing: 1.26.0
  - files_trashbin: 1.24.0
  - files_versions: 1.27.0
  - firstrunwizard: 7.0.0-dev.0
  - integration_openproject: 3.1.1
  - integration_openstreetmap: 4.2.0
  - logreader: 7.0.0
  - lookup_server_connector: 1.22.0
  - nextcloud_announcements: 6.0.0
  - notifications: 7.0.0-dev.1
  - oauth2: 1.22.0
  - office: 1.0.0
  - password_policy: 6.0.0-dev.0
  - photos: 7.0.0
  - privacy: 6.0.0-dev.1
  - profile: 1.3.0
  - provisioning_api: 1.24.0
  - recommendations: 7.0.0
  - related_resources: 5.0.0-dev.0
  - richdocuments: 11.1.0
  - serverinfo: 6.0.0
  - settings: 1.17.0
  - sharebymail: 1.24.0
  - support: 6.0.0
  - survey_client: 6.0.0-dev.0
  - suspicious_login: 12.0.0-dev.0
  - systemtags: 1.24.0
  - text: 8.0.0
  - theming: 2.9.0
  - twofactor_backupcodes: 1.23.0
  - twofactor_totp: 16.0.0
  - updatenotification: 1.24.0
  - user_migration: 10.4.0
  - user_status: 1.14.0
  - viewer: 7.0.0-dev.0
  - weather_status: 1.14.0
  - webhook_listeners: 1.6.0
  - workflowengine: 2.16.0
Disabled:
  - bruteforcesettings: 7.0.0 (installed 2.4.0)
  - deck: 1.18.2 (installed 1.18.2)
  - encryption: 2.22.0
  - maps: 1.7.1 (installed 1.7.1)
  - metadata: 0.23.0 (installed 0.23.0)
  - notes: 6.0.1 (installed 6.0.1)
  - previewgenerator: 5.14.0 (installed 5.14.0)
  - tasks: 0.18.1 (installed 0.18.1)
  - twofactor_nextcloud_notification: 8.0.0
  - user_ldap: 1.25.0
  - whiteboard: 1.5.9 (installed 1.5.9)

Nextcloud Signing status

Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- core
	- INVALID_HASH
		- core/js/mimetypelist.js
	- EXTRA_FILE
		- core/img/filetypes/drawio.svg
		- core/img/filetypes/dwb.svg

Raw output
==========
Array
(
    [core] => Array
        (
            [INVALID_HASH] => Array
                (
                    [core/js/mimetypelist.js] => Array
                        (
                            [expected] => cb945c6402e12d9e7d42d0359acf95a6e9a9b0c1f3bd8528f598a7fb1694e5ae34c80cf44ef6c8901eac1bfdd152de3315fc7eac007efee0f33f09ed3e518b6a
                            [current] => 09779c15c6ca51e1dd07931ef2708756cbdc9a9adb41cd6a12eb177f57e005652e1ed3e1df18d46f80a4ad30637a6075e7a9cc11f34b44aeb66b3631b8ba1840
                        )

                )

            [EXTRA_FILE] => Array
                (
                    [core/img/filetypes/drawio.svg] => Array
                        (
                            [expected] => 
                            [current] => 92e0974cf869bf8ab969c3442dc2b80d55fde36441d22924db74916a06b407520aa2a9dc39336f9157195ebede697ffac0e639360879255ab91932d406e1897d
                        )

                    [core/img/filetypes/dwb.svg] => Array
                        (
                            [expected] => 
                            [current] => 43731dd5f17a048112ea5109b40b02ec019b3ee2324385a0f448e3bd2264cb13dc160ab018d893f92f8e2f168fd09009b51578c8c6b97a02a1617c67ac087701
                        )

                )

        )

)

Nextcloud Logs

{"reqId":"IYqSpH3bmOQ8Cl5A4SPQ","level":3,"time":"2026-07-28T09:55:52+00:00","remoteAddr":"104.22.69.126","user":"admin","app":"no app in context","method":"POST","url":"/ocs/v2.php/apps/appstore/api/v1/apps/disable","scriptName":"/ocs/v2.php","message":"OC\\App\\AppManager::{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(): Argument #1 ($id) must be of type string, array given in file '/var/www/html/lib/private/App/AppManager.php' line 465","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"34.0.2.1","exception":{"Exception":"Exception","Message":"OC\\App\\AppManager::{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(): Argument #1 ($id) must be of type string, array given in file '/var/www/html/lib/private/App/AppManager.php' line 465","Code":0,"Trace":[{"file":"/var/www/html/lib/private/AppFramework/App.php","line":137,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->","args":[{"__class__":"OCA\\Appstore\\Controller\\ApiController"},"disableApp"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\\AppFramework\\App","type":"::","args":["OCA\\Appstore\\Controller\\ApiController","disableApp",{"__class__":"OC\\AppFramework\\DependencyInjection\\DIContainer"},{"_route":"ocs.appstore.api.disableapp"}]},{"file":"/var/www/html/ocs/v1.php","line":78,"function":"match","class":"OC\\Route\\Router","type":"->","args":["/ocsapp/apps/appstore/api/v1/apps/disable"]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","Line":110,"Previous":{"Exception":"TypeError","Message":"OC\\App\\AppManager::{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(): Argument #1 ($id) must be of type string, array given","Code":0,"Trace":[{"function":"{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}","class":"OC\\App\\AppManager","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/lib/private/App/AppManager.php","line":465,"function":"array_filter","args":[{"0":"drawio","1":"keeweb","forwarded_for_headers":"*** sensitive parameters replaced ***"},{"__class__":"Closure"}]},{"file":"/var/www/html/apps/appstore/lib/Controller/ApiController.php","line":207,"function":"removeOverwriteNextcloudRequirement","class":"OC\\App\\AppManager","type":"->","args":["photos"]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":165,"function":"disableApp","class":"OCA\\Appstore\\Controller\\ApiController","type":"->","args":["photos"]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":78,"function":"executeController","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->","args":[{"__class__":"OCA\\Appstore\\Controller\\ApiController"},"disableApp"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":137,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->","args":[{"__class__":"OCA\\Appstore\\Controller\\ApiController"},"disableApp"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\\AppFramework\\App","type":"::","args":["OCA\\Appstore\\Controller\\ApiController","disableApp",{"__class__":"OC\\AppFramework\\DependencyInjection\\DIContainer"},{"_route":"ocs.appstore.api.disableapp"}]},{"file":"/var/www/html/ocs/v1.php","line":78,"function":"match","class":"OC\\Route\\Router","type":"->","args":["/ocsapp/apps/appstore/api/v1/apps/disable"]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/lib/private/App/AppManager.php","Line":465},"message":"OC\\App\\AppManager::{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(): Argument #1 ($id) must be of type string, array given in file '/var/www/html/lib/private/App/AppManager.php' line 465","exception":"{\"class\":\"Exception\",\"message\":\"OC\\App\\AppManager::{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(): Argument #1 ($id) must be of type string, array given in file '/var/www/html/lib/private/App/AppManager.php' line 465\",\"code\":0,\"file\":\"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php:110\",\"trace\":\"#0 /var/www/html/lib/private/AppFramework/App.php(137): OC\\AppFramework\\Http\\Dispatcher->dispatch(Object(OCA\\Appstore\\Controller\\ApiController), 'disableApp')\\n#1 /var/www/html/lib/private/Route/Router.php(324): OC\\AppFramework\\App::main('OCA\\\\Appstore\\\\Co...', 'disableApp', Object(OC\\AppFramework\\DependencyInjection\\DIContainer), Array)\\n#2 /var/www/html/ocs/v1.php(78): OC\\Route\\Router->match('/ocsapp/apps/ap...')\\n#3 /var/www/html/ocs/v2.php(10): require_once('/var/www/html/o...')\\n#4 {main}\",\"previous\":{\"class\":\"TypeError\",\"message\":\"OC\\App\\AppManager::{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(): Argument #1 ($id) must be of type string, array given\",\"code\":0,\"file\":\"/var/www/html/lib/private/App/AppManager.php:465\",\"trace\":\"#0 [internal function]: OC\\App\\AppManager->{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(Array)\\n#1 /var/www/html/lib/private/App/AppManager.php(465): array_filter(Array, Object(Closure))\\n#2 /var/www/html/apps/appstore/lib/Controller/ApiController.php(207): OC\\App\\AppManager->removeOverwriteNextcloudRequirement('photos')\\n#3 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(165): OCA\\Appstore\\Controller\\ApiController->disableApp('photos')\\n#4 /var/www/html/lib/private/AppFramework/Http/Dispatcher.php(78): OC\\AppFramework\\Http\\Dispatcher->executeController(Object(OCA\\Appstore\\Controller\\ApiController), 'disableApp')\\n#5 /var/www/html/lib/private/AppFramework/App.php(137): OC\\AppFramework\\Http\\Dispatcher->dispatch(Object(OCA\\Appstore\\Controller\\ApiController), 'disableApp')\\n#6 /var/www/html/lib/private/Route/Router.php(324): OC\\AppFramework\\App::main('OCA\\\\Appstore\\\\Co...', 'disableApp', Object(OC\\AppFramework\\DependencyInjection\\DIContainer), Array)\\n#7 /var/www/html/ocs/v1.php(78): OC\\Route\\Router->match('/ocsapp/apps/ap...')\\n#8 /var/www/html/ocs/v2.php(10): require_once('/var/www/html/o...')\\n#9 {main}\"}}","CustomMessage":"OC\\App\\AppManager::{closure:OC\\App\\AppManager::removeOverwriteNextcloudRequirement():465}(): Argument #1 ($id) must be of type string, array given in file '/var/www/html/lib/private/App/AppManager.php' line 465"},"id":"6a687cad2c136"}

Additional info

Using community docker image: nextcloud:fpm-alpine with nginx

[susnux]

Are there any errors in the browsers dev console?

[joshtrichards]

This is likely a configuration matter, not a bug. But you failed to provide the requested information.

Check your app_install_overwrite value. Post on the community help forum for troubleshooting assistance: https://help.nextcloud.com

[MadsBen]

Are there any errors in the browsers dev console?

Yes, a POST to: https://yournextcloud.tld/ocs/v2.php/apps/appstore/api/v1/apps/disable gives status 500.

Unsure how to format this so this is more readable:

AxiosError: Request failed with status code 500
    ht AxiosError.js:102
    wt settle.js:19
    R xhr.js:62
    ar xhr.js:78
    ar xhr.js:16
    nt dispatchRequest.js:46
    promise callback*_request Axios.js:196
    request Axios.js:41
    t Axios.js:257
    it bind.js:12
    gn api.ts:50
    p index.js:382
    #b index.js:253
    add index.js:449
    add index.js:353
    gn api.ts:49
    d apps.ts:132
    u pinia.mjs:1400
    callback actionDisable.ts:22
    onClick AppActions.vue:49
    Xe runtime-core.esm-bundler.js:199
    Mt runtime-core.esm-bundler.js:206
    Wl runtime-core.esm-bundler.js:4494
    A NcButton-QbPBynlU.mjs:84
    Xe runtime-core.esm-bundler.js:199
    Mt runtime-core.esm-bundler.js:206
    n runtime-dom.esm-bundler.js:768
    ae runtime-dom.esm-bundler.js:696
    Oc runtime-dom.esm-bundler.js:714
    Ic runtime-dom.esm-bundler.js:801
    st runtime-core.esm-bundler.js:5720
    j runtime-core.esm-bundler.js:5657
    b runtime-core.esm-bundler.js:5523
    C runtime-core.esm-bundler.js:6189
    run reactivity.esm-bundler.js:260
    et runtime-core.esm-bundler.js:6317
    rt runtime-core.esm-bundler.js:6089
    J runtime-core.esm-bundler.js:6041
    b runtime-core.esm-bundler.js:5535
    q runtime-core.esm-bundler.js:5786
    P runtime-core.esm-bundler.js:5971
    b runtime-core.esm-bundler.js:5509
    q runtime-core.esm-bundler.js:5786
    st runtime-core.esm-bundler.js:5702
    j runtime-core.esm-bundler.js:5657
    b runtime-core.esm-bundler.js:5523
    C runtime-core.esm-bundler.js:6189
    run reactivity.esm-bundler.js:260
    et runtime-core.esm-bundler.js:6317
    rt runtime-core.esm-bundler.js:6089
    J runtime-core.esm-bundler.js:6041
    b runtime-core.esm-bundler.js:5535
    q runtime-core.esm-bundler.js:5786
    st runtime-core.esm-bundler.js:5702
    j runtime-core.esm-bundler.js:5657
    b runtime-core.esm-bundler.js:5523
    q runtime-core.esm-bundler.js:5786
runtime-core.esm-bundler.js:275:13
    hl runtime-core.esm-bundler.js:275
    Ze runtime-core.esm-bundler.js:255
    Mt runtime-core.esm-bundler.js:209
    (Async: promise callback)
    Mt runtime-core.esm-bundler.js:208
    Wl runtime-core.esm-bundler.js:4494
    A NcButton-QbPBynlU.mjs:84
    Xe runtime-core.esm-bundler.js:199
    Mt runtime-core.esm-bundler.js:206
    n runtime-dom.esm-bundler.js:768
    (Async: EventListener.handleEvent)
    ae runtime-dom.esm-bundler.js:696
    Oc runtime-dom.esm-bundler.js:714
    Ic runtime-dom.esm-bundler.js:801
    st runtime-core.esm-bundler.js:5720
    j runtime-core.esm-bundler.js:5657
    b runtime-core.esm-bundler.js:5523
    C runtime-core.esm-bundler.js:6189
    run reactivity.esm-bundler.js:260
    et runtime-core.esm-bundler.js:6317
    rt runtime-core.esm-bundler.js:6089
    J runtime-core.esm-bundler.js:6041
    b runtime-core.esm-bundler.js:5535
    q runtime-core.esm-bundler.js:5786
    P runtime-core.esm-bundler.js:5971
    b runtime-core.esm-bundler.js:5509
    q runtime-core.esm-bundler.js:5786
    st runtime-core.esm-bundler.js:5702
    j runtime-core.esm-bundler.js:5657
    b runtime-core.esm-bundler.js:5523
    C runtime-core.esm-bundler.js:6189
    run reactivity.esm-bundler.js:260
    et runtime-core.esm-bundler.js:6317
    rt runtime-core.esm-bundler.js:6089
    J runtime-core.esm-bundler.js:6041
    b runtime-core.esm-bundler.js:5535
    q runtime-core.esm-bundler.js:5786
    st runtime-core.esm-bundler.js:5702
    j runtime-core.esm-bundler.js:5657
    b runtime-core.esm-bundler.js:5523
    q runtime-core.esm-bundler.js:5786

[MadsBen]

This is likely a configuration matter, not a bug. But you failed to provide the requested information.

Check your app_install_overwrite value. Post on the community help forum for troubleshooting assistance: https://help.nextcloud.com

It has been updated with the missing information.

app_install_overwrite:

  'app_install_overwrite' => 
  array (
    0 => 'drawio',
    1 => 'keeweb',
    'forwarded_for_headers' => 
    array (
      0 => 'HTTP_X_FORWARDED_FOR',
    ),
  ),

[joshtrichards]

Yeah that forwarded_for_headers section does not belong in there. Looks like maybe a cut-n-paste gone wrong at some point or something.

[susnux]

Thank you @joshtrichards !

@MadsBen as Josh mentioned this is caused by the invalid config, you need to remove the forwareded_for_headers from the overwrites setting. You can also always use our forums for troubleshooting: https://help.nextcloud.com/