[Bug]: Upload Folders in File Drop Share Link fails on Nextcloud 32.0.2

[marcos-guerrero]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

There is a problem after upgrade nextcloud, from 31.0.5 to 32.0.2 related to external links share
In nextcloud 32.0.2 with no changes in sharing options , when you create a external link share, and put it with "File Request" permission (file drop) you can open the link and upload files to it, but you cannot upload folders, the action of upload folders fails with a browser message of "Unknown error during upload"

Steps to reproduce

1.In nextcloud 32.0.2, create a external link with default options
2.change the permissions to "File Request"
3.Open the link
4. If you "upload files" everything is ok, like in nextcloud 31
5. If you "upload folders", the upload fails with "Unknown error during upload" message in the browser

Expected behavior

It's expected that folder uploads works without fail, as it does in nextcloud 31.0.5

Nextcloud Server version

32

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.3

Web server

Apache (supported)

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

Upgraded to a MAJOR version (ex. 31 to 32)

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
    "system": {
        "version": "32.0.2.2",
        "installed": true,
        "loglevel": 2,
        "maintenance": false,
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.distributed": "\\OC\\Memcache\\APCu",
        "filelocking.enabled": true,
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "timeout": 5
        },
        "dbtype": "mysql",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "dbpersistent": true,
        "mysql.utf8mb4": true,
        "trusted_domains": [
            "maqueta-refs2-backend.isastur.local",
            "maqueta-refs2-links.isastur.com",
            "maqueta-nextcloud-backend-refs2.isastur.local",
            "192.168.108.47",
            "localhost"
        ],
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "overwritecondaddr": "^192\\.168\\.109\\.(3[2-9]|4[0-9]|5[0-9]|6[0-3])$",
        "overwriteprotocol": "https",
        "overwrite.cli.url": "http:\/\/localhost",
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "tempdirectory": "\/discos_nextcloud\/datos_nextcloud\/php_upload_tmp_dir",
        "logfile": "\/var\/log\/nextcloud\/nextcloud.log",
        "enable_previews": false,
        "htaccess.RewriteBase": "\/",
        "default_phone_region": "ES",
        "maintenance_window_start": 100,
        "minimum.supported.desktop.version": "2.3.4"
    }
}

List of activated Apps

Enabled:
  - bruteforcesettings: 5.0.0-dev.0
  - cloud_federation_api: 1.16.0
  - dav: 1.34.2
  - federatedfilesharing: 1.22.0
  - files: 2.4.0
  - files_external: 1.24.0
  - files_sharing: 1.24.1
  - logreader: 5.0.0-dev.0
  - lookup_server_connector: 1.20.0
  - oauth2: 1.20.0
  - password_policy: 4.0.0-dev.0
  - profile: 1.1.0
  - provisioning_api: 1.22.0
  - serverinfo: 4.0.0-dev.0
  - settings: 1.15.1
  - theming: 2.7.0
  - twofactor_backupcodes: 1.21.0
  - twofactor_totp: 14.0.0
  - viewer: 5.0.0-dev.0
  - workflowengine: 2.14.0
Disabled:
  - activity: 5.0.0-dev.0 (installed 4.0.0)
  - admin_audit: 1.22.0
  - app_api: 32.0.0 (installed 5.0.2)
  - circles: 32.0.0 (installed 31.0.0)
  - comments: 1.22.0 (installed 1.21.0)
  - contactsinteraction: 1.13.1 (installed 1.12.0)
  - dashboard: 7.12.0 (installed 7.11.0)
  - encryption: 2.20.0
  - federation: 1.22.0 (installed 1.21.0)
  - files_downloadlimit: 5.0.0-dev.0 (installed 4.0.0)
  - files_pdfviewer: 5.0.0-dev.0 (installed 4.0.0)
  - files_reminders: 1.5.0 (installed 1.4.0)
  - files_trashbin: 1.22.0 (installed 1.21.0)
  - files_versions: 1.25.0 (installed 1.24.0)
  - firstrunwizard: 5.0.0-dev.0 (installed 4.0.0)
  - nextcloud_announcements: 4.0.0-dev.0 (installed 3.0.0)
  - notifications: 5.0.0-dev.0 (installed 4.0.0)
  - photos: 5.0.0-dev.1 (installed 4.0.0-dev.1)
  - privacy: 4.0.0-dev.0 (installed 3.0.0)
  - recommendations: 5.0.0-dev.0 (installed 4.0.0)
  - related_resources: 3.0.0-dev.0 (installed 2.0.0)
  - sharebymail: 1.22.0 (installed 1.21.0)
  - support: 4.0.0-dev.0 (installed 3.0.0)
  - survey_client: 4.0.0-dev.0 (installed 3.0.0)
  - suspicious_login: 10.0.0-dev.0
  - systemtags: 1.22.0 (installed 1.21.1)
  - text: 6.0.1 (installed 5.0.0)
  - twofactor_nextcloud_notification: 6.0.0-dev.0
  - updatenotification: 1.22.0 (installed 1.21.0)
  - user_ldap: 1.23.0
  - user_status: 1.12.0 (installed 1.11.0)
  - weather_status: 1.12.0 (installed 1.11.0)
  - webhook_listeners: 1.3.0 (installed 1.2.0)

Nextcloud Signing status

No errors have been found.

Nextcloud Logs

No older log entries available

Additional info

No response

[jb2barrels]

This looks to be a similar issue to #56216

[marcos-guerrero]

I think it's not the same. The other issue is about upload FILES
this issue is about to upload ENTIRE FOLDER
in my case the upload of files is working ok, so it's similar diagnosis/result but i don't think it's duplicate.
Please, do not close this. Allow me 48h. I'm now on holidays and can't send you any other log/info, but tomorrow I'll try to detect if this issue is about browser/ JavaScript when it tries to open and traverse THE FOLDER to upload all the files on it or is about server (I'll look at Apache logs as nextcloud log say nothing)
Regards

[provokateurin]

Sure, however I'm quite certain that the root cause and potential fix #55804 will be the same.

[marcos-guerrero]

Thanks for reopen it and thanks for the info. If I'm not wrong, your fix is coming in 32.0.3, isn't it?
If it helps, I've tested again in 31.0.5 and in 32.0.2 uploading a folder named "carpeta de upload" with two files , nextcloud says nothing in its log, but there's a difference in the apache log:

NC 31.0.5 apache log: (UPLOAD OK). One MKCOL (405 HTTP status) and two PUT's
192.168.96.91 - - | - [03/Dec/2025:13:23:30 +0100] "MKCOL /public.php/dav/files/NofXjQapeTNbqAe/carpeta%20de%20upload/ HTTP/1.1" "-" 405 950 793 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.96.91 - - | - [03/Dec/2025:13:23:30 +0100] "PUT /public.php/dav/files/NofXjQapeTNbqAe/carpeta%20de%20upload/backends-maqueta.xlsx HTTP/1.1" "-" 201 10689 630 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.96.91 - - | - [03/Dec/2025:13:23:30 +0100] "PUT /public.php/dav/files/NofXjQapeTNbqAe/carpeta%20de%20upload/ferpectamente.jpg HTTP/1.1" "-" 201 15891 631 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"

NC 32.0.2 apache log: (UPLOAD FAILS). One MKCOL (400 HTTP status)
172.19.0.1 - - | - [03/Dec/2025:13:11:34 +0100] "MKCOL /public.php/dav/files/26s6okgs5YwARAJ/carpeta%20de%20upload/ HTTP/1.1" "-" 400 1173 644 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"

So it looks the MKCOL HTTP Status Response is different
Hope it helps to confirm your thoughts

[passibe15]

Just for reference, see #55366.
There, it's a slightly different situation as it's not about uploading a folder but a single large file via chunking. Still, both result in HTTP error 400, because both use MKCOL which is broken under these circumstances until fixed by 32.0.3 due to release in a couple of days.