No Code Attached Yet
avatar muhme
muhme
19 Aug 2025

Steps to reproduce the issue

For one domain, install Joomla twice with registering for Automated Updates and do not unregister after first installation. Enable 'Debug System' and 'Log Almost Everything'.

Expected result

Once Joomla is reinstalled for a domain and healtcheck found a working token, all out-dated, not-working tokens are deleted and no more checked.

Actual result

Every 15 minutes there is one request for each invalid token seen with 400 in HTTPS access log (CEST):

52.14.131.139 - - [19/Aug/2025:06:00:19 +0200] "GET /api/index.php/v1/joomlaupdate/healthcheck HTTP/1.1" 400 49 "-" "Joomla.org Automated Updates Server" [45056]

And corresponding 'joomla_update.php' invalid token entry (UTC):

#Fields: datetime       priority clientip       category        message
2025-08-19T04:00:19+00:00       CRITICAL 52.14.131.139  error   Uncaught Throwable of type Tobscure\JsonApi\Exception\InvalidParameterException thrown with message "Invalid token". Stack trace: #0 [ROOT]/api/components/com_joomlaupdate/src/Controller/HealthcheckController.php(52): Joomla\Component\Joomlaupdate\Api\Controller\BaseController->validateUpdateToken()
#1 [ROOT]/libraries/src/MVC/Controller/BaseController.php(730): Joomla\Component\Joomlaupdate\Api\Controller\HealthcheckController->show()
#2 [ROOT]/libraries/src/Dispatcher/ApiDispatcher.php(61): Joomla\CMS\MVC\Controller\BaseController->execute()
#3 [ROOT]/libraries/src/Component/ComponentHelper.php(361): Joomla\CMS\Dispatcher\ApiDispatcher->dispatch()
#4 [ROOT]/libraries/src/Application/ApiApplication.php(433): Joomla\CMS\Component\ComponentHelper::renderComponent()
#5 [ROOT]/libraries/src/Application/ApiApplication.php(116): Joomla\CMS\Application\ApiApplication->dispatch()
#6 [ROOT]/libraries/src/Application/CMSApplication.php(304): Joomla\CMS\Application\ApiApplication->doExecute()
#7 [ROOT]/api/includes/app.php(50): Joomla\CMS\Application\CMSApplication->execute()
#8 [ROOT]/api/index.php(31): require_once('...')
#9 {main}

System information (as much as possible)

Joomla 5.4.0-beta1, site joomla-test.heikol.de and also found by @richard67

Additional comments

This is lowest priority.

avatar muhme muhme - open - 19 Aug 2025
avatar joomla-cms-bot joomla-cms-bot - change - 19 Aug 2025
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 19 Aug 2025
avatar muhme muhme - change - 19 Aug 2025
Title
Automated Updates – Reduce healthchecks
Automated Updates – Reduce failing healthchecks
avatar muhme muhme - edited - 19 Aug 2025
avatar SniperSister
SniperSister - comment - 19 Aug 2025

I disagree. Reducing the interval leads to delayed auto updates for temporarily unavailable sites.

avatar muhme
muhme - comment - 19 Aug 2025

This is not intended to reduce the interval. It is intended to remove all out-dated, no-more working tokens for a domain if a working token exists.

avatar SniperSister SniperSister - change - 19 Aug 2025
Status New Closed
Closed_Date 0000-00-00 00:00:00 2025-08-19 06:33:06
Closed_By SniperSister
avatar SniperSister SniperSister - close - 19 Aug 2025
avatar SniperSister
SniperSister - comment - 19 Aug 2025
avatar muhme
muhme - comment - 19 Aug 2025

Thanks 👍 Once it's live, I can test it again if desired.

Add a Comment

Login with GitHub to post a comment