For one domain, install Joomla twice with registering for Automated Updates and do not unregister after first installation. Enable 'Debug System' and 'Log Almost Everything'.
Once Joomla is reinstalled for a domain and healtcheck found a working token, all out-dated, not-working tokens are deleted and no more checked.
Every 15 minutes there is one request for each invalid token seen with 400 in HTTPS access log (CEST):
52.14.131.139 - - [19/Aug/2025:06:00:19 +0200] "GET /api/index.php/v1/joomlaupdate/healthcheck HTTP/1.1" 400 49 "-" "Joomla.org Automated Updates Server" [45056]
And corresponding 'joomla_update.php' invalid token entry (UTC):
#Fields: datetime priority clientip category message
2025-08-19T04:00:19+00:00 CRITICAL 52.14.131.139 error Uncaught Throwable of type Tobscure\JsonApi\Exception\InvalidParameterException thrown with message "Invalid token". Stack trace: #0 [ROOT]/api/components/com_joomlaupdate/src/Controller/HealthcheckController.php(52): Joomla\Component\Joomlaupdate\Api\Controller\BaseController->validateUpdateToken()
#1 [ROOT]/libraries/src/MVC/Controller/BaseController.php(730): Joomla\Component\Joomlaupdate\Api\Controller\HealthcheckController->show()
#2 [ROOT]/libraries/src/Dispatcher/ApiDispatcher.php(61): Joomla\CMS\MVC\Controller\BaseController->execute()
#3 [ROOT]/libraries/src/Component/ComponentHelper.php(361): Joomla\CMS\Dispatcher\ApiDispatcher->dispatch()
#4 [ROOT]/libraries/src/Application/ApiApplication.php(433): Joomla\CMS\Component\ComponentHelper::renderComponent()
#5 [ROOT]/libraries/src/Application/ApiApplication.php(116): Joomla\CMS\Application\ApiApplication->dispatch()
#6 [ROOT]/libraries/src/Application/CMSApplication.php(304): Joomla\CMS\Application\ApiApplication->doExecute()
#7 [ROOT]/api/includes/app.php(50): Joomla\CMS\Application\CMSApplication->execute()
#8 [ROOT]/api/index.php(31): require_once('...')
#9 {main}
Joomla 5.4.0-beta1, site joomla-test.heikol.de and also found by @richard67
This is lowest priority.
Labels |
Added:
No Code Attached Yet
|
Title |
|
This is not intended to reduce the interval. It is intended to remove all out-dated, no-more working tokens for a domain if a working token exists.
Status | New | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2025-08-19 06:33:06 |
Closed_By | ⇒ | SniperSister |
Thanks 👍 Once it's live, I can test it again if desired.
I disagree. Reducing the interval leads to delayed auto updates for temporarily unavailable sites.