Graph endpoint throwing 404

[kramttocs]

Docker Compose install.
I didn't define any services.

I am getting a 404 for /graph/v1.0/users/...... periodically.
Is this a setup issue on my part to make it work or is there a way to disable the graph functionality?

Edit:
I am also getting them for /remote.php/dav/spaces/....

Possibly only an issue as I am using fail2ban to block repeated 404s

[micbar]

We have some expected 404s because the web client asks for user avatars and preview images on all users and files. Some are just not available because the user has no avatar configured or the image type generally has no preview functionality.

[kramttocs]

Thanks for the quick reply @micbar !

[kramttocs]

Is this something that could be looked into?

I believe monitoring for bad actors via 404 and 401 isn't unusual.
I am seeing-

401:
/graph/v1.0/me?%24expand=memberOf
/api/v0/settings/roles-list

404:
/graph/v1.0/users/-GUID-/photo/$value

[micbar]

This is a question to the web client @kulmann

[kulmann]

For image previews via /remote.php/dav/spaces/... we have introduced a backend side flag on files requested via webdav, that announces beforehand if a file has a preview. If not, we don't do the request -> already avoids most of the expected 404s we had. For /graph/v1.0/users/-GUID-/photo/$value we could maybe do something similar in the endpoints that deliver the user info (like possible share receivers). @rhafer is this something kind of easily achieved or more complex?

@kramttocs can you provide more details on when the 401 are happening? As in: which page, already signed in or not (i.e. not authenticated or not authorised?), ... ? That would be helpful!

[kramttocs]

Absolutely!

1. Restarted the containers for good measure
2. Opened incognito window
3. Accessed my instance and received the login page (no 4xx)
4. Logged in via the standard OC form
5. Received a 404: GET https cloud.example.com "/graph/v1.0/users/MYGUID/photo/$value"

Wasn't seeing any of the 401's while clicking around so thought that may be the mobile app (android).

6. Closed browser and got my phone
7. Opened the native app and it automatically refreshed (was already logged in and in a folder)
8. Received:
   401 - PROPFIND https cloud.example.com "/dav/spaces/-GUID and Folder Name I was in-/"
   and
   401 - PROPFIND https cloud.example.com "/remote.php/dav/files/-MY USERNAME-/"

I didn't generate the other 401s mentioned above but will keep an eye out for them

Edit: am seeing them but haven't found what action consistently makes them happen

401 - GET https cloud.example.com "/graph/v1.0/extensions/org.libregraph/tags"

These two happen consecutively:

401 - POST https cloud.example.com "/api/v0/settings/roles-list"
401 - GET https cloud.example.com "/graph/v1.0/me?%24expand=memberOf"