### Steps to reproduce

1. Begin of the insertionWait for tokenEnd of the insertion Begin of the deletion Prerequisite: Have accessEnd of the deletion to Begin of the insertionexpire or break access\_token from rails console.End of the insertion Begin of the deletion a OpenProject and Nextcloud instance with a setup storage and user logged into OpenProject.End of the deletion

2. Begin of the insertionOpen project storage from left hand side menu.End of the insertion Begin of the deletion Deploy OpenProjectEnd of the deletion

3. Begin of the insertionSee error.

4. Try again.

5. See projectEnd of the insertion Begin of the deletion With the logged in user, click on theEnd of the deletion storage Begin of the insertionbeing opened successfully.End of the insertion Begin of the deletion link in the left hand menu End of the deletion


Begin of the insertionSimilar behavior can be experienced in work package files tab.

End of the insertion ### What is the buggy behavior?

* Begin of the insertionToken is refreshed, but used only in upcoming requests.End of the insertion Begin of the deletion A unexpected error occursEnd of the deletion


### What is the expected behavior?

Begin of the insertion* Refreshed access token is used right inEnd of the insertion Begin of the deletion 1. OpenProject redirects toEnd of the deletion the Begin of the insertionsame request as well. End of the insertion Begin of the deletion Nextcloud folder

<br>End of the deletion


### Investigation log

1. No errors found in AppSignal for community.

2. I tried to search logs for `Error while refreshing OAuth token - Payload:` and `Timeout while refreshing OAuth token. - Payload:`. Nothing.

3. Tried to check nextlcoud logs through UI: [https://nextcloud.openproject.org/settings/admin/logging](https://nextcloud.openproject.org/settings/admin/logging)
There are no entries older than Aug 8, 2025, 8:56:39 AM. Begin of the insertion

4. We looked at nextcloud logs through AppSignal and found the following pattern:

1. 401 on /ocs/v1.php/cloud/user

2. 200 on /apps/oauth2/api/v1/token

3. 401 on /ocs/v1.php/cloud/user again

5. Then we reproduced it on local setup and realized what the issue is.End of the insertion