Bug: cannot login to Microsoft anymore

[leomil72]

Describe the bug

Today, the client asked me to log in again. After clicking on the link provided by the app, instead of receiving the response URL from the Microsoft server, I received the following error message (the text has been translated from Italian):
"This page is not displaying normally and may be a sign of a phishing attempt. The URL contains the user's password. Close this page immediately and do not copy or share the URL with anyone.“

And then another page:
”This is not the correct page. You have reached the wrong page. Close the app or window and try again."

Even when operating from the terminal, I get the same error: I can no longer authenticate with the Microsoft server.

Operating System Details

Manjaro Linux with KDE
kernel 6.18.4

Client Installation Method

From Distribution Package

OneDrive Account Type

Business | Office365

What is your OneDrive Application Version

2.5.9-1

What is your OneDrive Application Configuration

Application version                          = onedrive v2.5.9
Compiled with                                = DMD 2111
Curl version                                 = libcurl/8.18.0 OpenSSL/3.6.0 zlib/1.3.1 brotli/1.1.0 zstd/1.5.7 libidn2/2.3.8 libpsl/0.21.5 libssh2/1.11.1 nghttp2/1.68.0 ngtcp2/1.19.0 nghttp3/1.14.0 mit-krb5/1.21.3
User Application Config path                 = /home/...../.config/onedrive
System Application Config path               = /etc/onedrive
Applicable Application 'config' location     = /home/...../.config/onedrive/config
Configuration file found in config location  = false - using application defaults
Applicable 'sync_list' location              = /home/...../.config/onedrive/sync_list
Applicable 'items.sqlite3' location          = /home/...../.config/onedrive/items.sqlite3
Config option 'drive_id'                     = 
Config option 'sync_dir'                     = ~/OneDrive
Config option 'use_intune_sso'               = false
Config option 'use_device_auth'              = false
Config option 'enable_logging'               = false
Config option 'log_dir'                      = /var/log/onedrive
Config option 'disable_notifications'        = false
Config option 'skip_dir'                     = 
Config option 'skip_dir_strict_match'        = false
Config option 'skip_file'                    = ~*|.~*|*.tmp|*.swp|*.partial
Config option 'skip_dotfiles'                = false
Config option 'skip_symlinks'                = false
Config option 'skip_size'                    = 0
Config option 'monitor_interval'             = 300
Config option 'monitor_log_frequency'        = 12
Config option 'monitor_fullscan_frequency'   = 12
Config option 'disable_websocket_support'    = false
Config option 'read_only_auth_scope'         = false
Config option 'dry_run'                      = false
Config option 'upload_only'                  = false
Config option 'download_only'                = false
Config option 'local_first'                  = false
Config option 'check_nosync'                 = false
Config option 'check_nomount'                = false
Config option 'resync'                       = false
Config option 'resync_auth'                  = false
Config option 'cleanup_local_files'          = false
Config option 'disable_permission_set'       = false
Config option 'transfer_order'               = default
Config option 'delay_inotify_processing'     = false
Config option 'inotify_delay'                = 5
Config option 'display_transfer_metrics'     = false
Config option 'force_session_upload'         = false
Config option 'file_fragment_size'           = 10
Config option 'classify_as_big_delete'       = 1000
Config option 'disable_upload_validation'    = false
Config option 'disable_download_validation'  = false
Config option 'bypass_data_preservation'     = false
Config option 'no_remote_delete'             = false
Config option 'remove_source_files'          = false
Config option 'sync_dir_permissions'         = 700
Config option 'sync_file_permissions'        = 600
Config option 'space_reservation'            = 52428800
Config option 'permanent_delete'             = false
Config option 'write_xattr_data'             = false
Config option 'create_new_file_version'      = false
Config option 'application_id'               = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Config option 'azure_ad_endpoint'            = 
Config option 'azure_tenant_id'              = 
Config option 'user_agent'                   = ISV|abraunegg|OneDrive Client for Linux/v2.5.9
Config option 'force_http_11'                = false
Config option 'debug_https'                  = false
Config option 'rate_limit'                   = 0
Config option 'operation_timeout'            = 3600
Config option 'dns_timeout'                  = 60
Config option 'connect_timeout'              = 10
Config option 'data_timeout'                 = 60
Config option 'ip_protocol_version'          = 0
Config option 'threads'                      = 8
Config option 'max_curl_idle'                = 120
Environment var 'XDG_RUNTIME_DIR'            = true
Environment var 'DBUS_SESSION_BUS_ADDRESS'   = true
Config option 'notify_file_actions'          = false
Config option 'use_recycle_bin'              = false
Config option 'recycle_bin_path'             = /home/leo/.local/share/Trash/

Selective sync 'sync_list' configured        = false

Config option 'sync_business_shared_items'   = false

Config option 'webhook_enabled'              = false

What is your 'curl' version

curl 8.18.0 (x86_64-pc-linux-gnu) libcurl/8.18.0 OpenSSL/3.6.0 zlib/1.3.1 brotli/1.1.0 zstd/1.5.7 libidn2/2.3.8 libpsl/0.21.5 libssh2/1.11.1 nghttp2/1.68.0 ngtcp2/1.19.0 nghttp3/1.14.0 mit-krb5/1.21.3
Release-Date: 2026-01-07
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli GSS-API HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd

Where is your 'sync_dir' located

Local

What are all your system 'mount points'

proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
sys on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
dev on /dev type devtmpfs (rw,nosuid,relatime,size=16104496k,nr_inodes=4026124,mode=755,inode64)
run on /run type tmpfs (rw,nosuid,nodev,relatime,mode=755,inode64)
efivarfs on /sys/firmware/efi/efivars type efivarfs (rw,nosuid,nodev,noexec,relatime)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
/dev/sda2 on / type ext4 (rw,noatime)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,inode64,usrquota)
cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate,memory_recursiveprot)
none on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
bpf on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=41,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=5353)
debugfs on /sys/kernel/debug type debugfs (rw,nosuid,nodev,noexec,relatime)
hugetlbfs on /dev/hugepages type hugetlbfs (rw,nosuid,nodev,relatime,pagesize=2M)
mqueue on /dev/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)
tracefs on /sys/kernel/tracing type tracefs (rw,nosuid,nodev,noexec,relatime)
configfs on /sys/kernel/config type configfs (rw,nosuid,nodev,noexec,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/credentials/systemd-journald.service type tmpfs (ro,nosuid,nodev,noexec,relatime,nosymfollow,size=1024k,nr_inodes=1024,mode=700,inode64,noswap)
tmpfs on /tmp type tmpfs (rw,noatime,inode64)
/dev/sda1 on /boot/efi type vfat (rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=mixed,utf8,errors=remount-ro)
/var/lib/snapd/snaps/android-studio_209.snap on /var/lib/snapd/snap/android-studio/209 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
/var/lib/snapd/snaps/core20_2682.snap on /var/lib/snapd/snap/core20/2682 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
/var/lib/snapd/snaps/android-studio_205.snap on /var/lib/snapd/snap/android-studio/205 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
/var/lib/snapd/snaps/core22_2193.snap on /var/lib/snapd/snap/core22/2193 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
/var/lib/snapd/snaps/core20_2686.snap on /var/lib/snapd/snap/core20/2686 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
/var/lib/snapd/snaps/core22_2216.snap on /var/lib/snapd/snap/core22/2216 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
/var/lib/snapd/snaps/snapd_25577.snap on /var/lib/snapd/snap/snapd/25577 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
/var/lib/snapd/snaps/snapd_25935.snap on /var/lib/snapd/snap/snapd/25935 type squashfs (ro,nodev,relatime,errors=continue,threads=single,x-gdu.hide,x-gvfs-hide)
binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/user/1000 type tmpfs (rw,nosuid,nodev,relatime,size=3225832k,nr_inodes=806458,mode=700,uid=1000,gid=1000,inode64)
portal on /run/user/1000/doc type fuse.portal (rw,nosuid,nodev,relatime,user_id=1000,group_id=1000)
gvfsd-fuse on /run/user/1000/gvfs type fuse.gvfsd-fuse (rw,nosuid,nodev,relatime,user_id=1000,group_id=1000)

What are all your local file system partition types

NAME      FSTYPE   FSVER LABEL    UUID                                 FSAVAIL FSUSE% MOUNTPOINTS
loop0     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/android-studio/205
loop1     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/android-studio/209
loop2     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/core20/2682
loop3     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/core20/2686
loop4     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/core22/2193
loop5     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/core22/2216
loop6     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/snapd/25577
loop7     squashfs 4.0                                                       0   100% /var/lib/snapd/snap/snapd/25935
sda                                                                                   
├─sda1    vfat     FAT32          xxxxxxxxxxxxxxxxxx                             299,1M     0% /boot/efi
├─sda2    ext4     1.0           xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx   17,4G    87% /
└─sda3    swap     1     swap    xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx                [SWAP]
nvme0n1                                                                               
├─nvme0n1p1
│         vfat     FAT32 SYSTEM   xxxxxxxxxxxxxxxxxx                                           
├─nvme0n1p2
│                                                                                     
├─nvme0n1p3
│         ntfs                    xxxxxxxxxxxxxxxxxxxxxxxxx                                    
└─nvme0n1p4
          ntfs           Recovery xxxxxxxxxxxxxxxxxxxxxxxxxx

How do you use 'onedrive'

My Onedrive is shared with other systems (I have a Windows machine and an Android phone)

Steps to reproduce the behaviour

Try to login with onedrive --reath.

Complete Verbose Log Output

No user or system config file found, using application defaults
Using 'user' configuration path for application config and state data: /home/leo/.config/onedrive
D-Bus message bus daemon is available; GUI notifications are now enabled

DEPRECIATION WARNING: --synchronize has been deprecated in favour of --sync or -s
DEPRECIATION WARNING: Deprecated commands will be removed in a future release.

Using IPv4 and IPv6 (if configured) for all network operations
Attempting to contact the Microsoft OneDrive Service
Successfully reached the Microsoft OneDrive Service
Checking Application Version ...
Attempting to initialise the OneDrive API ...
Configuring Global Azure AD Endpoints

Please authorise this application by visiting the following URL:

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&scope=Files.ReadWrite%20Files.ReadWrite.All%20Sites.ReadWrite.All%20offline_access&response_type=code&prompt=login&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient

After completing the authorisation in your browser, copy the full redirect URI (from the address bar) and paste it below.

Paste redirect URI here:

Screenshots

No response

Other Log Information or Details

Additional context

No response

[EthanColbert8]

I had the same experience, with the redirect URI quickly disappearing, replaced with a different one indicating a potential phish, as OP described.

I tried a second time, and was able to successfully authenticate the client by very quickly copying the actual redirect URI before it disappeared from the browser. But I guess Microsoft doesn't like these redirect URIs anymore.

I know there are other methods of authentication, but I'm not familiar with any as the interactive browser method has worked until now. Should one of the others become the recommended/default method?

[abraunegg]

Closing this issue. Please follow the Basic Troubleshooting Steps.

There are 2 issues going on, both of which as discussed in discussions:

1. authentication/authorisation issue AADSTS70000 #3617 - Authentication Failure due to change in Microsoft Response
2. Microsoft Login `common/wrongplace` Redirect – Microsoft-Side Authentication Handling Issue #3558 - Microsoft Login common/wrongplace Redirect

[abraunegg]

@EthanColbert8

Should one of the others become the recommended/default method?

To also specifically answer this - changing the default method to one of the others is not applicable.

Why? Both alternate methods are Business Account use only - meaning these cannot be used with Personal Account types.

[abraunegg]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.