Desktop client making too many User Info Requests

[fpusan]

I run OpenCloud with authelia as the OIDC provider.
I noticed that the desktop client is constantly making User Info Requests to authelia, to the point where authelia's CPU usage jumps from 0.05% to 5% after I open the desktop client. I run other services, and OpenCloud is the only one making requests that often.
Is there an option to regulate this behaviour in the client or in my server configuration?

Client version: 3.0.3.2073
Server version: 7.1.0 rolling

[guruz]

For which paths exactly do you see the requests coming?

[fpusan]

In the authelia logs I find /api/oidc/userinfo:

time="2026-06-15T20:05:48Z" level=debug msg="User Info Request with id '97de72f7-8556-4734-b6c5-49dda758c52a' on client with id 'OpenCloudDesktop' was successfully processed" caller="github.com/authelia/authelia/v4/internal/handlers/handler_oauth2_oidc_userinfo.go:208 OpenIDConnectUserinfo" method=GET path=/api/oidc/userinfo remote_ip=xx.xxx.x.xx

In the OpenCloud server logs I'm finding

• /graph/v1.0/me
• /ocs/v2.php/cloud/capabilities
• /app/list
• /ocs/v2.php/apps/notifications/api/v1/notifications
• /graph/v1.0/me/photo/$value
• /graph/v1.0/me/drives

Not sure how to distinguish Desktop client and Web client traffic in the server logs, but that IP should only be running the Desktop client anyways.

[guruz]

Thank you, this is interesting.

In the OpenCloud server logs I'm finding

You are not finding userinfo there because it's not called by the client but by the server.

I think what you are seeing is the same as @agent00bob in #948 (comment) ?

CC @rhafer

[guruz]

From quick look in server doc maybe this is relevant:
PROXY_OIDC_USERINFO_CACHE_TTL
What is your access token expiration time? Does it have expiration at all?
https://docs.opencloud.eu/docs/dev/server/services/proxy/environment-variables/

[fpusan]

I set my access token expiration time to 1h following #763 (comment)

PROXY_OIDC_USERINFO_CACHE_TTL seems indeed related. However when reading the docs:
Default time to live for user info in the user info cache. Only applied when access tokens has no expiration. See the Environment Variable Types description for more details.

I tried increasing PROXY_OIDC_USERINFO_CACHE_TTL to 60s but saw no difference in CPU usage. I am not sure I can configure authelia to provide an access token with no expiration...

EDIT: I tried to set my access token expiration time to 0 seconds, in the hope it would lead to a token with no expiration (although the documentation in https://www.authelia.com/configuration/prologue/common/#duration doesn't mention this as a possibility). Both authelia and OpenCloud seem to be working with this configuration, but CPU usage is still high.

EDIT2: Setting the expiration time to 0 seconds resulted in a lot of "Access token expired" errors, as in #763, so I'd say there's indeed no way to make tokens with no expiration in authelia.