Deck 1.18.3: File attachments cannot be removed from cards – DELETE request returns 404

[hsjoos]

Describe the bug

File attachments can be successfully added to a Deck card, but cannot be removed afterwards using Attachments → … → Remove attachment.

The issue is reproducible with a file freshly uploaded to the card in Deck 1.18.3.

The attachment API successfully returns the newly created attachment with a numeric ID and type: "file". When removing the attachment, however, the Deck web frontend sends a DELETE request containing file: in the URL. This request fails with HTTP 404 / OCS status code 998.

Community report/discussion:

https://help.nextcloud.com/t/deck-1-18-3-attachments-cannot-be-removed-from-cards-delete-request-returns-404/248525

To Reproduce

Steps to reproduce the behavior:

1. Open a Deck card.
2. Open the Attachments tab.
3. Upload a new file.
4. Verify that the file is successfully attached to the card.
5. Open the ... menu of the newly uploaded attachment.
6. Click Remove attachment.
7. The attachment remains on the card.

The issue was reproduced with multiple attachments, including a file freshly uploaded immediately before the removal attempt.

Expected behavior

The attachment/reference should be removed from the Deck card.

The underlying file may remain in Nextcloud Files; the problem described here is that the attachment cannot be detached from the Deck card.

Screenshots

A screenshot showing the attachment menu and the Remove attachment action can be provided if required.

Client details:

• OS: macOS 26.6.2
• Browser: Safari
• Version: 26.6.2
• Device: Desktop / Mac

Server details

Operating system:

Ubuntu 24.04 LTS

Web server:

Nextcloud AIO

Database:

PostgreSQL (Nextcloud AIO)

PHP version:

8.3.33

Nextcloud version:

34.0.0

Deck version:

1.18.3

Where did you install Nextcloud from:

Nextcloud AIO

Signing status:

INVALID_HASH:
- core/js/mimetypelist.js

List of activated apps:

Can be provided if required.

Nextcloud configuration:

Can be provided if required. Sensitive values will be removed.

Are you using an external user-backend, if yes which one:

No external user backend involved in reproducing this issue.

Logs

Nextcloud log (data/nextcloud.log)

No new entry is written to nextcloud.log when Remove attachment is clicked.

Browser / network log

The attachment is successfully retrieved by:

GET /ocs/v2.php/apps/deck/api/v1.0/cards/33/attachments?boardId=5

Response: HTTP 200.

The response contains the freshly uploaded attachment:

{
    "id": 21,
    "cardId": 33,
    "type": "file",
    "data": "Ordnerstruktur-MEINS (2).km",
    "deletedAt": 0
}

Therefore the backend returns:

id = 21
type = file

When Remove attachment is selected, the Deck frontend sends:

DELETE /ocs/v2.php/apps/deck/api/v1.0/cards/33/attachment/file:21?boardId=5

Response:

HTTP 404

OCS response:

{
    "ocs": {
        "meta": {
            "status": "failure",
            "statuscode": 998,
            "message": "Invalid query, please check the syntax."
        },
        "data": []
    }
}

The same behavior was reproduced with another attachment (id: 20), resulting in:

DELETE /ocs/v2.php/apps/deck/api/v1.0/cards/33/attachment/file:20?boardId=5

also returning HTTP 404 / OCS status 998.

[LRAAN]

Same Problem here:
Client: Windows 11, Firefox 154,
Server: Rocky Linux
Nextcloud: 34.0.3

[vzsze]

This might not be a Deck bug, but a nextcloud server issue. I had the same error with nextcloud 34.0.3, but I had to revert back to Nextcloud 34.0.1. After that I was able to remove the attachment from a Deck card, which I couldn't with 34.0.3. I'm suspecting that the bug is already present in 34.0.2, but can't test it right now.