When attempting to bypass:
…I discovered:
opened 05:50PM - 28 Oct 25 UTC
#### How To Reproduce
1. Create credentials at [`app.vikunja.cloud/user/setting… s/caldav`](https://app.vikunja.cloud/user/settings/caldav#app:~:text=API%20Tokens-,CalDAV,-You%20can%20connect).
1. Add a CalDAV account in `org.tasks`: [^5]
[^5]: [`community.vikunja.io/t/4139`](https://community.vikunja.io/t/expected-207-multi-status-got-200-appears-when-one-attempts-to-create-a-list-in-a-vikunja-caldav-account-via-an-external-client/4139?u=rokejulianlockhart)
1. Enter the generated token as the password.
1. Enter the username as the username.
1. Enter the URI, including the appended username, as the URI.
1. Save.
1. Attempt to create a new list in `org.tasks`' GUI.
#### The problem
A toast renders, [^1] which states: [^4]
[^4]: [`linux.codidact.com/posts/294865/history#3`](https://linux.codidact.com/posts/294865/history#3:~:text=Similarly%2C%20acquiring%20diagnostic%20data%20for%20situations%20like%20%5B%60github.com/tasks/tasks/issues/3952%60%5D(https://github.com/tasks/tasks/issues/3952%23issue%2D3562709063)'s%20would%20be%20easier%2C%20because%20%60dumpsys%60%20doesn't%20include%20toast%20information%2C%20due%20to%20its%20ephemerality)
<p></p>
<img width="1067" height="727" alt="Image" src="https://github.com/user-attachments/assets/03818e5b-4e00-4819-8d88-32b68cfa7a48" />
<p></p>
[^1]: [`stackoverflow.com/review/suggested-edits/37030014`](https://stackoverflow.com/review/suggested-edits/37030014#:~:text=It's%20called-,%5Ba%20'Toast'%5D(https://developer.android.com/guide/topics/ui/notifiers/toasts),-%2C%20and%20you)
#### Conducted Diagnosis
I have uploaded a `.PCAP`of it reproducing, filtered to `org.tasks`, [^3] at [`drive.google.com/drive/folders/1w0SNJsyi3q__h1-5U5SLmmGT_Tq40E3d`](https://drive.google.com/drive/folders/1w0SNJsyi3q__h1-5U5SLmmGT_Tq40E3d?usp=drive_link). You shall need to notify me if you want acces to it. [^2]
[^2]: [`bitfireAT/davx5-ose/discussions/1771`](https://github.com/bitfireAT/davx5-ose/discussions/1771#discussion-9055619)
[^3]: [`android.stackexchange.com/posts/247052/timeline#comment_356763`](https://android.stackexchange.com/posts/247052/timeline#comment_356763:~:text=in%20the%20PCAPdroid%20main%20screen%2C%20tap%20on%20the%20%22Target%20apps%22%20toggle%2C%20then%20you%20can%20select%20the%20specific%20apps%20to%20monitor)
#### My Environment
1. #### Involved Applications
<blockquote>
~~~ini
sourcePackage=org.tasks
versionName=14.8.3
versionCode=140818
~~~
</blockquote>
Additionally, potentially:
<blockquote>
~~~ini
sourcePackage=at.bitfire.davdroid
versionName=4.5.4-ose
versionCode=405040005
~~~
</blockquote>
However, the account was added via `org.tasks`' GUI.
1. #### The OS
<blockquote>
~~~YAML
[ro.build.version.release]: [15]
[ro.build.display.id]: [FP5.VT2E.C.059.20250908]
~~~
</blockquote>
1. #### The Device
<blockquote>
~~~YAML
[ro.product.brand]: [Fairphone]
[ro.build.product]: [FP5]
~~~
</blockquote>
Am I adding the account correctly (a fault of the third-party client), or is this a bug in Vikunja?
It has since remediated itself, without any environment change (OS, server, and client). Therefore, I err on the server requiring some time to initialise its CalDAV server after account creation. If so, the URI shouldn’t be available during that time period. Should I create a server issue? Unfortunately, I lose my access to the free trial in P1D, but I suppose that if the server version increased, I’d need to create a new account to confirm this regardless.