diff --git a/Dockerfile b/Dockerfile
index dacb75d6..7d47a2ba 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,6 +6,7 @@ COPY --from=ghcr.io/astral-sh/uv:0.10.12@sha256:72ab0aeb448090480ccabb99fb5f52b0
 # 1. git (required for caldav dependency from git)
 # 2. sqlite for development with token db
 RUN apt update && apt install --no-install-recommends --no-install-suggests -y \
+    curl \
     git \
     tesseract-ocr \
     sqlite3 && apt clean
diff --git a/nextcloud_mcp_server/vector/oauth_sync.py b/nextcloud_mcp_server/vector/oauth_sync.py
index c4c56f7a..5f6a5b9e 100644
--- a/nextcloud_mcp_server/vector/oauth_sync.py
+++ b/nextcloud_mcp_server/vector/oauth_sync.py
@@ -496,6 +496,14 @@ async def user_manager_task(
             else:
                 # OAuth mode: query refresh_tokens table
                 provisioned_users = set(await refresh_token_storage.get_all_user_ids())
+                # Login Flow mode: also check app_passwords table
+                # (users provisioned via Login Flow v2 have app passwords,
+                # not refresh tokens)
+                if settings.enable_login_flow:
+                    app_pw_users = set(
+                        await refresh_token_storage.get_all_app_password_user_ids()
+                    )
+                    provisioned_users |= app_pw_users
             active_users = set(user_states.keys())
 
             # Start scanners for new users