feat: integrate login via OIDC - #209
Conversation
0fa6af9 to
74e49fc
Compare
Disabling the OIDC authentication can be done via: `ucr set appcenter/apps/nextcloud/disable-oidc-login=true` Setting the OIDC login identifier (displayed in the login dialog) can be achieved via: `ucr set appcenter/apps/nextcloud/oidc-identifier=UCS` Disabling the SAML authentication can be done via: `ucr set appcenter/apps/nextcloud/disable-saml-login=true` Changing these settings requires a new run of the joinscript. Nextcloud by default doesn't permit accessing local networks, which makes testing harder. It just says: `Could not reach the OpenID Connect provider.`. For testing purposes this can just be disabled via adding `'allow_local_remote_servers' => true,` to `/var/www/html/config/config.php`. Fixes: nextcloud#204 Signed-off-by: Florian Best <best@univention.de>
74e49fc to
0217bf4
Compare
|
One thing I noticed, OIDC does not seem to play along with LDAP, and administrators are not promited ot NC admins either. And on logout we end up with having the keycloak screen with an "Invalid redirect uri" error. I think I'd revert for now and get the release out with 30 and saml only first. |
|
OK. Let's continue the discussion at #212. |
|
Hello there, We hope that the review process is going smooth and is helpful for you. We want to ensure your pull request is reviewed to your satisfaction. If you have a moment, our community management team would very much appreciate your feedback on your experience with this PR review process. Your feedback is valuable to us as we continuously strive to improve our community developer experience. Please take a moment to complete our short survey by clicking on the following link: https://cloud.nextcloud.com/apps/forms/s/i9Ago4EQRZ7TWxjfmeEpPkf6 Thank you for contributing to Nextcloud and we hope to hear from you soon! (If you believe you should not receive this message, you can add yourself to the blocklist.) |
Disabling the OIDC authentication can be done via:
ucr set appcenter/apps/nextcloud/disable-oidc-login=trueSetting the OIDC login identifier (displayed in the login dialog) can be achieved via:
ucr set appcenter/apps/nextcloud/oidc-identifier=UCSDisabling the SAML authentication can be done via:
ucr set appcenter/apps/nextcloud/disable-saml-login=trueChanging these settings requires a new run of the joinscript.
Nextcloud by default doesn't permit accessing local networks, which
makes testing harder. It just says:
Could not reach the OpenID Connect provider..For testing purposes this can just be disabled via adding
'allow_local_remote_servers' => true,to/var/www/html/config/config.php.Fixes: #204