nextcloud / nextcloud/user_oidc
Allow setting up a password after OIDC account creation. (Same for WebAuthn, which does not work; filed separately)
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 181
- Forks
- 60
- Avg merge
- 7h 34m
- Merged PRs (30d)
- 26
Description
Feature request
Which Nextcloud Version are you currently using: (see administration page)
- [Nextcloud Hub 9] (30.0.12)
- OpenIDC 7.3.2
Is your feature request related to a problem? Please describe.
- Allow optional setting of password even after account creation by OIDC
- Problem to be solved: OIDC-Accounts do not allow to set up a password, not even by Admins
Describe the solution you'd like
Describe alternatives you've considered
- Several use cases require (now and then) that users can also login with their e-mail and password
- I tested the following is working, but I don't like the workaround:
- As Admin, add manually an account for a new user X and give the Account name =
OIDCLOGINPREFIX-<sub>. - For this trick, you as Admin need to know the
<sub>. - Set up a start password for the new user X
- When user X
subcomes with OIDC, OIDC logs into the correct account. - User is now able to login either by OIDC or by e-mail (alternatively
OIDCLOGINPREFIX-<sub>) and their password. - User is able to change the password
Additional context
I wish the OIDC App to allow setting a password even when no password has been assigned before the first OIDC-account-connect. The described trick works, but is ugly to perform and requires admin work.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by tracing OIDC account creation and the existing password-setting flow, then reproduce the described admin and user scenarios. Done means an account created through OIDC can optionally set and later change a password while OIDC login continues to work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, backend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100