nextcloud / nextcloud/user_oidc

regex detection of groups claims has bugs. Groups are missing after login

Open
#1,215 7 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug priority: normal
Dominant language
PHP
Stars
181
Forks
60
Avg merge
7h 34m
Merged PRs (30d)
26

Description

  • Nextcloud 31.0.8 (hosted at Hetzner)
  • OIDC 8.0.0

Detection of groups claims has apparently bugs. It is difficult to find out at which step.

Our OIDC provider sends these groups to Nextcloud as OIDC client:

ABC_HAUPTKATEGORIE_\u00FC\u0020\u0028Herr\u0029,ABC_UNTERKATEGORIE_\u0020Berlin,ABC_AMT_99\u0020Team

Not all groups were taken or updated, at the moment, it looks not reliable.

Groups REGEX:

  1. /^ABC_(HAUPTKATEGORIE|UNTERKATEGORIE|AMT)_/

After detecting that a group is missing then I used the following wider REGEX:
2. /^ABC_/

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the Nextcloud 31.0.8 login with OIDC 8.0.0 using the listed group claims and both regular expressions. Trace group-claim detection through the login flow to identify where groups are dropped or not updated; done means all expected groups are reliably imported and updated.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.