Unable to login when an external iDP has self-signed certs
Nobody has claimed this yet.
- Dominant language
- Kotlin
- Stars
- 4.2k
- Forks
- 3.1k
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 7
Description
Reported here: https://github.com/owncloud/android/pull/3073#issuecomment-781195629
If oC instance and IdP are different hosts, and the idP has a self-signed cert, the user is unable to log in.
In that case, the user should be asked to approve different certificates or they should be auto-approved following some rules as iOS client does.
PR
- App
- Library (if needed)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the login flow discussed in the report at PR 3073, focusing on connections where the ownCloud instance and IdP use different hosts. Compare the iOS client's certificate handling and determine whether the relevant change belongs in the app, the library, or both. Done means login works with the described self-signed IdP certificates while applying the agreed approval rules.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- authentication, mobile, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100