owncloud / owncloud/ocis

iOS/Android/Desktop app verifies token using web oidc client

Open
#6,479 12 comments 5 reactions 0 assignees View on GitHub
Category:Enhancement
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

## Bug description
Owncloud desktop/mobile clients are verifying OIDC token using web oidc issuer provided in OCIS_OIDC_ISSUER environment variable. This bug prevents using some OIDC providers with token verification turned on (without PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD: "none")

## Specs
OCIS Version: 3.0.0
Deployment type: docker
OIDC Provider: Authentik

## Possible fix
Add possibility to define OIDC issuer for each oidc client i.e.
```
OCIS_OIDC_WEB_ISSUER="https://auth.provider.com/application/o/ocis-web/
OCIS_OIDC_DESKTOP_ISSUER="https://auth.provider.com/application/o/ocis-desktop/
OCIS_OIDC_IOS_ISSUER="https://auth.provider.com/application/o/ocis-ios/
OCIS_OIDC_ANDROID_ISSUER="https://auth.provider.com/application/o/ocis-android/
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.