OIDC auth does not use /.well-known/openid-configuration

OIDC auth does not use /.well-known/openid-configuration. We should use it to also support eg. Keycloak.

See

Lines 21 to 23 in 3b88374

    
           this.#redirectURL = `${baseURL}/oidc-callback.html`; 
        
           this.#logonURL = `${baseURL}/signin/v1/identifier/_/logon`; 
        
           this.#tokenURL = `${baseURL}/konnect/v1/token`;

Actually this is also quite outdated already. Nowadays we should prefer the webfinger endpoint over the <ocis-url>/.well-known/openid-configuration for IDP discovery.

Actually this is also quite outdated already. Nowadays we should prefer the webfinger endpoint over the <ocis-url>/.well-known/openid-configuration for IDP discovery.

see also http://github.com/owncloud/ocis/issues/11542

Navigation Menu

Repository navigation

OIDC auth does not use /.well-known/openid-configuration #42

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

	this.#redirectURL = `${baseURL}/oidc-callback.html`;
	this.#logonURL = `${baseURL}/signin/v1/identifier/_/logon`;
	this.#tokenURL = `${baseURL}/konnect/v1/token`;

OIDC auth does not use /.well-known/openid-configuration #42

Description

Activity

wkloucek commented on Aug 27, 2024

wkloucek commented on Jul 17, 2025

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions