Nextcloud OIDC integration

[girish]

We have published a new major version of the nextcloud package that migrates ldap login to oidc login. It is also marked as unstable. I recommend waiting a bit before you update away sensitive instances.

Please report any bugs/issues here.

[andreasdueren]

@Package-Updates

For security reasons (enforcing 2FA) it makes sense to disable the ldap login. You can do that by adding these two variables in the config file:

  'social_login_auto_redirect' => true,
  'hide_login_form' => true,

[girish]

@andreasdueren hide_login_form that will prevent admins from logging in, no? social_login_auto_redirect depends on that choice, I guess. Maybe something for the docs?

[andreasdueren]

@girish Correct. My workflow is usually the following with any app that comes pre setup with an admin account:

1 Login via OIDC/LDAP with user account (to create it in the database)
2 Logout
3 Login with Admin account
4 Make user account admin account
5 Logout
6 Login with OIDC/LDAP
7 Deactivate/Delete admin account

[firmansi]

I have tried the upgrade of a running nextcloud container, but after the upgrade I don't see any Login button with Cloudron OIDC as it should be and I can't also login with normal authentication with email or username for user registered in Cloudron Directory