Nextcloud OpenID Connect Provider App - 2.1.0

This is the an OIDC App for Nextcloud. This application allows to use your Nextcloud Login at other services supporting OpenID Connect.

Attention - Potential Breaking Change

Version 2.x tightens several behaviours to better match the OpenID Connect conformance suite. OIDC-compliant clients should continue to work, but clients that depend on legacy 1.x behaviour should be reviewed before upgrading. For further details consult the documentation.

Provided features

• Support for OpenID Connect Code (response_type = code) and Implicit (response_type = id_token) Flow - Implicite Flow must be activated per client
• Support for PKCE
• Public and confidential types of clients are supported
• Creation of ID Tokens and UserInfo responses with claims based on requested scopes and the OpenID Connect claims parameter (currently supported scopes: openid, profile, email, roles, groups, and offline_access)
• Supported signing algorithms RS256 (default) and HS256
• Group memberships can be passed as roles or groups claims
• Clients can be assigned to dedicated user groups - Only users in the configured group are allowed to retrieve an access token to fetch the ID token
• Support for RFC9068 JWT Access Tokens (must be activated per client)
• Support for OAuth 2.0 Token Exchange (RFC 8693) using a constrained access-token-to-access-token profile
• Discovery & WebFinger endpoint provided
• Logout endpoint
• Dynamic Client Registration
• Client Configuration Management (RFC 7592)
• Token Introspection (RFC 7662)
• Support for resource url (RFC 9728) at introspection
• User Consent Management
• Support for custom claims
• Administration of clients via CLI
• Generation and validation of access tokens using events
• User specific settings to define which data is passed to clients in ID token and via userinfo endpoint

Full documentation can be found at:

User Documentation
Developer Documentation

What's Changed

• Support for RFC 8693 Token Exchange by @H2CK in #689
• Build(deps): Bump @nextcloud/initial-state from 2.2.0 to 3.0.0 by @dependabot[bot] in #693
• Build(deps-dev): Bump @nextcloud/eslint-config from 8.4.2 to 9.0.1 by @dependabot[bot] in #694
• Build(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 by @dependabot[bot] in #691
• Build(deps-dev): Bump @nextcloud/webpack-vue-config from 6.3.2 to 7.0.4 by @dependabot[bot] in #690
• Build(deps): Bump webpack from 5.105.3 to 5.109.2 by @dependabot[bot] in #692

Full Changelog: 2.0.9...2.1.0