Windows Desktop Client redirect to Nextcloud Basic auth instead of OIDC login

[T0mWz]

Issue;

When you connect to a WindowsDesktop Client and grant it access, it redirects to Basic Auth login instead of directly to oidc login.
On Windows the login url is ; https://my-nextcloud-url.com/login/v2/flow?user=tom&direct=0 which redirects to Basic Auth, on Mac/Linux the url is without a user https://my-nextcloud-url.com/login/v2/flow?user=&direct=0 which is fine.

The app seems to responds to the flag user and then redirect to native NC login page. I guess a bug, where the option direct=1 could be useful though.

I use OIDC app release 3.2.0 on NC 30

My Config;

    'allow_user_to_change_display_name' => false,
    'lost_password_link' => 'disabled',
    'oidc_login_provider_url' => 'my keycloak url here',
    'oidc_login_logout_url' => 'my keycloak url here',
    'oidc_login_client_id' => 'my client id',
    'oidc_login_client_secret' => 'my client secret',
    'oidc_login_auto_redirect' => true,
    'oidc_login_end_session_redirect' => false,
    'oidc_login_button_text' => 'Log in with OpenID',
    'oidc_login_hide_password_form' => true,
    'oidc_login_use_id_token' => false,
    'oidc_login_attributes' => array (
        'id' => 'sub',
        'name' => '${given_name} ${family_name}',
        'mail' => 'email',
    ),
    'oidc_login_scope' => 'openid profile',
    'oidc_login_proxy_ldap' => false,
    'oidc_login_disable_registration' => true,
    'oidc_login_redir_fallback' => false,
    'oidc_login_alt_login_page' => false,
    'oidc_login_tls_verify' => true,
    'oidc_create_groups' => false,
    'oidc_login_webdav_enabled' => false, // Enable use of WebDAV via OIDC bearer token.
    'oidc_login_password_authentication' => false, // Enable authentication with user/password for DAV clients that do not support token auth
    'oidc_login_public_key_caching_time' => 86400,
    'oidc_login_min_time_between_jwks_requests' => 10,
    'oidc_login_well_known_caching_time' => 86400,
    'oidc_login_update_avatar' => false,
    'oidc_login_skip_proxy' => false,
    'oidc_login_code_challenge_method' => '',

Thanks for your help.

[T0mWz]

Tested with latest release 3.2.2 too, where the issue still exists.

[T0mWz]

Please see also #310

[Cybaen13]

Hi @T0mWz
I have the same issue as you, I just checked your commit and it seems to solve the problem.
Did you implement it on your own install? Did you have any bugs resulting ?

[T0mWz]

Helo @Cybaen13 ,

Only issue I still need to look into, but I don't think that's related here, is that OIDC flow skipping with direct=1 doesn't work. But you can dive into that otherwise, then everything will work again. But not relevant for Windows Desktop Client.

So that you skip OIDC login flow, with; https://your-environment-url/index.php/login?direct=1

[Cybaen13]

Thanks for your answer, I will take a look on a testing environment, I'm currently looking into another issue #315)
)