02/03/2025

• Task SI-60: Document Keycloak development setup
  updated by Jan Sandbrink on 02/03/2025 04:58 PM
  • Status changed from in progress to needs review
• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  created by Jan Sandbrink on 02/03/2025 04:00 PM
• Task SI-60: Document Keycloak development setup
  updated by GitHub ⁤ on 02/03/2025 02:13 PM
  • Comment added

• Epic SI-2: Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  updated by Jan Sandbrink on 02/03/2025 10:35 AM
  • Dates changed by changes to related Task SI-60: closed Document Keycloak development setup
  • Finish date set to 02/03/2025
  • Start date set to 02/03/2025
  • Duration set to 1 day
• Task SI-60: Document Keycloak development setup
  created by Jan Sandbrink on 02/03/2025 10:33 AM
• Open Point SI-59: How to implement? Existing library to use?
  updated by Jan Sandbrink on 02/03/2025 09:53 AM
  • Description changed (Details)
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by GitHub ⁤ on 02/03/2025 09:45 AM
  • Comment added

    opf/openproject#17799 deployed to qa.openproject-edge.com

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Jan Sandbrink on 02/03/2025 09:25 AM
  • Status changed from review approved to merged
  • Version set to 15.3.0
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by GitHub ⁤ on 02/03/2025 09:25 AM
  • Comment added

• Open Point SI-40: Should the authentication method be in the first section or have it's own section like in the Nextcloud side
  updated by Jan Sandbrink on 02/03/2025 08:55 AM
  • The changes were retracted.
• Code maintenance SI-56: Refactor to support different steps during setup
  updated by Jan Sandbrink on 02/03/2025 08:54 AM
  • Type changed from Implementation to Code maintenance
  • Parent changed from File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2 to Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
• Open Point SI-58: Should OAuth 2.0 SSO and Two-Way OAuth 2.0 be mutually exclusive or should SSO fall back to Two-Way?
  updated by Jan Sandbrink on 02/03/2025 08:41 AM
  • Description set (Details)
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by GitHub ⁤ on 02/03/2025 08:20 AM
  • Comment added

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Oliver Günther on 02/03/2025 06:45 AM
  • Status changed from needs review to review approved

01/31/2025

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Jan Sandbrink on 01/31/2025 04:28 PM
  • Comment added

    https://github.com/opf/omniauth-openid-connect/pull/14

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Jan Sandbrink on 01/31/2025 03:58 PM
  • Comment added

    I looked into this. The omniauth-openid-connect gem (maintained by us) failed to catch a relevant exception, but otherwi...

  • Status changed from confirmed to needs review
  • Accountable changed from Dominic Bräunlein to Jan Sandbrink
  • File image.png added as attachment
  • File image.png added as attachment
• Implementation SI-44: Perform Token Exchange to obtain missing token for target audience
  updated by GitHub ⁤ on 01/31/2025 03:15 PM
  • Comment added

    opf/openproject#17678 deployed to qa.openproject-edge.com

• Implementation SI-55: Service to get usable OIDC token for an audience
  updated by GitHub ⁤ on 01/31/2025 03:15 PM
  • Comment added

    opf/openproject#17643 deployed to qa.openproject-edge.com

• Implementation SI-44: Perform Token Exchange to obtain missing token for target audience
  updated by Jan Sandbrink on 01/31/2025 02:43 PM
  • Status changed from needs review to closed
• Implementation SI-44: Perform Token Exchange to obtain missing token for target audience
  updated by GitHub ⁤ on 01/31/2025 02:43 PM
  • Comment added

• Implementation SI-55: Service to get usable OIDC token for an audience
  updated by Jan Sandbrink on 01/31/2025 02:42 PM
  • Status changed from needs review to closed
• Implementation SI-55: Service to get usable OIDC token for an audience
  updated by GitHub ⁤ on 01/31/2025 02:42 PM
  • Comment added

• Open Point SI-59: How to implement? Existing library to use?
  created by Jan Sandbrink on 01/31/2025 08:54 AM

01/30/2025

• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 01/30/2025 04:04 PM
  • Version set to 15.4.0
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Jan Sandbrink on 01/30/2025 04:03 PM
  • Version set to 15.4.0
• Implementation SI-56: Refactor to support different steps during setup
  updated by Jan Sandbrink on 01/30/2025 03:44 PM
  • Description changed (Details)
• Open Point SI-58: Should OAuth 2.0 SSO and Two-Way OAuth 2.0 be mutually exclusive or should SSO fall back to Two-Way?
  created by Jan Sandbrink on 01/30/2025 01:57 PM
• Open Point SI-57: Should we exchange tokens lazily or eagerly?
  created by Jan Sandbrink on 01/30/2025 01:56 PM
• Open Point SI-49: Is it necessary to create a link between storage and OpenIDConnect provider?
  updated by Jan Sandbrink on 01/30/2025 01:54 PM
  • Status changed from new to decided
  • Decision set to no. no necessity to do that was identified so far
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Dominic Bräunlein on 01/30/2025 11:57 AM
  • Description changed (Details)
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by Henriette Darge on 01/30/2025 09:11 AM
  • The changes were retracted.

01/28/2025

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Dominic Bräunlein on 01/28/2025 01:57 PM
  • Accountable set to Dominic Bräunlein
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Jens Ulferts on 01/28/2025 12:03 PM
  • Comment added

    Dominic Bräunlein , throwing this your way since it is OIDC related. To me it sounds like increasing the clarity of the ...

  • Project changed from OpenProject to Seamless Integrations
  • Version deleted (15.2.1)
• Implementation SI-56: Refactor to support different steps during setup
  updated by Jan Sandbrink on 01/28/2025 11:33 AM
  • Status changed from in development to in review