02/05/2025

• Implementation SI-43: Allow to perform NC authentication using stored access tokens
  updated by Jan Sandbrink on 02/05/2025 04:42 PM
  • Status changed from specified to in development
  • Assignee set to Eric Schubert
• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by GitHub ⁤ on 02/05/2025 01:39 PM
  • Comment added

• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by GitHub ⁤ on 02/05/2025 01:37 PM
  • Comment added

• Implementation SI-62: Update RemoteIdentity after token exchange
  created by Pavel Balashou on 02/05/2025 10:19 AM

02/04/2025

• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Parimal Satyal on 02/04/2025 04:59 PM
  • Comment added

    Hi Jan Sandbrink.
    Following our meeting earlier, I've updated and cleaned up the Figma mockups (please note this is a se...

• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by Jan Sandbrink on 02/04/2025 04:42 PM
  • Status changed from merged to closed
  • Version set to 15.3.0
• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by Cécile Guiot on 02/04/2025 04:02 PM
  • Comment added

    all WPs need a version, regardless of the type, at least all WPs have had versions associated with them since i started ...

• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by Jan Sandbrink on 02/04/2025 02:04 PM
  • Comment added

    I wasn't sure that I want to set a version here. This fix is for no user visible feature, this is also why I noted that ...

• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by Cécile Guiot on 02/04/2025 02:01 PM
  • Comment added

    Jan Sandbrink can you please remember to set the version when you set a ticket to merged? 🙏

• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by GitHub ⁤ on 02/04/2025 12:15 PM
  • Comment added

    opf/openproject#17819 deployed to qa.openproject-edge.com

• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by Jan Sandbrink on 02/04/2025 11:47 AM
  • Status changed from review approved to merged
• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by GitHub ⁤ on 02/04/2025 11:47 AM
  • Comment added

• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by Jan Sandbrink on 02/04/2025 11:47 AM
  • Status changed from needs clarification to review approved
• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by GitHub ⁤ on 02/04/2025 10:49 AM
  • Comment added

02/03/2025

• Task SI-60: Document Keycloak development setup
  updated by Jan Sandbrink on 02/03/2025 04:58 PM
  • Status changed from in progress to needs review
• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  created by Jan Sandbrink on 02/03/2025 04:00 PM
• Task SI-60: Document Keycloak development setup
  updated by GitHub ⁤ on 02/03/2025 02:13 PM
  • Comment added

• Epic SI-2: Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  updated by Jan Sandbrink on 02/03/2025 10:35 AM
  • Dates changed by changes to related Task SI-60: closed Document Keycloak development setup
  • Finish date set to 02/03/2025
  • Start date set to 02/03/2025
  • Duration set to 1 day
• Task SI-60: Document Keycloak development setup
  created by Jan Sandbrink on 02/03/2025 10:33 AM
• Open Point SI-59: How to implement? Existing library to use?
  updated by Jan Sandbrink on 02/03/2025 09:53 AM
  • Description changed (Details)
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by GitHub ⁤ on 02/03/2025 09:45 AM
  • Comment added

    opf/openproject#17799 deployed to qa.openproject-edge.com

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Jan Sandbrink on 02/03/2025 09:25 AM
  • Status changed from review approved to merged
  • Version set to 15.3.0
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by GitHub ⁤ on 02/03/2025 09:25 AM
  • Comment added

• Open Point SI-40: Should the authentication method be in the first section or have it's own section like in the Nextcloud side
  updated by Jan Sandbrink on 02/03/2025 08:55 AM
  • The changes were retracted.
• Code maintenance SI-56: Refactor to support different steps during setup
  updated by Jan Sandbrink on 02/03/2025 08:54 AM
  • Type changed from Implementation to Code maintenance
  • Parent changed from File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2 to Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
• Open Point SI-58: Should OAuth 2.0 SSO and Two-Way OAuth 2.0 be mutually exclusive or should SSO fall back to Two-Way?
  updated by Jan Sandbrink on 02/03/2025 08:41 AM
  • Description set (Details)
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by GitHub ⁤ on 02/03/2025 08:20 AM
  • Comment added

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Oliver Günther on 02/03/2025 06:45 AM
  • Status changed from needs review to review approved

01/31/2025

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Jan Sandbrink on 01/31/2025 04:28 PM
  • Comment added

    https://github.com/opf/omniauth-openid-connect/pull/14

• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Jan Sandbrink on 01/31/2025 03:58 PM
  • Comment added

    I looked into this. The omniauth-openid-connect gem (maintained by us) failed to catch a relevant exception, but otherwi...

  • Status changed from confirmed to needs review
  • Accountable changed from Dominic Bräunlein to Jan Sandbrink
  • File image.png added as attachment
  • File image.png added as attachment
• Implementation SI-44: Perform Token Exchange to obtain missing token for target audience
  updated by GitHub ⁤ on 01/31/2025 03:15 PM
  • Comment added

    opf/openproject#17678 deployed to qa.openproject-edge.com

• Implementation SI-55: Service to get usable OIDC token for an audience
  updated by GitHub ⁤ on 01/31/2025 03:15 PM
  • Comment added

    opf/openproject#17643 deployed to qa.openproject-edge.com

• Implementation SI-44: Perform Token Exchange to obtain missing token for target audience
  updated by Jan Sandbrink on 01/31/2025 02:43 PM
  • Status changed from needs review to closed
• Implementation SI-44: Perform Token Exchange to obtain missing token for target audience
  updated by GitHub ⁤ on 01/31/2025 02:43 PM
  • Comment added

• Implementation SI-55: Service to get usable OIDC token for an audience
  updated by Jan Sandbrink on 01/31/2025 02:42 PM
  • Status changed from needs review to closed
• Implementation SI-55: Service to get usable OIDC token for an audience
  updated by GitHub ⁤ on 01/31/2025 02:42 PM
  • Comment added

• Open Point SI-59: How to implement? Existing library to use?
  created by Jan Sandbrink on 01/31/2025 08:54 AM

01/30/2025

• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 01/30/2025 04:04 PM
  • Version set to 15.4.0
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Jan Sandbrink on 01/30/2025 04:03 PM
  • Version set to 15.4.0
• Implementation SI-56: Refactor to support different steps during setup
  updated by Jan Sandbrink on 01/30/2025 03:44 PM
  • Description changed (Details)
• Open Point SI-58: Should OAuth 2.0 SSO and Two-Way OAuth 2.0 be mutually exclusive or should SSO fall back to Two-Way?
  created by Jan Sandbrink on 01/30/2025 01:57 PM
• Open Point SI-57: Should we exchange tokens lazily or eagerly?
  created by Jan Sandbrink on 01/30/2025 01:56 PM
• Open Point SI-49: Is it necessary to create a link between storage and OpenIDConnect provider?
  updated by Jan Sandbrink on 01/30/2025 01:54 PM
  • Status changed from new to decided
  • Decision set to no. no necessity to do that was identified so far
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Dominic Bräunlein on 01/30/2025 11:57 AM
  • Description changed (Details)
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by Henriette Darge on 01/30/2025 09:11 AM
  • The changes were retracted.