02/25/2025

• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Ivana Šugić on 02/25/2025 04:39 PM
  • Status changed from merged to in test
  • Assignee set to Ivana Šugić
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Cécile Guiot on 02/25/2025 04:07 PM
  • The changes were retracted.
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by GitHub ⁤ on 02/25/2025 03:45 PM
  • Comment added

    opf/openproject#18018 deployed to qa.openproject-edge.com

• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Jan Sandbrink on 02/25/2025 03:05 PM
  • Status changed from review approved to merged
  • Assignee deleted (Jan Sandbrink)
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by GitHub ⁤ on 02/25/2025 03:04 PM
  • Comment added

• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by GitHub ⁤ on 02/25/2025 11:45 AM
  • Comment added

    opf/openproject#18059 deployed to qa.openproject-edge.com

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Jan Sandbrink on 02/25/2025 10:58 AM
  • Status changed from in specification to in development
  • Assignee changed from Eric Schubert to Jan Sandbrink
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Pavel Balashou on 02/25/2025 10:37 AM
  • Status changed from needs review to review approved
  • Assignee set to Jan Sandbrink
• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  updated by Jan Sandbrink on 02/25/2025 08:41 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
  • Version set to 15.4.0
  • Bug found in version set to 15.4.x
• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  updated by GitHub ⁤ on 02/25/2025 08:39 AM
  • Comment added

• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  updated by Jan Sandbrink on 02/25/2025 08:11 AM
  • Comment added

    I will check what causes this. The redirect URI step is a bit weird, because there is nothing the user does to complete ...

  • Status changed from confirmed to in development
  • Assignee set to Jan Sandbrink
  • Accountable set to Jan Sandbrink

02/24/2025

• Implementation SI-75: Check if the user has a usable token for the Storage
  updated by GitHub ⁤ on 02/24/2025 05:49 PM
  • Comment added

• Implementation SI-75: Check if the user has a usable token for the Storage
  updated by Marcello Rocha Pereira on 02/24/2025 05:48 PM
  • Subject changed from Check if user has a token with the required audiences to Check if the user has a usable token for the Storage
• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by Ivana Šugić on 02/24/2025 03:53 PM
  • Comment added

    Marking this as tested ✅ as all acceptance criteria have been met.
    No issues are found.
    Tested on QA Edge environment:
    C...

  • Status changed from merged to tested
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Ivana Šugić on 02/24/2025 03:53 PM
  • The changes were retracted.
• Code maintenance SI-56: Refactor to support different steps during setup
  updated by Ivana Šugić on 02/24/2025 03:47 PM
  • Comment added

    Marking this as tested ✅ 1 found issue has been linked to this work package.
    QA Edge environment:
    Core version: OpenProj...

  • Status changed from in test to tested
  • Assignee deleted (Ivana Šugić)
• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  created by Ivana Šugić on 02/24/2025 03:44 PM
• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by GitHub ⁤ on 02/24/2025 02:09 PM
  • Comment added

02/21/2025

• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by GitHub ⁤ on 02/21/2025 04:45 PM
  • Comment added

    opf/openproject#18037 deployed to qa.openproject-edge.com

• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by GitHub ⁤ on 02/21/2025 04:45 PM
  • Comment added

    opf/openproject#18031 deployed to qa.openproject-edge.com

• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by Jan Sandbrink on 02/21/2025 04:28 PM
  • Status changed from needs review to merged
• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by GitHub ⁤ on 02/21/2025 04:28 PM
  • Comment added

• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by Jan Sandbrink on 02/21/2025 04:28 PM
  • Status changed from needs review to merged
• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by GitHub ⁤ on 02/21/2025 04:28 PM
  • Comment added

• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by Jan Sandbrink on 02/21/2025 03:12 PM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
  • Version changed from 15.5.0 to 15.4.0
• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by Jan Sandbrink on 02/21/2025 03:02 PM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by GitHub ⁤ on 02/21/2025 03:01 PM
  • Comment added

• Implementation SI-79: Fix UI for projects and workpackage to handle storages in IDP/NCHUB scenario
  updated by GitHub ⁤ on 02/21/2025 01:45 PM
  • Comment added

    opf/openproject#18025 deployed to qa.openproject-edge.com

• Implementation SI-79: Fix UI for projects and workpackage to handle storages in IDP/NCHUB scenario
  updated by Eric Schubert on 02/21/2025 01:17 PM
  • Status changed from needs review to closed
• Implementation SI-79: Fix UI for projects and workpackage to handle storages in IDP/NCHUB scenario
  updated by GitHub ⁤ on 02/21/2025 01:17 PM
  • Comment added

• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  created by Jan Sandbrink on 02/21/2025 01:01 PM
• Code maintenance SI-56: Refactor to support different steps during setup
  updated by Ivana Šugić on 02/21/2025 11:55 AM
  • Status changed from merged to in test
  • Assignee set to Ivana Šugić
• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by GitHub ⁤ on 02/21/2025 10:20 AM
  • Comment added

• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by Jan Sandbrink on 02/21/2025 09:44 AM
  • Status changed from specified to in development
  • Assignee set to Jan Sandbrink
  • Accountable set to Jan Sandbrink
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Jan Sandbrink on 02/21/2025 09:27 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)

02/20/2025

• Implementation SI-79: Fix UI for projects and workpackage to handle storages in IDP/NCHUB scenario
  updated by Eric Schubert on 02/20/2025 04:39 PM
  • Status changed from in development to needs review
  • Assignee deleted (Eric Schubert)
• Implementation SI-79: Fix UI for projects and workpackage to handle storages in IDP/NCHUB scenario
  updated by GitHub ⁤ on 02/20/2025 04:39 PM
  • Comment added

• Implementation SI-79: Fix UI for projects and workpackage to handle storages in IDP/NCHUB scenario
  created by Eric Schubert on 02/20/2025 04:01 PM
• Documentation SI-78: Update documentation to include SSO-based storage authentication
  created by Jan Sandbrink on 02/20/2025 01:25 PM
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by GitHub ⁤ on 02/20/2025 01:20 PM
  • Comment added

• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Jan Sandbrink on 02/20/2025 01:08 PM
  • Description changed (Details)
• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 02/20/2025 01:02 PM
  • Description changed (Details)
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Jan Sandbrink on 02/20/2025 12:51 PM
  • Comment added

    Hey Parimal Satyal , when we first talked about this component it was supposed to be a simple select box. Now with this ...

  • File image.png added as attachment
  • File image.png added as attachment
  • File image.png added as attachment
  • File image.png added as attachment
  • File image.png added as attachment
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Jan Sandbrink on 02/20/2025 12:30 PM
  • Status changed from review approved to merged
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by GitHub ⁤ on 02/20/2025 12:15 PM
  • Comment added

    opf/openproject#17992 deployed to qa.openproject-edge.com

• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by GitHub ⁤ on 02/20/2025 11:55 AM
  • Comment added

• Implementation SI-75: Check if user has a token with the required audiences
  updated by GitHub ⁤ on 02/20/2025 11:45 AM
  • Comment added

    opf/openproject#17999 deployed to qa.openproject-edge.com

• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Pavel Balashou on 02/20/2025 11:28 AM
  • Description changed (Details)
  • Status changed from needs review to review approved
• Implementation SI-75: Check if user has a token with the required audiences
  updated by GitHub ⁤ on 02/20/2025 11:11 AM
  • Comment added

• Feature SI-74: Storage Health status: Multiple visible checks
  updated by GitHub ⁤ on 02/20/2025 08:15 AM
  • Comment added

    opf/openproject#17979 deployed to qa.openproject-edge.com

• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by GitHub ⁤ on 02/20/2025 08:15 AM
  • Comment added

    opf/openproject#17979 deployed to qa.openproject-edge.com

• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by GitHub ⁤ on 02/20/2025 08:15 AM
  • Comment added

    opf/openproject#17838 deployed to qa.openproject-edge.com

• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Jan Sandbrink on 02/20/2025 07:55 AM
  • Status changed from needs review to merged
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by GitHub ⁤ on 02/20/2025 07:55 AM
  • Comment added

• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 02/20/2025 07:46 AM
  • Status changed from needs review to merged
• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by Jan Sandbrink on 02/20/2025 07:46 AM
  • Status changed from needs review to review approved
• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by GitHub ⁤ on 02/20/2025 07:46 AM
  • Comment added

02/19/2025

• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Jan Sandbrink on 02/19/2025 03:32 PM
  • Status changed from specified to in development
  • Accountable set to Jan Sandbrink
• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 02/19/2025 01:45 PM
  • Comment added

    opf/openproject#17912 deployed to qa.openproject-edge.com

• Feature SI-77: Audience selection for Nextcloud Hub scenario
  created by Jan Sandbrink on 02/19/2025 01:42 PM
• Epic SI-2: Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  updated by Jan Sandbrink on 02/19/2025 01:37 PM
  • Comment added

    We just discussed what can be implemented within the scope of 15.4 here. Our rough plan goes like this:
    Real release (...

  • Version set to 15.5.0
• Feature SI-3: Add and document Keycloak to the Docker based development setup
  updated by Jan Sandbrink on 02/19/2025 01:37 PM
  • Version set to 15.4.0
• Feature SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 02/19/2025 01:37 PM
  • Version set to 15.5.0
• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by Jan Sandbrink on 02/19/2025 01:34 PM
  • Status changed from new to specified
  • Version set to 15.5.0
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Jan Sandbrink on 02/19/2025 01:34 PM
  • Version set to 15.4.0
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Jan Sandbrink on 02/19/2025 01:34 PM
  • Version set to 15.5.0
• Feature SI-47: Support OIDC in storage health status
  updated by Jan Sandbrink on 02/19/2025 01:33 PM
  • Version changed from 15.4.0 to 15.5.0
• Feature SI-53: Up-sale mechanism (Corporate Edition) for OIDC, JWT and SCIM
  updated by Jan Sandbrink on 02/19/2025 01:31 PM
  • Version changed from 15.4.0 to 15.5.0
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Jan Sandbrink on 02/19/2025 01:31 PM
  • Assignee changed from Jan Sandbrink to Pavel Balashou
• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 02/19/2025 01:31 PM
  • Comment added

• Open Point SI-50: How to deal with expired refresh tokens?
  updated by Jan Sandbrink on 02/19/2025 12:54 PM
  • Status changed from new to decided
  • Decision set to Hint
• Feature SI-76: Show proper error message when refresh token is unusable
  created by Jan Sandbrink on 02/19/2025 12:53 PM
• Implementation SI-75: Check if user has a token with the required audiences
  updated by GitHub ⁤ on 02/19/2025 11:28 AM
  • Comment added

• Implementation SI-75: Check if user has a token with the required audiences
  created by Marcello Rocha Pereira on 02/19/2025 11:23 AM
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by Marcello Rocha Pereira on 02/19/2025 11:22 AM
  • Status changed from needs review to closed
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by GitHub ⁤ on 02/19/2025 10:45 AM
  • Comment added

    opf/openproject#17940 deployed to qa.openproject-edge.com

• Open Point SI-58: Should OAuth 2.0 SSO and Two-Way OAuth 2.0 be mutually exclusive or should SSO fall back to Two-Way?
  updated by Jan Sandbrink on 02/19/2025 10:28 AM
  • Status changed from new to decided
  • Decision set to We allow configuration of both
• Open Point SI-57: Should we exchange tokens lazily or eagerly?
  updated by Jan Sandbrink on 02/19/2025 10:27 AM
  • Status changed from new to decided
  • Decision set to lazy
• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 02/19/2025 10:27 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Jan Sandbrink on 02/19/2025 10:25 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by GitHub ⁤ on 02/19/2025 10:13 AM
  • Comment added

• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by Marcello Rocha Pereira on 02/19/2025 09:54 AM
  • Version set to 15.4.0
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by GitHub ⁤ on 02/19/2025 08:57 AM
  • Comment added