03/05/2025

• Bug SI-89: Authentication errors during fetch of origin_user_id are not shown properly
  updated by Pavel Balashou on 03/05/2025 05:07 PM
  • Status changed from needs review to in review
  • Assignee set to Pavel Balashou
• Bug SI-88: Can't replace OAuth application if none is present
  updated by Jan Sandbrink on 03/05/2025 04:53 PM
  • Status changed from review approved to merged
  • Assignee deleted (Jan Sandbrink)
• Bug SI-89: Authentication errors during fetch of origin_user_id are not shown properly
  updated by Jan Sandbrink on 03/05/2025 04:04 PM
  • Status changed from new to needs review
  • Version set to 15.4.0
  • Bug found in version set to 15.4.x
• Bug SI-89: Authentication errors during fetch of origin_user_id are not shown properly
  updated by GitHub ⁤ on 03/05/2025 04:04 PM
  • Comment added

• Bug SI-89: Authentication errors during fetch of origin_user_id are not shown properly
  created by Jan Sandbrink on 03/05/2025 04:02 PM
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Jan Sandbrink on 03/05/2025 04:01 PM
  • Comment added

    I extracted the discovered bug into SI-89 for proper reporting and release management.

  • Status changed from needs review to merged
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Dominic Bräunlein on 03/05/2025 03:56 PM
  • Status changed from in development to merged
• Bug SI-88: Can't replace OAuth application if none is present
  updated by GitHub ⁤ on 03/05/2025 02:15 PM
  • Comment added

    opf/openproject#18143 deployed to qa.openproject-edge.com

• Bug SI-87: Can't associate storage to project via storage admin view
  updated by Pavel Balashou on 03/05/2025 11:33 AM
  • Status changed from confirmed to in development
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Jan Sandbrink on 03/05/2025 10:12 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by GitHub ⁤ on 03/05/2025 10:06 AM
  • Comment added

• Bug SI-88: Can't replace OAuth application if none is present
  updated by GitHub ⁤ on 03/05/2025 09:59 AM
  • Comment added

• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by Pavel Balashou on 03/05/2025 09:47 AM
  • Status changed from in development to needs review
  • Assignee deleted (Pavel Balashou)
• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by GitHub ⁤ on 03/05/2025 09:46 AM
  • Comment added

03/04/2025

• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Cécile Guiot on 03/04/2025 04:31 PM
  • Status changed from tested to closed
  • % Complete set to 100%
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Cécile Guiot on 03/04/2025 04:31 PM
  • Status changed from tested to closed
  • % Complete set to 100%
• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by Cécile Guiot on 03/04/2025 04:31 PM
  • Status changed from tested to closed
  • % Complete set to 100%
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Cécile Guiot on 03/04/2025 04:31 PM
  • Status changed from tested to closed
  • % Complete set to 100%
• Code maintenance SI-56: Refactor to support different steps during setup
  updated by Cécile Guiot on 03/04/2025 04:31 PM
  • Status changed from tested to closed
  • % Complete set to 100%
• Feature SI-39: Store token exchange capability on OIDC providers
  updated by Cécile Guiot on 03/04/2025 04:31 PM
  • Status changed from tested to closed
  • % Complete set to 100%
• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Cécile Guiot on 03/04/2025 04:31 PM
  • Status changed from tested to closed
  • % Complete set to 100%
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Jan Sandbrink on 03/04/2025 04:22 PM
  • Comment added

    I found one issue, where we don't show the correct error.

  • Status changed from merged to in development
  • Assignee set to Jan Sandbrink
• Bug SI-84: Empty audience translation is missing
  updated by Jan Sandbrink on 03/04/2025 03:29 PM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Bug SI-88: Can't replace OAuth application if none is present
  updated by Jan Sandbrink on 03/04/2025 03:25 PM
  • Status changed from in development to review approved
• Bug SI-84: Empty audience translation is missing
  updated by GitHub ⁤ on 03/04/2025 02:05 PM
  • Comment added

• Bug SI-84: Empty audience translation is missing
  updated by Jan Sandbrink on 03/04/2025 01:25 PM
  • Status changed from confirmed to in development
  • Assignee set to Jan Sandbrink
  • Version set to 15.4.0
  • Parent changed from Audience selection for Nextcloud Hub scenario to Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  • Accountable set to Jan Sandbrink
  • Bug found in version set to 15.4.x
• Bug SI-87: Can't associate storage to project via storage admin view
  updated by Jan Sandbrink on 03/04/2025 11:54 AM
  • Assignee set to Pavel Balashou
• Implementation SI-75: Check if the user has a usable token for the Storage
  updated by GitHub ⁤ on 03/04/2025 11:45 AM
  • Comment added

    opf/openproject#18063 deployed to qa.openproject-edge.com

• Feature SI-47: Support OIDC in storage health status
  updated by Marcello Rocha Pereira on 03/04/2025 11:31 AM
  • Status changed from in development to merged
  • Assignee deleted (Marcello Rocha Pereira)
• Implementation SI-67: Validate token exchange is working as needed
  updated by Marcello Rocha Pereira on 03/04/2025 11:31 AM
  • Status changed from new to closed
  • % Complete set to 100%
• Implementation SI-66: Add check for OIDC IdP capabilities
  updated by Marcello Rocha Pereira on 03/04/2025 11:30 AM
  • Status changed from new to closed
  • % Complete set to 100%
• Implementation SI-75: Check if the user has a usable token for the Storage
  updated by Marcello Rocha Pereira on 03/04/2025 11:22 AM
  • Status changed from needs review to closed
  • % Complete set to 100%
• Bug SI-88: Can't replace OAuth application if none is present
  updated by GitHub ⁤ on 03/04/2025 11:17 AM
  • Comment added

• Bug SI-88: Can't replace OAuth application if none is present
  created by Jan Sandbrink on 03/04/2025 11:11 AM
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by GitHub ⁤ on 03/04/2025 10:45 AM
  • Comment added

    opf/openproject#18111 deployed to qa.openproject-edge.com

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by GitHub ⁤ on 03/04/2025 10:45 AM
  • Comment added

    opf/openproject#18111 deployed to qa.openproject-edge.com

• Implementation SI-75: Check if the user has a usable token for the Storage
  updated by GitHub ⁤ on 03/04/2025 10:23 AM
  • Comment added

• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Jan Sandbrink on 03/04/2025 10:17 AM
  • Status changed from review approved to merged
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Jan Sandbrink on 03/04/2025 10:16 AM
  • Status changed from review approved to merged
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by GitHub ⁤ on 03/04/2025 10:16 AM
  • Comment added

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by GitHub ⁤ on 03/04/2025 10:16 AM
  • Comment added

• Bug SI-87: Can't associate storage to project via storage admin view
  created by Jan Sandbrink on 03/04/2025 10:04 AM
• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by Pavel Balashou on 03/04/2025 09:09 AM
  • Status changed from new to in development
  • Assignee set to Pavel Balashou

03/03/2025

• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Pavel Balashou on 03/03/2025 03:04 PM
  • Status changed from needs review to review approved
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Pavel Balashou on 03/03/2025 03:03 PM
  • Status changed from needs review to review approved
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Jan Sandbrink on 03/03/2025 01:19 PM
  • Version set to 15.4.0
  • Parent changed from Extend Nextcloud files storage to use SSO access tokens to Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by GitHub ⁤ on 03/03/2025 01:15 PM
  • Comment added

    opf/openproject#18033 deployed to qa.openproject-edge.com

• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 03/03/2025 01:15 PM
  • Comment added

    opf/openproject#18033 deployed to qa.openproject-edge.com

• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by Pavel Balashou on 03/03/2025 11:30 AM
  • Status changed from review approved to closed
• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by GitHub ⁤ on 03/03/2025 11:29 AM
  • Comment added

• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 03/03/2025 11:29 AM
  • Comment added

• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by Jan Sandbrink on 03/03/2025 11:29 AM
  • Status changed from review approved to closed
• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by Jan Sandbrink on 03/03/2025 11:28 AM
  • Status changed from in development to review approved
  • Assignee deleted (Pavel Balashou)
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Pavel Balashou on 03/03/2025 11:16 AM
  • Status changed from merged to tested
  • Assignee deleted (Pavel Balashou)
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Jan Sandbrink on 03/03/2025 10:44 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Jan Sandbrink on 03/03/2025 10:44 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Niels Lindenthal on 03/03/2025 09:50 AM
  • Enterprise plan set to Enterprise / Corporate
• Epic SI-2: Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  updated by Niels Lindenthal on 03/03/2025 09:28 AM
  • Enterprise plan set to Enterprise / Corporate

02/28/2025

• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by Pavel Balashou on 02/28/2025 06:09 PM
  • Description changed (Details)
• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 02/28/2025 06:07 PM
  • Comment added

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Jan Sandbrink on 02/28/2025 02:57 PM
  • Description changed (Details)
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Dominic Bräunlein on 02/28/2025 11:33 AM
  • Assignee set to Pavel Balashou
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by GitHub ⁤ on 02/28/2025 09:53 AM
  • Comment added

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by GitHub ⁤ on 02/28/2025 09:53 AM
  • Comment added

• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by GitHub ⁤ on 02/28/2025 09:52 AM
  • Comment added

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by GitHub ⁤ on 02/28/2025 09:52 AM
  • Comment added

• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by GitHub ⁤ on 02/28/2025 09:39 AM
  • Comment added

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by GitHub ⁤ on 02/28/2025 09:39 AM
  • Comment added

• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Jan Sandbrink on 02/28/2025 09:32 AM
  • Status changed from needs clarification to in development
  • Assignee set to Jan Sandbrink
  • Accountable set to Jan Sandbrink
  • Bug found in version set to 15.4.x
• Bug SI-86: SSO users storage connection does not work on project storage members page
  created by Pavel Balashou on 02/28/2025 08:50 AM

02/27/2025

• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by GitHub ⁤ on 02/27/2025 02:37 PM
  • Comment added

• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  updated by GitHub ⁤ on 02/27/2025 02:15 PM
  • Comment added

    opf/openproject#18068 deployed to qa.openproject-edge.com

• Code maintenance SI-85: Use official omniauth gem
  created by Jan Sandbrink on 02/27/2025 01:53 PM
• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  updated by Jan Sandbrink on 02/27/2025 01:47 PM
  • Status changed from needs review to merged
• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  updated by GitHub ⁤ on 02/27/2025 01:47 PM
  • Comment added

• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by Ivana Šugić on 02/27/2025 01:14 PM
  • Comment added

    As QAs are unable to test this, I spoke to Jan Sandbrink and he already tested it manually so closing this one.

  • Status changed from merged to closed
• Implementation SI-82: Make sure new authentication strategy is used everywhere
  updated by GitHub ⁤ on 02/27/2025 10:45 AM
  • Comment added

    opf/openproject#18090 deployed to qa.openproject-edge.com

• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by GitHub ⁤ on 02/27/2025 10:34 AM
  • Comment added

• Bug SI-84: Empty audience translation is missing
  created by Ivana Šugić on 02/27/2025 10:31 AM
• Implementation SI-82: Make sure new authentication strategy is used everywhere
  updated by Jan Sandbrink on 02/27/2025 10:14 AM
  • Status changed from needs review to closed
• Implementation SI-82: Make sure new authentication strategy is used everywhere
  updated by GitHub ⁤ on 02/27/2025 10:13 AM
  • Comment added

• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 02/27/2025 09:57 AM
  • Description changed (Details)
• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Cécile Guiot on 02/27/2025 09:55 AM
  • Comment added

    Working as expected ✅
    Tested on:
    Core build
    3ee8f8fe5b643dd56a28e4485bd922662f1216a8
    Product version
    79e94fc8ce0c56340cc...

  • Status changed from in test to tested
  • Assignee deleted (Cécile Guiot)
• Implementation SI-69: Add links to docs
  updated by Jan Sandbrink on 02/27/2025 09:48 AM
  • Status changed from new to rejected
• Feature SI-47: Support OIDC in storage health status
  updated by Jan Sandbrink on 02/27/2025 09:48 AM
  • Comment added

    Marcello Rocha Pereira I removed the ACs with regards to linking to docs and moved those to a separate feature:
    This al...

  • Description changed (Details)
• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 02/27/2025 09:41 AM
  • Description changed (Details)
• Feature SI-83: Link to new OIDC docs from storages setup
  created by Jan Sandbrink on 02/27/2025 09:39 AM