03/14/2025

• Feature SI-103: Script the SSO setup for OpenDesk
  updated by Jan Sandbrink on 03/14/2025 04:00 PM
  • Description changed (Details)
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Cécile Guiot on 03/14/2025 03:38 PM
  • Status changed from merged to in test
  • Assignee changed from Pavel Balashou to Cécile Guiot
• Feature SI-47: Support OIDC in storage health status
  updated by Cécile Guiot on 03/14/2025 03:07 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Cécile Guiot on 03/14/2025 03:07 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    f5dae7b7df735b9a0b783389769d47917e4a8b15
    Product version
    c32c642cd2201e798210c2ddb73f1358c...

  • Status changed from merged to tested
  • % Complete set to 100%
• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by GitHub ⁤ on 03/14/2025 02:42 PM
  • Comment added

• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 03/14/2025 02:39 PM
  • Description changed (Details)
  • Requires doc change deleted (No)
• Bug SI-87: Can't associate storage to project via storage admin view
  updated by Cécile Guiot on 03/14/2025 02:32 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    f5dae7b7df735b9a0b783389769d47917e4a8b15
    Product version
    c32c642cd2201e798210c2ddb73f1358c...

  • Status changed from merged to tested
  • % Complete set to 100%
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Cécile Guiot on 03/14/2025 01:54 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    61291166e15f0a0bf8a7613feb6a05386066040b
    Product version
    9704ef96362b931c54870d7c2b38c97be...

  • Status changed from in test to closed
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Wieland Lindenthal on 03/14/2025 01:49 PM
  • Comment added

    Dominic Bräunlein The discussed idea was to use our OAuth Applications:
    Extend client credentials flow to allow to map...

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Cécile Guiot on 03/14/2025 12:34 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Cécile Guiot on 03/14/2025 12:33 PM
  • Comment added

    Fixed ✅ (thanks Markus for letting me know how to test 😊 )
    Tested on:
    Core build
    df54d044cf3def4e12df754bbd7d2a14e2cf27c...

  • Status changed from in test to closed
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/14/2025 12:15 PM
  • Comment added

    opf/openproject#18295 deployed to qa.openproject-stage.com

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Eric Schubert on 03/14/2025 11:52 AM
  • Status changed from needs review to merged
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/14/2025 11:52 AM
  • Comment added

• Feature SI-53: Up-sale mechanism (Corporate Edition) for OIDC, JWT and SCIM
  updated by Dominic Bräunlein on 03/14/2025 11:22 AM
  • Description changed (Details)
• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Dominic Bräunlein on 03/14/2025 11:16 AM
  • Type changed from Feature to Documentation
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/14/2025 11:15 AM
  • Comment added

    opf/openproject#18298 deployed to qa.openproject-stage.com

• Bug SI-84: Empty audience translation is missing
  updated by Cécile Guiot on 03/14/2025 11:02 AM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    b892e15ab39240f188f5964aaf6cd3285e035314
    Product version
    9704ef96362b931c54870d7c2b38c97be...

  • Status changed from merged to closed
  • % Complete set to 100%
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/14/2025 10:58 AM
  • Comment added

    Wieland Lindenthal what would you add or change to it?
    If we use OAuth Applications to provide SCIM client credentials i...

  • Description changed (Details)
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Marcello Rocha Pereira on 03/14/2025 10:52 AM
  • Comment added

    Jan Sandbrink there was always talk about it this, but we never commited for different reasons (original implementation ...

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Jan Sandbrink on 03/14/2025 10:45 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by GitHub ⁤ on 03/14/2025 10:45 AM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Cécile Guiot on 03/14/2025 10:37 AM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/14/2025 10:22 AM
  • Comment added

    Cécile Guiot Markus Kahl Now it's working. I promise 🤞

  • Status changed from needs review to merged
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/14/2025 10:22 AM
  • Comment added

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  created by Jan Sandbrink on 03/14/2025 09:54 AM
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Jan Sandbrink on 03/14/2025 09:51 AM
  • Status changed from in specification to in development
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Wieland Lindenthal on 03/14/2025 09:37 AM
  • Comment added

    Dominic Bräunlein Sure, it is the default that we start on stuff that is clear while other stuff is not clear. Then we u...

• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Dominic Bräunlein on 03/14/2025 09:34 AM
  • Comment added

    Wieland Lindenthal OIDC is 15.5 not SCIM. 
    There is no version assigned yet. The scope of the EPIC is not finalised ther...

  • Version deleted (15.5.0)
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Wieland Lindenthal on 03/14/2025 09:30 AM
  • Comment added

    Dominic Bräunlein I guess the description needs to get updated eventually if we wan to reuse OAuth Applications to provi...

  • Version set to 15.5.0
  • Requires doc change changed from No to Yes
  • Developers set to OP Dev Titan Team
• Feature SI-98: Add SCIM server API
  updated by Wieland Lindenthal on 03/14/2025 09:26 AM
  • Status changed from in specification to in development
  • Version set to 15.5.0
  • Requires doc change changed from No to Yes
  • Enterprise plan set to Enterprise / Corporate
  • Developers set to OP Dev Titan Team
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Wieland Lindenthal on 03/14/2025 09:23 AM
  • Comment added

    Dominic Bräunlein Pavel Balashou From the dailies I understood that this EPIC is in development and that Pavel is workin...

  • Status changed from in specification to in development
  • Assignee changed from Dominic Bräunlein to Pavel Balashou
  • Version changed from Wish List to 15.5.0
  • Accountable set to Dominic Bräunlein
  • Requires doc change changed from No to Yes
• Feature SI-83: Link to new OIDC docs from storages setup
  updated by Jan Sandbrink on 03/14/2025 09:22 AM
  • Version set to 15.5.0
• Feature SI-105: Allow to set authentication method and storage audience via API
  created by Jan Sandbrink on 03/14/2025 09:18 AM
• Feature SI-104: Remove creation dependency between Nextcloud and OpenProject from openDesk setup
  created by Jan Sandbrink on 03/14/2025 09:01 AM

03/13/2025

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/13/2025 04:39 PM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/13/2025 04:38 PM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/13/2025 04:33 PM
  • Status changed from test failed to in development
  • Assignee set to Jan Sandbrink
  • Developers set to Jan Sandbrink
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Markus Kahl on 03/13/2025 03:27 PM
  • Comment added

    Ok but just for the record, I logged in via username and password! :D

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/13/2025 03:15 PM
  • Comment added

    Nvm... I see the issue and it's pretty stupid 🙈 
    Thanks for the testing.

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/13/2025 03:13 PM
  • Comment added

    One more question Markus Kahl : How did you log in? We have quite a few methods to do that:
    Google or Semmel Cécile or ...

  • File image.png added as attachment
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Eric Schubert on 03/13/2025 02:58 PM
  • Status changed from in development to needs review
  • Assignee deleted (Eric Schubert)
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/13/2025 02:58 PM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Markus Kahl on 03/13/2025 01:59 PM
  • Comment added

    Jan Sandbrink the env for qa.openproject-stage.com is called stage-aws-de-trials1. So the clue is in the name! qa.openpr...

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Eric Schubert on 03/13/2025 01:58 PM
  • Status changed from test failed to in development
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/13/2025 01:54 PM
  • Comment added

    Markus Kahl How can I tell edge and stage apart in AppSignal? The fix is only on stage yet.

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Markus Kahl on 03/13/2025 01:52 PM
  • Comment added

    Cécile Guiot If you have access to appsignal which you appear to have you could double check this is solved by searching...

  • Status changed from merged to test failed
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by GitHub ⁤ on 03/13/2025 11:29 AM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Cécile Guiot on 03/13/2025 11:16 AM
  • Comment added

    Markus Kahl is that something you can test? if not i'll try to do it the alternative way that jan suggested.

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/13/2025 11:15 AM
  • Comment added

    opf/openproject#18286 deployed to qa.openproject-stage.com

• Feature SI-103: Script the SSO setup for OpenDesk
  created by Jan Sandbrink on 03/13/2025 11:04 AM
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/13/2025 10:53 AM
  • Description changed (Details)
  • Status changed from review approved to merged
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/13/2025 10:53 AM
  • Comment added

• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  created by Jan Sandbrink on 03/13/2025 09:50 AM
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/13/2025 09:48 AM
  • Status changed from in development to review approved
  • Assignee deleted (Jan Sandbrink)
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/13/2025 08:33 AM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/13/2025 08:33 AM
  • Comment added

03/12/2025

• Epic SI-2: Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  updated by Niels Lindenthal on 03/12/2025 05:44 PM
  • Roadmap changed from (deleted option) to (deleted option)
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Cécile Guiot on 03/12/2025 05:08 PM
  • Comment added

    Working as expected ✅
    Tested on:
    Core build
    3a3abc9357ff7a8ab92a39925e354bbcc3bff88a
    Product version
    22feb25c7196201d723...

  • Status changed from in test to closed
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by Jan Sandbrink on 03/12/2025 04:42 PM
  • Comment added

    As discussed IRL, we will keep the order that's live right now.

  • Status changed from review approved to closed
  • % Complete set to 100%
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by Parimal Satyal on 03/12/2025 04:28 PM
  • Comment added

    Hi Jan Sandbrink,
    It's really a question of what has more importance to a user when they come to this page. For example,...

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Cécile Guiot on 03/12/2025 03:37 PM
  • Comment added

    Eric Schubert I tried to create a folder named WP 62047 test folder and got the below error message. I tried to inspect ...

  • Status changed from merged to test failed
  • Assignee set to Eric Schubert
  • File grafik.png added as attachment
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/12/2025 01:15 PM
  • Comment added

    opf/openproject#18221 deployed to qa.openproject-stage.com

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Eric Schubert on 03/12/2025 12:30 PM
  • Status changed from needs review to merged
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/12/2025 12:30 PM
  • Comment added

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Cécile Guiot on 03/12/2025 12:00 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-89: Authentication errors during fetch of origin_user_id are not shown properly
  updated by Cécile Guiot on 03/12/2025 11:23 AM
  • Comment added

    Fixed ✅
    Actual error below (for reference and for the curious 😊 )
    Tested on:
    Core build
    a21d966fc4cee7c7a8ee7e0befa061f...

  • Status changed from merged to closed
  • % Complete set to 100%
  • File grafik.png added as attachment
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by Jan Sandbrink on 03/12/2025 10:25 AM
  • Comment added

    Parimal Satyal Still looking for your feedback here. The PR has been created and was approved, but I am waiting for your...

  • Status changed from needs review to review approved
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/12/2025 10:22 AM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/12/2025 10:07 AM
  • Status changed from needs clarification to in development
  • Assignee set to Jan Sandbrink
  • Version set to 15.4.0
• Open Point SI-101: Do we need a logging system for the user changes that come via SCIM API?
  created by Dominic Bräunlein on 03/12/2025 07:44 AM
• Feature SI-98: Add SCIM server API
  updated by Dominic Bräunlein on 03/12/2025 07:41 AM
  • Description changed (Details)
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/12/2025 07:37 AM
  • Description changed (Details)
• Open Point SI-100: Do we need to synchronize custom attributes from IdP to OpenProject?
  created by Dominic Bräunlein on 03/12/2025 07:31 AM
• Open Point SI-99: Do the system-level tokens expire and how would we handle that?
  created by Dominic Bräunlein on 03/12/2025 07:30 AM
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Dominic Bräunlein on 03/12/2025 07:00 AM
  • Description changed (Details)
  • Motivation and background information changed (Details)

03/11/2025

• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Jan Sandbrink on 03/11/2025 04:27 PM
  • Comment added

    if an immediate re-check on button-press is not possible, instead display a hint that the check is pending and when it ...

• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by GitHub ⁤ on 03/11/2025 03:15 PM
  • Comment added

    opf/openproject#18163 deployed to qa.openproject-stage.com

• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by Pavel Balashou on 03/11/2025 02:33 PM
  • Status changed from needs review to closed
  • % Complete set to 100%
• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by GitHub ⁤ on 03/11/2025 02:33 PM
  • Comment added

• Feature SI-76: Show proper error message when refresh token is unusable
  updated by Cécile Guiot on 03/11/2025 01:50 PM
  • Version changed from 15.5.0 to 15.4.0
• Bug SI-89: Authentication errors during fetch of origin_user_id are not shown properly
  updated by Cécile Guiot on 03/11/2025 01:46 PM
  • Description changed (Details)
• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by Pavel Balashou on 03/11/2025 11:35 AM
  • Status changed from in development to needs review
• Feature SI-98: Add SCIM server API
  created by Dominic Bräunlein on 03/11/2025 10:23 AM
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/11/2025 10:21 AM
  • Description changed (Details)
  • Status changed from new to in specification
  • Assignee set to Pavel Balashou
  • Accountable set to Dominic Bräunlein
  • Designer set to Parimal Satyal
• Implementation SI-97: Update the UI Component to be able to render the list / groups with statuses
  created by Marcello Rocha Pereira on 03/11/2025 09:18 AM
• Implementation SI-96: Update the ConnectionValidator to return mutlple result sets
  created by Marcello Rocha Pereira on 03/11/2025 09:18 AM
• Implementation SI-95: Update the ConnectionValidator to be storage agnostic
  created by Marcello Rocha Pereira on 03/11/2025 09:17 AM
• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  created by Marcello Rocha Pereira on 03/11/2025 09:16 AM
• Implementation SI-93: Breaking down the tests: AMPF Configuration Group
  created by Marcello Rocha Pereira on 03/11/2025 09:15 AM
• Implementation SI-92: Breaking down the tests: Base Configuration Group
  created by Marcello Rocha Pereira on 03/11/2025 09:15 AM

03/10/2025

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Eric Schubert on 03/10/2025 05:17 PM
  • Status changed from in development to needs review
  • Assignee deleted (Eric Schubert)
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/10/2025 05:17 PM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-89: Authentication errors during fetch of origin_user_id are not shown properly
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-88: Can't replace OAuth application if none is present
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-87: Can't associate storage to project via storage admin view
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Code maintenance SI-85: Use official omniauth gem
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-84: Empty audience translation is missing
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-83: Link to new OIDC docs from storages setup
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-82: Make sure new authentication strategy is used everywhere
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-81: Redirect URI shows Completed before Azure OAuth is setup or cancelled
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-79: Fix UI for projects and workpackage to handle storages in IDP/NCHUB scenario
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Documentation SI-78: Update documentation to include SSO-based storage authentication
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-76: Show proper error message when refresh token is unusable
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-75: Check if the user has a usable token for the Storage
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-70: Allow "system level" Bearer tokens
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-69: Add links to docs
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-67: Validate token exchange is working as needed
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-66: Add check for OIDC IdP capabilities
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-65: Check for OIDC audience configuration
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-64: Add check for OIDC configuration
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-63: Update AMPF Sync process to account for OIDC
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-61: Refreshing exchanged token does not work with Keycloak
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Task SI-60: Document Keycloak development setup
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-59: How to implement? Existing library to use?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-58: Should OAuth 2.0 SSO and Two-Way OAuth 2.0 be mutually exclusive or should SSO fall back to Two-Way?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-57: Should we exchange tokens lazily or eagerly?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-55: Service to get usable OIDC token for an audience
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-53: Up-sale mechanism (Corporate Edition) for OIDC, JWT and SCIM
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-52: How should we behave for DELETE calls?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-51: Indicate usability of OIDC provider during storage setup
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-50: How to deal with expired refresh tokens?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-49: Is it necessary to create a link between storage and OpenIDConnect provider?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-48: Allow to discover additional audiences of a token
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-45: Add corresponding settings to data schema of storage
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-44: Perform Token Exchange to obtain missing token for target audience
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-43: Allow to perform NC authentication using stored access tokens
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-41: Not possible to update auto-discovered values
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-40: Should the authentication method be in the first section or have it's own section like in the Nextcloud side
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-39: Store token exchange capability on OIDC providers
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-38: Should the menu point be called 'OIDC providers' or 'OpenID providers'?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-37: Blank state is not uptodate for OpenID
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-36: Typo in OpenID setup text
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-35: Allow setting omniauth_direct_login_provider through UI
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-34: How to deal with deleting SSO providers
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-33: Save OIDC tokens to OpenProject database
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-31: Do we really need gray header section in the form?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-30: Where should OIDC configuration deletion happen?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-29: Add PKCE info to application details
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-28: Remove tokens when application gets disabled
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-27: Enforce PKCE for built-in application
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-26: Disable built-in OAuth application by default
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-25: Should my account form be redone with Primer?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-23: Should it be a major release? 15.0 or 14.6?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-21: Should we use OIDC discovery endpoint to prefill form?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-20: Should it be one general form or multiple forms?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-19: Implement a form for OIDC providers.
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-18: Implement seeder to populate auth_providers table with oidc configuration data.
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Implementation SI-17: Create AuthProvider model to store OIDC and SAML configurations.
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-16: Should OIDC provider configs be stored in the database?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-15: Is the setup for token exchange from one OIDC client to another scriptable in Keycloak?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-12: Extend API authentication to accept JWT issued by OpenID provider to other client.
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-11: Do not save access token in cookies
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Open Point SI-9: What is the redirect URI for the flutter app?
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Task SI-8: Investigate token exchange in Keycloak
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Task SI-7: Investigate if Nextcloud respects the "aud" (Audience) of a JWT access tokens when used as Bearer token
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Task SI-6: Investigate if OpenProject accepts JWT token when used as Bearer token.
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Epic SI-5: SCIM (System for cross-domain identity management) support in OpenProject
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Feature SI-3: Add and document Keycloak to the Docker based development setup
  updated by System on 03/10/2025 04:04 PM
  • OpenProject system update: Scheduling mode automatically adjusted with version update.
  • Scheduling mode set to Manual
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  created by Jan Sandbrink on 03/10/2025 03:22 PM
  • Comment added

    Wrote this down as a side-find, after we reviewed a support request of a customer.
    Still need to confirm proper reproduc...

• Bug SI-88: Can't replace OAuth application if none is present
  updated by Cécile Guiot on 03/10/2025 01:55 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    7c71c0b93dcc9913474a8dc198eadcc138f2e86e
    Product version
    22feb25c7196201d723ee523582ce02be...

  • Status changed from merged to closed
  • % Complete set to 100%
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by Jan Sandbrink on 03/10/2025 01:46 PM
  • Status changed from confirmed to needs review
  • Version set to 15.5.0
  • Accountable set to Jan Sandbrink
  • Developers set to Jan Sandbrink
• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by GitHub ⁤ on 03/10/2025 01:45 PM
  • Comment added

• Bug SI-32: The right-handle column content goes to the top of the page on mobile
  updated by Jan Sandbrink on 03/10/2025 01:36 PM
  • Comment added

    Parimal Satyal I discovered this bug today. It's extremely easy to fix. That said, the existing behaviour was (in code) ...

  • File image.png added as attachment
  • File image.png added as attachment
  • File image.png added as attachment
• Open Point SI-59: How to implement? Existing library to use?
  updated by Jan Sandbrink on 03/10/2025 08:30 AM
  • Comment added

    Dominic Bräunlein added to the description:
    Right now this would be my preferred choice. It looks pretty mature and 5 d...

• Open Point SI-59: How to implement? Existing library to use?
  updated by Dominic Bräunlein on 03/10/2025 07:54 AM
  • Description changed (Details)