# Bug OP-18117 - Not possible to create token exchange capable OIDC provider from environment variables

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-18117

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module | Authentication / OpenID Connect (OIDC) |
| Target versions | 16.6.0 |
| Observed in versions | 16.5.0 |
| Sprint | 16.6.0 |
| Backlog bucket |  |
| Bug found in version (deprecated) | 16.5.x |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee | Jan Sandbrink |
| Accountable |  |
| Product manager |  |
| Developers | Jan Sandbrink |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

1.  Configure an OIDC provider for OpenProject via environment variables (not from the UI)
    
2.  Configure a Nextcloud storage that authenticates via token exchange (manually specified audience)
    
3.  Perform a storage health check while logged in through the OIDC provider configured in step 1
    

### What is the buggy behavior?

*   The health indicates, that the OIDC provider is not capable of performing token exchange
    
    *   this is expected, because the corresponding grant type was not added as supported to the provider
        
*   There is no way to update/change the provider, so that it shows the necessary grant type as supported
    

### What is the expected behavior?

*   While configuring the provider via environment variables it should have been possible to indicate supported grant types
    
*   Performing the storage health check should succeed