All notable changes to this project will be documented in this file.
- Handle access token generation and validation requests via events (thanks to @julien-nc)
- Return user group array from the /userinfo endpoint and guard groups and roles claim behind authorized scope (thanks to @jannisko)
- Added support for Nextcloud 31
- Updated dependencies
- Updated translations
- Added support to provide claims family_name, given_name and middle_name JWT and userinfo endpoint (thanks to @ThoFrank)
- Added trimming of whitespaces to redirect and logout URIs on creation (thanks to @jannisko)
- Updated dependencies
- Updated translations
- Added support to provide quota in JWT
- Updated dependencies
- Updated translations
- Added CLI commands to manage clients (thanks to @opsocket)
- Updated dependencies
- Updated translations
- Fixed bug for lost session data in case of client authentication uses BasicAuth
- Updated dependencies
- Updated translations
- Added support for Nextcloud 30
- Removed support for Nextcloud 27
- Updated dependencies
- Updated translations
- Code cleanup and replacement of deprecated Nextcloud functions
- Improved CORS handlinng for simple requests
- Updated dependencies
- Updated translations
- Updated dependencies
- Updated translations
- Removed support for Nextcloud < 27
- Added BruteForce and RateLimiting functionality
- Added dynamic client registration functionalilty
- Limited Basic Authentication to token endpoint only
- Added support for Nextcloud 29
- Updated dependencies
- Updated translations
- Support Basic Authentication for fetching the token using a workaround with a pseudo user backend. (But still this causes an exception of Nextcloud server core in the logs)
- Dependency updates
- Allow overwriting claim verified_email
- Dependency updates
- Fix for claim verified_email
- Nextcloud 28 support
- Nextcloud 23 & 24 support removed
- Translations update
- Dependency updates
- Execute pipeline test on latest version
- Added tests
- Translations update
- Dependency updates
- Added claims phone_number and address
- Added possibility to add claim picture with data url to id token or user info dependent in app settings.
- Dependency updates
- Fixed expire time problem (now returns integer)
- Dependency updates
- Added Nextcloud 27 support
- Dependency updates
- Added WebFinger support
- Fixed user info endpoint for GET.
- Support for POST requests to user info endpoint.
- Removed Nextcloud session for token endpoint
- Fixed MySQL problem with index.
- Added support for post_logout_redirect_uri attribut during logout.
- Fixed logout functionality when id_token_hint is received.
- Fixed NC26 Support.
- Fixed packaging to include vendor.
- Fixed packaging to include vendor.
- Fixed logout support when providing an id_token_hint.
- Added support for Nextcloud 26
- Added partial support for RP-initiated logout.
- Fixed type in settings controller.
- Fixed bug to display settings menu for flows.
- Added support for implicit flow.
- Added translations.
- Added ability to limit clients to specific user groups.
- Fixed bug for jti claim which must be a string and not number.
- Updated package dependencies.
- Updated package dependencies.
- Updated package dependencies. Requires now Node 16.
- fixed urls at discovery endpoint for nextcloud installations in subdirectory.
- Updated translations.
- Fixed problem with php interpreter which prohibits to use settings panel.
- Fixed problem in migration schema
- Added possibility edit multiple redirect urls in admin panel.
- Modification to use app when Nextcloud is installed in subdirectory
- Added possibility to store multiple redirect urls in backend
- Fixed redired after login to make use of configured webroot
- Fix for url-encoding if state is missing
- Dependency Updates
- Updated translations from Transifex
- Fix url-encoding for state variable
- Support Nextcloud 25
- Dependency Updates
- Switch translations to Transifex
- Fix compatability for NC 21 & 22
- Increased robustness for not OpenID Connect conforming clients
- Allow scope to be unset from client. Default scope: openid profile email roles
- Allow using redirect urls which contain parameters
- Fixed remaining integrity check problem
- Fixed integrity check problem
- Modified dependency to php module instead of command for openssl
- Bugfix for setting use correctly conforming to OpenID Connect Specification
- Added Spanish, Finnish, Swedish, Dutch, French, Italian and Greek translation Bugfix to run clean up job to delete expired tokens from db successfully
- Bugfix to run clean up job to delete expired tokens from db successfully
- Added support for public clients
- Added Portuguese translation
- Added Github Actions to build & test application on commit and build, sign and publish to App Store
- Optimized selection of token expire time
- n/a
- Fixed setting up of database tables to support MySQL / MariaDB
- Base OIDC functionality
- Configuration of accepted client for whom JWT Tokens are provided
- Creation of JWT Token with claims based on requested scope. (Currently supported scopes openid, profile, email, roles, groups)
- Supported siging algorithms RS256 (default) and HS256
- Group memberships are passed as roles or groups in JWT token (depends on scope).
- Discovery endpoint provided
- n/a