Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[feature/oidc-dcr-fallback] Fallback on/ignore OIDC Dynamic Client Registration errors #1068

Merged
merged 2 commits into from Dec 16, 2021

Conversation

felix-schwarz
Copy link
Contributor

Description

Adds authentication-oauth2.oidc-fallback-on-client-registration-failure - defaulting to true - to allow the automatic fallback to default client_id / client_secret if OpenID Connect Dynamic Client Registration fails with any error.

In effect, all errors in OIDC DCR are ignored - and the client henceforth behaves as if OIDC DCR wasn't configured on the target server.

Related Issue

https://github.com/owncloud/enterprise/issues/4904

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

…n-client-registration-failure, defaulting to true, to allow the automatic fallback to default client_id / client_secret if OpenID Connect Dynamic Client Registration fails with any error
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@felix-schwarz felix-schwarz changed the title [feature/oidc-dcr-fallback] [feature/oidc-dcr-fallback] Fallback on/Ignore OIDC Dynamic Client Registration errors Dec 3, 2021
@felix-schwarz felix-schwarz changed the title [feature/oidc-dcr-fallback] Fallback on/Ignore OIDC Dynamic Client Registration errors [feature/oidc-dcr-fallback] Fallback on/ignore OIDC Dynamic Client Registration errors Dec 3, 2021
@hosy hosy requested review from hosy and jesmrec December 15, 2021 17:23
@hosy hosy changed the base branch from master to milestone/11.8.1 December 16, 2021 09:33
@jesmrec
Copy link
Contributor

jesmrec commented Dec 16, 2021

Tests done:

  • OIDC + DCR + bad registration (base case)
  • OIDC + DCR + correct registration (test instance by jw)
  • OIDC without DCR (ocis.owncloud.works)
  • OAuth2 session creation (regression)
  • OAuth2 token renewal (regression)
  • Basic auth (regression)

It's OK from my side.

Approved

@hosy hosy added the Approved by QA Approved by QA label Dec 16, 2021
@hosy hosy merged commit c4deeee into milestone/11.8.1 Dec 16, 2021
@delete-merged-branch delete-merged-branch bot deleted the feature/oidc-dcr-fallback branch December 16, 2021 15:26
@jesmrec jesmrec mentioned this pull request Dec 17, 2021
33 tasks
hosy added a commit that referenced this pull request Dec 22, 2021
* preparing bug fix release 11.8.1

* - added in-app release notes
- added fastlane changelog
- added Calens changelog entry

* Calens changelog updated

* [feature/oidc-dcr-fallback] Fallback on/ignore OIDC Dynamic Client Registration errors (#1068)

* - update SDK to add support for authentication-oauth2.oidc-fallback-on-client-registration-failure, defaulting to true, to allow the automatic fallback to default client_id / client_secret if OpenID Connect Dynamic Client Registration fails with any error

* - fix infinite OAuth2 token refresh loop via SDK update

* removed ipa name to get a timestamp ipa output name

* changed ipa name by value

* output git branch, set git branch in IPA file name

* remove newline from gitbranch name

* set git branch in branding.plist

* renamed git hash key

* - new version number for upload
- changed changelog folder name

* Calens changelog updated

* [fix/connection-stuck] Fix eternal "Connecting…"  (#1080)

* - update SDK to add support for authentication-oauth2.oidc-fallback-on-client-registration-failure, defaulting to true, to allow the automatic fallback to default client_id / client_secret if OpenID Connect Dynamic Client Registration fails with any error

* - fix infinite OAuth2 token refresh loop via SDK update

* - BookmarkViewController: store user.displayName in .userDisplayName rather than .displayName
- OCBookmark+AppExtensions:
	- make .displayName readonly and mark it as legacy
	- return .userDisplayName for .displayName if the former has a value
- StaticLoginSingleAccountServerListViewController:
	- remove OCConnection code to fetch a user's display name and use bookmark.displayName instead
	- listen for bookmark updates and trigger a header update then accordingly
- update SDK to gain bookmark.userDisplayName support

* - update SDK to gain bookmark.userDisplayName support

Co-authored-by: Matthias Hühne <mhuehne@owncloud.com>

* new build number

* use latest develop sdk commit

* [fix/core-overlap] Fix OCCore overlap for first connection (#1081)

* - update SDK to add support for authentication-oauth2.oidc-fallback-on-client-registration-failure, defaulting to true, to allow the automatic fallback to default client_id / client_secret if OpenID Connect Dynamic Client Registration fails with any error

* - fix infinite OAuth2 token refresh loop via SDK update

* - BookmarkViewController: store user.displayName in .userDisplayName rather than .displayName
- OCBookmark+AppExtensions:
	- make .displayName readonly and mark it as legacy
	- return .userDisplayName for .displayName if the former has a value
- StaticLoginSingleAccountServerListViewController:
	- remove OCConnection code to fetch a user's display name and use bookmark.displayName instead
	- listen for bookmark updates and trigger a header update then accordingly
- update SDK to gain bookmark.userDisplayName support

* - update SDK to gain bookmark.userDisplayName support

* Prevent unwanted connection following setup of the first account, preventing an immediate OCCore request and unclean return with possible instance overlap by starting the connection on the - at that time - already removed parent view controller.

* new build number

Co-authored-by: Matthias Hühne <mhuehne@owncloud.com>

* - updated build number
- updated release notes
- changed changelog folder name

* Calens changelog updated

* - update SDK (#1064)

- make SortMethod.comparator use OCSQLiteCollationLocalized.sortComparator

* Configuration documentation updated

* added improved sorting to changelog

* new changelog entry

* Calens changelog updated

Co-authored-by: hosy <hosy@users.noreply.github.com>
Co-authored-by: Felix Schwarz <fs-git@iospirit.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Approved by QA Approved by QA
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants