kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-04-01 23:04:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Solved OIDC sociallogin bug

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach 2025-02-26 09:49:32 +01:00
parent 61eb9a3aed
commit ae1d7c785f
4 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
group_vars/all/07_applications.yml
View File

@ -252,7 +252,7 @@ defaults_applications:
# Available options: oidc_login, sociallogin # Available options: oidc_login, sociallogin
# @see https://apps.nextcloud.com/apps/oidc_login # @see https://apps.nextcloud.com/apps/oidc_login
# @see https://apps.nextcloud.com/apps/sociallogin # @see https://apps.nextcloud.com/apps/sociallogin
flavor: "oidc_login" # Keeping on sociallogin because the other option is not implemented yet flavor: "sociallogin" # Keeping on sociallogin because the other option is not implemented yet
force_import: False # Forces the import of the LDIF files force_import: False # Forces the import of the LDIF files
database: database:
central_storage: True central_storage: True

5
roles/docker-nextcloud/README.md
View File

@ -94,6 +94,11 @@ docker-compose exec -it -u www-data application /var/www/html/occ
``` ```
### User Administration ### User Administration
#### Create user via CLI
```bash
docker compose exec -it -u www-data application php occ user:add {{username}}
```
#### Make user admin via cli #### Make user admin via cli
```bash ```bash
docker compose exec -it -u www-data application php occ group:adduser admin {{username}} docker compose exec -it -u www-data application php occ group:adduser admin {{username}}

5
roles/docker-nextcloud/tasks/sociallogin.yml
View File

@ -3,7 +3,7 @@
- name: Flush all handlers immediately so that occ can be used - name: Flush all handlers immediately so that occ can be used
meta: flush_handlers meta: flush_handlers
- name: enable oidc_login plugin - name: disable oidc_login plugin
command: "docker exec -u www-data {{nextcloud_application_container_name}} {{nextcloud_docker_path}}occ app:disable oidc_login" command: "docker exec -u www-data {{nextcloud_application_container_name}} {{nextcloud_docker_path}}occ app:disable oidc_login"
ignore_errors: true ignore_errors: true
when: when:
@ -22,6 +22,7 @@
- name: Configure Sociallogin - name: Configure Sociallogin
loop: "{{ nextcloud_sociallogin_configuration}}" loop: "{{ nextcloud_sociallogin_configuration}}"
# The | to_json function is necessary to escape custom_providers correct.
command: > command: >
docker exec -u www-data {{ nextcloud_application_container_name }} docker exec -u www-data {{ nextcloud_application_container_name }}
php occ config:app:set {{ item.appid }} {{ item.configkey }} --value "{{ item.configvalue }}" php occ config:app:set {{ item.appid }} {{ item.configkey }} --value '{{ item.configvalue | to_json if item.configvalue is mapping else item.configvalue }}'

6
roles/docker-nextcloud/templates/oidc.config.php.j2
View File

@ -14,7 +14,7 @@ return array (
'oidc_login_client_secret' => '{{oidc.client.secret}}', 'oidc_login_client_secret' => '{{oidc.client.secret}}',
// Automatically redirect the login page to the provider // Automatically redirect the login page to the provider
'oidc_login_auto_redirect' => false, 'oidc_login_auto_redirect' => true,
// Redirect to this page after logging out the user // Redirect to this page after logging out the user
'oidc_login_logout_url' => 'https://{{domains[application_id]}}', 'oidc_login_logout_url' => 'https://{{domains[application_id]}}',
@ -23,7 +23,7 @@ return array (
// logout endpoint of the OIDC provider after logout // logout endpoint of the OIDC provider after logout
// in Nextcloud. After successfull logout the OIDC // in Nextcloud. After successfull logout the OIDC
// provider will redirect back to 'oidc_login_logout_url' (MUST be set). // provider will redirect back to 'oidc_login_logout_url' (MUST be set).
'oidc_login_end_session_redirect' => false, 'oidc_login_end_session_redirect' => true,
// Quota to assign if no quota is specified in the OIDC response (bytes) // Quota to assign if no quota is specified in the OIDC response (bytes)
// //
@ -38,7 +38,7 @@ return array (
'oidc_login_hide_password_form' => true, 'oidc_login_hide_password_form' => true,
// Use ID Token instead of UserInfo // Use ID Token instead of UserInfo
'oidc_login_use_id_token' => false, 'oidc_login_use_id_token' => true,
// Attribute map for OIDC response. Available keys are: // Attribute map for OIDC response. Available keys are:
// * id: Unique identifier for username // * id: Unique identifier for username