You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Implement OAUTH2 Authorization code with PKCE #12881
To allow more client to authenticate against Nextcloud we should implement the autorization code flow with PKCE. This would allow clients that can't store their client secret relibaly to still authenticate.
So thinking about this a bit more and this would solve at least part of 3rd party integration.
As a first step I would suggest that we look into plain PKCE (so clients still need to be properly registered). Then in a later step we can check for a checkbox to limit this restriction for owners that want that.
Activity
rullzer commentedon Oct 5, 2019
So thinking about this a bit more and this would solve at least part of 3rd party integration.
As a first step I would suggest that we look into plain PKCE (so clients still need to be properly registered). Then in a later step we can check for a checkbox to limit this restriction for owners that want that.
Nitschi commentedon Sep 21, 2023
This would be great, so I could use Nextcloud as the authentication provider for my web app
joshtrichards commentedon Mar 16, 2025
Related: supported was added in
user_oidcnextcloud/user_oidc#697