[FEATURE REQUEST] [OIDC] Branding option to remove `login_hint` and `user` parameter from re-login URL

[michaelstingl]

Is your feature request related to a problem? Please describe.

The ownCloud-internal username not always works fine on the OpenID Connect IdP. When ownCloud clients append &login_hint=test&user=test to the re-login URL, in some cases the IdP has no way to let the user log in again.

Describe the solution you'd like

I'd need a branding option to remove "login_hint" and "user" parameter from re-login URL.

Describe alternatives you've considered

We discussed requesting other user attributes from the /ocs/v1.php/cloud/user endpoint, and using those for the "login_hint" and "user", but it sounds like a nightmare to maintain and test.

Additional context

Re-login URL:

https://demo.owncloud.com/index.php/apps/oauth2/authorize?response_type=code
&client_id=xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69
&redirect_uri=http://localhost:61901
&code_challenge=DSdzUn4on0L_NTAXYQ-_Iwk8y2KGsn9bzatz0roYy5I
&code_challenge_method=S256
&scope=openid offline_access email profile
&prompt=select_account consent
&state=ifvvlCpuaSiQxC7UhvjyHoXWFFDgvaltQmkr7wLiQPM%3D
&login_hint=test
&user=test

TASKS

• [x] Research (if needed)
• [x] Create branch feature/login_hint_and_user_brandables
• [x] Development tasks
  • [x] Add login_hint parameter in the login URL
  • [x] Create new brandable parameter in setup.xml to indicate whether sending or not these 2 parameters in login
  • [x] Create new MDM parameter to indicate whether sending or not these 2 parameters in login
• [x] Code review and apply changes requested
• [x] Design test plan
• [x] QA
• [x] Merge branch feature/login_hint_and_user_brandables into master

@JuancaG05 @Aitorbp @jesmrec any chance we can get this in the upcoming 4.2 release?

/cc @steelcuts

[michaelstingl]

Related:

• Desktop: https://github.com/owncloud/client/issues/11489
• Android: https://github.com/owncloud/android/issues/4288

[Aitorbp]

We will take a look, I think it could be in the upcoming 4.2 release. 👍 @michaelstingl

[jesmrec]

1. Add login_hint
2. Add branding / MDM parameter

Default: true ¿?