search

pulsejet / nextcloud-oidc-login

Nextcloud login via a single OpenID Connect 1.0 provider
https://apps.nextcloud.com/apps/oidc_login
GNU Affero General Public License v3.0
219 stars 59 forks source link

OpenID Scope is added even when already set #265

Open DimeOne opened 6 months ago

DimeOne commented 6 months ago

Config

'oidc_login_scope' => 'openid profile email',

Expected Result

I am redirected to the IDP with the scope set to scope=openid+profile+email

Issue

When being redirected to the IDP, the scope is being set to: scope=openid+profile+email+openid - this causes Keycloak to respond with HTTP500.

Workaround

Remove openid in oidc_login_scope

Resolution

Only add openid scope if not yet in config