[BUG/FEATURE] OneDrive Support

[Gamer92000]

Hello Collaborators,

Describe the bug When using OneDrive as the WebDav server things get weird. In short: The authentication fails because of Microsoft.

Software

• OS: Linux (Docker)
• Golang: 1.19.4
• Version: 60ec5ad560124272abec0b904f79c913c3cb347c

To Reproduce

1. Create a client using OneDrive credentials
2. Try to use any (authenticated) request (e.g. ReadDir())
3. Response is empty / unexpected (e.g. no files)

Expected At least an authentication error should be returned. Even better would be support for MS's need to be proprietary.

Additional context Microsoft (as expected) does not follow industry standards and instead of returning 401 on unauthenticated requests they return 302 to redirect you to the login page. The login page then return a 200 status so the webdav client thinks it is a valid result for the original request. On its own this would not be too bad as you could catch the redirect and handle it like a 401. But since Microsoft use their own authentication method (MS-PASS with Passport1.4) you also need a new authenticator.

[bai-jie]

Related information:

• Rclone's WebDav client implementation of OneDrive: https://github.com/rclone/rclone/blob/v1.61.1/backend/webdav/webdav.go#L559
• Rclone's WebDav document about OneDrive: https://rclone.org/webdav/#sharepoint-online

One of the current workarounds:

• set cookie with interceptor: https://github.com/alist-org/alist/blob/v3.9.2/drivers/webdav/util.go#L18-L28
• and refresh cookies every 12 hours: https://github.com/alist-org/alist/blob/v3.9.2/drivers/webdav/driver.go#L33-L39

[Gamer92000]

Thanks for all the references @bai-jie! Unfortunately, this does not work for OneDrive but only SharePoint. But it still helped a lot with getting me started. In the end, I mostly followed MS's example for Passport1.4 though.