Tutorial to connect to ownCloud Infinite Scale & OpenCloud with OpenID Connect

[dkocher]

Fix #662.

Adds a tutorial to connect to ownCloud Infinite Scale (oCIS) and OpenCloud authenticating with OpenID Connect.

Tutorial tutorials/owncloud_opencloud_oidc.md

• Obtain authorization_endpoint and token_endpoint from the OpenID Connect discovery document at /.well-known/openid-configuration with WebFinger lookup as fallback, and the client_id and scope of the web client from /config.json.
• Register redirect URIs with the identity provider using a custom URL scheme (x-cyberduck-action:oauth, x-mountainduck-action:oauth) or the loopback address http://localhost/ for identity providers accepting any port.
• Instructions per identity provider:
  • Microsoft Entra ID registering redirect URIs for the Mobile and desktop applications platform.
  • Keycloak with import of sample client configurations from OpenCloud (public client) and ownCloud (confidential client) or configuration of an existing client.
  • OpenCloud built-in identity provider using the ready-made OpenCloud (OpenID Connect) connection profile with the default public OpenCloudDesktop client.
  • ownCloud Infinite Scale built-in identity provider using the ready-made ownCloud Infinite Scale (OpenID Connect) connection profile with the default confidential ownCloud desktop app client.
• Blueprint and example connection profiles for Microsoft Entra ID and Keycloak using placeholder hostnames and IDs.
• Troubleshooting for common identity provider errors.

NextCloud, ownCloud & OpenCloud protocols/webdav/nextcloud.md

• Add OpenCloud to title and introduction.
• Separate Connection Profiles tabs for OpenCloud and ownCloud Infinite Scale with instructions to enable the ready-made connection profiles in Preferences → Profiles.
• Remove WebDAV tab and move notes on the default path to Obtain WebDAV Address From Server.
• Move Keycloak client configuration to the tutorial and remove reference to the no longer available demo instance at ocis.ocis-keycloak.latest.owncloud.works.

Other

• Links from the tutorials index and sample connection profiles.

Dependencies

• Add connection profile for OpenCloud with OpenID Connect profiles#198 adds OpenCloud (OpenID Connect) connection profile.
• Add connection profile for ownCloud Infinite Scale with OpenID Connect profiles#83 adds ownCloud Infinite Scale (OpenID Connect) connection profile.
• Assign port to loopback redirect URI before authorization request. cyberduck#18448 adds support for loopback redirect URIs without a port. Update the required Cyberduck and Mountain Duck versions for the Loopback Address option once released.