App Passwords / Tokens for legacy WebDAV clients

[michaelstingl]

After removing support for Basic Auth (see #196), legacy WebDAV clients would need App Passwords / Tokens to connect, similar to the feature in oC10:
https://doc.owncloud.org/server/user_manual/personal_settings/security.html#app-passwords-tokens

[refs]

see #196 (comment)

[michaelstingl]

see #196 (comment)

I don't get it? Basic auth will be disabled in prod environment? Can't use 3rd party WebDAV clients with with prod oCIS?

[refs]

@michaelstingl my bad, had a fast finger on the trigger.

AFAIK basic auth is intended only for testing, so work on getting basic auth production-ready needs to happen to also account for app passwords / tokens.

[michaelstingl]

To clarify (similar to oC 10 implementation), real account credentials should not work with basic auth, but users can create additional credentials that allow basic auth with 3rd party WebDAV clients. Perfect would be, if those additional credentials can only be used for file operations, and don't grant access to user or admin settings.

[refs]

thanks for the input @michaelstingl ! I'm unfamiliar with the feature, but it looks like this needs a concept for an implementation in OCIS. Will bring it up when I finish this grooming round with the team.

[michaelstingl]

closed accidentally?

[micbar]

yes, closed accidentally

[wkloucek]

User story:

• As an adminstrator I don't want to allow basic auth on my oCIS instance, because I want all sessions to be under control of the OIDC IDP
• As an user I want to mount my home drive via WebDav somewhere (eg in Linux https://doc.owncloud.com/server/next/user_manual/files/access_webdav.html#accessing-files-using-linux)

Problem:

• check how common WebDav clients deal with OIDC login flow

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.

[wkloucek]

Rclone supports OIDC -> see our docs here: https://owncloud.dev/clients/rclone/webdav-sync-oidc/

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.

[dragotin]

Closing this as now handled in #7711