Move to Oauth 2.0 API instead

[GAS85]

Hey, how about to move to oauth API?

Admin should create an application in Settings > Security > Client OAuth 2.0 (.../index.php/settings/admin/security). NC Doku: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/oauth2.html

You need ClientID and Client Key.

In dokuwiki you can consume 3 endpoint:

.../index.php/apps/oauth2/authorize
.../index.php/apps/oauth2/api/v1/token
and
.../ocs/v2.php/cloud/user?format=json to get user information

You need to create redirect endpoint: like .../dokuwiki.php?state=[some random]&code=[some random long list of letters and numbers]

[santifa]

This sounds interesting but I don't have the time to re-work the whole plugin.
Also, there is/was an OAuth plugin for dokuwiki.

I'll leave this open.

[poVoq]

I think for now this does not allow transferring group membership unless the OIDC app is also used.

[GAS85]

Do we need groups there? Basically only return that user name / email is valid for this session.