After upgrade to 7.3.1 no login possible via AzureAD -> Keycloak -> Nextcloud user_oidc

[whois-eckhard]

We did an upgrade from nextcloud 30.0.11 (user_oidc app enabled and fully functional , ver 7.2.0) to nextcloud 30.0.13.
After Upgrade no User login was possible.

Nextcloud Login Page loaded as expected.
Then sso-login with redirect to Microsoft Page (screenshot attached)
Then Microsoft Page with Approval Required Page (screenshot attached)

AzureAD Settings and Keycloak Settings does not changed. Only Nextcloud version was updated
and therefore user_oidc from 7.2.0 to 7.3.1.

Assumption: user_oidc changed in terms of data exchange with keycloak or azureAD endpoints.
Maybe request from user_oidc to other services changed or the response from keycloak/azureAD was
no more satisfying for user_oidc for log in user.

Workaround:
Downgrade from Nextcloud 30.0.13 to 30.0.11 and additional user_oidc app downgrade to 7.2.0.
Then the login worked without any problems.

Server configuration

Web server: Nginx
Database: PostgreSQL 16.9
PHP version: 8.3.22

Nextcloud version: 31.0.13

List of activated apps

user_oidc 7.3.1

Browser

Problem occurs with any browsers

[whois-eckhard]

[julien-nc]

Could it be a duplicate of #1163?
If so, can you try using user_oidc v7.3.1 and patch it with #1176?

[julien-nc]

Or even simpler, just try removing this line:
https://github.com/nextcloud/user_oidc/blob/v7.3.1/lib/Controller/LoginController.php#L273

[whois-eckhard]

Or even simpler, just try removing this line: https://github.com/nextcloud/user_oidc/blob/v7.3.1/lib/Controller/LoginController.php#L273

Hi Julien,
thanks a lot. Removing the line solved my issue. SSO Login is now again possible with user_oidc 7.3.1 and Nextcloud 30.0.11.

I hope this fix is included in user_oidc 7.3.2 release because we will use this app in production.

Thanks a lot, BR!

[whois-eckhard]

issue can be closed...

[julien-nc]

v7.3.2 is out. Can you confirm it works fine?

[whois-eckhard]

Sorry for the late response. Meanwhile we are running nextcloud 31.0.5 with the user_oidc App version 8.1.0 successful. Works like a charm. Thanks!