make openidconnect in oC10 possible

[wkloucek]

Description

One can currently not use ownCloud Web with ownCloud 10 and OpenID connect, because proper content policies are missing and calls to the OIDC provider will fail.

Related Issue

• none

Motivation and Context

The oCIS migration strategy requires to run ownCloud 10 with OIDC and Web. This is currently not possible.

How Has This Been Tested?

• add migration deployment ocis#2302

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Technical debt
• Tests

Checklist:

• Code changes
• Unit tests added
• Acceptance tests added
• Documentation ticket raised:

Open tasks:

• ...

[ownclouders]

Results for oC10SharingAccept https://drone.owncloud.com/owncloud/web/17477/10/1
The following scenarios passed on retry:

• webUISharingAcceptShares/acceptShares.feature:109

[ownclouders]

Results for oC10SharingExternalRoot https://drone.owncloud.com/owncloud/web/17477/39/1
The following scenarios passed on retry:

• webUISharingExternalToRoot/federationSharing.feature:356

[kulmann]

Could you add a bugfix changelog item please? I think I missed that for the onlyoffice and richdocuments CSP rules myself, but would be nice to have one here. :-) code looks good to me, thanks for taking care! 💪🏻

[butonic]

😍

[ownclouders]

Results for oC10SharingExternalRoot https://drone.owncloud.com/owncloud/web/17482/39/1
The following scenarios passed on retry:

• webUISharingExternalToRoot/federationSharing.feature:356

[wkloucek]

@fschade you're right OIDC should be part of the Documentation https://owncloud.dev/clients/web/deployments/oc10-app/. Only oAuth is mentioned there until now

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

0.0% Coverage
0.0% Duplication

[pascalwengerter]

I'd love to get this merged and would try to release a v3.4.2 (= bugfix only release) in web early next week and even ship that one with the OC10.8 release if possible?

[wkloucek]

I'd love to get this merged and would try to release a v3.4.2 (= bugfix only release) in web early next week and even ship that one with the OC10.8 release if possible?

for me that would be fine. But would need coordination with @micbar

[kulmann]

@wkloucek do you want to add documentation to this PR or add that in a separate PR? I'd be fine merging this and adding docs in a separate PR.

[wkloucek]

I'll open a separate PR.