From 396591282ef816ee242ed6adab5226195bcd6803 Mon Sep 17 00:00:00 2001 From: "Misha M.-Kupriyanov" Date: Thu, 17 Sep 2026 10:36:54 +0200 Subject: [PATCH] IONOS(user_oidc): switch to IONOS fork with Bearer-scheme guard (HDNEXT-2218) Upstream nextcloud/user_oidc#1386 landed after v8.6.1, the version we stay on. Moves the submodule to the IONOS fork at the same version, carrying two patches as the only delta: - getCurrentUserId() now ignores Authorization headers that do not use the Bearer scheme, instead of forwarding "Bearer Basic ..." to the IdP /userinfo endpoint on every DAV request (upstream #1386). - that guard matched only the two literal spellings "bearer " and "Bearer " while the strip on the very next line is case-insensitive, so it refused RFC-legal "BEARER ..." and "Bearer...". RFC 9110 section 11.1 defines auth-scheme as case-insensitive. Proposed upstream, not yet merged there, so unlike the first patch this one must be dropped explicitly once an upstream release carries it. App version 8.6.1 and NC compatibility (min 29, max 34) are unchanged, and there is no configuration change: userinfo_bearer_validation stays true. Tag: https://github.com/IONOS-Productivity/nc-user_oidc/releases/tag/v8.6.1-dc7a7fa SHA: dc7a7faf3bf64d9446de6950f8e7c98c1b3ed053 Signed-off-by: Misha M.-Kupriyanov --- .gitmodules | 2 +- apps-external/user_oidc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitmodules b/.gitmodules index 3f1f0f6908a18..c852030a46d1b 100644 --- a/.gitmodules +++ b/.gitmodules @@ -12,7 +12,7 @@ url = git@github.com:IONOS-Productivity/nc-simplesettings.git [submodule "apps-external/user_oidc"] path = apps-external/user_oidc - url = git@github.com:nextcloud/user_oidc.git + url = git@github.com:IONOS-Productivity/nc-user_oidc.git [submodule "apps-custom/googleanalytics"] path = apps-custom/googleanalytics url = git@github.com:IONOS-Productivity/nc-googleanalytics.git diff --git a/apps-external/user_oidc b/apps-external/user_oidc index b5a67c7c6454e..dc7a7faf3bf64 160000 --- a/apps-external/user_oidc +++ b/apps-external/user_oidc @@ -1 +1 @@ -Subproject commit b5a67c7c6454ec6f3872ed424283b788cbbae86b +Subproject commit dc7a7faf3bf64d9446de6950f8e7c98c1b3ed053