Authentification via Nextcloud et Oauth 2.0 #43

New issue

Open

opened 2026-06-16 10:51:13 +02:00 by alex · 0 comments

alex commented

2026-06-16 10:51:13 +02:00

Owner

https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/oauth2.html
https://chat.mistral.ai/chat/4bf59301-0e28-4e4c-a01d-d8d64b50a908

Note

Security considerations
Nextcloud OAuth2 implementation currently does not support scoped access. This means that every token has full access to the complete account including read and write permission to the stored files. It is essential to store the OAuth2 tokens in a safe way!
Without scopes and restrictable access it is not recommended to use a Nextcloud instance as a user authentication service.

https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/oauth2.html https://chat.mistral.ai/chat/4bf59301-0e28-4e4c-a01d-d8d64b50a908 > [!NOTE] > Security considerations > Nextcloud OAuth2 implementation **currently does not support scoped access**. This means that every token has full access to the complete account including read and write permission to the stored files. It is essential to store the OAuth2 tokens in a safe way! > Without scopes and restrictable access it is not recommended to use a Nextcloud instance as a user authentication service.

alex changed title from ~~Authentificatrion via Nextcloud et Oauth 2.0~~ to Authentification via Nextcloud et Oauth 2.0

2026-06-16 10:51:26 +02:00