Introduction

This app implements server side OAuth 2.0 "Bearer" token verification against the built-in OAuth2 AS server provided by Unity-idm.

Requirements

• PHP cURL extension
• Apache (because we use apache_request_headers() at the moment)

Installation

Install this code in the directory user_oauth_unity in the apps directory of your ownCloud installation.

This module needs an external library to verify the OAuth tokens at the OAuth authorization server. Composer can be used to install this dependency, by default is in included in the 3rdparty directory. So you only need this if you want to download the library again or update it.

$ cd /path/to/owncloud/apps/user_oauth_unity
$ php composer.phar install

Or to update:

$ php composer.phar update

You can enable the user_oauth_unity app after login with the admin account. Go to Settings, then Apps and finally select the OAuth module from the list of modules, select it and press the Enable button.

Configuration

There are two configuration parameters:

• the tokeninfo endpoint
• the userinfo endpoint

You can set this endpoint by going to Settings, then Admin and then under the section head OAuth configure the URL.

Applications

An application needs to use the OAuth service to retrieve an access token to use this with the OAuth enabled WebDAV endpoint. The endpoint, assuming you run the service on https://www.example.org/owncloud, note odav instead of webdav:

https://www.example.org/owncloud/remote.php/odav/<FILE.EXT>

So, in order for an application to work it needs to obtain an access token from the OAuth authorization server that you configured as an introspection endpoint in the OAuth app configuration in ownCloud. If you used the playground mentioned above that would mean using the following URLs for authorization and token endpoints:

https://frko.surfnetlabs.nl/workshop/php-oauth/authorize.php
https://frko.surfnetlabs.nl/workshop/php-oauth/token.php

It seems the Android app of ownCloud should support OAuth at the server, but so far we were unable to make it work. We tested version 1.4.1 of the Android app from the F-Droid repository.

Compatibilty

The app was tested with version 8 of ownCloud, but it should work with version 7 as well.

References

The code is based on fkooman/user_oauth. We also have made an plugin which works against another OAuth2 AS server. APIS