Files
opencloud/devtools/deployments/opencloud_full
Pascal Bleser e199ad57b7 groupware: add OIDC authentication support between Groupware backend and Stalwart
* re-implement the auth-api service to authenticate Reva tokens
   following the OIDC Userinfo endpoint specification

 * pass the context where necessary and add an authenticator interface
   to the JMAP HTTP driver, in order to select between master
   authentication (which is used when GROUPWARE_JMAP_MASTER_USERNAME and
   GROUPWARE_JMAP_MASTER_PASSWORD are both set) and OIDC token
   forwarding through bearer auth

 * add Stalwart directory configuration "idmoidc" which uses the
   OpenCloud auth-api service API (/auth/) to validate the token it
   received as bearer auth from the Groupware backend's JMAP client,
   using it as an OIDC Userinfo endpoint

 * implement optional additional shared secret to secure the Userinfo
   service, as an additional path parameter
2026-02-23 09:40:46 +01:00
..

document this deployment example in
document this deployment example in
docs/opencloud/deployment/opencloud_full.md

OpenCloud WOPI Deployment Example

This deployment example is documented in two locations for different audiences:

  • In the Admin Documentation
    Providing two variants using detailed configuration step by step guides:
    Docker Compose Setup and Docker Compose Local.
    Note that these examples use LetsEncrypt certificates and are intended for production use.

  • In the Developer Documentation
    Providing details which are more developer focused. This description can also be used when deviating from the default.
    Note that this examples uses self signed certificates and is intended for testing purposes.