Add Nextcloud to the list of supported providers

gen/OpenIddict.Client.WebIntegration.Generators/OpenIddictClientWebIntegrationGenerator.cs

@@ -862,6 +862,7 @@ using Microsoft.Extensions.Options;
 using Microsoft.IdentityModel.Tokens;
 using OpenIddict.Client;
 using static OpenIddict.Client.WebIntegration.OpenIddictClientWebIntegrationConstants;
+using static OpenIddict.Extensions.OpenIddictHelpers;
 
 namespace OpenIddict.Client.WebIntegration;
 

shared/OpenIddict.Extensions/Helpers/OpenIddictHelpers.cs

@@ -178,6 +178,18 @@ internal static class OpenIddictHelpers
         => new(source ?? throw new ArgumentNullException(nameof(source)), comparer);
 #endif
 
+    /// <summary>
+    /// Computes an absolute URI from the specified <paramref name="left"/> and <paramref name="right"/> URIs.
+    /// Note: if the <paramref name="right"/> URI is already absolute, it is directly returned.
+    /// </summary>
+    /// <param name="left">The left part.</param>
+    /// <param name="right">The right part.</param>
+    /// <returns>An absolute URI from the specified <paramref name="left"/> and <paramref name="right"/>.</returns>
+    /// <exception cref="InvalidOperationException"><paramref name="left"/> is not an absolute URI.</exception>
+    [return: NotNullIfNotNull(nameof(right))]
+    public static Uri? CreateAbsoluteUri(Uri? left, string? right)
+        => CreateAbsoluteUri(left, !string.IsNullOrEmpty(right) ? new Uri(right, UriKind.RelativeOrAbsolute) : null);
+
     /// <summary>
     /// Computes an absolute URI from the specified <paramref name="left"/> and <paramref name="right"/> URIs.
     /// Note: if the <paramref name="right"/> URI is already absolute, it is directly returned.

src/OpenIddict.Client.WebIntegration/OpenIddictClientWebIntegrationHandlers.Userinfo.cs

@@ -389,6 +389,10 @@ public static partial class OpenIddictClientWebIntegrationHandlers
                         => new(context.Response["data"]?.GetNamedParameters() ??
                         throw new InvalidOperationException(SR.FormatID0334("data"))),
 
+                    // Nextcloud returns a nested "data" object that is itself nested in a "ocs" node.
+                    ProviderTypes.Nextcloud => new(context.Response["ocs"]?["data"]?.GetNamedParameters() ??
+                        throw new InvalidOperationException(SR.FormatID0334("ocs/data"))),
+
                     // ServiceChannel returns a nested "UserProfile" object.
                     ProviderTypes.ServiceChannel => new(context.Response["UserProfile"]?.GetNamedParameters() ??
                         throw new InvalidOperationException(SR.FormatID0334("UserProfile"))),

src/OpenIddict.Client.WebIntegration/OpenIddictClientWebIntegrationHandlers.cs

@@ -1039,6 +1039,10 @@ public static partial class OpenIddictClientWebIntegrationHandlers
                 // Mailchimp returns the username as a custom "accountname" node:
                 ProviderTypes.Mailchimp => (string?) context.UserinfoResponse?["accountname"],
 
+                // Nextcloud returns the username as a custom "displayname" or "display-name" node:
+                ProviderTypes.Nextcloud => (string?) context.UserinfoResponse?["displayname"] ??
+                                           (string?) context.UserinfoResponse?["display-name"],
+
                 // Notion returns the username as a custom "bot/owner/user/name" node but
                 // requires a special capability to access this node, that may not be present:
                 ProviderTypes.Notion => (string?) context.UserinfoResponse?["bot"]?["owner"]?["user"]?["name"],
@@ -1087,11 +1091,11 @@ public static partial class OpenIddictClientWebIntegrationHandlers
                     => (string?) context.UserinfoResponse?["username"],
 
                 // These providers return the user identifier as a custom "id" node:
-                ProviderTypes.Basecamp or ProviderTypes.Deezer  or ProviderTypes.Discord    or
-                ProviderTypes.Facebook or ProviderTypes.GitHub  or ProviderTypes.Harvest    or
-                ProviderTypes.Kroger   or ProviderTypes.Lichess or ProviderTypes.Twitter    or
-                ProviderTypes.Patreon  or ProviderTypes.Reddit  or ProviderTypes.Smartsheet or
-                ProviderTypes.Spotify  or ProviderTypes.SubscribeStar
+                ProviderTypes.Basecamp or ProviderTypes.Deezer        or ProviderTypes.Discord    or
+                ProviderTypes.Facebook or ProviderTypes.GitHub        or ProviderTypes.Harvest    or
+                ProviderTypes.Kroger   or ProviderTypes.Lichess       or ProviderTypes.Nextcloud  or
+                ProviderTypes.Patreon  or ProviderTypes.Reddit        or ProviderTypes.Smartsheet or
+                ProviderTypes.Spotify  or ProviderTypes.SubscribeStar or ProviderTypes.Twitter
                     => (string?) context.UserinfoResponse?["id"],
 
                 // Bitbucket returns the user identifier as a custom "uuid" node:

src/OpenIddict.Client.WebIntegration/OpenIddictClientWebIntegrationProviders.xml

@@ -633,6 +633,29 @@
     </Environment>
   </Provider>
 
+  <!--
+                                  ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
+                                  ██ ▀██ ██ ▄▄▄█▄▀█▀▄█▄▄ ▄▄██ ▄▄▀██ █████ ▄▄▄ ██ ██ ██ ▄▄▀██
+                                  ██ █ █ ██ ▄▄▄███ █████ ████ █████ █████ ███ ██ ██ ██ ██ ██
+                                  ██ ██▄ ██ ▀▀▀█▀▄█▄▀███ ████ ▀▀▄██ ▀▀ ██ ▀▀▀ ██▄▀▀▄██ ▀▀ ██
+                                  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+  -->
+
+  <Provider Name="Nextcloud" Id="f256847d-c720-4b2f-bda0-69e8f4bceac2"
+            Documentation="https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/oauth2.html">
+    <Environment Issuer="{settings.Issuer}">
+      <Configuration AuthorizationEndpoint="{CreateAbsoluteUri(settings.Issuer, 'index.php/apps/oauth2/authorize')}"
+                     TokenEndpoint="{CreateAbsoluteUri(settings.Issuer, 'index.php/apps/oauth2/api/v1/token')}"
+                     UserinfoEndpoint="{CreateAbsoluteUri(settings.Issuer, 'ocs/v2.php/cloud/user?format=json')}">
+        <GrantType Value="authorization_code" />
+        <GrantType Value="refresh_token" />
+      </Configuration>
+    </Environment>
+
+    <Setting PropertyName="Issuer" ParameterName="issuer" Type="Uri" Required="true"
+             Description="The URI used to access the Nextcloud instance (e.g https://fabrikam.com/)" />
+  </Provider>
+
   <!--
                                           ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
                                           ██ ▀██ ██ ▄▄▄ █▄▄ ▄▄█▄ ▄██ ▄▄▄ ██ ▀██ ██