Can LoginFlow be used as alternative to CORS?

just · June 11, 2021, 7:08pm

Would the Super Productivity app be able to use LoginFlow instead of requiring CORS access to webdav on mobile apps? Right now this amazing app requires super awkward, insecure access to Nextcloud via CORS. Please advise if you have more insight!

github.com/johannesjo/super-productivity

Loginflow SSO for Nextcloud

opened 05:56PM - 20 Feb 21 UTC

sunjam

enhancement

![image](https://user-images.githubusercontent.com/1787238/108604236-8082a680-73…61-11eb-8f9c-89e89ee199b9.png) I know you are super busy and already handling plenty. I'd like to humbly request [LoginFlow support](https://docs.nextcloud.com/server/latest/developer_manual/client_apis/LoginFlow/index.html#login-flow-v2) for Nextcloud on Desktop as a way to ease setting up WebDAV #599 and CalDAV #626. Of course you already support these as a platform agnostic option. - [Here is documentation](https://docs.nextcloud.com/server/latest/developer_manual/client_apis/LoginFlow/index.html#login-flow-v2), which can apply to Desktop, Mobile Clients and Web Apps. - I understand there is an [outstanding issue with CORS on most platforms](https://github.com/nextcloud/server/issues/3131). Perhaps one day it will be possible to support this and smooth out integration to be as simple as clicking "Grant Access" for any user already logged into Nextcloud on their browser, desktop, or mobile app. Greatly simplifies the process in the manner we expect from Google Drive and Dropbox (fyi [there is also Oauth support from Nextcloud](https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/oauth2.html)). Thank you for considering either way!!!