[dkocher]

Adds OpenCloud (OpenID Connect).cyberduckprofile to connect to OpenCloud deployments using the built-in identity provider without requiring any client registration.

• Uses the public client OpenCloudDesktop registered by default in the built-in identity provider (services/idp/pkg/config/defaults/defaultconfig.go) with redirect URIs http://127.0.0.1 and http://localhost accepting any port for native clients.
• OAuth Redirect Url set to http://localhost/ using the loopback redirect handler.
• Relative OAuth Authorization Url (/signin/v1/identifier/_/authorize) and OAuth Token Url (/konnect/v1/token) resolved against the hostname of the bookmark.
• Empty OAuth Client Secret with PKCE.
• Scopes openid profile email offline_access. The identity provider requires consent for the untrusted client on first login to issue a refresh token.

Notes

• Requires support for loopback redirect URIs without a port that sends the bound port in redirect_uri for both the authorization and token request. Assign port to loopback redirect URI before authorization request. cyberduck#18448
• Deployments using Keycloak or Microsoft Entra ID require a custom connection profile.
• Documentation in Tutorial to connect to ownCloud Infinite Scale & OpenCloud with OpenID Connect docs#662.