OIDC User security panel shows "Add device" (WebAuthn) but this does not work

[Wikinaut]

• related to Allow setting up a password after OIDC account creation. (Same for WebAuthn, which does not work; filed separately) #1188

• [Nextcloud Hub 9] (30.0.12)

• OpenIDC 7.3.2

I noticed, that users have the panel to add up a device login(s), which device(s) appear there after adding them.

However, there is a bug:

Login panel shows "Login with device" but this is not working for accounts which were created by OIDC.

[edward-ly]

Thanks for your report, can you confirm if the bug is still present in v7.4.0 too?

[Wikinaut]

Yes, is present in 7.4.0.

I removed existing (not working) Webauthn Key and re-added it newly. I logged out.

Then I tried to login, entering my username, my accountname (= the one with the issuer-sub coding), my e-mail address. In any of these cases, I was not even asked to press my FIDO key which I registered bit the logon screen confronted me with:

"Ihr Konto ist nicht für eine Anmeldung ohne Passwort eingerichtet."

[abrain]

Can confirm this behaviour with version 8.2.2 and Nextcloud 31.

In our case, it works as expected (or hoped for). We were worried if you could circumvent the OIDC login by registering a WebAuthn device. Apparently, this is not the case.

It might be helpful to stop the user from adding such a device in the first place. Or to add a note that logging in will not work.