snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/bridges/nextcloud/addWebdavServer.ts

@@ -0,0 +1,41 @@
+import { Meteor } from 'meteor/meteor';
+
+import { callbacks } from '../../lib/callbacks';
+import { SystemLogger } from '../../lib/logger/system';
+import { settings } from '../../settings';
+import { addWebdavAccountByToken } from '../webdav/methods/addWebdavAccount';
+
+Meteor.startup(() => {
+	settings.watch('Webdav_Integration_Enabled', (value) => {
+		if (value) {
+			return callbacks.add(
+				'afterValidateLogin',
+				async (login) => {
+					const { user } = login;
+					const { services } = user;
+					if (!services?.nextcloud) {
+						return;
+					}
+					const token = {
+						token_type: 'Bearer',
+						access_token: services.nextcloud.accessToken,
+						refresh_token: services.nextcloud.refreshToken,
+					};
+					const data = {
+						name: 'Nextcloud',
+						serverURL: `${services.nextcloud.serverURL}/remote.php/webdav/`,
+						token,
+					};
+					try {
+						await addWebdavAccountByToken(user._id, data);
+					} catch (err) {
+						SystemLogger.error({ err });
+					}
+				},
+				callbacks.priority.MEDIUM,
+				'add-webdav-server',
+			);
+		}
+		callbacks.remove('afterValidateLogin', 'add-webdav-server');
+	});
+});

apps/meteor/server/bridges/nextcloud/index.ts

@@ -0,0 +1,2 @@
+import './lib';
+import './addWebdavServer';

apps/meteor/server/bridges/nextcloud/lib.ts

@@ -0,0 +1,60 @@
+import type { OAuthConfiguration } from '@rocket.chat/core-typings';
+import { Meteor } from 'meteor/meteor';
+import passport from 'passport';
+
+import { CustomOAuth } from '../../lib/auth-providers/custom-oauth/custom_oauth_server';
+import { addPassportCustomOAuth } from '../../lib/oauth/addPassportCustomOAuth';
+import { settings } from '../../settings';
+
+const NEXTCLOUD_PATHS = {
+	serverURL: '',
+	tokenPath: '/index.php/apps/oauth2/api/v1/token',
+	tokenSentVia: 'header' as OAuthConfiguration['tokenSentVia'],
+	authorizePath: '/index.php/apps/oauth2/authorize',
+	identityPath: '/ocs/v2.php/cloud/user?format=json',
+	scope: 'openid',
+	addAutopublishFields: {
+		forLoggedInUser: ['services.nextcloud'],
+		forOtherUsers: ['services.nextcloud.name'],
+	},
+};
+
+const Nextcloud = new CustomOAuth('nextcloud', NEXTCLOUD_PATHS);
+
+function configureNextcloudOAuth(): void {
+	passport.unuse('nextcloud');
+	const enabled = settings.get<boolean>('Accounts_OAuth_Nextcloud');
+	if (!enabled) {
+		return;
+	}
+
+	const serverURL = settings.get<string>('Accounts_OAuth_Nextcloud_URL')?.trim().replace(/\/*$/, '');
+	const clientId = settings.get<string>('Accounts_OAuth_Nextcloud_id');
+	const clientSecret = settings.get<string>('Accounts_OAuth_Nextcloud_secret');
+
+	if (!serverURL || !clientId || !clientSecret) {
+		return;
+	}
+
+	const config = { ...NEXTCLOUD_PATHS, serverURL, clientId, clientSecret };
+
+	if (settings.get<boolean>('Accounts_OAuth_Use_Modern_Flow')) {
+		addPassportCustomOAuth('nextcloud', config);
+		return;
+	}
+
+	Nextcloud.configure(config);
+}
+
+Meteor.startup(() => {
+	settings.watchMultiple(
+		[
+			'Accounts_OAuth_Nextcloud',
+			'Accounts_OAuth_Nextcloud_URL',
+			'Accounts_OAuth_Nextcloud_id',
+			'Accounts_OAuth_Nextcloud_secret',
+			'Accounts_OAuth_Use_Modern_Flow',
+		],
+		configureNextcloudOAuth,
+	);
+});