Nextcloud MCP Server

#!/bin/bash set -euox pipefail echo "Installing and configuring user_oidc app for testing..." # Enable the user_oidc app (OIDC client for bearer token validation) php /var/www/html/occ app:enable user_oidc # Configure user_oidc to validate bearer tokens from the OIDC Identity Provider php /var/www/html/occ config:system:set user_oidc oidc_provider_bearer_validation --value=true --type=boolean php /var/www/html/occ config:system:set user_oidc httpclient.allowselfsigned --value=true --type=boolean # Allow Nextcloud to connect to local/internal servers (required for external IdP mode) # This enables user_oidc to fetch JWKS from internal Keycloak container php /var/www/html/occ config:system:set allow_local_remote_servers --value=true --type=boolean # Note: The user_oidc app_api session flag patch is NOT required when using the # CORSMiddleware Bearer token patch (20-apply-cors-bearer-token-patch.sh). # The CORSMiddleware patch fixes the root cause by allowing Bearer tokens to bypass # CORS/CSRF checks at the framework level.