Desktop clients 4.0.0 Version (linux and windows) asking for daily authentication (OIDC - Pocket-ID)

[psyciknz]

I have 2 desktop clients, one windows one linux mint. Both authenticate me (as admin via oidc groups).

But I'd say, daily, I have to re-authenticate. I've tried setting the access token lifetime to long, and the refresh token activity to 300 days (these are Pocket-ID settings), but still they ask me for authentication each day.

Seems a big redundant to have a sync tool that is not syncing because it's not authenticated each day. It leaves files exposed.

Are there any opencloud settings to address this? or client settings?
Currently I'm on 8.1.0 Opencloud Rolling Edition

[paulgoulain]

I have the same problem, since I started using opencloud with OIDC. I have to log daily on my two computers and my smartphone. I use Kanidm. It is still the case with Opencloud 9.0.0

[psyciknz]

Is your account an admin account? I have two other users that are not admins, and they don't have this problem.

So wonder if it's just something that triggers when you're in the opencloud_admins

[micbar]

Does pocketID use refresh tokens?

on keycloak IdPs, the scope offline_access is used by the client to get a refresh token.

The ttl of that determines the ability to re authenticate without entering credentials.

[psyciknz]

I have these set on my pocket-0id instance

I dont believe I have anything set, any extra claims for offline_access set. So dont know what that config item is supposed to do or changes.

[psyciknz]

So i do not have anything in my oidc user data (in pocket-id you can see what will be passed to any given application) for "offline_access" Should I be adding a custom claim for a user, and if so if the key is offline_access is the value true/false or something else? I can easily test this and report back tomorrow.