Oauth-Like-Flow

Nextcloud Federated Share OCM Bearer Token Scope Escalation to Sender WebDAV Access

When a Nextcloud user creates a normal federated file share, the sender instance generates a permanent authentication token that is also stored as the federated share's secret; that token is created without an explicit narrow scope, so it defaults to full…