Ocis vs keycloak. Failed to log in due to missing email

[ScharfViktor]

start ocis using https://github.com/owncloud/ocis/blob/master/deployments/examples/ocis_keycloak

steps:

• go to https://keycloak.owncloud.test/admin/master/console/#/oCIS/users/add-user
• create user without email - it's not required

• add a role to the user
• log in as new user

Actual:

log: ocis-ocis-1 | {"level":"error","service":"proxy","error":"Missing claim 'email'","claims":{"email_verified":false,"family_name":"test","given_name":"test","name":"test test","preferred_username":"test","sub":"61f8257f-e67b-4e56-8e8d-c019d09c3885"},"time":"2023-07-27T10:57:02.595321005Z","line":"github.com/owncloud/ocis/v2/services/proxy/pkg/user/backend/cs3.go:162","message":"Error creating user from claims"}

Expected: creating users without email is possible

cc @wkloucek

[rhafer]

Hm, true. With PROXY_AUTOPROVISION_ACCOUNTS we still require a email claim to be set. (Technically it's not a required attribute for the libregraph User we're creating.

[rhafer]

I am trying to fix this together with #8635