Nextcloud OAuth2 Implementation Requires Client Secrets
Nextcloud's OAuth2 implementation functions as an authorization server, but requires confidential clients and lacks scope restrictions.
Nextcloud’s OAuth2 flow allows external applications to access user accounts after browser authorization, providing a temporary token without sharing the user’s Nextcloud password. This method is suitable for web applications with secure backends, but unsuitable for applications unable to protect client secrets or those seeking simple user authentication.