edge: restyle the oCIS idp sign-in wall into the Hub palette

The sign-in page is served by oCIS's idp service, which the web theme.json
cannot touch. Inject hub-signin.css via sub_filter on /signin/ until oCIS
sits behind the Hub OIDC issuer (see docs/design/2026-10-13-files-oidc-sso.md).
This commit is contained in:
glass beadian 2026-10-13 16:57:38 +00:00
parent 5bc81c16f2
commit 9d42d61f6b
2 changed files with 63 additions and 0 deletions

View file

@ -234,9 +234,31 @@ http {
default_type application/json;
alias /opt/occ-brand/hub-theme.json;
}
location = /themes/owncloud/hub-signin.css {
default_type text/css;
alias /opt/occ-brand/hub-signin.css;
}
location /themes/owncloud/assets/ {
alias /opt/occ-brand/;
}
# The oCIS idp sign-in page ships ownCloud's light theme; restyle it into
# the Hub palette at the edge until oCIS sits behind the Hub OIDC issuer
# (docs/design/2026-10-13-files-oidc-sso.md).
location /signin/ {
proxy_pass http://192.168.13.210:9200;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
proxy_buffering off;
sub_filter '</head>' '<link rel="stylesheet" href="/themes/owncloud/hub-signin.css"></head>';
sub_filter_once on;
sub_filter_types text/html;
}
location / {
proxy_pass http://192.168.13.210:9200;
# Hub in-app Drive frames oCIS web from app.occupymedia.cc: framing policy