Alex
b9f4d5f8b2
fix(idp): show keyboard focus on every control ( #3732 )
...
* fix(idp): show keyboard focus on primary buttons
* fix(idp): show keyboard focus on every control
2026-10-21 15:57:54 +02:00
opencloudeu
2f8e8c2cbc
[tx] updated from transifex
2026-10-21 15:57:54 +02:00
Alex
d1c1a5be55
fix: show the lilac logo on the login page ( #3773 )
2026-10-21 15:57:54 +02:00
Florian Schade
9cc76f0517
fix(frontend): report content search only when full-text search is enabled
2026-10-21 15:57:54 +02:00
Alex Ababii
7bbc5e0cd6
feat(guestauth): trigger ci
2026-10-21 15:57:54 +02:00
Alex Ababii
5f176948a0
feat(guestauth): handling space shared event
2026-10-21 15:57:54 +02:00
Alex Ababii
66df735575
feat(guestauth): consume space shared event
2026-10-21 15:57:54 +02:00
Alexander Ackermann
122aa24510
refactor: read the default quota only from OC_SPACES_DEFAULT_QUOTA and deprecate GRAPH_SPACES_DEFAULT_QUOTA
2026-10-21 15:57:54 +02:00
Alexander Ackermann
0963269fb7
feat: expose the default project space quota in the capabilities
2026-10-21 15:57:54 +02:00
opencloudeu
d87110b8bd
[tx] updated from transifex
2026-10-21 15:57:54 +02:00
micbar
ca35e66968
docs: update unified Roles
2026-10-21 15:57:54 +02:00
André Duffeck
04a59263cf
Make archiver work with guest link auth
2026-10-21 15:57:53 +02:00
Alex Ababii
75495cf620
fix(activitylog): fix for guestuser display name in activity list
2026-10-21 15:57:53 +02:00
Alex Ababii
169b31061b
fix(authguest): fix diagram parsing in readme
2026-10-21 15:57:53 +02:00
opencloudeu
b5c33d8e55
[tx] updated from transifex
2026-10-21 15:57:53 +02:00
opencloudeu
a81107832f
[tx] updated from transifex
2026-10-21 15:57:53 +02:00
Florian Schade
7610028e20
feat(collaboration): send DownloadUrl outside of secure view
2026-10-21 15:57:53 +02:00
Florian Schade
0085611d2d
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-21 15:57:53 +02:00
André Duffeck
638d5e4da8
Make renewal mails without PINs work
2026-10-21 15:57:53 +02:00
André Duffeck
afb8e81993
Raise the default cap for guest link renewals without a session to 50
...
Renewals without a session can happen up to 48 times a day, so a lower cap could be used up to lock the guest out.
2026-10-21 15:57:53 +02:00
André Duffeck
74e42ea8a1
Keep the newest guest link while it can still be redeemed
...
Renewals without a valid session only need the share id, so they no longer cancel a link the guest hasn't used yet.
2026-10-21 15:57:53 +02:00
André Duffeck
341f4c7553
Rate limit guest link renewals with a valid session separately
...
Each session renewal issues a PIN with fresh attempts, so without a limit a stolen session could keep guessing. The quota is separate from the one for renewals without a session, so neither can use up the other's.
2026-10-21 15:57:53 +02:00
André Duffeck
49d6aca9e2
Don't issue PINs for renewals with expired guest sessions
...
An expired session token now counts as no session, so the renewal only rotates the link.
2026-10-21 15:57:53 +02:00
Alex Ababii
2770655499
feat(authguest): fixed tests after rebase
2026-10-21 15:57:53 +02:00
Alex Ababii
82d8171346
feat(authguest): fix codacy styling
2026-10-21 15:57:53 +02:00
Alex Ababii
97ff433566
feat(auhguest): upd renew quota limiting logic
2026-10-21 15:57:53 +02:00
Alex Ababii
003b733dfd
feat(authguest): fix the renew sessionValid condition
2026-10-21 15:57:53 +02:00
Alex Ababii
781d835e8a
feat(authguest): upd renewal flow to rely on sessionToken
2026-10-21 15:57:53 +02:00
Alex Ababii
f9824b8026
feat(authguest): fix README styling
2026-10-21 15:57:53 +02:00
Alex Ababii
5fff27d91e
feat(authguest): upd error mappings
2026-10-21 15:57:53 +02:00
Alex Ababii
cc55bc36a6
feat(authguest): nonce and pin ttl are now using the same value
2026-10-21 15:57:53 +02:00
Alex Ababii
ef934f505a
feat(authguest): removed session token verification on renew endpoint
2026-10-21 15:57:53 +02:00
Alex Ababii
e2f4b7da0b
feat(authguest): per share nonce cookie name
2026-10-21 15:57:53 +02:00
Alex Ababii
f83c8c4d84
feat(authguest): fix codacy issues
2026-10-21 15:57:53 +02:00
Alex Ababii
d217f8ea3d
feat(authguest): upd readme
2026-10-21 15:57:53 +02:00
Alex Ababii
c9d45f47ed
feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters
2026-10-21 15:57:53 +02:00
Alex Ababii
ce45d408fe
feat(authguest): nonce check for verifyPin call
2026-10-21 15:57:52 +02:00
Alex Ababii
4fb7fec887
feat(authguest): basica data structs and config for rate limiting
2026-10-21 15:57:52 +02:00
Jannik Stehle
f885fbdcc1
fix: allow guest link auth for app open and new endpoints
2026-10-21 15:57:52 +02:00
opencloudeu
6de5b82f6f
[tx] updated from transifex
2026-10-21 15:57:52 +02:00
André Duffeck
a7f66fd4d6
Return ExpiresAt when issueing a session token
2026-10-21 15:57:52 +02:00
Jannik Stehle
77129cb0b9
fix: allow guests to list role definitions
...
Shared drive items only reference role ids, so web needs the role
definitions to resolve the guest's share permissions.
2026-10-21 15:57:52 +02:00
André Duffeck
a10b63b246
Add email notifications when a guest link has been renewed
...
The notifications service now consumes the GuestTokenRenewed event and
mails the new guest link together with the one-time PIN to the guest.
The created and renewed mails share one code path; GuestTokenRenewed
carries no resource name, so the resource is stat'ed for it.
2026-10-21 15:57:52 +02:00
micbar
f832df4a4b
fix: nats checks were missing the configured auth
2026-10-21 15:57:52 +02:00
Julian Koberg
b1f7b1b46b
fix: adjust to comments from CR
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 15b1c38e386c1e05ccea6a5f77fbca9786a52c87)
2026-10-21 15:57:52 +02:00
Julian Koberg
c80d679ec7
feat: add cli command to test the blobstore
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 1d2c329e66db9a406370554d91ce3951ec537ace)
2026-10-21 15:57:52 +02:00
opencloudeu
1e7f05f8a8
[tx] updated from transifex
2026-10-21 15:57:52 +02:00
micbar
5540582b71
fix: add config to skip share manager migrations
2026-10-21 15:57:52 +02:00
Florian Schade
d1f4343458
fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
2026-10-21 15:57:51 +02:00
Florian Schade
400badca75
fix(collaboration): show the secure view watermark only for view-only tokens
2026-10-21 15:57:51 +02:00
Alex