mirror/opencloud
1
0 Fork 0
mirror of https://github.com/opencloud-eu/opencloud.git synced 2026-11-09 05:52:52 -05:00
Code Issues Packages Projects Releases Wiki Activity
24,103 Commits 117 Branches 77 Tags
feat/report-command
Commit Graph
10 Commits
Author SHA1 Message Date
Alex Ababii 66df735575 feat(guestauth): consume space shared event 2026-10-21 15:57:54 +02:00
André Duffeck 341f4c7553 Rate limit guest link renewals with a valid session separately 
Each session renewal issues a PIN with fresh attempts, so without a limit a stolen session could keep guessing. The quota is separate from the one for renewals without a session, so neither can use up the other's.
 2026-10-21 15:57:53 +02:00
Alex Ababii cc55bc36a6 feat(authguest): nonce and pin ttl are now using the same value 2026-10-21 15:57:53 +02:00
Alex Ababii c9d45f47ed feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters 2026-10-21 15:57:53 +02:00
Alex Ababii 4fb7fec887 feat(authguest): basica data structs and config for rate limiting 2026-10-21 15:57:52 +02:00
Alex Ababii 28fb2054e9 feat(authguest): renewal logic and publishing event 2026-10-21 15:57:51 +02:00
André Duffeck 10b93edded Derive the guest session key from OC_JWT_SECRET 
Replace AUTH_GUEST_SESSION_JWT_SECRET with a key derived via
HMAC-SHA256 from the reva JWT secret. Guest session tokens and reva
access tokens remain unforgeable across each other without a second
secret to configure.
 2026-10-07 08:46:53 +02:00
André Duffeck adc8a51657 Don't use the same secret for signing sessions and reva tokens 2026-10-06 09:52:02 +02:00
Ralf Haferkamp 246d49ee18 guestlinks: Setup guestlinks authprovider 
This starts the guestlinks authprovider as part of the auth-guest
service and wires it into the authregistry.
 2026-10-06 09:47:00 +02:00
Alex Ababii cbf3ee8c0b feat(guestauth): guestauth service rename to auth-guest 2026-10-06 08:07:44 +02:00