Commit Graph

23233 Commits

Author SHA1 Message Date
Pascal Bleser
0fd35ce8d1 jwkset: remove debugging printlns 2026-06-16 16:48:31 +02:00
Pascal Bleser
6142492c28 auth-api: fix: was missing newly introduced metrics 2026-06-16 16:48:31 +02:00
Pascal Bleser
b0e3a9ec89 groupware and jmap improvements and refactoring 2026-06-16 16:48:31 +02:00
Pascal Bleser
efee9c6739 upgrade Stalwart to 0.12 2026-06-16 16:48:31 +02:00
Pascal Bleser
2258e5f63b minor corrections to the Stalwart configuration 2026-06-16 16:48:30 +02:00
Pascal Bleser
3561f3cba5 Introduce a the auth-api service
* primitive implementation to demonstrate how it could work, still to
   be considered WIP at best

 * add new dependency: MicahParks/jwkset and MicahParks/keyfunc to
   retrieve the JWK set from KeyCloak to verify the signature of the
   JWTs sent as part of Bearer authentication in the /auth API

 * (minor) opencloud/.../service.go: clean up a logging statement that
   was introduced earlier to hunt down why the auth-api service was not
   being started
2026-06-16 16:48:30 +02:00
Pascal Bleser
26505f7443 add an auth-api service to make an exemplary implementation of an external authentication API for third party services such as Stalwart 2026-06-16 16:48:30 +02:00
Pascal Bleser
8e76649270 move services/groupware/pkg/jmap to pkg/jmap 2026-06-16 16:48:30 +02:00
Pascal Bleser
429880566c WIP: restructure the Jmap client, and implement the /me/messages Graph API endpoint with it 2026-06-16 16:48:30 +02:00
Pascal Bleser
e7c2ab55b6 add an OIDC Directory to Stalwart, requires exposing Keycloak port 8080 directly to access the userinfo endpoint using HTTP since the certificates in traefik are self-signed and end up being rejected by Stalwart with no option to bypass the certificate check 2026-06-16 16:48:30 +02:00
Pascal Bleser
9401b53a49 rename Stalwart fallback admin username from 'admin' to 'mailadmin' since 'admin' exists as a regular user in LDAP and thus won't have access to the administration 2026-06-16 16:48:30 +02:00
Pascal Bleser
f8328827a9 add missing routing for /groupware (currently unprotected for testing) 2026-06-16 16:48:30 +02:00
Pascal Bleser
91d2fb92e1 WIP: initial implementation of the groupware service 2026-06-16 16:48:30 +02:00
Pascal Bleser
73c626b013 Add Stalwart container to the opencloud_full deployment, using the OpenLDAP container as a directory for user authentication 2026-06-16 16:48:30 +02:00
Ralf Haferkamp
57d1cbc739 Merge pull request #2882 from opencloud-eu/dependabot/go_modules/github.com/go-chi/chi/v5-5.3.0
build(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0
2026-06-16 15:53:53 +02:00
Jörn Friedrich Dreyer
81fd00043e Merge pull request #2063 from opencloud-eu/nats-tls-options
add tls support for all nats connections
2026-06-16 13:21:22 +02:00
dependabot[bot]
9ac5ed9274 build(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0
Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.2.5 to 5.3.0.
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-chi/chi/compare/v5.2.5...v5.3.0)

---
updated-dependencies:
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 10:55:28 +00:00
Ralf Haferkamp
49aacef240 Merge pull request #2885 from opencloud-eu/dependabot/go_modules/github.com/nats-io/nats-server/v2-2.14.2
build(deps): bump github.com/nats-io/nats-server/v2 from 2.14.0 to 2.14.2
2026-06-16 12:53:57 +02:00
Ralf Haferkamp
46daf3f065 Merge pull request #2858 from opencloud-eu/dependabot/go_modules/github.com/open-policy-agent/opa-1.17.0
build(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.17.1
2026-06-16 12:53:09 +02:00
Ralf Haferkamp
996c3b1ead Merge pull request #2797 from opencloud-eu/dependabot/go_modules/github.com/blevesearch/bleve/v2-2.6.0
build(deps): bump github.com/blevesearch/bleve/v2 from 2.5.7 to 2.6.0
2026-06-16 12:52:16 +02:00
dependabot[bot]
42987b038b build(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.17.1
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.15.2 to 1.17.1.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/v1.17.1/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.15.2...v1.17.1)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 08:40:16 +00:00
Viktor Scharf
bb715fa4d4 Update .woodpecker.env 2026-06-16 10:37:12 +02:00
Viktor Scharf
50af682579 Update WEB_COMMITID in .woodpecker.env 2026-06-16 10:37:12 +02:00
Viktor Scharf
84607766c3 Update .woodpecker.env 2026-06-16 10:37:12 +02:00
Viktor Scharf
980ce494db Update WEB_COMMITID in .woodpecker.env 2026-06-16 10:37:12 +02:00
Viktor Scharf
0d132c0309 Update .woodpecker.env 2026-06-16 10:37:12 +02:00
Christian Richter
363a047b21 change web commit id & branch
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-06-16 10:37:12 +02:00
Christian Richter
f3f14e4a04 bump reva
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-06-16 10:37:12 +02:00
Andre Duffeck
a370bce5b9 Merge pull request #2944 from aduffeck/increase-test-stability
Do not choke on users that weren't cleaned up yet
2026-06-15 10:46:02 +02:00
Christian Richter
faf3ff1959 change error level for trashing items interaction with search
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-06-15 10:39:23 +02:00
opencloudeu
76a14b550f [tx] updated from transifex 2026-06-14 23:16:54 +00:00
opencloudeu
89353aa7c8 [tx] updated from transifex 2026-06-12 23:16:52 +00:00
Andre Duffeck
2ead0cafd2 Merge pull request #2943 from opencloud-eu/bump-reva
chore: bump reva to latest main
2026-06-12 21:11:02 +02:00
André Duffeck
92e6c8f3ff Do not choke on users that weren't cleaned up yet 2026-06-12 15:13:32 +02:00
Michael Barz
5cb2b2e089 chore: bump reva to latest main 2026-06-12 14:30:12 +02:00
opencloudeu
600640bb35 [tx] updated from transifex 2026-06-12 12:21:04 +00:00
opencloudeu
7db40eece4 [tx] updated from transifex 2026-06-12 12:14:52 +00:00
Jannik Stehle
9341a82b87 Merge pull request #2940 from opencloud-eu/chore/bump-web-7.2.0-beta.2
[full-ci] chore: bump web to v7.2.0-beta.2
2026-06-12 11:36:03 +02:00
Florian Schade
836cb980f2 Merge pull request #2928 from opencloud-eu/add-roles
feat: add more roles
2026-06-12 11:31:22 +02:00
Michael Barz
42dfc8b04f feat: add more roles 2026-06-12 10:51:10 +02:00
Jannik Stehle
63b4957b0f chore: bump web to v7.2.0-beta.2 2026-06-12 10:46:36 +02:00
Ralf Haferkamp
490eb5882b Merge pull request #2935 from rhafer/issue/2800
fix(graph): translate sharing roles consistently
2026-06-12 08:11:48 +02:00
opencloudeu
c21ce5d285 [tx] updated from transifex 2026-06-11 23:17:04 +00:00
Ralf Haferkamp
d163c8ed29 fix(graph): translate sharing roles consitently
GetRoleDefinition/s does now handle l10n correctly. Previsouly it just
returned the non-localized string. What made things worse was that
ListPermissions() mutated global list of available roles and replaced
some strings with translated values depending on the `accept-language`
header. Which resulted in GetRoleDefinition returning results in mixed
localization depending on who/what called ListPermissions before.

Fixes: #2800
2026-06-11 14:31:44 +02:00
opencloudeu
3c0d70987d [tx] updated from transifex 2026-06-11 10:00:56 +00:00
opencloudeu
6e0045bd87 [tx] updated from transifex 2026-06-11 09:51:16 +00:00
Florian Schade
40efa88989 Merge pull request #2924 from opencloud-eu/next
next to main
2026-06-11 11:48:49 +02:00
Christian Richter
61eed98f07 add static OC_MACHINE_AUTH_API_KEY
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-06-11 10:53:49 +02:00
Benedikt Kulmann
2232ae1e57 Merge pull request #2930 from opencloud-eu/core-apps-env
feat: add core apps env variable to override the default core apps
2026-06-11 10:05:27 +02:00
Benedikt Kulmann
235726e8a9 feat: add core apps env variable to override the default core apps 2026-06-11 09:52:10 +02:00