Commit Graph
23979 Commits
Author SHA1 Message Date
André Duffeck 27a0195146 Set the guest_link capability according to the config 2026-10-06 12:46:01 +02:00
André Duffeck 3a555257fb Align env var names, fix port conflict 2026-10-06 11:28:16 +02:00
André Duffeck 88e45f8961 Stream auth failure bodies through encoders 2026-10-06 10:22:41 +02:00
André Duffeck 7f7da7f583 Use subtle to compare the hash 2026-10-06 09:52:02 +02:00
André Duffeck 934232e838 Limit body size on unauthenticated redeem endpoint 2026-10-06 09:52:02 +02:00
André Duffeck e8c78f496d Do not leak information about tokens in errors 2026-10-06 09:52:02 +02:00
André Duffeck adc8a51657 Don't use the same secret for signing sessions and reva tokens 2026-10-06 09:52:02 +02:00
André Duffeck 713b9c5095 Only enable guest_link auth when the feature is enabled 2026-10-06 09:52:02 +02:00
Ralf Haferkamp fbb6ac602c proxy: add guestlink auth middleware 2026-10-06 09:47:00 +02:00
Ralf Haferkamp 98cdbd077d refactor(proxy): return typed authentication results from authenticators
Replace the boolean authenticator result with a typed AuthenticationResult
containing AuthenticationState (NotApplicable, Failed, Succeeded, Error)
to distinguish between non-applicability, rejected credentials, and
dependency failures.

All existing authentication behavior remains observably unchanged.
2026-10-06 09:47:00 +02:00
Ralf Haferkamp 246d49ee18 guestlinks: Setup guestlinks authprovider
This starts the guestlinks authprovider as part of the auth-guest
service and wires it into the authregistry.
2026-10-06 09:47:00 +02:00
Andre Duffeck 6ff4794ca8 Merge pull request #3609 from maki5/feat/guestauth_service
feat(guestlinks)!: auth-guest service
2026-10-06 09:23:22 +02:00
André Duffeck aeb11b07ce Adapt to renamed env var about guest links 2026-10-06 08:56:58 +02:00
Alex Ababii c1dc12deee feat(guestauth): upd readme with guest links flow diagram 2026-10-06 08:08:28 +02:00
Alex Ababii 2c898250a9 feat(guestauth): upd file manager lock, addtional filetrs for shareExpired and shareRemoved events, common config loading fix 2026-10-06 08:08:28 +02:00
Alex Ababii c5879ca1b2 feat(guestauth): renaming guest ivitations to guest links for consistency with libre-graph-api 2026-10-06 08:08:28 +02:00
Alex Ababii a1a8221f68 feat(guestauth): global flag to disable the guest links feature 2026-10-06 08:08:26 +02:00
Alex Ababii 340851de70 feat(guestauth): updated redeem endpoint response and dependencies 2026-10-06 08:07:44 +02:00
Alex Ababii e17a9a3ae9 feat(guestauth): aligned readme 2026-10-06 08:07:44 +02:00
Alex Ababii d0847093bf feat(guestauth): prefix for cookie 2026-10-06 08:07:44 +02:00
Alex Ababii cbf3ee8c0b feat(guestauth): guestauth service rename to auth-guest 2026-10-06 08:07:44 +02:00
Alex Ababii f86e339233 feat(guestauth): grantee email in GuestTokenCreated event 2026-10-06 08:07:44 +02:00
Alex Ababii cf77e47ce4 feat(guestauth): used file lock instead of mutex in file strorage implementation 2026-10-06 08:07:43 +02:00
Alex Ababii eac68b9354 feat(guestauth): upd redeem response error format 2026-10-06 08:07:43 +02:00
Alex Ababii 9088273778 feat(guestauth): upd token record expiry proporety value on add 2026-10-06 08:07:43 +02:00
Alex Ababii b920654815 feat(guetauth): upd the redeem route 2026-10-06 08:07:43 +02:00
Alex Ababii e5c3be7c67 feat(guestauth): moved SecretHash to a method instead of field in struct 2026-10-06 08:07:43 +02:00
Alex Ababii b4aa47c029 feat(guestauth): renamed Storage interface and dependencies to Manager 2026-10-06 08:07:43 +02:00
Alex Ababii 2106f60fd8 feat(guestauth): upd version tags for env vars 2026-10-06 08:07:43 +02:00
Alex Ababii fdf52e4eaf feat(guestauth): upd service readme 2026-10-06 08:07:43 +02:00
Alex Ababii d359a7da1f feat(guestauth): removed uneeded config field 2026-10-06 08:07:43 +02:00
Alex Ababii 45bc705a74 feat(guestauth): cookie set always to true due to codacy mention 2026-10-06 08:07:43 +02:00
Alex Ababii 6ea563de96 feat(guestauth): added mocks for tests, made services dependencies to be based on interfaces 2026-10-06 08:07:43 +02:00
Alex Ababii 402a0c04a1 feat(guestauth): register guestauth proxy 2026-10-06 08:07:43 +02:00
Alex Ababii a1cb335c37 feat(guestauth): register gusetauth service into opencloud config 2026-10-06 08:07:43 +02:00
Alex Ababii 2fc5fb36c3 feat(guestauth): used renamio for file write 2026-10-06 08:07:43 +02:00
Alex Ababii ffa70f5579 feat(guestauth): upd events handlers tests 2026-10-06 08:07:43 +02:00
Alex Ababii ecb546fe46 feat(guestauth): create jwt token and setup cookies on redeem token call 2026-10-06 08:07:43 +02:00
Alex Ababii 7af24c09a8 feat(guestauth): handle events and a bit of cleanup 2026-10-06 08:07:43 +02:00
Alex Ababii a60ec8cbc3 feat(guestauth): handler for redeem action and http service 2026-10-06 08:07:43 +02:00
Alex Ababii 06f7d12c4c feat(guestauth): storage implementation for guest auth tokens 2026-10-06 08:07:43 +02:00
Alex Ababii c5e52f97c6 feat(guestauth): token service 2026-10-06 08:07:43 +02:00
Alex Ababii 0448b456b0 feat(guestauth): added consumer and some basic event handling logic with stubs 2026-10-06 08:07:43 +02:00
Alex Ababii 19fc7dfb8b feat(guestauth): added guestauth service skeleton 2026-10-06 08:07:43 +02:00
OpenCloud Devopsandv.scharf 8e51430885 🎉 Release 8.1.0 (#3534)
* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.1

* 🎉 Release 8.0.2

* 🎉 Release 8.0.2

* 🎉 Release 8.0.2

* 🎉 Release 8.0.2

* 🎉 Release 8.0.2

* 🎉 Release 8.0.2

* 🎉 Release 8.0.2

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* 🎉 Release 8.1.0

* trigger ci

* replace placeholders

---------

Co-authored-by: v.scharf <v.scharf@opencloud.eu>
v8.1.0
2026-10-05 19:37:42 +02:00
Viktor Scharf af425afb3b [full-ci] chore: bump reva to 2.51.0 (#3657)
* chore: bump reva to 2.51.0

* replaceversion placeholder
2026-10-05 17:08:52 +02:00
Viktor Scharf ef10888431 [full-ci] chore: bump web to v8.1.0 (#3656)
* chore: bump web to v8.1.0

* trigger ci
2026-10-05 17:00:07 +02:00
Jörn Friedrich Dreyer 3215739190 Merge pull request #3593 from opencloud-eu/port-11707
Add delete stale nodes command
2026-10-05 15:44:59 +02:00
Andre Duffeck 8f2adf2138 Reindex disabled spaces once they get enabled again (#3579)
Spaces that are disabled while reindexing are skipped. They are now
remembered in a NATS KV bucket (including whether a forced rescan was
requested) and reindexed when the SpaceEnabled event comes in. The
entry is removed when the space gets deleted.
2026-10-05 14:28:58 +02:00
Jörn Friedrich Dreyer 5ff51c1856 docs(storage-users): document the delete-stale-nodes command
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2026-10-05 14:12:21 +02:00