Commit Graph

22755 Commits

Author SHA1 Message Date
oauth
475f983634 🎉 Release 5.2.0 2026-02-19 12:19:27 +00:00
oauth
778bd51479 Merge branch 'origin/main' into 'next-release/main' 2026-02-19 12:19:26 +00:00
Ralf Haferkamp
6dde2839df fix(oidc_auth): Fix userinfo cache expiration logic
When the userinfo claims store in the usercache is found to be expired,
do not return an error but ignore the cached entry and force a
re-verification of the access token (either via parsing the JWT again or
via a UserInfo lookup).
This is required for setups with non-JWT access tokes where the expiry
date set in the cached claims does not reflect the actual token expiry,
but just the CacheTTL.

Fixes: #1493
2026-02-19 13:17:17 +01:00
oauth
afdd36ebec 🎉 Release 5.2.0 2026-02-19 11:18:34 +00:00
oauth
2834e465ca Merge branch 'origin/main' into 'next-release/main' 2026-02-19 11:18:33 +00:00
Ralf Haferkamp
212846f2f4 fix(idp): Remove kpop dependency
The built package (https://download.kopano.io/community/kapp:/kpop-2.7.2.tgz)
seems to be no longer available and upstream lico already switched away
from it quite a while ago.

Fixes: #2364
2026-02-19 12:16:30 +01:00
oauth
4967272514 🎉 Release 5.2.0 2026-02-18 00:18:09 +00:00
oauth
93a7846c8c Merge branch 'origin/main' into 'next-release/main' 2026-02-18 00:18:09 +00:00
opencloudeu
4447893aeb [tx] updated from transifex 2026-02-18 00:15:57 +00:00
oauth
03930391d4 🎉 Release 5.2.0 2026-02-17 16:59:39 +00:00
oauth
eace29a438 Merge branch 'origin/main' into 'next-release/main' 2026-02-17 16:59:39 +00:00
Jörn Friedrich Dreyer
cd655f3ac7 Add openCloudEducationExternalId to user 2026-02-17 17:57:39 +01:00
oauth
9585f8968c 🎉 Release 5.2.0 2026-02-17 15:56:08 +00:00
oauth
d4b7feaa5f Merge branch 'origin/main' into 'next-release/main' 2026-02-17 15:56:08 +00:00
dependabot[bot]
44d2f95fa6 build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.49.0 to 0.50.0.
- [Commits](https://github.com/golang/net/compare/v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 16:53:59 +01:00
oauth
1ee1006b90 🎉 Release 5.2.0 2026-02-17 15:53:38 +00:00
oauth
d0e2c1148c Merge branch 'origin/main' into 'next-release/main' 2026-02-17 15:53:38 +00:00
dependabot[bot]
d0edd5bf99 build(deps): bump github.com/go-resty/resty/v2 from 2.17.1 to 2.17.2
Bumps [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) from 2.17.1 to 2.17.2.
- [Release notes](https://github.com/go-resty/resty/releases)
- [Commits](https://github.com/go-resty/resty/compare/v2.17.1...v2.17.2)

---
updated-dependencies:
- dependency-name: github.com/go-resty/resty/v2
  dependency-version: 2.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 16:51:33 +01:00
oauth
3d258b253e 🎉 Release 5.2.0 2026-02-17 15:42:07 +00:00
oauth
2bb8421a98 Merge branch 'origin/main' into 'next-release/main' 2026-02-17 15:42:07 +00:00
Alex
cdb942a093 feat: app-registry adjust default mime-types (#2354) 2026-02-17 16:39:55 +01:00
oauth
160b7a25d1 🎉 Release 5.2.0 2026-02-17 11:15:46 +00:00
oauth
e6cca60129 Merge branch 'origin/main' into 'next-release/main' 2026-02-17 11:15:45 +00:00
Ralf Haferkamp
342cb3df95 adr(webfinger): Align example config with implementation 2026-02-17 12:13:43 +01:00
oauth
8b5db43a67 🎉 Release 5.2.0 2026-02-17 09:43:47 +00:00
oauth
5e92a07539 Merge branch 'origin/main' into 'next-release/main' 2026-02-17 09:43:47 +00:00
Ralf Haferkamp
78703806e4 feat(webfinger): add fallbacks for CLIENT_ID and SCOPE setting
This adds the variables 'OC_OIDC_CLIENT_ID' and
'OC_OIDC_CLIENT_SCOPES' as fallbacks for the platform specific settings.

For backwards compatibility with the "old" settings for the 'web'
service we also allow 'WEB_OIDC_CLIENT_ID' and 'WEB_OIDC_SCOPE' for the
"web" platform.
2026-02-17 10:41:35 +01:00
Ralf Haferkamp
4f1aca6d90 feat(webfinger): use webfinger properties instead new relations
This works the previous commits so that clients can add an addtional
'platform' query parameter to the webfinger request that  can be used
to query the oidc client id and list of scopes that the clients need
to use when connecting to the IDP.

This also removes the non-standard issuer relatation introduced in a
previous commit as we can just introduce new relations in the
http://openid.net name space.

For IDP like Authentik that create a separate issuer url per Client
(Application in Authentik's terms) it is suggested to just configure
as single Client and use that id for all platforms (i.e. setting
'WEBFINGER_ANDROID_OIDC_CLIENT_ID', 'WEBFINGER_DESKTOP_OIDC_CLIENT_ID',
'WEBFINGER_IOS_OIDC_CLIENT_ID' and 'WEBFINGER_WEB_OIDC_CLIENT_ID' to
same value.

Related: #2088
Related: https://github.com/opencloud-eu/desktop/issues/246
2026-02-17 10:41:35 +01:00
Ralf Haferkamp
24aaeb46ba chore(webfinger): Simplify weird Query parameter extraction loop 2026-02-17 10:41:35 +01:00
pat-s
daeae1f443 feat(webfinger): support desktop and mobile specific OIDC client_id 2026-02-17 10:41:35 +01:00
pat-s
84da592c88 feat(webfinger): add desktop-specific OIDC issuer support 2026-02-17 10:41:35 +01:00
oauth
432c8aae23 🎉 Release 5.1.1 2026-02-17 08:27:37 +00:00
oauth
e25cc7a549 Merge branch 'origin/main' into 'next-release/main' 2026-02-17 08:27:37 +00:00
dependabot[bot]
5058e2ffc2 build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.64.0 to 0.65.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.64.0...zpages/v0.65.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 09:25:43 +01:00
oauth
b9418ee492 🎉 Release 5.1.1 2026-02-17 08:06:22 +00:00
oauth
d4990b8fee Merge branch 'origin/main' into 'next-release/main' 2026-02-17 08:06:21 +00:00
dependabot[bot]
5daeada697 build(deps): bump github.com/open-policy-agent/opa from 1.12.3 to 1.13.1
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.12.3 to 1.13.1.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.12.3...v1.13.1)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 09:02:30 +01:00
oauth
088d7bd835 🎉 Release 5.1.1 2026-02-17 00:20:09 +00:00
oauth
de4742e66f Merge branch 'origin/main' into 'next-release/main' 2026-02-17 00:20:08 +00:00
opencloudeu
4e9eb596f0 [tx] updated from transifex 2026-02-17 00:17:42 +00:00
oauth
45bf10fd78 🎉 Release 5.1.1 2026-02-16 16:42:26 +00:00
Ralf Haferkamp
a1b6f534f7 adr(webfinger): Change status to accepted 2026-02-16 17:40:19 +01:00
Ralf Haferkamp
815b049321 adr(webfinger): Apply suggestions from code review
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
2026-02-16 17:40:19 +01:00
Ralf Haferkamp
2bf4f2e12e adr(webfinger): Document OIDC client parameter discovery 2026-02-16 17:40:19 +01:00
OpenCloud Devops
edb917b74a 🎉 Release 5.1.0 (#2300) v5.1.0 2026-02-16 15:31:10 +01:00
Andre Duffeck
2fdb87291e Merge pull request #2348 from aduffeck/bump-reva-v2.42.4
[full-ci] Bump reva v2.42.4
2026-02-16 14:11:04 +01:00
Benedikt Kulmann
153fdeeac0 Merge pull request #2349 from opencloud-eu/bump-web-5.1.0
[full-ci] chore: bump web to v5.1.0
2026-02-16 12:51:34 +01:00
André Duffeck
2043dee745 Bump opencloud version 2026-02-16 11:02:50 +01:00
Benedikt Kulmann
5be98670f4 chore: bump web to v5.1.0 2026-02-16 11:01:47 +01:00
André Duffeck
97da8655b7 Bump reva 2026-02-16 10:53:20 +01:00