Michael Barz
41784e4ce7
Merge pull request #3711 from fschade/fix-collaboration-read-only-lock
...
fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
2026-10-13 17:01:29 +02:00
Florian Schade
fc619debf2
fix(collaboration): show the secure view watermark only for view-only tokens
2026-10-13 15:50:22 +02:00
Florian Schade
51cea608d5
fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
2026-10-13 15:42:14 +02:00
Michael Barz
16a22a1506
Merge pull request #3706 from opencloud-eu/fix-cli-output
...
fix: add restart command output
2026-10-13 14:00:00 +02:00
micbar
8e51fa5fcd
fix: add restart command output
2026-10-13 10:31:24 +02:00
Alex Ababii
1c40729dec
feat(authguest): fix code style in readme
2026-10-13 09:49:22 +02:00
Alex Ababii
62f2125865
feat(authguest): renamed redeem to verify/token
2026-10-13 09:30:52 +02:00
Alex Ababii
6198c21357
feat(authguest): /redeem endpoint rename to /verify/token
2026-10-13 09:30:52 +02:00
Alex Ababii
d6b5f815ef
feat(authguest): removed stale comment after rebase
2026-10-13 09:30:52 +02:00
Alex Ababii
7cfc601ddb
feat(authguest): fix codacy issues
2026-10-13 09:30:52 +02:00
Alex Ababii
b266546a45
feat(authguest): upd renewal logic to verify token and session, storage has now revisions
2026-10-13 09:30:52 +02:00
Alex Ababii
fb09fedc20
feat(authguest): upd README
2026-10-13 09:30:52 +02:00
Alex Ababii
69d2f7f95d
feat(authguest): updated README
2026-10-13 09:30:52 +02:00
Alex Ababii
5b7fd47e8e
feat(authguest): moved redeem from storage layer to service layer
2026-10-13 09:30:52 +02:00
Alex Ababii
46dce34dd6
feat(authguest): atomic verify pin, rollback mechanism for renew
2026-10-13 09:30:52 +02:00
Alex Ababii
7a2639128d
feat(authguest): verify pin endpoint
2026-10-13 09:30:52 +02:00
Alex Ababii
a51f79505d
feat(authguest): renewal logic and publishing event
2026-10-13 09:30:52 +02:00
Alex Ababii
d40bdf6ecf
feat(authguest): pin logic and filemanager upd
2026-10-13 09:30:52 +02:00
Alex Ababii
8e39386c60
feat(authguest): added renew endpoint with basic handling
2026-10-13 09:30:51 +02:00
Anja Barz
25791bbd19
fix(proxy): make metrics table MDX-compatible ( #3680 )
2026-10-12 09:00:25 +02:00
opencloudeu
9ceb2b025f
[tx] updated from transifex
2026-10-11 23:16:58 +00:00
opencloudeu
89f63e6f2a
[tx] updated from transifex
2026-10-09 23:16:53 +00:00
Andre Duffeck
f798e4f2d6
Merge pull request #3684 from aduffeck/guest_sse
...
Also send SSEs to share recipients
2026-10-09 16:39:08 +02:00
André Duffeck
a9a7dd02c4
Do not abort when group members can't be resolved
2026-10-09 15:24:25 +02:00
André Duffeck
a257d20ef2
Use the reva constant for the ancestor-grants key
2026-10-09 15:24:25 +02:00
André Duffeck
a9e408bf7f
Adjust to changed utils func
2026-10-09 15:24:24 +02:00
André Duffeck
5c7f49de07
Also send SSEs to share recipients
2026-10-09 15:24:24 +02:00
Florian Schade
d4ccf0568a
refactor: set the metadata prefix process wide
2026-10-09 14:48:58 +02:00
Florian Schade
a7811dc102
feat: run the decomposed drivers on foreign metadata via metadata_prefix
...
# Conflicts:
# go.sum
# vendor/github.com/opencloud-eu/reva/v2/pkg/storage/pkg/decomposedfs/decomposedfs.go
# vendor/github.com/opencloud-eu/reva/v2/pkg/storage/pkg/decomposedfs/options/options.go
# vendor/modules.txt
2026-10-09 14:44:42 +02:00
opencloudeu
fda9651a55
[tx] updated from transifex
2026-10-09 11:20:49 +00:00
opencloudeu
26d638f464
[tx] updated from transifex
2026-10-08 23:16:51 +00:00
Florian Schade
371e84ba68
Merge pull request #3658 from opencloud-eu/cli-additions
...
feat: add more cli options to unified roles
2026-10-08 12:44:38 +02:00
Andre Duffeck
ba98b1d942
Merge pull request #3674 from aduffeck/guest-id-canonical-ascii
...
Use the stored guest id when returning an invite permission
2026-10-08 11:55:22 +02:00
Viktor Scharf
a71eefa966
fix: translation makefile path ( #3678 )
2026-10-08 10:19:14 +02:00
André Duffeck
08edebc66c
Use the stored guest id when returning an invite permission
...
The share provider now stores the guest's mail address in its canonical
form, so build the returned identity from the created share instead of
the request.
2026-10-07 12:45:13 +02:00
André Duffeck
e4afd03bd0
Use HKDF instead of plain hmac to derive the session cookie secret
2026-10-07 10:06:57 +02:00
André Duffeck
10b93edded
Derive the guest session key from OC_JWT_SECRET
...
Replace AUTH_GUEST_SESSION_JWT_SECRET with a key derived via
HMAC-SHA256 from the reva JWT secret. Guest session tokens and reva
access tokens remain unforgeable across each other without a second
secret to configure.
2026-10-07 08:46:53 +02:00
Andre Duffeck
1df2eb21d4
Merge pull request #3668 from aduffeck/send-guestlink-emails
...
Send guestlink emails
2026-10-06 15:43:15 +02:00
Andre Duffeck
22dfa5b65e
Merge pull request #3618 from rhafer/proxy-guestauth-middleware
...
guestlinks: implement auth-middleware for Guestlink cookies
2026-10-06 13:05:43 +02:00
André Duffeck
ec7f3f68a4
Add email notifications when a guest link has been created
2026-10-06 12:46:01 +02:00
André Duffeck
27a0195146
Set the guest_link capability according to the config
2026-10-06 12:46:01 +02:00
André Duffeck
3a555257fb
Align env var names, fix port conflict
2026-10-06 11:28:16 +02:00
André Duffeck
88e45f8961
Stream auth failure bodies through encoders
2026-10-06 10:22:41 +02:00
André Duffeck
7f7da7f583
Use subtle to compare the hash
2026-10-06 09:52:02 +02:00
André Duffeck
934232e838
Limit body size on unauthenticated redeem endpoint
2026-10-06 09:52:02 +02:00
André Duffeck
e8c78f496d
Do not leak information about tokens in errors
2026-10-06 09:52:02 +02:00
André Duffeck
adc8a51657
Don't use the same secret for signing sessions and reva tokens
2026-10-06 09:52:02 +02:00
André Duffeck
713b9c5095
Only enable guest_link auth when the feature is enabled
2026-10-06 09:52:02 +02:00
Alex
d761a484da
feat(web): use the OpenCloud brand colors for the primary color role ( #3631 )
2026-10-06 09:50:25 +02:00
Ralf Haferkamp
fbb6ac602c
proxy: add guestlink auth middleware
2026-10-06 09:47:00 +02:00
Michael Barz