André Duffeck
60832cc61b
Don't issue PINs for renewals with expired guest sessions
...
An expired session token now counts as no session, so the renewal only rotates the link.
2026-10-16 13:03:36 +02:00
Alex Ababii
14d9251a5a
Merge pull request #3704 from maki5/feat/authguest_rate_limit
...
feat(authguest): rate limited endpoints for guestlinks
2026-10-16 11:41:09 +02:00
Alex Ababii
f6a3ff09d8
feat(authguest): fixed tests after rebase
2026-10-16 10:34:34 +02:00
Alex Ababii
c9345db7f3
feat(authguest): fix codacy styling
2026-10-16 10:07:22 +02:00
Alex Ababii
e931d1ab25
feat(auhguest): upd renew quota limiting logic
2026-10-16 10:07:22 +02:00
Alex Ababii
7a7f43f889
feat(authguest): fix the renew sessionValid condition
2026-10-16 10:07:22 +02:00
Alex Ababii
7eac7db12c
feat(authguest): upd renewal flow to rely on sessionToken
2026-10-16 10:07:22 +02:00
Alex Ababii
4df88e7dc5
feat(authguest): fix README styling
2026-10-16 10:07:22 +02:00
Alex Ababii
dc59c536da
feat(authguest): upd error mappings
2026-10-16 10:07:22 +02:00
Alex Ababii
ddf388a058
feat(authguest): nonce and pin ttl are now using the same value
2026-10-16 10:07:22 +02:00
Alex Ababii
fd25c8c88d
feat(authguest): removed session token verification on renew endpoint
2026-10-16 10:07:21 +02:00
Alex Ababii
57e72213f7
feat(authguest): per share nonce cookie name
2026-10-16 10:01:56 +02:00
Alex Ababii
9d2c3d40fd
feat(authguest): fix codacy issues
2026-10-16 10:01:56 +02:00
Alex Ababii
6e6330f68c
feat(authguest): upd readme
2026-10-16 10:01:56 +02:00
Alex Ababii
d8ab8dc7ee
feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters
2026-10-16 10:01:55 +02:00
Alex Ababii
42a411c11a
feat(authguest): nonce check for verifyPin call
2026-10-16 09:59:28 +02:00
Jannik Stehle
68cad133a4
fix: allow guest link auth for app open and new endpoints
2026-10-16 09:54:27 +02:00
Alex Ababii
985c39de1f
feat(authguest): basica data structs and config for rate limiting
2026-10-16 09:32:46 +02:00
opencloudeu
40095460a1
[tx] updated from transifex
2026-10-15 23:29:52 +00:00
Andre Duffeck
ddd0eda688
Merge pull request #3727 from aduffeck/guest-session-expiry
...
Return ExpiresAt when issueing a session token
2026-10-15 17:55:10 +02:00
Andre Duffeck
51e2192476
Merge pull request #3729 from opencloud-eu/feat/guest-role-definitions
...
fix: allow guests to list role definitions
2026-10-15 16:05:34 +02:00
Andre Duffeck
a303d7ff84
Merge pull request #3723 from aduffeck/send-guestlink-renewal-emails
...
Add email notifications when a guest link has been renewed
2026-10-15 13:43:49 +02:00
Jannik Stehle
a608418678
fix: allow guests to list role definitions
...
Shared drive items only reference role ids, so web needs the role
definitions to resolve the guest's share permissions.
2026-10-15 11:57:13 +02:00
Florian Schade
4086fad778
Merge pull request #3724 from opencloud-eu/fix-nats-checks
...
fix: nats checks were missing the configured auth
2026-10-15 11:20:01 +02:00
André Duffeck
989a2e9f30
Add email notifications when a guest link has been renewed
...
The notifications service now consumes the GuestTokenRenewed event and
mails the new guest link together with the one-time PIN to the guest.
The created and renewed mails share one code path; GuestTokenRenewed
carries no resource name, so the resource is stat'ed for it.
2026-10-15 10:35:10 +02:00
André Duffeck
a230d7e193
Return ExpiresAt when issueing a session token
2026-10-15 10:34:00 +02:00
Julian Koberg
059e9029bc
fix: adjust to comments from CR
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 15b1c38e386c1e05ccea6a5f77fbca9786a52c87)
2026-10-15 09:24:22 +02:00
Julian Koberg
63028f2ace
feat: add cli command to test the blobstore
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 1d2c329e66db9a406370554d91ce3951ec537ace)
2026-10-15 09:24:22 +02:00
opencloudeu
5b267fdebd
[tx] updated from transifex
2026-10-14 23:16:59 +00:00
micbar
3662a94ca7
fix: nats checks were missing the configured auth
2026-10-14 17:45:44 +02:00
micbar
f50701ebbc
fix: add config to skip share manager migrations
2026-10-14 12:02:27 +02:00
Michael Barz
41784e4ce7
Merge pull request #3711 from fschade/fix-collaboration-read-only-lock
...
fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
2026-10-13 17:01:29 +02:00
Florian Schade
fc619debf2
fix(collaboration): show the secure view watermark only for view-only tokens
2026-10-13 15:50:22 +02:00
Florian Schade
51cea608d5
fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
2026-10-13 15:42:14 +02:00
Michael Barz
16a22a1506
Merge pull request #3706 from opencloud-eu/fix-cli-output
...
fix: add restart command output
2026-10-13 14:00:00 +02:00
micbar
8e51fa5fcd
fix: add restart command output
2026-10-13 10:31:24 +02:00
Alex Ababii
1c40729dec
feat(authguest): fix code style in readme
2026-10-13 09:49:22 +02:00
Alex Ababii
62f2125865
feat(authguest): renamed redeem to verify/token
2026-10-13 09:30:52 +02:00
Alex Ababii
6198c21357
feat(authguest): /redeem endpoint rename to /verify/token
2026-10-13 09:30:52 +02:00
Alex Ababii
d6b5f815ef
feat(authguest): removed stale comment after rebase
2026-10-13 09:30:52 +02:00
Alex Ababii
7cfc601ddb
feat(authguest): fix codacy issues
2026-10-13 09:30:52 +02:00
Alex Ababii
b266546a45
feat(authguest): upd renewal logic to verify token and session, storage has now revisions
2026-10-13 09:30:52 +02:00
Alex Ababii
fb09fedc20
feat(authguest): upd README
2026-10-13 09:30:52 +02:00
Alex Ababii
69d2f7f95d
feat(authguest): updated README
2026-10-13 09:30:52 +02:00
Alex Ababii
5b7fd47e8e
feat(authguest): moved redeem from storage layer to service layer
2026-10-13 09:30:52 +02:00
Alex Ababii
46dce34dd6
feat(authguest): atomic verify pin, rollback mechanism for renew
2026-10-13 09:30:52 +02:00
Alex Ababii
7a2639128d
feat(authguest): verify pin endpoint
2026-10-13 09:30:52 +02:00
Alex Ababii
a51f79505d
feat(authguest): renewal logic and publishing event
2026-10-13 09:30:52 +02:00
Alex Ababii
d40bdf6ecf
feat(authguest): pin logic and filemanager upd
2026-10-13 09:30:52 +02:00
Alex Ababii
8e39386c60
feat(authguest): added renew endpoint with basic handling
2026-10-13 09:30:51 +02:00
André Duffeck