* add new configuration setting GROUPWARE_SEND_DURATIONS_RESPONSE
(defaults to false)
* keep track of lists of durations of backend calls
* when enabled, report them as response headers Durations (human
readable) and Durations-Nanos (as raw nanosecond values for machine
consumption)
* re-implement the auth-api service to authenticate Reva tokens
following the OIDC Userinfo endpoint specification
* pass the context where necessary and add an authenticator interface
to the JMAP HTTP driver, in order to select between master
authentication (which is used when GROUPWARE_JMAP_MASTER_USERNAME and
GROUPWARE_JMAP_MASTER_PASSWORD are both set) and OIDC token
forwarding through bearer auth
* add Stalwart directory configuration "idmoidc" which uses the
OpenCloud auth-api service API (/auth/) to validate the token it
received as bearer auth from the Groupware backend's JMAP client,
using it as an OIDC Userinfo endpoint
* implement optional additional shared secret to secure the Userinfo
service, as an additional path parameter
* add a launcher for running OpenCloud from within VSCode, but using
third-party services that are running within the docker compose
'full' example setup
docs: separate provider config
tests: substitution for local and remote server urls
tests: create local configs
tests: fix vscode debugger config
tests: separate federation share steps
The auth-bearer service is currently not needed by ocis. Reva tookens
for oidc authenticated clients are currently minted via the auth-machine
service. This commit does not completely remove the service as we shoud
consider to rework the proxy's oidc middleware to use the auth-bearer
service in the future (see #4701)
Fixes: #4692
* allow proxy to route to micro service
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* use go micre ocdav service instead of reva frontend
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* add missing gateway default config
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* update reva branch for testing
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* add changelog
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* add missing comands
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* bump reva version
Signed-off-by: jkoberg <jkoberg@owncloud.com>
* tidy
Signed-off-by: jkoberg <jkoberg@owncloud.com>
* bump reva again
Signed-off-by: jkoberg <jkoberg@owncloud.com>
* a blind mans config change
Signed-off-by: jkoberg <jkoberg@owncloud.com>
* add ocdav to must start extensions
Signed-off-by: jkoberg <jkoberg@owncloud.com>
* fail when neither backend nor service is set
Signed-off-by: jkoberg <jkoberg@owncloud.com>
Co-authored-by: jkoberg <jkoberg@owncloud.com>