Alex Ababii
80d64ea92b
feat(guestauth): remove tests from expected failures
2026-10-19 15:48:15 +02:00
Alex Ababii
281f18e9fb
feat(guestauth): handling space shared event
2026-10-19 13:40:07 +02:00
Alex Ababii
2425b7e2ff
feat(guestauth): consume space shared event
2026-10-19 12:43:52 +02:00
Viktor Scharf
8517f84ea3
tests: add acceptance tests for sharing with guests via email ( #3751 )
...
Share resources with an email address via the sharingNg API and access them with the guest link from the email.
2026-10-19 11:39:48 +02:00
Alex Ababii
6bb1f2e859
Merge pull request #3743 from maki5/fix/activitylog_display_guestuser_name
...
fix(activitylog): fix for guestuser display name in activity list
2026-10-19 11:39:18 +02:00
Alex Ababii
fc1a055997
Merge pull request #3745 from maki5/fix/authguest_readme
...
fix(authguest): fix diagram parsing in readme
2026-10-19 09:11:26 +02:00
opencloudeu
1d4308e36f
[tx] updated from transifex
2026-10-17 23:16:56 +00:00
opencloudeu
6b50d80752
[tx] updated from transifex
2026-10-16 23:17:06 +00:00
Florian Schade
3cc47747af
Merge pull request #3730 from fschade/feat-collaboration-checkfileinfo-gaps
...
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-16 17:05:49 +02:00
Alex Ababii
6ed4fd3fc1
fix(authguest): fix diagram parsing in readme
2026-10-16 16:09:33 +02:00
Alex Ababii
753524a22f
fix(activitylog): fix for guestuser display name in activity list
2026-10-16 14:37:52 +02:00
Andre Duffeck
0deb1183d0
Merge pull request #3739 from aduffeck/guestlink-renewal-mail-without-pin
...
Make renewal mails without PINs work
2026-10-16 14:37:41 +02:00
Andre Duffeck
34195a40d8
Merge pull request #3742 from aduffeck/guest-renewal-limits
...
Guest renewal limits
2026-10-16 14:19:56 +02:00
André Duffeck
cf60057d4a
Raise the default cap for guest link renewals without a session to 50
...
Renewals without a session can happen up to 48 times a day, so a lower cap could be used up to lock the guest out.
2026-10-16 13:18:30 +02:00
André Duffeck
b7fd066c5f
Keep the newest guest link while it can still be redeemed
...
Renewals without a valid session only need the share id, so they no longer cancel a link the guest hasn't used yet.
2026-10-16 13:07:38 +02:00
André Duffeck
564e1c0ec7
Rate limit guest link renewals with a valid session separately
...
Each session renewal issues a PIN with fresh attempts, so without a limit a stolen session could keep guessing. The quota is separate from the one for renewals without a session, so neither can use up the other's.
2026-10-16 13:05:38 +02:00
André Duffeck
60832cc61b
Don't issue PINs for renewals with expired guest sessions
...
An expired session token now counts as no session, so the renewal only rotates the link.
2026-10-16 13:03:36 +02:00
André Duffeck
5e4d722f18
Make renewal mails without PINs work
2026-10-16 12:38:51 +02:00
Alex Ababii
14d9251a5a
Merge pull request #3704 from maki5/feat/authguest_rate_limit
...
feat(authguest): rate limited endpoints for guestlinks
2026-10-16 11:41:09 +02:00
Florian Schade
e1cfacb2dd
feat(collaboration): send DownloadUrl outside of secure view
2026-10-16 11:29:07 +02:00
Alex Ababii
6a527692ef
feat(authguest): bump libre-graph-api-go to latest main
2026-10-16 11:05:47 +02:00
Jannik Stehle
19f9da79f8
Merge pull request #3737 from opencloud-eu/fix/guest-link-app-provider-paths
...
fix(proxy): allow guest link auth for app open and new endpoints
2026-10-16 10:59:12 +02:00
Alex Ababii
f6a3ff09d8
feat(authguest): fixed tests after rebase
2026-10-16 10:34:34 +02:00
Alex Ababii
c9345db7f3
feat(authguest): fix codacy styling
2026-10-16 10:07:22 +02:00
Alex Ababii
e931d1ab25
feat(auhguest): upd renew quota limiting logic
2026-10-16 10:07:22 +02:00
Alex Ababii
7a7f43f889
feat(authguest): fix the renew sessionValid condition
2026-10-16 10:07:22 +02:00
Alex Ababii
7eac7db12c
feat(authguest): upd renewal flow to rely on sessionToken
2026-10-16 10:07:22 +02:00
Alex Ababii
4df88e7dc5
feat(authguest): fix README styling
2026-10-16 10:07:22 +02:00
Alex Ababii
dc59c536da
feat(authguest): upd error mappings
2026-10-16 10:07:22 +02:00
Alex Ababii
ddf388a058
feat(authguest): nonce and pin ttl are now using the same value
2026-10-16 10:07:22 +02:00
Alex Ababii
fd25c8c88d
feat(authguest): removed session token verification on renew endpoint
2026-10-16 10:07:21 +02:00
Alex Ababii
57e72213f7
feat(authguest): per share nonce cookie name
2026-10-16 10:01:56 +02:00
Alex Ababii
9d2c3d40fd
feat(authguest): fix codacy issues
2026-10-16 10:01:56 +02:00
Alex Ababii
6e6330f68c
feat(authguest): upd readme
2026-10-16 10:01:56 +02:00
Alex Ababii
d8ab8dc7ee
feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters
2026-10-16 10:01:55 +02:00
Alex Ababii
42a411c11a
feat(authguest): nonce check for verifyPin call
2026-10-16 09:59:28 +02:00
Jannik Stehle
68cad133a4
fix: allow guest link auth for app open and new endpoints
2026-10-16 09:54:27 +02:00
Alex Ababii
985c39de1f
feat(authguest): basica data structs and config for rate limiting
2026-10-16 09:32:46 +02:00
opencloudeu
40095460a1
[tx] updated from transifex
2026-10-15 23:29:52 +00:00
Andre Duffeck
ddd0eda688
Merge pull request #3727 from aduffeck/guest-session-expiry
...
Return ExpiresAt when issueing a session token
2026-10-15 17:55:10 +02:00
Florian Schade
ea94099aa3
Merge pull request #3728 from opencloud-eu/add-arch-docker-build
...
feat: add dev docker make targets for different arches
2026-10-15 16:47:09 +02:00
Andre Duffeck
51e2192476
Merge pull request #3729 from opencloud-eu/feat/guest-role-definitions
...
fix: allow guests to list role definitions
2026-10-15 16:05:34 +02:00
Florian Schade
a4cf381fbb
test(collaboration): expect ReadOnly in read-only and view-only sessions
2026-10-15 15:37:12 +02:00
Andre Duffeck
a303d7ff84
Merge pull request #3723 from aduffeck/send-guestlink-renewal-emails
...
Add email notifications when a guest link has been renewed
2026-10-15 13:43:49 +02:00
Jannik Stehle
a608418678
fix: allow guests to list role definitions
...
Shared drive items only reference role ids, so web needs the role
definitions to resolve the guest's share permissions.
2026-10-15 11:57:13 +02:00
Florian Schade
09dba5bcaa
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-15 11:42:06 +02:00
Florian Schade
4086fad778
Merge pull request #3724 from opencloud-eu/fix-nats-checks
...
fix: nats checks were missing the configured auth
2026-10-15 11:20:01 +02:00
André Duffeck
989a2e9f30
Add email notifications when a guest link has been renewed
...
The notifications service now consumes the GuestTokenRenewed event and
mails the new guest link together with the one-time PIN to the guest.
The created and renewed mails share one code path; GuestTokenRenewed
carries no resource name, so the resource is stat'ed for it.
2026-10-15 10:35:10 +02:00
André Duffeck
a230d7e193
Return ExpiresAt when issueing a session token
2026-10-15 10:34:00 +02:00
micbar
ddf58bd466
feat: add dev docker make targets for different arches
2026-10-15 09:50:34 +02:00
Alex Ababii