Alex Ababii
281f18e9fb
feat(guestauth): handling space shared event
2026-10-19 13:40:07 +02:00
Alex Ababii
2425b7e2ff
feat(guestauth): consume space shared event
2026-10-19 12:43:52 +02:00
Alex Ababii
6bb1f2e859
Merge pull request #3743 from maki5/fix/activitylog_display_guestuser_name
...
fix(activitylog): fix for guestuser display name in activity list
2026-10-19 11:39:18 +02:00
Alex Ababii
fc1a055997
Merge pull request #3745 from maki5/fix/authguest_readme
...
fix(authguest): fix diagram parsing in readme
2026-10-19 09:11:26 +02:00
opencloudeu
1d4308e36f
[tx] updated from transifex
2026-10-17 23:16:56 +00:00
opencloudeu
6b50d80752
[tx] updated from transifex
2026-10-16 23:17:06 +00:00
Florian Schade
3cc47747af
Merge pull request #3730 from fschade/feat-collaboration-checkfileinfo-gaps
...
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-16 17:05:49 +02:00
Alex Ababii
6ed4fd3fc1
fix(authguest): fix diagram parsing in readme
2026-10-16 16:09:33 +02:00
Alex Ababii
753524a22f
fix(activitylog): fix for guestuser display name in activity list
2026-10-16 14:37:52 +02:00
Andre Duffeck
0deb1183d0
Merge pull request #3739 from aduffeck/guestlink-renewal-mail-without-pin
...
Make renewal mails without PINs work
2026-10-16 14:37:41 +02:00
André Duffeck
cf60057d4a
Raise the default cap for guest link renewals without a session to 50
...
Renewals without a session can happen up to 48 times a day, so a lower cap could be used up to lock the guest out.
2026-10-16 13:18:30 +02:00
André Duffeck
b7fd066c5f
Keep the newest guest link while it can still be redeemed
...
Renewals without a valid session only need the share id, so they no longer cancel a link the guest hasn't used yet.
2026-10-16 13:07:38 +02:00
André Duffeck
564e1c0ec7
Rate limit guest link renewals with a valid session separately
...
Each session renewal issues a PIN with fresh attempts, so without a limit a stolen session could keep guessing. The quota is separate from the one for renewals without a session, so neither can use up the other's.
2026-10-16 13:05:38 +02:00
André Duffeck
60832cc61b
Don't issue PINs for renewals with expired guest sessions
...
An expired session token now counts as no session, so the renewal only rotates the link.
2026-10-16 13:03:36 +02:00
André Duffeck
5e4d722f18
Make renewal mails without PINs work
2026-10-16 12:38:51 +02:00
Alex Ababii
14d9251a5a
Merge pull request #3704 from maki5/feat/authguest_rate_limit
...
feat(authguest): rate limited endpoints for guestlinks
2026-10-16 11:41:09 +02:00
Florian Schade
e1cfacb2dd
feat(collaboration): send DownloadUrl outside of secure view
2026-10-16 11:29:07 +02:00
Alex Ababii
f6a3ff09d8
feat(authguest): fixed tests after rebase
2026-10-16 10:34:34 +02:00
Alex Ababii
c9345db7f3
feat(authguest): fix codacy styling
2026-10-16 10:07:22 +02:00
Alex Ababii
e931d1ab25
feat(auhguest): upd renew quota limiting logic
2026-10-16 10:07:22 +02:00
Alex Ababii
7a7f43f889
feat(authguest): fix the renew sessionValid condition
2026-10-16 10:07:22 +02:00
Alex Ababii
7eac7db12c
feat(authguest): upd renewal flow to rely on sessionToken
2026-10-16 10:07:22 +02:00
Alex Ababii
4df88e7dc5
feat(authguest): fix README styling
2026-10-16 10:07:22 +02:00
Alex Ababii
dc59c536da
feat(authguest): upd error mappings
2026-10-16 10:07:22 +02:00
Alex Ababii
ddf388a058
feat(authguest): nonce and pin ttl are now using the same value
2026-10-16 10:07:22 +02:00
Alex Ababii
fd25c8c88d
feat(authguest): removed session token verification on renew endpoint
2026-10-16 10:07:21 +02:00
Alex Ababii
57e72213f7
feat(authguest): per share nonce cookie name
2026-10-16 10:01:56 +02:00
Alex Ababii
9d2c3d40fd
feat(authguest): fix codacy issues
2026-10-16 10:01:56 +02:00
Alex Ababii
6e6330f68c
feat(authguest): upd readme
2026-10-16 10:01:56 +02:00
Alex Ababii
d8ab8dc7ee
feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters
2026-10-16 10:01:55 +02:00
Alex Ababii
42a411c11a
feat(authguest): nonce check for verifyPin call
2026-10-16 09:59:28 +02:00
Jannik Stehle
68cad133a4
fix: allow guest link auth for app open and new endpoints
2026-10-16 09:54:27 +02:00
Alex Ababii
985c39de1f
feat(authguest): basica data structs and config for rate limiting
2026-10-16 09:32:46 +02:00
opencloudeu
40095460a1
[tx] updated from transifex
2026-10-15 23:29:52 +00:00
Andre Duffeck
ddd0eda688
Merge pull request #3727 from aduffeck/guest-session-expiry
...
Return ExpiresAt when issueing a session token
2026-10-15 17:55:10 +02:00
Andre Duffeck
51e2192476
Merge pull request #3729 from opencloud-eu/feat/guest-role-definitions
...
fix: allow guests to list role definitions
2026-10-15 16:05:34 +02:00
Andre Duffeck
a303d7ff84
Merge pull request #3723 from aduffeck/send-guestlink-renewal-emails
...
Add email notifications when a guest link has been renewed
2026-10-15 13:43:49 +02:00
Jannik Stehle
a608418678
fix: allow guests to list role definitions
...
Shared drive items only reference role ids, so web needs the role
definitions to resolve the guest's share permissions.
2026-10-15 11:57:13 +02:00
Florian Schade
09dba5bcaa
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-15 11:42:06 +02:00
Florian Schade
4086fad778
Merge pull request #3724 from opencloud-eu/fix-nats-checks
...
fix: nats checks were missing the configured auth
2026-10-15 11:20:01 +02:00
André Duffeck
989a2e9f30
Add email notifications when a guest link has been renewed
...
The notifications service now consumes the GuestTokenRenewed event and
mails the new guest link together with the one-time PIN to the guest.
The created and renewed mails share one code path; GuestTokenRenewed
carries no resource name, so the resource is stat'ed for it.
2026-10-15 10:35:10 +02:00
André Duffeck
a230d7e193
Return ExpiresAt when issueing a session token
2026-10-15 10:34:00 +02:00
Julian Koberg
059e9029bc
fix: adjust to comments from CR
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 15b1c38e386c1e05ccea6a5f77fbca9786a52c87)
2026-10-15 09:24:22 +02:00
Julian Koberg
63028f2ace
feat: add cli command to test the blobstore
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 1d2c329e66db9a406370554d91ce3951ec537ace)
2026-10-15 09:24:22 +02:00
opencloudeu
5b267fdebd
[tx] updated from transifex
2026-10-14 23:16:59 +00:00
micbar
3662a94ca7
fix: nats checks were missing the configured auth
2026-10-14 17:45:44 +02:00
micbar
f50701ebbc
fix: add config to skip share manager migrations
2026-10-14 12:02:27 +02:00
Michael Barz
41784e4ce7
Merge pull request #3711 from fschade/fix-collaboration-read-only-lock
...
fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
2026-10-13 17:01:29 +02:00
Florian Schade
fc619debf2
fix(collaboration): show the secure view watermark only for view-only tokens
2026-10-13 15:50:22 +02:00
Florian Schade
51cea608d5
fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
2026-10-13 15:42:14 +02:00
Alex Ababii