mirror/opencloud
1
0
Fork 0
mirror of https://github.com/opencloud-eu/opencloud.git synced 2026-01-25 22:42:16 -05:00
Code Issues Packages Projects Releases Wiki Activity
194 Commits 48 Branches 39 Tags
bc2dc15ff4ca9ef8bd34b2ca11f6ef3cd71cc5bc
Commit Graph

96 Commits

Author SHA1 Message Date
Jörn Friedrich Dreyer
02ec13f9a7 prevent segfault in create home middleware 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-07-23 07:57:47 +02:00
Jörn Friedrich Dreyer
c550a2e4d8 fix staticchek, remove a few debug logs 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-07-22 12:53:22 +02:00
Jörn Friedrich Dreyer
b9e05e9b47 use same signing parameters as oc10 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-07-22 12:53:22 +02:00
Jörn Friedrich Dreyer
cf448f0124 initial signing-key middleware 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-07-22 12:53:22 +02:00
Ilja Neumann
06f4e2d296 Add option to disable TLS 
Can be used to disable TLS when the ocis-proxy is behind an
TLS-Terminating reverse proxy.

env PROXY_TLS=false or cli --tls=false
 2020-07-20 15:27:35 +02:00
A.Unger
3d8bdca07a provide token configuration from config 2020-07-13 14:59:35 +02:00
Jörn Friedrich Dreyer
83b2b3c48c Change: Add OIDC config flags 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-07-10 20:08:35 +02:00
Jörn Friedrich Dreyer
e41d993af9 Add Accounts UI routes 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-07-10 17:02:01 +02:00
Ilja Neumann
94ea9ede89 Abort middleware execution if no token header is present 2020-07-10 16:48:29 +02:00
David Christofas
78ba2950d3 only send createhome requests if the account has been migrated 
Signed-off-by: David Christofas <dchristofas@owncloud.com>
 2020-07-10 16:48:29 +02:00
Jörn Friedrich Dreyer
ed95005c6c use on_premises_sam_account_name property of accounts and groups 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-07-10 15:58:59 +02:00
A.Unger
9ddf0d555b avoid setting a nil context 2020-07-09 14:29:42 +02:00
A.Unger
94adb97ac1 create root span on ocis-proxy 2020-07-09 14:15:20 +02:00
Vincent Petry
318c34925b Merge pull request #45 from owncloud/tus-endpoint 
Point /data to reva frontend
 2020-06-25 14:14:58 +02:00
Jörn Friedrich Dreyer
94ebbc0933 send autocreate home request to reva gateway 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-25 10:47:28 +02:00
Benedikt Kulmann
3873079c11 Add /data endpoint to builtin default config 2020-06-25 10:19:17 +02:00
David Christofas
2491087264 autoprovision new users on login 
Signed-off-by: David Christofas <dchristofas@owncloud.com>
 2020-06-24 17:36:30 +02:00
David Christofas
f0b9d2b80f respect the account_enabled flag 
Signed-off-by: David Christofas <dchristofas@owncloud.com>
 2020-06-24 12:07:49 +02:00
Jörn Friedrich Dreyer
8e4f814c3a remove unused mock 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-19 14:53:25 +02:00
Jörn Friedrich Dreyer
39508bd7b6 go where no man has gone before ... 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-19 14:48:36 +02:00
Jörn Friedrich Dreyer
823832ff8f add more tests 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-19 11:19:09 +02:00
Jörn Friedrich Dreyer
00afda3c04 test middleware 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-18 21:40:06 +02:00
Jörn Friedrich Dreyer
4a436a4171 parrallel test execution seems to make the coverage miscount 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-18 19:08:14 +02:00
Jörn Friedrich Dreyer
399230d3de no confusing names 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-18 19:07:31 +02:00
Jörn Friedrich Dreyer
e7a3ed3fa3 make tests use mock from ocis-accounts 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-18 18:33:16 +02:00
Jörn Friedrich Dreyer
2cb3870104 some refactoring and testing love 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-18 17:58:06 +02:00
Jörn Friedrich Dreyer
09ecfd08ee cache account 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-17 17:26:33 +02:00
Jörn Friedrich Dreyer
ac2694251b update to new accounts api 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-06-16 18:17:32 +02:00
A.Unger
afb2291eb9 Fix user claims on x-access-token Reva header; initialize cache size 2020-06-12 12:00:21 +02:00
Benedikt Kulmann
fc7b6c1a81 Fix that response is ignored 
The request to the accounts service is written to the cache, but the
retrieved uuid was not used, because it was overwritten by the value
from the (non-existant) cache entry.
 2020-06-03 15:45:23 +02:00
Ilja Neumann
d7c0728e00 Disable OIDC Keep-Alive and instantiate client once 
This should reduce file-descriptor leaks.
 2020-05-29 11:15:36 +02:00
Ilja Neumann
6b76c2783e Re-enable selector-test 2020-05-28 16:05:10 +02:00
Benedikt Kulmann
e1847b5c4a Fix flag description 2020-05-26 17:41:30 +02:00
Benedikt Kulmann
89a0f13956 Make jwt secret for reva token manager configurable. 2020-05-26 16:31:05 +02:00
Benedikt Kulmann
87ff5f5d43 Set minted token on request header instead of response writer header. 2020-05-26 16:10:37 +02:00
A.Unger
85c4232901 fix linters 2020-05-22 12:55:42 +02:00
Ilja Neumann
ee82f69390 Create JWT from claims 2020-05-13 13:42:07 +02:00
Benedikt Kulmann
c47dc845b1 Use email claim for account GetRequest 2020-05-11 13:59:18 +02:00
A.Unger
a8c01a4da8 use latest accounts, get rid of replace, fix api 2020-05-11 12:52:21 +02:00
A.Unger
b74496bbf4 add alice and maintain a set order on the middlewares. Write uuid as a temporary response header 2020-05-06 14:30:41 +02:00
A.Unger
c6da8624a5 add uuid to context 2020-05-05 18:29:32 +02:00
A.Unger
1d735adac6 added eviction logiuc 2020-05-05 17:22:23 +02:00
A.Unger
c97ef8a464 add todo comment 2020-05-04 14:11:39 +02:00
A.Unger
0dffde2e6d added a generic cache 2020-05-04 14:08:19 +02:00
A.Unger
ad6a306a6f add trailing comma 2020-05-04 09:24:07 +02:00
A.Unger
a0ed0b2e90 refactor middleware code and provide an example flow to get UUID 2020-04-30 13:39:17 +02:00
Ilja Neumann
617628b1a6 Integration test 2020-04-06 09:52:37 +02:00
Ilja Neumann
976c13cf62 Redirect http-requests to https (#29) 2020-03-27 10:57:32 +01:00
Ilja Neumann
c523942899 User based routing 
Implements a configurable "migration" policy-selector which reads the preferred_username attribute from
the oidc claims and checks if the uid exists in the ocis-accounts service.

A configurable policy-name can be selected based on the outcome of the check.
 2020-03-27 06:36:17 +01:00
Ilja Neumann
b20b05806e Integrate oid-middleware 
This feature is required for user-based routing.
 2020-03-26 09:44:51 +01:00