Alex Ababii
d40bdf6ecf
feat(authguest): pin logic and filemanager upd
2026-10-13 09:30:52 +02:00
Alex Ababii
8e39386c60
feat(authguest): added renew endpoint with basic handling
2026-10-13 09:30:51 +02:00
Anja Barz
25791bbd19
fix(proxy): make metrics table MDX-compatible ( #3680 )
2026-10-12 09:00:25 +02:00
opencloudeu
9ceb2b025f
[tx] updated from transifex
2026-10-11 23:16:58 +00:00
opencloudeu
89f63e6f2a
[tx] updated from transifex
2026-10-09 23:16:53 +00:00
Andre Duffeck
f798e4f2d6
Merge pull request #3684 from aduffeck/guest_sse
...
Also send SSEs to share recipients
2026-10-09 16:39:08 +02:00
André Duffeck
a9a7dd02c4
Do not abort when group members can't be resolved
2026-10-09 15:24:25 +02:00
André Duffeck
a257d20ef2
Use the reva constant for the ancestor-grants key
2026-10-09 15:24:25 +02:00
André Duffeck
a9e408bf7f
Adjust to changed utils func
2026-10-09 15:24:24 +02:00
André Duffeck
5c7f49de07
Also send SSEs to share recipients
2026-10-09 15:24:24 +02:00
Florian Schade
d4ccf0568a
refactor: set the metadata prefix process wide
2026-10-09 14:48:58 +02:00
Florian Schade
a7811dc102
feat: run the decomposed drivers on foreign metadata via metadata_prefix
...
# Conflicts:
# go.sum
# vendor/github.com/opencloud-eu/reva/v2/pkg/storage/pkg/decomposedfs/decomposedfs.go
# vendor/github.com/opencloud-eu/reva/v2/pkg/storage/pkg/decomposedfs/options/options.go
# vendor/modules.txt
2026-10-09 14:44:42 +02:00
opencloudeu
fda9651a55
[tx] updated from transifex
2026-10-09 11:20:49 +00:00
opencloudeu
26d638f464
[tx] updated from transifex
2026-10-08 23:16:51 +00:00
Florian Schade
371e84ba68
Merge pull request #3658 from opencloud-eu/cli-additions
...
feat: add more cli options to unified roles
2026-10-08 12:44:38 +02:00
Andre Duffeck
ba98b1d942
Merge pull request #3674 from aduffeck/guest-id-canonical-ascii
...
Use the stored guest id when returning an invite permission
2026-10-08 11:55:22 +02:00
Viktor Scharf
a71eefa966
fix: translation makefile path ( #3678 )
2026-10-08 10:19:14 +02:00
André Duffeck
08edebc66c
Use the stored guest id when returning an invite permission
...
The share provider now stores the guest's mail address in its canonical
form, so build the returned identity from the created share instead of
the request.
2026-10-07 12:45:13 +02:00
André Duffeck
e4afd03bd0
Use HKDF instead of plain hmac to derive the session cookie secret
2026-10-07 10:06:57 +02:00
André Duffeck
10b93edded
Derive the guest session key from OC_JWT_SECRET
...
Replace AUTH_GUEST_SESSION_JWT_SECRET with a key derived via
HMAC-SHA256 from the reva JWT secret. Guest session tokens and reva
access tokens remain unforgeable across each other without a second
secret to configure.
2026-10-07 08:46:53 +02:00
Andre Duffeck
1df2eb21d4
Merge pull request #3668 from aduffeck/send-guestlink-emails
...
Send guestlink emails
2026-10-06 15:43:15 +02:00
Andre Duffeck
22dfa5b65e
Merge pull request #3618 from rhafer/proxy-guestauth-middleware
...
guestlinks: implement auth-middleware for Guestlink cookies
2026-10-06 13:05:43 +02:00
André Duffeck
ec7f3f68a4
Add email notifications when a guest link has been created
2026-10-06 12:46:01 +02:00
André Duffeck
27a0195146
Set the guest_link capability according to the config
2026-10-06 12:46:01 +02:00
André Duffeck
3a555257fb
Align env var names, fix port conflict
2026-10-06 11:28:16 +02:00
André Duffeck
88e45f8961
Stream auth failure bodies through encoders
2026-10-06 10:22:41 +02:00
André Duffeck
7f7da7f583
Use subtle to compare the hash
2026-10-06 09:52:02 +02:00
André Duffeck
934232e838
Limit body size on unauthenticated redeem endpoint
2026-10-06 09:52:02 +02:00
André Duffeck
e8c78f496d
Do not leak information about tokens in errors
2026-10-06 09:52:02 +02:00
André Duffeck
adc8a51657
Don't use the same secret for signing sessions and reva tokens
2026-10-06 09:52:02 +02:00
André Duffeck
713b9c5095
Only enable guest_link auth when the feature is enabled
2026-10-06 09:52:02 +02:00
Alex
d761a484da
feat(web): use the OpenCloud brand colors for the primary color role ( #3631 )
2026-10-06 09:50:25 +02:00
Ralf Haferkamp
fbb6ac602c
proxy: add guestlink auth middleware
2026-10-06 09:47:00 +02:00
Ralf Haferkamp
98cdbd077d
refactor(proxy): return typed authentication results from authenticators
...
Replace the boolean authenticator result with a typed AuthenticationResult
containing AuthenticationState (NotApplicable, Failed, Succeeded, Error)
to distinguish between non-applicability, rejected credentials, and
dependency failures.
All existing authentication behavior remains observably unchanged.
2026-10-06 09:47:00 +02:00
Ralf Haferkamp
246d49ee18
guestlinks: Setup guestlinks authprovider
...
This starts the guestlinks authprovider as part of the auth-guest
service and wires it into the authregistry.
2026-10-06 09:47:00 +02:00
Alex Ababii
c1dc12deee
feat(guestauth): upd readme with guest links flow diagram
2026-10-06 08:08:28 +02:00
Alex Ababii
2c898250a9
feat(guestauth): upd file manager lock, addtional filetrs for shareExpired and shareRemoved events, common config loading fix
2026-10-06 08:08:28 +02:00
Alex Ababii
c5879ca1b2
feat(guestauth): renaming guest ivitations to guest links for consistency with libre-graph-api
2026-10-06 08:08:28 +02:00
Alex Ababii
a1a8221f68
feat(guestauth): global flag to disable the guest links feature
2026-10-06 08:08:26 +02:00
Alex Ababii
340851de70
feat(guestauth): updated redeem endpoint response and dependencies
2026-10-06 08:07:44 +02:00
Alex Ababii
e17a9a3ae9
feat(guestauth): aligned readme
2026-10-06 08:07:44 +02:00
Alex Ababii
d0847093bf
feat(guestauth): prefix for cookie
2026-10-06 08:07:44 +02:00
Alex Ababii
cbf3ee8c0b
feat(guestauth): guestauth service rename to auth-guest
2026-10-06 08:07:44 +02:00
Alex Ababii
f86e339233
feat(guestauth): grantee email in GuestTokenCreated event
2026-10-06 08:07:44 +02:00
Alex Ababii
cf77e47ce4
feat(guestauth): used file lock instead of mutex in file strorage implementation
2026-10-06 08:07:43 +02:00
Alex Ababii
eac68b9354
feat(guestauth): upd redeem response error format
2026-10-06 08:07:43 +02:00
Alex Ababii
9088273778
feat(guestauth): upd token record expiry proporety value on add
2026-10-06 08:07:43 +02:00
Alex Ababii
b920654815
feat(guetauth): upd the redeem route
2026-10-06 08:07:43 +02:00
Alex Ababii
e5c3be7c67
feat(guestauth): moved SecretHash to a method instead of field in struct
2026-10-06 08:07:43 +02:00
Alex Ababii
b4aa47c029
feat(guestauth): renamed Storage interface and dependencies to Manager
2026-10-06 08:07:43 +02:00
Alex Ababii