Christian Richter
db02471082
bump reva
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2026-10-21 08:06:22 +02:00
opencloudeu
61ae13a1fe
[tx] updated from transifex
2026-10-20 23:22:29 +00:00
Alex
ccb2ba4739
fix: show the lilac logo on the login page ( #3773 )
2026-10-20 22:08:31 +02:00
Florian Schade
208f1e8b33
Merge pull request #3760 from fschade/fix-frontend-content-search-capability
...
fix(frontend): report content search only when full-text search is enabled
2026-10-20 13:03:01 +02:00
Alex Ababii
3d0706ad4f
Merge pull request #3758 from maki5/feat/guestlinks_space_share
...
guestlinks: auth-guest service is handling space shared events
2026-10-20 10:20:34 +02:00
Alex Ababii
821514d010
feat(guestauth): trigger ci
2026-10-20 09:17:37 +02:00
Andre Duffeck
3ad81e4d99
Merge pull request #3719 from opencloud-eu/feat/spaces-default-quota-capability
...
feat: expose the default project space quota in the capabilities
2026-10-20 09:11:31 +02:00
opencloudeu
9cc0dd6446
[tx] updated from transifex
2026-10-19 23:17:30 +00:00
Michael Barz
a9a694cd74
Merge pull request #3738 from opencloud-eu/docs-unified-roles
...
docs: update unified Roles
2026-10-19 21:18:19 +02:00
Viktor Scharf
d0958f04c2
tests: check that a guest can only access the shared resource ( #3752 )
...
Make sure the guest session gives no access outside of the shared folder.
2026-10-19 20:55:29 +02:00
Alexander Ackermann
79a4499ca8
refactor: read the default quota only from OC_SPACES_DEFAULT_QUOTA and deprecate GRAPH_SPACES_DEFAULT_QUOTA
2026-10-19 16:13:42 +02:00
Alexander Ackermann
6adeacf8ce
feat: expose the default project space quota in the capabilities
2026-10-19 16:13:42 +02:00
Alex Ababii
80d64ea92b
feat(guestauth): remove tests from expected failures
2026-10-19 15:48:15 +02:00
Florian Schade
54f33437ff
fix(frontend): report content search only when full-text search is enabled
2026-10-19 15:18:57 +02:00
Andre Duffeck
38262408d6
Merge pull request #3755 from aduffeck/guest-archive-download
...
Make archiver work with guest link auth
2026-10-19 15:04:16 +02:00
Alex Ababii
281f18e9fb
feat(guestauth): handling space shared event
2026-10-19 13:40:07 +02:00
Alex Ababii
2425b7e2ff
feat(guestauth): consume space shared event
2026-10-19 12:43:52 +02:00
Viktor Scharf
8517f84ea3
tests: add acceptance tests for sharing with guests via email ( #3751 )
...
Share resources with an email address via the sharingNg API and access them with the guest link from the email.
2026-10-19 11:39:48 +02:00
Alex Ababii
6bb1f2e859
Merge pull request #3743 from maki5/fix/activitylog_display_guestuser_name
...
fix(activitylog): fix for guestuser display name in activity list
2026-10-19 11:39:18 +02:00
André Duffeck
855a7286d1
Make archiver work with guest link auth
2026-10-19 10:53:01 +02:00
Alex Ababii
fc1a055997
Merge pull request #3745 from maki5/fix/authguest_readme
...
fix(authguest): fix diagram parsing in readme
2026-10-19 09:11:26 +02:00
opencloudeu
1d4308e36f
[tx] updated from transifex
2026-10-17 23:16:56 +00:00
opencloudeu
6b50d80752
[tx] updated from transifex
2026-10-16 23:17:06 +00:00
Florian Schade
3cc47747af
Merge pull request #3730 from fschade/feat-collaboration-checkfileinfo-gaps
...
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-16 17:05:49 +02:00
Alex Ababii
6ed4fd3fc1
fix(authguest): fix diagram parsing in readme
2026-10-16 16:09:33 +02:00
Alex Ababii
753524a22f
fix(activitylog): fix for guestuser display name in activity list
2026-10-16 14:37:52 +02:00
Andre Duffeck
0deb1183d0
Merge pull request #3739 from aduffeck/guestlink-renewal-mail-without-pin
...
Make renewal mails without PINs work
2026-10-16 14:37:41 +02:00
Andre Duffeck
34195a40d8
Merge pull request #3742 from aduffeck/guest-renewal-limits
...
Guest renewal limits
2026-10-16 14:19:56 +02:00
André Duffeck
cf60057d4a
Raise the default cap for guest link renewals without a session to 50
...
Renewals without a session can happen up to 48 times a day, so a lower cap could be used up to lock the guest out.
2026-10-16 13:18:30 +02:00
André Duffeck
b7fd066c5f
Keep the newest guest link while it can still be redeemed
...
Renewals without a valid session only need the share id, so they no longer cancel a link the guest hasn't used yet.
2026-10-16 13:07:38 +02:00
André Duffeck
564e1c0ec7
Rate limit guest link renewals with a valid session separately
...
Each session renewal issues a PIN with fresh attempts, so without a limit a stolen session could keep guessing. The quota is separate from the one for renewals without a session, so neither can use up the other's.
2026-10-16 13:05:38 +02:00
André Duffeck
60832cc61b
Don't issue PINs for renewals with expired guest sessions
...
An expired session token now counts as no session, so the renewal only rotates the link.
2026-10-16 13:03:36 +02:00
André Duffeck
5e4d722f18
Make renewal mails without PINs work
2026-10-16 12:38:51 +02:00
micbar
2c3c1c27ac
docs: update unified Roles
2026-10-16 12:00:06 +02:00
Alex Ababii
14d9251a5a
Merge pull request #3704 from maki5/feat/authguest_rate_limit
...
feat(authguest): rate limited endpoints for guestlinks
2026-10-16 11:41:09 +02:00
Florian Schade
e1cfacb2dd
feat(collaboration): send DownloadUrl outside of secure view
2026-10-16 11:29:07 +02:00
Alex Ababii
6a527692ef
feat(authguest): bump libre-graph-api-go to latest main
2026-10-16 11:05:47 +02:00
Jannik Stehle
19f9da79f8
Merge pull request #3737 from opencloud-eu/fix/guest-link-app-provider-paths
...
fix(proxy): allow guest link auth for app open and new endpoints
2026-10-16 10:59:12 +02:00
Alex Ababii
f6a3ff09d8
feat(authguest): fixed tests after rebase
2026-10-16 10:34:34 +02:00
Alex Ababii
c9345db7f3
feat(authguest): fix codacy styling
2026-10-16 10:07:22 +02:00
Alex Ababii
e931d1ab25
feat(auhguest): upd renew quota limiting logic
2026-10-16 10:07:22 +02:00
Alex Ababii
7a7f43f889
feat(authguest): fix the renew sessionValid condition
2026-10-16 10:07:22 +02:00
Alex Ababii
7eac7db12c
feat(authguest): upd renewal flow to rely on sessionToken
2026-10-16 10:07:22 +02:00
Alex Ababii
4df88e7dc5
feat(authguest): fix README styling
2026-10-16 10:07:22 +02:00
Alex Ababii
dc59c536da
feat(authguest): upd error mappings
2026-10-16 10:07:22 +02:00
Alex Ababii
ddf388a058
feat(authguest): nonce and pin ttl are now using the same value
2026-10-16 10:07:22 +02:00
Alex Ababii
fd25c8c88d
feat(authguest): removed session token verification on renew endpoint
2026-10-16 10:07:21 +02:00
Alex Ababii
57e72213f7
feat(authguest): per share nonce cookie name
2026-10-16 10:01:56 +02:00
Alex Ababii
9d2c3d40fd
feat(authguest): fix codacy issues
2026-10-16 10:01:56 +02:00
Alex Ababii
6e6330f68c
feat(authguest): upd readme
2026-10-16 10:01:56 +02:00
Christian Richter