Commit Graph
5137 Commits
Author SHA1 Message Date
opencloudeu 61ae13a1fe [tx] updated from transifex 2026-10-20 23:22:29 +00:00
Alex ccb2ba4739 fix: show the lilac logo on the login page (#3773) 2026-10-20 22:08:31 +02:00
Florian Schade 208f1e8b33 Merge pull request #3760 from fschade/fix-frontend-content-search-capability
fix(frontend): report content search only when full-text search is enabled
2026-10-20 13:03:01 +02:00
Alex Ababii 3d0706ad4f Merge pull request #3758 from maki5/feat/guestlinks_space_share
guestlinks: auth-guest service is handling space shared events
2026-10-20 10:20:34 +02:00
Alex Ababii 821514d010 feat(guestauth): trigger ci 2026-10-20 09:17:37 +02:00
Andre Duffeck 3ad81e4d99 Merge pull request #3719 from opencloud-eu/feat/spaces-default-quota-capability
feat: expose the default project space quota in the capabilities
2026-10-20 09:11:31 +02:00
opencloudeu 9cc0dd6446 [tx] updated from transifex 2026-10-19 23:17:30 +00:00
Michael Barz a9a694cd74 Merge pull request #3738 from opencloud-eu/docs-unified-roles
docs: update unified Roles
2026-10-19 21:18:19 +02:00
Alexander Ackermann 79a4499ca8 refactor: read the default quota only from OC_SPACES_DEFAULT_QUOTA and deprecate GRAPH_SPACES_DEFAULT_QUOTA 2026-10-19 16:13:42 +02:00
Alexander Ackermann 6adeacf8ce feat: expose the default project space quota in the capabilities 2026-10-19 16:13:42 +02:00
Florian Schade 54f33437ff fix(frontend): report content search only when full-text search is enabled 2026-10-19 15:18:57 +02:00
Andre Duffeck 38262408d6 Merge pull request #3755 from aduffeck/guest-archive-download
Make archiver work with guest link auth
2026-10-19 15:04:16 +02:00
Alex Ababii 281f18e9fb feat(guestauth): handling space shared event 2026-10-19 13:40:07 +02:00
Alex Ababii 2425b7e2ff feat(guestauth): consume space shared event 2026-10-19 12:43:52 +02:00
Alex Ababii 6bb1f2e859 Merge pull request #3743 from maki5/fix/activitylog_display_guestuser_name
fix(activitylog): fix for guestuser display name in activity list
2026-10-19 11:39:18 +02:00
André Duffeck 855a7286d1 Make archiver work with guest link auth 2026-10-19 10:53:01 +02:00
Alex Ababii fc1a055997 Merge pull request #3745 from maki5/fix/authguest_readme
fix(authguest): fix diagram parsing in readme
2026-10-19 09:11:26 +02:00
opencloudeu 1d4308e36f [tx] updated from transifex 2026-10-17 23:16:56 +00:00
opencloudeu 6b50d80752 [tx] updated from transifex 2026-10-16 23:17:06 +00:00
Florian Schade 3cc47747af Merge pull request #3730 from fschade/feat-collaboration-checkfileinfo-gaps
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-16 17:05:49 +02:00
Alex Ababii 6ed4fd3fc1 fix(authguest): fix diagram parsing in readme 2026-10-16 16:09:33 +02:00
Alex Ababii 753524a22f fix(activitylog): fix for guestuser display name in activity list 2026-10-16 14:37:52 +02:00
Andre Duffeck 0deb1183d0 Merge pull request #3739 from aduffeck/guestlink-renewal-mail-without-pin
Make renewal mails without PINs work
2026-10-16 14:37:41 +02:00
André Duffeck cf60057d4a Raise the default cap for guest link renewals without a session to 50
Renewals without a session can happen up to 48 times a day, so a lower cap could be used up to lock the guest out.
2026-10-16 13:18:30 +02:00
André Duffeck b7fd066c5f Keep the newest guest link while it can still be redeemed
Renewals without a valid session only need the share id, so they no longer cancel a link the guest hasn't used yet.
2026-10-16 13:07:38 +02:00
André Duffeck 564e1c0ec7 Rate limit guest link renewals with a valid session separately
Each session renewal issues a PIN with fresh attempts, so without a limit a stolen session could keep guessing. The quota is separate from the one for renewals without a session, so neither can use up the other's.
2026-10-16 13:05:38 +02:00
André Duffeck 60832cc61b Don't issue PINs for renewals with expired guest sessions
An expired session token now counts as no session, so the renewal only rotates the link.
2026-10-16 13:03:36 +02:00
André Duffeck 5e4d722f18 Make renewal mails without PINs work 2026-10-16 12:38:51 +02:00
micbar 2c3c1c27ac docs: update unified Roles 2026-10-16 12:00:06 +02:00
Alex Ababii 14d9251a5a Merge pull request #3704 from maki5/feat/authguest_rate_limit
feat(authguest): rate limited endpoints for guestlinks
2026-10-16 11:41:09 +02:00
Florian Schade e1cfacb2dd feat(collaboration): send DownloadUrl outside of secure view 2026-10-16 11:29:07 +02:00
Alex Ababii f6a3ff09d8 feat(authguest): fixed tests after rebase 2026-10-16 10:34:34 +02:00
Alex Ababii c9345db7f3 feat(authguest): fix codacy styling 2026-10-16 10:07:22 +02:00
Alex Ababii e931d1ab25 feat(auhguest): upd renew quota limiting logic 2026-10-16 10:07:22 +02:00
Alex Ababii 7a7f43f889 feat(authguest): fix the renew sessionValid condition 2026-10-16 10:07:22 +02:00
Alex Ababii 7eac7db12c feat(authguest): upd renewal flow to rely on sessionToken 2026-10-16 10:07:22 +02:00
Alex Ababii 4df88e7dc5 feat(authguest): fix README styling 2026-10-16 10:07:22 +02:00
Alex Ababii dc59c536da feat(authguest): upd error mappings 2026-10-16 10:07:22 +02:00
Alex Ababii ddf388a058 feat(authguest): nonce and pin ttl are now using the same value 2026-10-16 10:07:22 +02:00
Alex Ababii fd25c8c88d feat(authguest): removed session token verification on renew endpoint 2026-10-16 10:07:21 +02:00
Alex Ababii 57e72213f7 feat(authguest): per share nonce cookie name 2026-10-16 10:01:56 +02:00
Alex Ababii 9d2c3d40fd feat(authguest): fix codacy issues 2026-10-16 10:01:56 +02:00
Alex Ababii 6e6330f68c feat(authguest): upd readme 2026-10-16 10:01:56 +02:00
Alex Ababii d8ab8dc7ee feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters 2026-10-16 10:01:55 +02:00
Alex Ababii 42a411c11a feat(authguest): nonce check for verifyPin call 2026-10-16 09:59:28 +02:00
Jannik Stehle 68cad133a4 fix: allow guest link auth for app open and new endpoints 2026-10-16 09:54:27 +02:00
Alex Ababii 985c39de1f feat(authguest): basica data structs and config for rate limiting 2026-10-16 09:32:46 +02:00
opencloudeu 40095460a1 [tx] updated from transifex 2026-10-15 23:29:52 +00:00
Andre Duffeck ddd0eda688 Merge pull request #3727 from aduffeck/guest-session-expiry
Return ExpiresAt when issueing a session token
2026-10-15 17:55:10 +02:00
Andre Duffeck 51e2192476 Merge pull request #3729 from opencloud-eu/feat/guest-role-definitions
fix: allow guests to list role definitions
2026-10-15 16:05:34 +02:00