Dominik Schmidt
de467d7dd8
feat(webdav): write a thumbnail in the type the source maps to
...
A source type maps onto the type its thumbnail is returned in, and that
type is asked for by the name the generator knows it under. The answer
carries that type whether it was just generated or came from the cache,
which is also what the cache key says.
2026-10-19 14:57:35 +02:00
Dominik Schmidt
0f734ac32c
fix(webdav): type the upload part and answer the small things
...
The multipart part carries the source's own type, because imagor's upload
loader accepts image/* only. A public link that needs a password is a 404 again, a preview carries
nosniff and a content length, and the input size limit is read with reva's
bytesize again.
2026-10-19 14:57:35 +02:00
Dominik Schmidt
4c0768cb83
fix(webdav): name the thumbnail config fields after what they configure
...
The yaml keys stay as they are, so a config file written against them keeps
working, and OC_DISABLE_PREVIEWS is back without disabling search.
2026-10-19 14:57:35 +02:00
Dominik Schmidt
95fcc4c623
fix(webdav): snap each thumbnail axis onto a ladder of edge lengths
...
Each axis is rounded up on its own, so a square request can no longer land
in a landscape box, and the cache is keyed on the snapped box.
2026-10-19 14:57:35 +02:00
Jörn Friedrich Dreyer
203708474e
refactor(thumbnails): remove the pull-based pipeline
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2026-10-19 14:57:35 +02:00
Jörn Friedrich Dreyer
81d0a86c35
refactor(webdav): drive the thumbnail workflow via the push-based generator
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2026-10-19 14:57:35 +02:00
Jörn Friedrich Dreyer
924d7428ed
feat(thumbnails): add imagor-compatible push-based thumbnail endpoint
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2026-10-19 14:56:58 +02:00
Alex Ababii
6bb1f2e859
Merge pull request #3743 from maki5/fix/activitylog_display_guestuser_name
...
fix(activitylog): fix for guestuser display name in activity list
2026-10-19 11:39:18 +02:00
Alex Ababii
fc1a055997
Merge pull request #3745 from maki5/fix/authguest_readme
...
fix(authguest): fix diagram parsing in readme
2026-10-19 09:11:26 +02:00
opencloudeu
1d4308e36f
[tx] updated from transifex
2026-10-17 23:16:56 +00:00
opencloudeu
6b50d80752
[tx] updated from transifex
2026-10-16 23:17:06 +00:00
Florian Schade
3cc47747af
Merge pull request #3730 from fschade/feat-collaboration-checkfileinfo-gaps
...
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-16 17:05:49 +02:00
Alex Ababii
6ed4fd3fc1
fix(authguest): fix diagram parsing in readme
2026-10-16 16:09:33 +02:00
Alex Ababii
753524a22f
fix(activitylog): fix for guestuser display name in activity list
2026-10-16 14:37:52 +02:00
Andre Duffeck
0deb1183d0
Merge pull request #3739 from aduffeck/guestlink-renewal-mail-without-pin
...
Make renewal mails without PINs work
2026-10-16 14:37:41 +02:00
André Duffeck
cf60057d4a
Raise the default cap for guest link renewals without a session to 50
...
Renewals without a session can happen up to 48 times a day, so a lower cap could be used up to lock the guest out.
2026-10-16 13:18:30 +02:00
André Duffeck
b7fd066c5f
Keep the newest guest link while it can still be redeemed
...
Renewals without a valid session only need the share id, so they no longer cancel a link the guest hasn't used yet.
2026-10-16 13:07:38 +02:00
André Duffeck
564e1c0ec7
Rate limit guest link renewals with a valid session separately
...
Each session renewal issues a PIN with fresh attempts, so without a limit a stolen session could keep guessing. The quota is separate from the one for renewals without a session, so neither can use up the other's.
2026-10-16 13:05:38 +02:00
André Duffeck
60832cc61b
Don't issue PINs for renewals with expired guest sessions
...
An expired session token now counts as no session, so the renewal only rotates the link.
2026-10-16 13:03:36 +02:00
André Duffeck
5e4d722f18
Make renewal mails without PINs work
2026-10-16 12:38:51 +02:00
Alex Ababii
14d9251a5a
Merge pull request #3704 from maki5/feat/authguest_rate_limit
...
feat(authguest): rate limited endpoints for guestlinks
2026-10-16 11:41:09 +02:00
Florian Schade
e1cfacb2dd
feat(collaboration): send DownloadUrl outside of secure view
2026-10-16 11:29:07 +02:00
Alex Ababii
f6a3ff09d8
feat(authguest): fixed tests after rebase
2026-10-16 10:34:34 +02:00
Alex Ababii
c9345db7f3
feat(authguest): fix codacy styling
2026-10-16 10:07:22 +02:00
Alex Ababii
e931d1ab25
feat(auhguest): upd renew quota limiting logic
2026-10-16 10:07:22 +02:00
Alex Ababii
7a7f43f889
feat(authguest): fix the renew sessionValid condition
2026-10-16 10:07:22 +02:00
Alex Ababii
7eac7db12c
feat(authguest): upd renewal flow to rely on sessionToken
2026-10-16 10:07:22 +02:00
Alex Ababii
4df88e7dc5
feat(authguest): fix README styling
2026-10-16 10:07:22 +02:00
Alex Ababii
dc59c536da
feat(authguest): upd error mappings
2026-10-16 10:07:22 +02:00
Alex Ababii
ddf388a058
feat(authguest): nonce and pin ttl are now using the same value
2026-10-16 10:07:22 +02:00
Alex Ababii
fd25c8c88d
feat(authguest): removed session token verification on renew endpoint
2026-10-16 10:07:21 +02:00
Alex Ababii
57e72213f7
feat(authguest): per share nonce cookie name
2026-10-16 10:01:56 +02:00
Alex Ababii
9d2c3d40fd
feat(authguest): fix codacy issues
2026-10-16 10:01:56 +02:00
Alex Ababii
6e6330f68c
feat(authguest): upd readme
2026-10-16 10:01:56 +02:00
Alex Ababii
d8ab8dc7ee
feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters
2026-10-16 10:01:55 +02:00
Alex Ababii
42a411c11a
feat(authguest): nonce check for verifyPin call
2026-10-16 09:59:28 +02:00
Jannik Stehle
68cad133a4
fix: allow guest link auth for app open and new endpoints
2026-10-16 09:54:27 +02:00
Alex Ababii
985c39de1f
feat(authguest): basica data structs and config for rate limiting
2026-10-16 09:32:46 +02:00
opencloudeu
40095460a1
[tx] updated from transifex
2026-10-15 23:29:52 +00:00
Andre Duffeck
ddd0eda688
Merge pull request #3727 from aduffeck/guest-session-expiry
...
Return ExpiresAt when issueing a session token
2026-10-15 17:55:10 +02:00
Andre Duffeck
51e2192476
Merge pull request #3729 from opencloud-eu/feat/guest-role-definitions
...
fix: allow guests to list role definitions
2026-10-15 16:05:34 +02:00
Andre Duffeck
a303d7ff84
Merge pull request #3723 from aduffeck/send-guestlink-renewal-emails
...
Add email notifications when a guest link has been renewed
2026-10-15 13:43:49 +02:00
Jannik Stehle
a608418678
fix: allow guests to list role definitions
...
Shared drive items only reference role ids, so web needs the role
definitions to resolve the guest's share permissions.
2026-10-15 11:57:13 +02:00
Florian Schade
09dba5bcaa
feat(collaboration): close the CheckFileInfo gaps for the office apps
2026-10-15 11:42:06 +02:00
Florian Schade
4086fad778
Merge pull request #3724 from opencloud-eu/fix-nats-checks
...
fix: nats checks were missing the configured auth
2026-10-15 11:20:01 +02:00
André Duffeck
989a2e9f30
Add email notifications when a guest link has been renewed
...
The notifications service now consumes the GuestTokenRenewed event and
mails the new guest link together with the one-time PIN to the guest.
The created and renewed mails share one code path; GuestTokenRenewed
carries no resource name, so the resource is stat'ed for it.
2026-10-15 10:35:10 +02:00
André Duffeck
a230d7e193
Return ExpiresAt when issueing a session token
2026-10-15 10:34:00 +02:00
Julian Koberg
059e9029bc
fix: adjust to comments from CR
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 15b1c38e386c1e05ccea6a5f77fbca9786a52c87)
2026-10-15 09:24:22 +02:00
Julian Koberg
63028f2ace
feat: add cli command to test the blobstore
...
Signed-off-by: Julian Koberg <julian.koberg@kiteworks.com >
(cherry picked from commit 1d2c329e66db9a406370554d91ce3951ec537ace)
2026-10-15 09:24:22 +02:00
opencloudeu
5b267fdebd
[tx] updated from transifex
2026-10-14 23:16:59 +00:00
Dominik Schmidt