Commit Graph

22792 Commits

Author SHA1 Message Date
Pascal Bleser
df98358ddf groupware: swagger API documentation improvements
* add more documentation for properties

 * fixes after a bit of trial-and-error with go-swagger

 * fix email filter marshalling when there are no search criteria

 * introduce an apidoc.yml that contains Swagger data and is merged when
   generating the swagger.yml from sources
2026-02-27 14:46:42 +01:00
Pascal Bleser
ae1ceacbf5 Groupware improvements
* ensure that all the jmap responses contain the SessionState

 * implement missing errors that were marked as TODO

 * moved common functions from pkg/jmap and pkg/services/groupware to
   pkg/log and pkg/structs to commonalize them across both source trees

 * implement error handling for SetError occurences

 * Email: replace anonymous map[string]bool for mailbox rights with a
   MailboxRights struct, as the keys are well-defined, which allows for
   properly documenting them

 * introduce ObjectType as an "enum"

 * fix JSON marshalling and unmarshalling of EmailBodyStructure

 * move the swagger documentation structs from groupware_api.go to
   groupware_docs.go

 * fix: change verb for /groupware/accounts/*/vacation from POST to PUT
2026-02-27 14:46:42 +01:00
Pascal Bleser
bfbd2ce751 groupware: minor email searching response improvements + started implementing vacation response setting API 2026-02-27 14:46:42 +01:00
Pascal Bleser
8fe6d88420 groupware: add identities of all accounts to the index resource 2026-02-27 14:46:42 +01:00
Pascal Bleser
7cdd22fe8a groupware: fix email search, add variant that includes the full emails 2026-02-27 14:46:42 +01:00
Pascal Bleser
c6b18db02b groupware: fix email search, add variant that includes the full emails 2026-02-27 14:46:42 +01:00
Pascal Bleser
b339f62b33 Groupware: refactor jmap package, implement Email/set, EmailSubmission
* refactor the jmap package to split it into several files as the
   jmap.api.go file was becoming too unwieldy

 * refactor the Groupware handler function response to be a Response
   object, to be more future-proof and avoid adding more and more
   return parameters while handling "no content" response as well

 * more godoc for the JMAP model

 * add Email creation, updating, deleting (Email/set,
   EmailSubmission/set)

 * add endpoints
   - POST /accounts/{accountid}/messages
   - PATCH|PUT /accounts/{accountid}/messages/{messageid}
   - DELETE /accounts/{accountid}/messages/{messageid}
2026-02-27 14:46:42 +01:00
Pascal Bleser
a958ede3cc groupware: implement message search with snippets 2026-02-27 14:46:42 +01:00
Pascal Bleser
8d495c6482 groupware: blob streaming (upload and download) 2026-02-27 14:46:42 +01:00
Pascal Bleser
1cdfeb9209 groupware: more JMAP operations implementation 2026-02-27 14:46:42 +01:00
Pascal Bleser
7f3363d9f7 groupware: further implementation and improvements 2026-02-27 14:46:42 +01:00
Pascal Bleser
8c131ef10e upgrade Stalwart to 0.13.2 2026-02-27 14:46:42 +01:00
Pascal Bleser
b397cd461e refactored the Session object, refactored the services/groupware directory, and started Swagger documentation implementation 2026-02-27 14:46:42 +01:00
Pascal Bleser
0ba962bda1 groupware: refactoring the API mechanisms 2026-02-27 14:46:42 +01:00
Pascal Bleser
1b5932da07 groupware: implement JSON:API's error response format, with a revamped error handling in jmap and services/groupware 2026-02-27 14:46:42 +01:00
Pascal Bleser
1b8f17439e Refactor groupware service after ADR decision on the Groupware API
* after having decided that the Groupware API should be a standalone
   independent custom REST API that is using JMAP data models as much as
   possible,
 * removed Groupware APIs from the Graph service
 * moved Groupware implementation to the Groupware service, and
   refactored a few things accordingly
2026-02-27 14:46:42 +01:00
Pascal Bleser
b830e24239 Groupware and jmap: cleanup and API documentation 2026-02-27 14:46:42 +01:00
Pascal Bleser
a7f5ce0547 groupware: remove unneeded messages.go that was a remainder from an earlier implementation attempt, which also fixes compilation issues due to changes in main 2026-02-27 14:46:42 +01:00
Pascal Bleser
7c572f98bd opencloud_full: upgrade Stalwart to 0.12.5, and use the ghcr.io container repository to avoid Hub limits 2026-02-27 14:46:42 +01:00
Pascal Bleser
eca28fd996 Groupware improvements: refactoring, k6 tests
* refactored the models to be strongly typed with structs and mapstruct
   to decompose the dynamic parts of the JMAP payloads

 * externalized large JSON strings for tests into .json files under
   testdata/

 * added a couple of fantasy Graph groupware APIs to explore further
   options

 * added k6 scripts to test those graph/me/messages APIs, with a setup
   program to set up users in LDAP, fill their IMAP inbox, activate them
   in Stalwart, cleaning things up, etc...
2026-02-27 14:46:42 +01:00
Pascal Bleser
8b28e5312b fix Stalwart LDAP configuration 2026-02-27 14:46:42 +01:00
Pascal Bleser
04266bc8ab Use password policy overlay in LDAP and configure Stalwart to use it 2026-02-27 14:46:42 +01:00
Pascal Bleser
4a620a66ee upgrade Stalwart to 0.12.4 2026-02-27 14:46:42 +01:00
Pascal Bleser
05a3b8fc32 groupware: removed debugging logs 2026-02-27 14:46:42 +01:00
Pascal Bleser
482d81bc89 jwkset: remove debugging printlns 2026-02-27 14:46:42 +01:00
Pascal Bleser
5d67e7b515 auth-api: fix: was missing newly introduced metrics 2026-02-27 14:46:42 +01:00
Pascal Bleser
b09161cfcb groupware and jmap improvements and refactoring 2026-02-27 14:46:42 +01:00
Pascal Bleser
78264ed7c8 upgrade Stalwart to 0.12 2026-02-27 14:46:42 +01:00
Pascal Bleser
19725610c1 minor corrections to the Stalwart configuration 2026-02-27 14:46:42 +01:00
Pascal Bleser
75dac3645b Introduce a the auth-api service
* primitive implementation to demonstrate how it could work, still to
   be considered WIP at best

 * add new dependency: MicahParks/jwkset and MicahParks/keyfunc to
   retrieve the JWK set from KeyCloak to verify the signature of the
   JWTs sent as part of Bearer authentication in the /auth API

 * (minor) opencloud/.../service.go: clean up a logging statement that
   was introduced earlier to hunt down why the auth-api service was not
   being started
2026-02-27 14:46:41 +01:00
Pascal Bleser
bb2874177f add an auth-api service to make an exemplary implementation of an external authentication API for third party services such as Stalwart 2026-02-27 14:46:41 +01:00
Pascal Bleser
de4b154391 move services/groupware/pkg/jmap to pkg/jmap 2026-02-27 14:46:41 +01:00
Pascal Bleser
46aa800152 WIP: restructure the Jmap client, and implement the /me/messages Graph API endpoint with it 2026-02-27 14:46:41 +01:00
Pascal Bleser
f43880d75b add an OIDC Directory to Stalwart, requires exposing Keycloak port 8080 directly to access the userinfo endpoint using HTTP since the certificates in traefik are self-signed and end up being rejected by Stalwart with no option to bypass the certificate check 2026-02-27 14:46:41 +01:00
Pascal Bleser
116cecd84f rename Stalwart fallback admin username from 'admin' to 'mailadmin' since 'admin' exists as a regular user in LDAP and thus won't have access to the administration 2026-02-27 14:46:41 +01:00
Pascal Bleser
df5514a1ed add missing routing for /groupware (currently unprotected for testing) 2026-02-27 14:46:41 +01:00
Pascal Bleser
b12e0d5b29 WIP: initial implementation of the groupware service 2026-02-27 14:46:41 +01:00
Pascal Bleser
8c9a71a17d Add Stalwart container to the opencloud_full deployment, using the OpenLDAP container as a directory for user authentication 2026-02-27 14:46:41 +01:00
dependabot[bot]
6cdf229979 build(deps): bump github.com/kovidgoyal/imaging from 1.8.19 to 1.8.20
Bumps [github.com/kovidgoyal/imaging](https://github.com/kovidgoyal/imaging) from 1.8.19 to 1.8.20.
- [Release notes](https://github.com/kovidgoyal/imaging/releases)
- [Commits](https://github.com/kovidgoyal/imaging/compare/v1.8.19...v1.8.20)

---
updated-dependencies:
- dependency-name: github.com/kovidgoyal/imaging
  dependency-version: 1.8.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-26 18:38:29 +01:00
Mahdi Baghbani
d7cb432b4d fix(ocm): allow insecure tls for wayf discovery (#2404)
* fix(ocm): allow insecure tls for wayf discovery

Signed-off-by: Mahdi Baghbani <mahdi-baghbani@azadehafzar.io>
2026-02-26 14:44:38 +01:00
Florian Schade
b69b9cd569 fix: simplify subject.session key parsing 2026-02-25 14:02:09 +01:00
Florian Schade
e8ecbd7af1 refactor: make the logout mode private 2026-02-25 14:02:09 +01:00
Florian Schade
fd614eacf1 fix: use base64 record keys to prevent separator clashes with subjects or sessionIds that contain a dot 2026-02-25 14:02:09 +01:00
Florian Schade
910298aa05 chore: change naming 2026-02-25 14:02:09 +01:00
Florian Schade
7350050a05 test: add more backchannellogout tests 2026-02-25 14:02:09 +01:00
Florian Schade
f72e3f1e32 chore: cleanup backchannel logout pr for review 2026-02-25 14:02:09 +01:00
Florian Schade
0c62c45494 enhancement: document idp side-effects 2026-02-25 14:02:09 +01:00
Florian Schade
f6553498f6 enhancement: finalize backchannel logout 2026-02-25 14:02:09 +01:00
Christian Richter
6a0fd89475 refactor deletion
Co-authored-by: Jörn Dreyer <j.dreyer@opencloud.eu>
Co-authored-by: Michael Barz <m.barz@opencloud.eu>
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-02-25 14:02:09 +01:00
Christian Richter
cb38aaab16 create mapping in cache for subject => sessionid
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-02-25 14:02:09 +01:00