mirror/opencloud
1
0 Fork 0
mirror of https://github.com/opencloud-eu/opencloud.git synced 2026-09-19 10:17:41 -04:00
Code Issues Packages Projects Releases Wiki Activity
23,853 Commits 110 Branches 75 Tags
f28bc9dbc0d8774f34ce82cdabfb3d791ee7f71b
Commit Graph
23853 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Ababii f28bc9dbc0 chore(graph): add config knob to disable/enable guest invites 2026-09-17 16:29:27 +02:00
Ralf Haferkamp f0416d9ff8 chore(graph): use existing constants for user type 2026-09-17 16:29:27 +02:00
André Duffeck 0bf63ac6fd feat(graph): Add support creating guest(mail) permissions 2026-09-17 16:29:27 +02:00
Benedikt Kulmann 071d8594c4 Merge pull request #3503 from opencloud-eu/fix-audit-log-docu 
[SKIP CI] fix: add file_read documentation to audit log docu
 2026-09-17 07:39:59 +02:00
dependabot[bot] 14edb2d449 build(deps): bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 
Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.6.2 to 0.6.3.
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](https://github.com/prometheus/client_model/compare/v0.6.2...v0.6.3)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-16 17:30:54 +02:00
Alex Ababii a419485391 upd trash bin cli commands flags 2026-09-16 16:44:51 +02:00
Alex Ababii 43385ba6dc document params for thrash bin cli commands 2026-09-16 16:44:51 +02:00
Pascal Wengerter 002a2e43fb chore: regenerate mockery outputs 2026-09-16 14:57:41 +02:00
Pascal Wengerter dc5821eb3d fix: support Go 1.27 code generation 2026-09-16 14:57:41 +02:00
dependabot[bot] ef5892d058 build(deps): bump github.com/shamaton/msgpack/v2 from 2.4.1 to 2.4.2 
Bumps [github.com/shamaton/msgpack/v2](https://github.com/shamaton/msgpack) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/shamaton/msgpack/releases)
- [Changelog](https://github.com/shamaton/msgpack/blob/v2.4.2/CHANGELOG.md)
- [Commits](https://github.com/shamaton/msgpack/compare/v2.4.1...v2.4.2)

---
updated-dependencies:
- dependency-name: github.com/shamaton/msgpack/v2
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-16 14:14:50 +02:00
Pascal Bleser 9f6ea88db5 chore(graph): use chi HTTP response wrapper instead of a homegrown one 
* in the graph service's metrics, we use a homegrown response writer
   struct implementation to capture the status of the next handler's
   response: instead, use chi's implementation which is more
   sophisticated and battle tested
 2026-09-16 13:57:42 +02:00
Thomas Schweiger 5efded002a fix: add file_read documentation to audit log docu 2026-09-16 13:34:06 +02:00
Jörn Friedrich Dreyer 07a089f51d Merge pull request #3428 from opencloud-eu/dependabot/go_modules/go.opentelemetry.io/otel/exporters/stdout/stdouttrace-1.46.0 
build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.45.0 to 1.46.0
 2026-09-16 13:01:39 +02:00
dependabot[bot] ecb7924c7b build(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.10.1 to 1.10.2.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.10.1...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-16 12:52:41 +02:00
Andre Duffeck ed488f9647 Merge pull request #3543 from aduffeck/do-not-timeout 
Remove the timeout when reindexing spaces
 2026-09-16 12:36:16 +02:00
Alex Ababii cb6ba6d536 Merge pull request #3533 from maki5/fix/auto_accept_shares 
fix(shares): not auto accepting shares created by guest users
 2026-09-16 11:53:14 +02:00
Alex Ababii b6072317c9 fix tests 2026-09-16 11:08:59 +02:00
Alex Ababii 9267286f49 upd reponse status for patchMe method on not allowed changes 2026-09-16 11:08:59 +02:00
Alex Ababii 2866cc7ee4 fix PatchMe method to prevent password change 2026-09-16 11:08:59 +02:00
zerox80andRalf Haferkamp e6699f31f1 Update services/proxy/README.md 
Co-authored-by: Ralf Haferkamp <ralf@h4kamp.de>
 2026-09-16 10:15:56 +02:00
zerox80 2d22a2cf07 fix(oidc): reject invalid audience settings during client setup 2026-09-16 10:15:56 +02:00
zerox80 0bcbb61339 docs(proxy): clarify IDP audience setup [docs-only] 2026-09-16 10:15:56 +02:00
zerox80 012d73c48e docs(proxy): document OIDC access token audience validation 2026-09-16 10:15:56 +02:00
zerox80 86d71dcdc3 feat(proxy): configure and enforce OIDC access token audiences 2026-09-16 10:15:56 +02:00
zerox80 6f85ee5296 feat(oidc): add access token audience validation 2026-09-16 10:15:56 +02:00
André Duffeck fe5fd66cb6 Remove the timeout when reindexing spaces 
This was supposed to be removed with #3213 but was either missed or lost
in a rebase.
 2026-09-16 10:14:52 +02:00
dependabot[bot] 50546417e9 build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace 
Bumps [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://github.com/open-telemetry/opentelemetry-go) from 1.45.0 to 1.46.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.45.0...v1.46.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-15 13:29:27 +00:00
Ralf Haferkamp a6f8777001 cleanup: remove unused calens based changelog artifacts 
This seemed to trigger various coding agents to repeatedly re-create
and populate the "changelog/unreleased" directory.
 2026-09-15 14:38:31 +02:00
OpenCloud Devops 75e636652d 🎉 Release 8.0.0 (#3405) 
* 🎉 Release 7.5.1

* 🎉 Release 7.5.1

* 🎉 Release 7.5.1

* 🎉 Release 7.5.1

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 7.6.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0

* 🎉 Release 8.0.0
v8.0.0 		2026-09-15 14:18:33 +02:00
Alex Ababii 9374a6ba79 not auto accepting shares created by guest users 2026-09-15 13:53:28 +02:00
Viktor Scharf 92560dbbdb [full-ci] chore: bump reva to 2.50.0 (#3531) 
* chore: bump reva to 2.50.0

* increase timeout for extract properties tests
 2026-09-15 10:13:55 +02:00
Viktor Scharf bf56a57f90 [full-ci] chore: bump web to v8.0.0. set introduction version v.8.0.0 (#3528) 
* [full-ci] chore: bump web to v8.0.0

* Update Apache Tika image version to 4.1.0-SNAPSHOT
 2026-09-15 10:06:52 +02:00
Sawjan Gurung a40e0666e9 chore: group watchfs test pipelines (#3532) 
Signed-off-by: Saw-jan <saw.jan.grg3e@gmail.com>
 2026-09-15 09:30:13 +02:00
Jörn Friedrich Dreyer a065c9ee19 Merge pull request #3525 from opencloud-eu/ci/minio-mc-replace-image 
ci: replace minio image
 2026-09-14 14:48:44 +02:00
v.scharf ee1deeef97 delete install zip- already in image 2026-09-14 13:35:18 +02:00
v.scharf fbcf2d683b ci: replace minio image 2026-09-14 12:58:45 +02:00
Viktor ScharfandFlorian Schade 35e4d4a3d6 api-test: retry token refresh on transient IDP failures (#3507) 
* api-test: retry token refresh on transient IDP failures

* Fix retry condition in token exchange logic

* test: keep the retry limit a limit and the refresh fallback to exceptions

---------

Co-authored-by: Florian Schade <f.schade@icloud.com>
 2026-09-11 14:56:57 +02:00
Alex Ababii 348890dda2 fix(test): removeAccessToSpace test helper (#3511) 
* fix removeAccessToSpace test helper

* fix gherkin link
 2026-09-11 11:58:00 +02:00
Florian Schade de37922513 Merge pull request #3510 from opencloud-eu/fix/bleve-path-performance 
fix(search): hierarchy tokenizer for bleve path fields
 2026-09-11 11:55:04 +02:00
Ralf Haferkamp a256da502b fix(proxy): suppress auth challenges for failed signed URLs 
Do not set WWW-Authenticate headers when an active signed URL
authentication attempt fails. Signed URL clients cannot respond to Basic
or Bearer challenges, and advertising them may trigger unintended
authentication prompts.

Keep returning 401 Unauthorized while preserving the existing challenge
behavior for unsigned requests and disabled signed URL mechanisms.
 2026-09-11 11:51:01 +02:00
Sigurd Aaknes 7016020dbf fix: oidcHTTPClient now use proxy from environment 2026-09-11 11:50:49 +02:00
Dominik Schmidt 9cc7757221 feat(search): hierarchy tokenizer for bleve path fields 
Path was a keyword, so the descendant lookup behind delete/move/restore/purge, the scoped search and the KQL path predicate expanded into one term searcher per descendant and OOM-killed the server on large folders (#1269, #3469).

Path is now analyzed into its ancestor prefixes, like path_hierarchy in OpenSearch: ./a/b.txt becomes ., ./a, ./a/b.txt. A folder's descendants are every document carrying the folder's path as a term, so all three call sites are a single term query. Schema 4 -> 5, v4 never shipped.

The same tokenizer with tag_depth is registered as the geohash analyzer, so #3272 can add its geohash field without another schema change.
 2026-09-10 18:42:31 +00:00
Viktor Scharf e503c2c5eb add insecure to search reindex (#3505) 2026-09-10 16:29:37 +02:00
Viktor Scharf 994086ceb2 add search retry to all serach tests (#3500) 2026-09-09 15:21:23 +02:00
Dominik Schmidt b18618ab4a Merge pull request #3484 from opencloud-eu/fix/tika-embedded-facet-leak 
fix(search): extract facets from the main tika document only
 2026-09-08 15:52:21 +02:00
Dominik Schmidt 65f19b5d71 fix(thumbnails): close rejected vips ref, map oversized convert error to forbidden 2026-09-08 15:28:37 +02:00
Dominik Schmidt 7f687ea288 fix(thumbnails): bound declared image dimensions before decoding 
The imaging build decodes the full pixel buffer from the header-declared
dimensions before the existing MaxInputWidth/MaxInputHeight guard runs, so a
tiny crafted file whose header declares huge dimensions forces a multi-GB
allocation and can OOM the worker. Read the header with DecodeConfig and reject
oversized sources before the decode allocates, in both the imaging and vips
builds, and thread the limit through the audio cover-art and geogebra decoders
that decode a second attacker-controlled image.
 2026-09-08 15:28:37 +02:00
Dominik Schmidt be83ed19e3 fix(search): take extraction facets from the main document only 
The recursive tika response lists the file first, then its embedded
resources (cover art, thumbnails, the clip appended to a motion photo).
The loop applied getImage/getPhoto/getLocation/getAudio/getLivePhoto to
every part, so an mp3's embedded cover art leaked a 200x200 image facet
onto the track (and an embedded EXIF image would leak photo/location).
Read those facets from metas[0] only, like the video facet already does;
the loop now only concatenates title/content and detects the motion
photo clip.
 2026-09-08 14:52:35 +02:00
Dominik Schmidt b5cb1cd83b test(search): re-search until the expected files are in the result (#3488) 
Indexing of newly uploaded resources is asynchronous; the search step
slept a fixed 10s and searched once, so under load a just-uploaded file
was missing from the result and the following assertion failed. The
search step now remembers its query, and new eventually-contain steps
re-run the search until the expected entries are present (or the
WaitHelper timeout elapses), then assert as before. contentSearch
scenarios use them for their positive assertions; the exact-count check
runs after the expected entries have appeared.
 2026-09-08 14:50:49 +02:00
zerox80 9797ee903f fix(config): correct pending version annotations 
Use the supported %%NEXT%% marker for seven graph and policies settings so the environment annotation check passes.
 2026-09-08 14:40:40 +02:00