Dominik Schmidt b392f43662 feat(graph): tell password-required from wrong-password on public links ...

A public link stat that fails for the password came back as a generic 401
"Access token is empty", so a client could not tell "show the password
field" from "the password was wrong". The proxy now marks the two cases
(it holds the auth result) and the graph service renders them as distinct
odata codes, publicLinkPasswordRequired and publicLinkPasswordInvalid, the
way webdav distinguishes ERR_MISSING_BASIC_AUTH from ERR_INVALID_CREDENTIALS.

The distinction rides in the body, never a WWW-Authenticate: Basic header,
which would pop the browser's native auth dialog instead of the app's
password field. The shared header/token contract lives in pkg/middleware.

2026-09-08 11:21:02 +02:00

..

cs3_test.go

change module name

2025-01-13 09:58:18 +01:00

cs3.go

Use the opencloud reva from now on

2025-01-21 11:16:38 +01:00

errorcode_test.go

change module name

2025-01-13 09:58:18 +01:00

errorcode.go

feat(graph): tell password-required from wrong-password on public links

2026-09-08 11:21:02 +02:00