Dominik Schmidt 40f7aaa327 fix(graph): verify token scopes against the url path ...

The scope handlers know CS3 request types and url paths; handing them the
*http.Request made every restricted scope fail with a type assertion error.
Pass the path, like reva's own http auth interceptor, and allow the graph
drives surface in the public share scope.

The vendored reva change (checkGraphDrivesPath) needs a reva PR before this
can go anywhere.

2026-09-08 11:21:02 +02:00

..

auth.go

fix(graph): verify token scopes against the url path

2026-09-08 11:21:02 +02:00

path_lookup_test.go

docs(graph): frame colon paths as "encode segments" instead of a raw-colon edge case

2026-07-01 17:44:31 +02:00

path_lookup.go

docs(graph): frame colon paths as "encode segments" instead of a raw-colon edge case

2026-07-01 17:44:31 +02:00

requireadmin.go

chore(graph): add metrics for HTTP API and LDAP

2026-09-01 10:57:47 +02:00

token_test.go

graph: Move token middleware and return proper JSON response on error.

2023-03-06 10:24:44 +01:00

token.go

change module name

2025-01-13 09:58:18 +01:00