Commit Graph

95 Commits

Author SHA1 Message Date
David Christofas
a85644cddd enable signature auth in public share auth middleware 2021-12-09 17:47:36 +01:00
Willy Kloucek
62704ceb2e fix double "the" 2021-11-15 13:24:26 +01:00
Willy Kloucek
7dca7b4fae set only user oidc claim only if cs3 claim is userid 2021-11-15 10:31:07 +01:00
Willy Kloucek
d05df2f85e fix basic auth with custom user claim 2021-11-11 11:43:10 +01:00
Florian Schade
b416763599 fix(public-share): basic auth password prefix
fix wrong basic auth password prefix
2021-10-20 14:34:11 +02:00
Florian Schade
03de49e59b remove dev leftover 2021-10-18 15:48:09 +02:00
Florian Schade
0c66bdd6ad feat(public-token): get public-token from query string
retrieving public-token also from the query-string
2021-10-18 14:55:55 +02:00
David Christofas
fb0380820c enable archiver for public shares 2021-10-15 17:45:06 +02:00
David Christofas
5713fe81a4 add public share auth middleware 2021-10-15 16:48:43 +02:00
David Christofas
04a8ef7c35 fix the account resolver middleware 2021-09-29 10:19:12 +02:00
Ishank Arora
08c51ee8c8 Use reva's Authenticate method instead of spawning token managers 2021-09-21 15:50:19 +02:00
Willy Kloucek
b2d53b9ca1 always set cookie 2021-09-15 13:09:15 +02:00
Ralf Haferkamp
3a42fdc578 Move to go-chi/chi v5 2021-08-24 17:48:37 +02:00
A.Unger
46f0d6f7e4 remove dead code 2021-08-18 14:06:02 +02:00
Alex Unger
06fda516ec Update proxy/pkg/middleware/accesslog.go
Co-authored-by: David Christofas <dchristofas@owncloud.com>
2021-08-18 14:03:19 +02:00
A.Unger
0f0d305f6d linter: fix var name 2021-08-18 11:25:44 +02:00
A.Unger
1dd4644370 fix requestid 2021-08-18 11:10:50 +02:00
David Christofas
ed85fedf1a update github.com/coreos/go-oidc to version 3.0.0 2021-08-13 09:55:17 +02:00
David Christofas
eacdb8fa2f Merge pull request #2386 from owncloud/switch-jwt-lib
switch jwt library
2021-08-12 17:24:57 +02:00
David Christofas
b8150f25b8 switch jwt library
The old library github.com/dgrijalva/jwt-go is now unmaintained and was replaced by the community maintained fork github.com/golang-jwt/jwt
2021-08-12 16:53:17 +02:00
Jörn Friedrich Dreyer
55aacdea13 update reva to ec4099da
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-08-12 11:08:10 +00:00
Jörn Friedrich Dreyer
c3951d67c8 forward basic auth to OpenID connect token authentication endpoint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-26 11:12:33 +00:00
Jörn Friedrich Dreyer
bea986fe26 pass only request instead of context
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 09:03:14 +00:00
Willy Kloucek
a0dce56480 use cookie to enforce routing for regex and claim selector 2021-07-23 08:38:55 +00:00
Jörn Friedrich Dreyer
cb70f4882f add todo for x-access-header handling
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:33:18 +00:00
Jörn Friedrich Dreyer
4385d3dacb add RegexSelector
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:22:40 +00:00
Jörn Friedrich Dreyer
40c8031441 add claims policy selector
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:07:17 +00:00
Jörn Friedrich Dreyer
2293403d45 use errors.Is()
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-22 16:35:31 +00:00
Jörn Friedrich Dreyer
1f3e963c29 use claims map instead of struct
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-22 09:20:36 +00:00
Jörn Friedrich Dreyer
b148faada6 Merge pull request #2294 from owncloud/fix-trashbin-expected-failures
Fix Trashbin Expected Failures
2021-07-21 20:59:43 +02:00
A.Unger
74696dbd36 remove redundant line 2021-07-19 13:29:12 +02:00
Jörn Friedrich Dreyer
8c7f1f01ff do not try to add the selected policy to the context
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-14 20:45:38 +00:00
Jörn Friedrich Dreyer
1dc7aac6fd proxy access log
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-14 13:14:27 +00:00
A.Unger
7ab586b2ab proxy is now aware of webdav responses 2021-07-13 15:38:44 +02:00
A.Unger
bfdcc0180c fix 230, 231 - first draft 2021-07-13 14:33:24 +02:00
A.Unger
ac49348b41 fix 215, 216 - first draft 2021-07-13 14:29:26 +02:00
Ishank Arora
29c5cb627a Update scope usage and add Changes for lightweight accounts 2021-07-13 13:03:06 +02:00
Michael Barz
34e0877df7 Merge pull request #1951 from ishank011/uid-gid-user-object
Use CS3 user object fields to store UID and GID
2021-06-25 10:06:14 +02:00
Ishank Arora
6168ee7095 Use CS3 user object fields to store UID and GID 2021-06-16 18:05:40 +02:00
Willy Kloucek
ed94da5104 ignore authentication header on status.php 2021-06-16 16:59:11 +02:00
David Christofas
f6ac50244b update invocations of MintToken and DismantleToken 2021-05-11 14:18:43 +02:00
David Christofas
c532073dd1 remove JWT from logs
secrets should not be exposed in the logs
2021-03-03 15:30:11 +01:00
David Christofas
cfcd4b5992 resolve linter issues 2021-02-26 14:24:25 +01:00
David Christofas
7ad38d7757 fix token cache TTL
The TTL was supplied to the middleware as a duration and then in that middleware multiplied by `time.Second` again. Durations should not be multiplied because they result in unintended values.
```go
	time.Second * 1 = 1s
	time.Second * time.Second = 277777h46m40s
```
2021-02-22 18:40:15 +01:00
Pascal Wengerter
d7b1ecb3dc Change (ocis,OCIS) to oCIS, unify GitHub branding 2021-01-28 00:32:47 +00:00
Florian Schade
af870e005e add more tests and benchmark for cache
refactor cache to use atomic uint
2021-01-19 23:23:41 +01:00
Florian Schade
f13530425a move cache to sync package
rollback indexer map
use sync.pool for cache entries
add tests for cache
remove main locks from nrwmutex and use sync.map and sync.pool instead
bump dockerfile go version
2021-01-19 23:23:41 +01:00
Florian Schade
a02fb890f7 remove locking from accounts service
add a cached named rwlock pkg
use sync.map in the cache pkg
use named rwlock in indexer pkg
use sync.map in indexer pkg
remove husky
2021-01-19 23:23:41 +01:00
Ilja Neumann
cd2eb0e39b Accounts UserBackend tests 2020-12-22 17:27:55 +01:00
Ilja Neumann
1b29e56d12 account_resolver_test.go 2020-12-22 16:16:57 +01:00