Commit Graph

374 Commits

Author SHA1 Message Date
David Christofas 358807fbbb Merge pull request #3955 from wkloucek/remove-unused-ocs-config-option
remove unused `OCS_STORAGE_USERS_DRIVER` configuration option
2022-06-13 13:35:46 +02:00
Willy Kloucek a319b17459 remove unused OCS_STORAGE_USERS_DRIVER configuration option 2022-06-13 11:30:28 +02:00
Willy Kloucek 68a6f43538 fix version info 2022-06-13 10:43:52 +02:00
David Christofas ee184a046f handle event container created in audit service 2022-06-10 12:08:49 +02:00
Christian Richter bea9f2cb76 Merge pull request #3925 from owncloud/improve-graph
add memberOf to /users endpoint and members to /groups endpoint
2022-06-09 15:21:14 +02:00
Ralf Haferkamp d6e695076d Rework default role provisioning
This reworks the assignment of the default role at login. The assignment
now only happens if settings service is reachable and the current user
does not have an assignment yet (we check for the NotFound status).
If the settings service returns an error other than 404, the
GetUserByClaims() (and with it the authentication) will also error out.

Closes: #3900
2022-06-09 14:36:29 +02:00
Ralf Haferkamp 15fabb155f Remove bootstrapping workaround for ListRoleAssignments
Previously ListRoleAssignments needed to be able to return the default
assignments when the metadata client was not initialized. This was added
in order to be able to bootstrap the metadata client (which caused a
call to ListRoleAssignments by itself). With the recent switch to a
separate user-provider and permissions service for the metadata storage
this no longer needed.
2022-06-09 14:36:29 +02:00
Christian Richter c4f7a36f29 incorporate requested changes
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:36:23 +02:00
Christian Richter c358540361 add memberOf slice to /user/{id} & members slice to /groups/{id} endpoint
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:36:23 +02:00
Christian Richter fc3737f0cf add groups to /users endpoint
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:35:14 +02:00
Benedikt Kulmann cdcfca268e Update web to v5.5.0-rc.9 for ocis beta.3 2022-06-08 12:34:12 +02:00
David Christofas 4470c045ed fix webdav URL of drive roots in graph API 2022-06-02 14:24:56 +02:00
Ralf Haferkamp 24178e381b Fix inconsistent env var naming for LDAP filter configuration
There was a naming inconsitency for the enviroment variables used to define
LDAP filters for user and groups queries. Some services used `LDAP_USER_FILTER`
while others used `LDAP_USERFILTER`. This is now changed to use `LDAP_USER_FILTER`
and `LDAP_GROUP_FILTER`

Closes: #3890
2022-06-01 15:35:08 +02:00
Jörn Friedrich Dreyer 45522e4fea Merge pull request #3891 from owncloud/addmissingdefaultconfig
add missing default config
2022-05-31 11:19:27 +00:00
Willy Kloucek f7473df54b fix test by using insecure ldap 2022-05-31 12:04:09 +02:00
Willy Kloucek bfbab26d85 fix multiple ldap insecure options 2022-05-31 10:53:00 +02:00
David Christofas b3569d615b Merge pull request #3888 from owncloud/graph-cacert
add config option to provide TLS certificate
2022-05-31 09:58:21 +02:00
David Christofas 0f23ce6bed add config option to provide TLS certificate 2022-05-30 17:04:14 +02:00
Ralf Haferkamp 082c66beb7 graph: Fix role-id extraction from token
We can't use ReadPlainFromOpaque here since the OpaqueEntry entry is
"json" encoded (not "plain").

Fixes: #3893
2022-05-30 16:18:57 +02:00
Jörn Friedrich Dreyer 1a16384eee add missing default config
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-30 12:44:39 +00:00
Ralf Haferkamp 690a2bd1db Use utlis function to void nil pointer panics
Co-authored-by: kobergj <juliankoberg@googlemail.com>
2022-05-24 17:39:01 +02:00
Ralf Haferkamp 0ec88ed5d2 Fix typo
Co-authored-by: David Christofas <dchristofas@posteo.de>
2022-05-24 17:39:01 +02:00
Ralf Haferkamp 38127757e4 Add user autoprovisioning via libreGraph
When removing the accounts service we lost the user autoprovision
feature. This re-introduces it. When autoprovisioning is enabled (via
PROXY_AUTOPROVISION_ACCOUNTS, as in the past) accounts that are not
resolvable via cs3 will be provsioned via the libregraph API.

Closes: #3540
2022-05-24 17:39:01 +02:00
Ralf Haferkamp d322e50167 Return "nameAlreadyExists" error properly
When trying to create a user that already exist return a proper
error, that clients can check for.
2022-05-24 17:39:01 +02:00
Ralf Haferkamp a6f05e761e Let graph auth middleware add the roleids to the context
They were also added by the ExtractAccountUUID for the /drives endpoint.
We'll need some on other endpoints as well (for automatic user
provisioning).
2022-05-24 17:39:01 +02:00
Ralf Haferkamp a755f23e55 fix env separator in config struct annotation 2022-05-24 17:39:01 +02:00
Benedikt Kulmann 43a55161a9 Bump web to 5.5.0-rc.8 2022-05-24 14:38:08 +02:00
Michael Barz 7c2e3201b7 Merge pull request #3854 from owncloud/update-deps
[full-ci] update reva and xattr
2022-05-24 09:28:54 +02:00
Michael Barz f1c17efb98 add productversion to ocs version 2022-05-24 08:46:32 +02:00
Michael Barz 3cae4fc8f9 Merge pull request #3850 from owncloud/increase-access-token-lifetime
Increase access token duration to 1 day
2022-05-23 19:39:30 +02:00
Michael Barz ac5738c3cd Merge pull request #3852 from owncloud/users-driver
add missing USERS_DRIVER env var
2022-05-23 19:39:15 +02:00
Michael Barz 894923fe33 Merge pull request #3805 from owncloud/fix-version
fix version for legacy clients
2022-05-23 17:39:36 +02:00
Jörn Friedrich Dreyer db88ba989b add missing USERS_DRIVER env var
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-23 15:09:42 +00:00
André Duffeck 211ac39a61 Fix keeping the index in sync when directories contain special chars 2022-05-23 15:28:45 +02:00
Benedikt Kulmann 49a666b74b Increase access token duration to 1 day 2022-05-23 11:34:27 +02:00
Michael Barz 7c6aecc8a2 parse legacy version too 2022-05-23 11:04:38 +02:00
Michael Barz a70dc22597 fix version in capabilities 2022-05-23 11:04:38 +02:00
Michael Barz a8b6c53dd9 fix version for legacy clients 2022-05-23 11:04:36 +02:00
Pascal Wengerter 3b140fb035 Bump web to v5.5.0-rc.7 2022-05-20 18:03:43 +02:00
Jörn Friedrich Dreyer a7f9e142c2 Merge pull request #3825 from owncloud/lico-cs3-update
IDP: allow using cs3 api to authenticate users
2022-05-20 12:24:06 +00:00
Jörn Friedrich Dreyer 9ac13e64b9 add missing godoc to make hound vJulian happy
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-20 11:00:39 +00:00
Jörn Friedrich Dreyer d56bbd60d1 return errors, clean up
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-20 10:32:47 +00:00
Willy Kloucek 0e8bd0a577 add OCIS_SYSTEM_USER_ID environment variable to the storage-system configuration 2022-05-19 15:07:29 +02:00
Jörn Friedrich Dreyer 1a872c875a update docs and changelog
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-19 11:25:21 +00:00
Jörn Friedrich Dreyer 08b80c2e7e keep ldap as default
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-19 10:55:35 +00:00
Phil Davis 8ece455e92 Merge pull request #3834 from owncloud/set-public-link-defaultname-capability
Set public link defaultname capability
2022-05-19 15:04:12 +05:45
Pascal Wengerter 582e0503da Supersede dependabot PRs 2022-05-19 10:40:08 +02:00
Pascal Wengerter 133682e6b9 Add formatting results 2022-05-19 10:36:23 +02:00
Pascal Wengerter 7f17338a69 Add public link defaultname to capabilities 2022-05-19 10:36:08 +02:00
Willy Kloucek 5f4cd98f1f Merge pull request #3831 from wkloucek/proxy-config-revamp
proxy config revamp
2022-05-19 10:32:10 +02:00