David Christofas
358807fbbb
Merge pull request #3955 from wkloucek/remove-unused-ocs-config-option
...
remove unused `OCS_STORAGE_USERS_DRIVER` configuration option
2022-06-13 13:35:46 +02:00
Willy Kloucek
a319b17459
remove unused OCS_STORAGE_USERS_DRIVER configuration option
2022-06-13 11:30:28 +02:00
Willy Kloucek
68a6f43538
fix version info
2022-06-13 10:43:52 +02:00
David Christofas
ee184a046f
handle event container created in audit service
2022-06-10 12:08:49 +02:00
Christian Richter
bea9f2cb76
Merge pull request #3925 from owncloud/improve-graph
...
add memberOf to /users endpoint and members to /groups endpoint
2022-06-09 15:21:14 +02:00
Ralf Haferkamp
d6e695076d
Rework default role provisioning
...
This reworks the assignment of the default role at login. The assignment
now only happens if settings service is reachable and the current user
does not have an assignment yet (we check for the NotFound status).
If the settings service returns an error other than 404, the
GetUserByClaims() (and with it the authentication) will also error out.
Closes : #3900
2022-06-09 14:36:29 +02:00
Ralf Haferkamp
15fabb155f
Remove bootstrapping workaround for ListRoleAssignments
...
Previously ListRoleAssignments needed to be able to return the default
assignments when the metadata client was not initialized. This was added
in order to be able to bootstrap the metadata client (which caused a
call to ListRoleAssignments by itself). With the recent switch to a
separate user-provider and permissions service for the metadata storage
this no longer needed.
2022-06-09 14:36:29 +02:00
Christian Richter
c4f7a36f29
incorporate requested changes
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2022-06-09 14:36:23 +02:00
Christian Richter
c358540361
add memberOf slice to /user/{id} & members slice to /groups/{id} endpoint
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2022-06-09 14:36:23 +02:00
Christian Richter
fc3737f0cf
add groups to /users endpoint
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2022-06-09 14:35:14 +02:00
Benedikt Kulmann
cdcfca268e
Update web to v5.5.0-rc.9 for ocis beta.3
2022-06-08 12:34:12 +02:00
David Christofas
4470c045ed
fix webdav URL of drive roots in graph API
2022-06-02 14:24:56 +02:00
Ralf Haferkamp
24178e381b
Fix inconsistent env var naming for LDAP filter configuration
...
There was a naming inconsitency for the enviroment variables used to define
LDAP filters for user and groups queries. Some services used `LDAP_USER_FILTER`
while others used `LDAP_USERFILTER`. This is now changed to use `LDAP_USER_FILTER`
and `LDAP_GROUP_FILTER`
Closes : #3890
2022-06-01 15:35:08 +02:00
Jörn Friedrich Dreyer
45522e4fea
Merge pull request #3891 from owncloud/addmissingdefaultconfig
...
add missing default config
2022-05-31 11:19:27 +00:00
Willy Kloucek
f7473df54b
fix test by using insecure ldap
2022-05-31 12:04:09 +02:00
Willy Kloucek
bfbab26d85
fix multiple ldap insecure options
2022-05-31 10:53:00 +02:00
David Christofas
b3569d615b
Merge pull request #3888 from owncloud/graph-cacert
...
add config option to provide TLS certificate
2022-05-31 09:58:21 +02:00
David Christofas
0f23ce6bed
add config option to provide TLS certificate
2022-05-30 17:04:14 +02:00
Ralf Haferkamp
082c66beb7
graph: Fix role-id extraction from token
...
We can't use ReadPlainFromOpaque here since the OpaqueEntry entry is
"json" encoded (not "plain").
Fixes : #3893
2022-05-30 16:18:57 +02:00
Jörn Friedrich Dreyer
1a16384eee
add missing default config
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2022-05-30 12:44:39 +00:00
Ralf Haferkamp
690a2bd1db
Use utlis function to void nil pointer panics
...
Co-authored-by: kobergj <juliankoberg@googlemail.com >
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
0ec88ed5d2
Fix typo
...
Co-authored-by: David Christofas <dchristofas@posteo.de >
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
38127757e4
Add user autoprovisioning via libreGraph
...
When removing the accounts service we lost the user autoprovision
feature. This re-introduces it. When autoprovisioning is enabled (via
PROXY_AUTOPROVISION_ACCOUNTS, as in the past) accounts that are not
resolvable via cs3 will be provsioned via the libregraph API.
Closes : #3540
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
d322e50167
Return "nameAlreadyExists" error properly
...
When trying to create a user that already exist return a proper
error, that clients can check for.
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
a6f05e761e
Let graph auth middleware add the roleids to the context
...
They were also added by the ExtractAccountUUID for the /drives endpoint.
We'll need some on other endpoints as well (for automatic user
provisioning).
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
a755f23e55
fix env separator in config struct annotation
2022-05-24 17:39:01 +02:00
Benedikt Kulmann
43a55161a9
Bump web to 5.5.0-rc.8
2022-05-24 14:38:08 +02:00
Michael Barz
7c2e3201b7
Merge pull request #3854 from owncloud/update-deps
...
[full-ci] update reva and xattr
2022-05-24 09:28:54 +02:00
Michael Barz
f1c17efb98
add productversion to ocs version
2022-05-24 08:46:32 +02:00
Michael Barz
3cae4fc8f9
Merge pull request #3850 from owncloud/increase-access-token-lifetime
...
Increase access token duration to 1 day
2022-05-23 19:39:30 +02:00
Michael Barz
ac5738c3cd
Merge pull request #3852 from owncloud/users-driver
...
add missing USERS_DRIVER env var
2022-05-23 19:39:15 +02:00
Michael Barz
894923fe33
Merge pull request #3805 from owncloud/fix-version
...
fix version for legacy clients
2022-05-23 17:39:36 +02:00
Jörn Friedrich Dreyer
db88ba989b
add missing USERS_DRIVER env var
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2022-05-23 15:09:42 +00:00
André Duffeck
211ac39a61
Fix keeping the index in sync when directories contain special chars
2022-05-23 15:28:45 +02:00
Benedikt Kulmann
49a666b74b
Increase access token duration to 1 day
2022-05-23 11:34:27 +02:00
Michael Barz
7c6aecc8a2
parse legacy version too
2022-05-23 11:04:38 +02:00
Michael Barz
a70dc22597
fix version in capabilities
2022-05-23 11:04:38 +02:00
Michael Barz
a8b6c53dd9
fix version for legacy clients
2022-05-23 11:04:36 +02:00
Pascal Wengerter
3b140fb035
Bump web to v5.5.0-rc.7
2022-05-20 18:03:43 +02:00
Jörn Friedrich Dreyer
a7f9e142c2
Merge pull request #3825 from owncloud/lico-cs3-update
...
IDP: allow using cs3 api to authenticate users
2022-05-20 12:24:06 +00:00
Jörn Friedrich Dreyer
9ac13e64b9
add missing godoc to make hound vJulian happy
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2022-05-20 11:00:39 +00:00
Jörn Friedrich Dreyer
d56bbd60d1
return errors, clean up
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2022-05-20 10:32:47 +00:00
Willy Kloucek
0e8bd0a577
add OCIS_SYSTEM_USER_ID environment variable to the storage-system configuration
2022-05-19 15:07:29 +02:00
Jörn Friedrich Dreyer
1a872c875a
update docs and changelog
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2022-05-19 11:25:21 +00:00
Jörn Friedrich Dreyer
08b80c2e7e
keep ldap as default
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2022-05-19 10:55:35 +00:00
Phil Davis
8ece455e92
Merge pull request #3834 from owncloud/set-public-link-defaultname-capability
...
Set public link defaultname capability
2022-05-19 15:04:12 +05:45
Pascal Wengerter
582e0503da
Supersede dependabot PRs
2022-05-19 10:40:08 +02:00
Pascal Wengerter
133682e6b9
Add formatting results
2022-05-19 10:36:23 +02:00
Pascal Wengerter
7f17338a69
Add public link defaultname to capabilities
2022-05-19 10:36:08 +02:00
Willy Kloucek
5f4cd98f1f
Merge pull request #3831 from wkloucek/proxy-config-revamp
...
proxy config revamp
2022-05-19 10:32:10 +02:00