Commit Graph

374 Commits

Author SHA1 Message Date
David Christofas
358807fbbb Merge pull request #3955 from wkloucek/remove-unused-ocs-config-option
remove unused `OCS_STORAGE_USERS_DRIVER` configuration option
2022-06-13 13:35:46 +02:00
Willy Kloucek
a319b17459 remove unused OCS_STORAGE_USERS_DRIVER configuration option 2022-06-13 11:30:28 +02:00
Willy Kloucek
68a6f43538 fix version info 2022-06-13 10:43:52 +02:00
David Christofas
ee184a046f handle event container created in audit service 2022-06-10 12:08:49 +02:00
Christian Richter
bea9f2cb76 Merge pull request #3925 from owncloud/improve-graph
add memberOf to /users endpoint and members to /groups endpoint
2022-06-09 15:21:14 +02:00
Ralf Haferkamp
d6e695076d Rework default role provisioning
This reworks the assignment of the default role at login. The assignment
now only happens if settings service is reachable and the current user
does not have an assignment yet (we check for the NotFound status).
If the settings service returns an error other than 404, the
GetUserByClaims() (and with it the authentication) will also error out.

Closes: #3900
2022-06-09 14:36:29 +02:00
Ralf Haferkamp
15fabb155f Remove bootstrapping workaround for ListRoleAssignments
Previously ListRoleAssignments needed to be able to return the default
assignments when the metadata client was not initialized. This was added
in order to be able to bootstrap the metadata client (which caused a
call to ListRoleAssignments by itself). With the recent switch to a
separate user-provider and permissions service for the metadata storage
this no longer needed.
2022-06-09 14:36:29 +02:00
Christian Richter
c4f7a36f29 incorporate requested changes
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:36:23 +02:00
Christian Richter
c358540361 add memberOf slice to /user/{id} & members slice to /groups/{id} endpoint
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:36:23 +02:00
Christian Richter
fc3737f0cf add groups to /users endpoint
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:35:14 +02:00
Benedikt Kulmann
cdcfca268e Update web to v5.5.0-rc.9 for ocis beta.3 2022-06-08 12:34:12 +02:00
David Christofas
4470c045ed fix webdav URL of drive roots in graph API 2022-06-02 14:24:56 +02:00
Ralf Haferkamp
24178e381b Fix inconsistent env var naming for LDAP filter configuration
There was a naming inconsitency for the enviroment variables used to define
LDAP filters for user and groups queries. Some services used `LDAP_USER_FILTER`
while others used `LDAP_USERFILTER`. This is now changed to use `LDAP_USER_FILTER`
and `LDAP_GROUP_FILTER`

Closes: #3890
2022-06-01 15:35:08 +02:00
Jörn Friedrich Dreyer
45522e4fea Merge pull request #3891 from owncloud/addmissingdefaultconfig
add missing default config
2022-05-31 11:19:27 +00:00
Willy Kloucek
f7473df54b fix test by using insecure ldap 2022-05-31 12:04:09 +02:00
Willy Kloucek
bfbab26d85 fix multiple ldap insecure options 2022-05-31 10:53:00 +02:00
David Christofas
b3569d615b Merge pull request #3888 from owncloud/graph-cacert
add config option to provide TLS certificate
2022-05-31 09:58:21 +02:00
David Christofas
0f23ce6bed add config option to provide TLS certificate 2022-05-30 17:04:14 +02:00
Ralf Haferkamp
082c66beb7 graph: Fix role-id extraction from token
We can't use ReadPlainFromOpaque here since the OpaqueEntry entry is
"json" encoded (not "plain").

Fixes: #3893
2022-05-30 16:18:57 +02:00
Jörn Friedrich Dreyer
1a16384eee add missing default config
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-30 12:44:39 +00:00
Ralf Haferkamp
690a2bd1db Use utlis function to void nil pointer panics
Co-authored-by: kobergj <juliankoberg@googlemail.com>
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
0ec88ed5d2 Fix typo
Co-authored-by: David Christofas <dchristofas@posteo.de>
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
38127757e4 Add user autoprovisioning via libreGraph
When removing the accounts service we lost the user autoprovision
feature. This re-introduces it. When autoprovisioning is enabled (via
PROXY_AUTOPROVISION_ACCOUNTS, as in the past) accounts that are not
resolvable via cs3 will be provsioned via the libregraph API.

Closes: #3540
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
d322e50167 Return "nameAlreadyExists" error properly
When trying to create a user that already exist return a proper
error, that clients can check for.
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
a6f05e761e Let graph auth middleware add the roleids to the context
They were also added by the ExtractAccountUUID for the /drives endpoint.
We'll need some on other endpoints as well (for automatic user
provisioning).
2022-05-24 17:39:01 +02:00
Ralf Haferkamp
a755f23e55 fix env separator in config struct annotation 2022-05-24 17:39:01 +02:00
Benedikt Kulmann
43a55161a9 Bump web to 5.5.0-rc.8 2022-05-24 14:38:08 +02:00
Michael Barz
7c2e3201b7 Merge pull request #3854 from owncloud/update-deps
[full-ci] update reva and xattr
2022-05-24 09:28:54 +02:00
Michael Barz
f1c17efb98 add productversion to ocs version 2022-05-24 08:46:32 +02:00
Michael Barz
3cae4fc8f9 Merge pull request #3850 from owncloud/increase-access-token-lifetime
Increase access token duration to 1 day
2022-05-23 19:39:30 +02:00
Michael Barz
ac5738c3cd Merge pull request #3852 from owncloud/users-driver
add missing USERS_DRIVER env var
2022-05-23 19:39:15 +02:00
Michael Barz
894923fe33 Merge pull request #3805 from owncloud/fix-version
fix version for legacy clients
2022-05-23 17:39:36 +02:00
Jörn Friedrich Dreyer
db88ba989b add missing USERS_DRIVER env var
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-23 15:09:42 +00:00
André Duffeck
211ac39a61 Fix keeping the index in sync when directories contain special chars 2022-05-23 15:28:45 +02:00
Benedikt Kulmann
49a666b74b Increase access token duration to 1 day 2022-05-23 11:34:27 +02:00
Michael Barz
7c6aecc8a2 parse legacy version too 2022-05-23 11:04:38 +02:00
Michael Barz
a70dc22597 fix version in capabilities 2022-05-23 11:04:38 +02:00
Michael Barz
a8b6c53dd9 fix version for legacy clients 2022-05-23 11:04:36 +02:00
Pascal Wengerter
3b140fb035 Bump web to v5.5.0-rc.7 2022-05-20 18:03:43 +02:00
Jörn Friedrich Dreyer
a7f9e142c2 Merge pull request #3825 from owncloud/lico-cs3-update
IDP: allow using cs3 api to authenticate users
2022-05-20 12:24:06 +00:00
Jörn Friedrich Dreyer
9ac13e64b9 add missing godoc to make hound vJulian happy
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-20 11:00:39 +00:00
Jörn Friedrich Dreyer
d56bbd60d1 return errors, clean up
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-20 10:32:47 +00:00
Willy Kloucek
0e8bd0a577 add OCIS_SYSTEM_USER_ID environment variable to the storage-system configuration 2022-05-19 15:07:29 +02:00
Jörn Friedrich Dreyer
1a872c875a update docs and changelog
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-19 11:25:21 +00:00
Jörn Friedrich Dreyer
08b80c2e7e keep ldap as default
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-19 10:55:35 +00:00
Phil Davis
8ece455e92 Merge pull request #3834 from owncloud/set-public-link-defaultname-capability
Set public link defaultname capability
2022-05-19 15:04:12 +05:45
Pascal Wengerter
582e0503da Supersede dependabot PRs 2022-05-19 10:40:08 +02:00
Pascal Wengerter
133682e6b9 Add formatting results 2022-05-19 10:36:23 +02:00
Pascal Wengerter
7f17338a69 Add public link defaultname to capabilities 2022-05-19 10:36:08 +02:00
Willy Kloucek
5f4cd98f1f Merge pull request #3831 from wkloucek/proxy-config-revamp
proxy config revamp
2022-05-19 10:32:10 +02:00