Commit Graph

93 Commits

Author SHA1 Message Date
David Christofas
c532073dd1 remove JWT from logs
secrets should not be exposed in the logs
2021-03-03 15:30:11 +01:00
David Christofas
cfcd4b5992 resolve linter issues 2021-02-26 14:24:25 +01:00
David Christofas
0fd7580301 resolve linter issues 2021-02-25 10:48:40 +01:00
Jörn Friedrich Dreyer
4fffec0749 Merge pull request #1699 from owncloud/fix-token-ttl
fix token cache TTL
2021-02-22 20:36:05 +01:00
David Christofas
7ad38d7757 fix token cache TTL
The TTL was supplied to the middleware as a duration and then in that middleware multiplied by `time.Second` again. Durations should not be multiplied because they result in unintended values.
```go
	time.Second * 1 = 1s
	time.Second * time.Second = 277777h46m40s
```
2021-02-22 18:40:15 +01:00
Jörn Friedrich Dreyer
8a8aa2dc52 use micre v3 registry interface
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-02-22 15:08:50 +00:00
A.Unger
a1d5e34f41 update proxy to use go-micro v3 2021-02-18 08:01:53 +00:00
Willy Kloucek
2efbb13e66 change secrets on deploy 2021-02-10 14:20:38 +01:00
Pascal Wengerter
d7b1ecb3dc Change (ocis,OCIS) to oCIS, unify GitHub branding 2021-01-28 00:32:47 +00:00
Florian Schade
af870e005e add more tests and benchmark for cache
refactor cache to use atomic uint
2021-01-19 23:23:41 +01:00
Florian Schade
f13530425a move cache to sync package
rollback indexer map
use sync.pool for cache entries
add tests for cache
remove main locks from nrwmutex and use sync.map and sync.pool instead
bump dockerfile go version
2021-01-19 23:23:41 +01:00
Florian Schade
a02fb890f7 remove locking from accounts service
add a cached named rwlock pkg
use sync.map in the cache pkg
use named rwlock in indexer pkg
use sync.map in indexer pkg
remove husky
2021-01-19 23:23:41 +01:00
Benedikt Kulmann
ca6d59d7c5 Merge pull request #1142 from owncloud/small-refactoring
small refactorings of test code and some methods
2020-12-24 06:06:22 +01:00
Jörn Friedrich Dreyer
5689daf864 Merge pull request #1148 from owncloud/add_ocis_url_env
add OCIS_URL env var
2020-12-23 17:25:24 +01:00
Ilja Neumann
cd2eb0e39b Accounts UserBackend tests 2020-12-22 17:27:55 +01:00
Ilja Neumann
0d990898b8 Fix gid was overwritten by roles 2020-12-22 17:27:55 +01:00
Ilja Neumann
1b29e56d12 account_resolver_test.go 2020-12-22 16:16:57 +01:00
Jörn Friedrich Dreyer
03e1f95d49 fix lint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2020-12-22 15:10:23 +00:00
Jörn Friedrich Dreyer
7dbc1af76f add OCIS_URL env var
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2020-12-21 16:20:02 +00:00
Willy Kloucek
73cf0fc36d rename reva to proxy where applicable 2020-12-21 09:15:38 +01:00
David Christofas
cf69537d1b small refactorings of test code and some methods 2020-12-18 14:12:10 +01:00
Willy Kloucek
9c34174d45 make tracing defaults consistent 2020-12-17 15:47:47 +01:00
Ilja Neumann
92a1bc8fb6 Make it possible to use CS3 as accounts backend instead of account-service
Configureable via:
PROXY_ACCOUNT_BACKEND_TYPE=cs3
PROXY_ACCOUNT_BACKEND_TYPE=accounts (default)

By using a backend which implements the CS3 user-api (currently provided by reva/storage) it is possible to bypass
the ocis-accounts service and for example use ldap directly.

Hides user and auth related communication behind a facade (user/backend) to minimize logic-duplication across middlewares.
Allows to switich the account backend from accounts to cs3.

Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2020-12-11 18:34:43 +01:00
Alex Unger
beb83f3f40 Merge pull request #1025 from owncloud/remove-unused-errors
Remove unused errors
2020-12-04 18:46:51 +01:00
Ilja Neumann
61a8f00837 Remove unused errors 2020-12-04 15:50:22 +01:00
A.Unger
2cddc0a23c fix leftover typo 2020-12-04 13:53:34 +01:00
A.Unger
f1521e4df7 refactor authentication.go 2020-12-04 13:51:48 +01:00
A.Unger
7d8336ce4b use regexp to assert routes, remove StatusRecorder 2020-12-04 13:17:25 +01:00
A.Unger
ad4ea3efe7 Merge branch 'master' into ocis-1132 2020-12-04 12:39:57 +01:00
Willy Kloucek
fe2efc3c46 change to InsecureBackends flag 2020-12-04 07:31:46 +01:00
Willy Kloucek
4c9d990478 tage default values from http.DefaultTransport 2020-12-04 07:31:46 +01:00
Willy Kloucek
200872b3b4 make insecure upstream servers configurable 2020-12-04 07:31:46 +01:00
A.Unger
be46bacc5b use make(map[string]string) 2020-12-03 13:23:14 +01:00
A.Unger
9a253370e8 export StatusRecorder 2020-12-03 12:22:35 +01:00
A.Unger
c89ead3fc5 fix linter 2020-12-03 12:19:49 +01:00
A.Unger
b9df6e417e use more inclusive language 2020-12-03 12:13:52 +01:00
A.Unger
8c83de7db2 document loadUserAgent 2020-12-03 12:03:59 +01:00
A.Unger
ef4e573e42 split string by reversing it 2020-12-03 11:53:19 +01:00
A.Unger
a9922343ef explain flags 2020-12-03 10:57:32 +01:00
A.Unger
0e322f518d Merge branch 'master' into ocis-1132 2020-12-02 16:03:34 +01:00
A.Unger
e4974e020d minimal refactor 2020-12-02 15:51:39 +01:00
A.Unger
2910e88ba5 ugly working draft 2020-12-02 15:31:17 +01:00
A.Unger
752cd4f626 first draft for configuring user agent multiplex on ocis 2020-12-02 12:04:09 +01:00
A.Unger
28e8f75ebd whitelist depending on the URI 2020-12-01 17:10:04 +01:00
A.Unger
348c54f2e7 write www-authenticate and delegate to reva 2020-12-01 16:57:36 +01:00
A.Unger
5cb359d877 WIP 2020-11-30 17:19:03 +01:00
Benedikt Kulmann
df414f639d Merge remote-tracking branch 'origin/master' into onlyoffice-ext 2020-11-30 16:49:22 +01:00
Jörn Friedrich Dreyer
dbb52f29ad Merge pull request #958 from owncloud/basic-auth-cache
implement basic auth cache
2020-11-26 17:33:47 +01:00
Florian Schade
cb2e2a3896 add changelog
remove unused mux
cleanup k6 test
2020-11-26 14:46:44 +01:00
Florian Schade
11ba46eb88 remove accounts cache from basic auth middleware
move cache to ocis-pkg
add password validation cache to accounts service
2020-11-26 13:52:24 +01:00