Commit Graph

10719 Commits

Author SHA1 Message Date
Michael Barz
67b52bbd55 add expand query for personal drive 2022-08-08 16:43:59 +02:00
Michael Barz
249ed4efe5 Automated changelog update [skip ci] 2022-08-08 13:41:12 +00:00
Michael Barz
03c63380da Merge pull request #4346 from wkloucek/rewrite-oidc-well-known
add middleware to rewrite the /.well-known/openid-configuration endpoint for external idps
2022-08-08 15:36:34 +02:00
Phil Davis
98769cce07 Merge pull request #4350 from owncloud/bump-middleware-version
[tests-only][full-ci]Bump commit id and middleware version
2022-08-08 18:31:15 +05:45
amrita
ed57a06d97 Bump commit id and middleware version 2022-08-08 17:57:50 +05:45
Ralf Haferkamp
757fbcf9b5 Bump protoc-gen-microweb to include latest fixes
Closes #4276
2022-08-08 13:41:08 +02:00
Sushmita Poudel
ea75391cb7 Merge pull request #4313 from owncloud/addSpacesTestForFolderCopyOperation
[tests-only][full-ci]added test scenarios for copy folder request
2022-08-08 17:20:11 +05:45
sushmita56
60642208f9 added test for copy folder operation
modified steps of scenarios related to shares jail space

updated expected to failure by shares jail

addressed review

removed shares jail expected to failure
2022-08-08 16:36:53 +05:45
Artur Neumann
67bf4d3c3d Merge pull request #4338 from owncloud/chageQuotaOfThePersonalSpace
[test-only]Api test. add tests for changing quota of the personal space
2022-08-08 14:18:45 +05:45
Ralf Haferkamp
8bb2ebcf4b Automated changelog update [skip ci] 2022-08-05 14:47:10 +00:00
Ralf Haferkamp
b18944b926 Add changelog for #4274 2022-08-05 16:46:45 +02:00
Ralf Haferkamp
23b9437c08 Avoid panics when LDAP users miss required attributes 2022-08-05 16:46:45 +02:00
Ralf Haferkamp
c7359a849f Avoid unneeded extra LDAP query per group
When expanding members of an LDAP group we did two group lookup per
Group. This can be avoided by expanding the members right from the
Group entry of the first query.

This also add some more unit test coverage, especially to the expand/select
group member test cases.
2022-08-05 16:46:45 +02:00
Ralf Haferkamp
8dde4e5b94 Add LDAP query details to debug log 2022-08-05 16:46:45 +02:00
Ralf Haferkamp
d867a8bc7c Don't panic on missing group attributes
Closes #4274
2022-08-05 16:46:45 +02:00
Willy Kloucek
4d661fabb5 Merge pull request #4344 from owncloud/dependabot/go_modules/go.opentelemetry.io/otel/exporters/jaeger-1.9.0
Bump go.opentelemetry.io/otel/exporters/jaeger from 1.8.0 to 1.9.0
2022-08-05 16:33:14 +02:00
Willy Kloucek
205f87f987 adapt deployment examples 2022-08-05 14:12:08 +02:00
Willy Kloucek
94646c8060 add middleware to rewrite the /.well-known/openid-configuration endpoint for external idps 2022-08-05 14:12:01 +02:00
Willy Kloucek
4699fba073 Merge pull request #4342 from wkloucek/cs3-claim-desc
improve PROXY_USER_CS3_CLAIM description
2022-08-05 12:50:27 +02:00
dependabot[bot]
501898fd5a Bump go.opentelemetry.io/otel/exporters/jaeger from 1.8.0 to 1.9.0
Bumps [go.opentelemetry.io/otel/exporters/jaeger](https://github.com/open-telemetry/opentelemetry-go) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/jaeger
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-05 10:39:08 +00:00
dependabot[bot]
f6c2e16676 Bump github.com/MicahParks/keyfunc from 1.1.0 to 1.2.0
Bumps [github.com/MicahParks/keyfunc](https://github.com/MicahParks/keyfunc) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/MicahParks/keyfunc/releases)
- [Commits](https://github.com/MicahParks/keyfunc/compare/v1.1.0...v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/MicahParks/keyfunc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-05 12:38:13 +02:00
Willy Kloucek
58ccdaca08 improve PROXY_USER_CS3_CLAIM description 2022-08-05 10:47:51 +02:00
Willy Kloucek
a87a18e2b8 Merge pull request #4333 from owncloud/dependabot/go_modules/go.opentelemetry.io/otel/trace-1.9.0
Bump go.opentelemetry.io/otel/trace from 1.8.0 to 1.9.0
2022-08-05 09:38:44 +02:00
Willy Kloucek
d2906876a7 Merge pull request #4334 from rhafer/issue4282
Switch default for user and group substring search
2022-08-05 09:38:08 +02:00
Viktor Scharf
d7c406edde add tests changing quota 2022-08-04 13:11:51 +02:00
Ralf Haferkamp
03a8db45c1 Switch default for user and group substring search
We now default LDAP_GROUP_SUBSTRING_FILTER_TYPE and LDAP_USER_SUBSTRING_FILTER_TYPE
to "any", which means full substring search. The previous default was just using prefix
matching.

Closes #4282
2022-08-04 11:23:17 +02:00
dependabot[bot]
cefc5175ba Bump go.opentelemetry.io/otel/trace from 1.8.0 to 1.9.0
Bumps [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-04 09:15:09 +00:00
Willy Kloucek
3c2e179f0d Automated changelog update [skip ci] 2022-08-04 09:14:39 +00:00
Willy Kloucek
e1fabce8bf Merge pull request #4330 from kobergj/BumpReva
[full-ci]Bump reva version
2022-08-04 11:14:11 +02:00
jkoberg
48556a1232 bump reva version
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-08-04 10:26:33 +02:00
Michael Barz
8d97b7e1a2 Automated changelog update [skip ci] 2022-08-03 12:41:12 +00:00
Michael Barz
1808fa0bdf Merge pull request #4323 from owncloud/fix-user-drives-quota
fix listing of drives and quota
2022-08-03 14:40:41 +02:00
Benedikt Kulmann
ee2378b138 Merge pull request #4324 from owncloud/alias-link-capability-to-false
Set the alias link capability to `false`
2022-08-03 13:15:37 +02:00
Michael Barz
cb7d024d89 fix listing of drives and quota 2022-08-03 12:50:00 +02:00
Jannik Stehle
492ac5ced4 Set the alias link capability to false 2022-08-03 12:17:27 +02:00
Ralf Haferkamp
a0213938bd Automated changelog update [skip ci] 2022-08-03 10:00:56 +00:00
Ralf Haferkamp
6e848c7254 Use mutex for lazy init function
To avoid possible threading issues
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
74d9d0f3e0 Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at>
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
0c9bfb2260 Update changelog 2022-08-03 12:00:31 +02:00
Ralf Haferkamp
8229567213 Allow to configure the JWKS refresh settings
This exposes a couple for knobs for the jwks keyfunc module to adjust
timeout and refresh intervals.
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
eb94530433 Add option to configure access token verification
Allow to switch jwt access token verification and off. Many (most?) IDP
provide JWT encoded access tokens. If ocis is configure to assume jwt
access tokens (access_token_verify_method==jwt) we now properly verify
the tokens signature and a set of standard claims ("exp", "iat" and nbf"
by way of the jwt module's standard verification and "iss" explicitliy).

This change also allows for introduction of other access token verification
mechanism in the future (e.g. through introspection (RFC7662).
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
454cea8a1c Try to verify access_token as JWT and extract expiry
We try to parse the access token as a JWT now. Verifying the signature
using the keys downloaded from the jwks_uri of the IDP. Currently we
only use it to extract the expiry information from the JWT. This could
be reworked to extract other claims from the token for authorization
purposes.

Fixes: #3841
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
0b055ca621 Remove obsolete comment
Token/Userinfo caching is already present since a while
2022-08-03 12:00:31 +02:00
Michael Barz
74fa98ac68 Merge pull request #4317 from owncloud/dependabot/go_modules/github.com/grpc-ecosystem/grpc-gateway/v2-2.11.1
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.0 to 2.11.1
2022-08-03 10:09:36 +02:00
Michael Barz
cd59658720 Merge pull request #4319 from owncloud/bump-commit-id-20220803
[tests-only][full-ci]Bump commit id for tests
2022-08-03 10:09:07 +02:00
Michael Barz
05ac511651 Merge pull request #4320 from aduffeck/bump_reva
[full-ci] Bump reva
2022-08-03 10:08:03 +02:00
Michael Barz
8463b01cf2 Merge pull request #4318 from owncloud/runEverythingE2etest
Run e2e at every PR
2022-08-03 09:39:47 +02:00
André Duffeck
3b99ae96b3 Bump reva 2022-08-03 09:12:16 +02:00
Swikriti Tripathi
ebd352b849 bump middleware version and update expected to fail file 2022-08-03 12:50:49 +05:45
Swikriti Tripathi
b0b4d52feb Bump commit id for tests 2022-08-03 11:13:48 +05:45