Commit Graph

22918 Commits

Author SHA1 Message Date
Florian Schade 68b356292b Merge pull request #2632 from opencloud-eu/feat/kql-dotted-keys
feat(kql): support dotted keys in property restrictions
2026-04-22 09:45:59 +02:00
opencloudeu e698a81528 [tx] updated from transifex 2026-04-22 00:04:28 +00:00
Thomas Schweiger fb6ab0f092 enhancement: increase display size of graph flow diagram 2026-04-21 16:51:13 +02:00
dependabot[bot] 0c0f7467fc build(deps): bump github.com/open-policy-agent/opa from 1.15.1 to 1.15.2
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/v1.15.2/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.15.1...v1.15.2)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-21 15:58:37 +02:00
Dominik Schmidt 15d779cb23 refactor(search): rename forceReindexFlag to forceRescanFlag
Address review feedback: now that the flag is read under its
registered name `force-rescan`, line the local variable up with the
operator-facing vocabulary. The proto field `ForceReindex` is left
untouched so the wire format stays the same.
2026-04-21 15:29:04 +02:00
Dominik Schmidt e7806445dc fix(search): read --force-rescan flag with its registered name
The `opencloud search index` command registers the flag as
`--force-rescan` (see pflag registration below) but reads it via
`GetBool("force-reindex")`, so the value is always false — passing
`--force-rescan` had no effect and no force rescan was ever triggered.

Read the flag under its registered name.
2026-04-21 15:29:04 +02:00
Dominik Schmidt 2fc33d6e60 refactor(search): round xmpDM:duration to the nearest millisecond
Address review feedback: a straight int64 cast truncates toward zero,
so Tika values that produce results like 1234.999... millisecond would
land at 1234 ms instead of 1235 ms. Round before casting so durations
are as accurate as float64 allows.
2026-04-21 15:16:57 +02:00
Dominik Schmidt 3c59935012 fix(search): parse tika xmpDM:duration as a float
Tika emits xmpDM:duration as seconds in floating-point form (for
example "154.57379150390625"), so strconv.ParseInt rejected every
value and the field was silently dropped — every indexed audio item
ended up without a duration.

Parse the value with strconv.ParseFloat and convert to milliseconds
ourselves. Adjust the existing extractor test to cover the fractional
case.
2026-04-21 15:16:57 +02:00
Dominik Schmidt 1c58888497 test(kql): capitalise Kleene in dotted-key test comment
Stephen Kleene is a proper noun, so "Kleene star" / "Kleene
closure" is the correct spelling.
2026-04-20 16:42:37 +02:00
OpenCloud Devops 7212f06c41 🎉 Release 6.1.0 (#2568)
* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0

* 🎉 Release 6.1.0
v6.1.0
2026-04-20 16:28:58 +02:00
Jannik Stehle 2151fd115e Merge pull request #2629 from opencloud-eu/docs/cern-deprecations-notices
docs(web): deprecation notices for cern related feature flags
2026-04-20 16:21:00 +02:00
Viktor Scharf 6099ca3658 [full-ci] chore: bump reva to v2.43.0 (#2630) 2026-04-20 16:05:48 +02:00
Dominik Schmidt c7a2ab8d02 test(kql): cover dotted keys in property restrictions
Four cases covering the distinct grammar paths touched by the
new Key rule: dotted key in a TextPropertyRestrictionNode,
multi-level key (stressing the Kleene part), dotted key in a
GroupNode (the k:Key? branch), and a dot on the value side
that must stay a literal character.
2026-04-20 16:05:07 +02:00
Dominik Schmidt ed1353d161 feat(kql): support dotted keys in property restrictions
Introduce a dedicated Key rule (Char+ ("." Char+)*) so property
restriction keys can contain dots. Queries like
audio.artist:Motörhead or photo.cameraMake:Apple now parse.

Goal: keep the data structure aligned with the query namespace.
A driveItem exposes nested fields as dotted paths in its API
response (photo.cameraMake, location.latitude); users should be
able to query with the same path, without admin-configured slot
mappings or alias tables like Microsoft requires.

Both bleve and OpenSearch already treat dots as the nesting
separator for field paths and pass unknown keys through
unchanged — only the KQL grammar blocked dotted keys via
Char <- [A-Za-z]. The new Key rule lifts that restriction; no
compiler changes or field-alias maintenance is needed.

Values are unaffected — dots in values still parse as literal
characters.
2026-04-20 15:52:14 +02:00
Jannik Stehle 781f7422b1 docs: deprecation notices for cern related feature flags 2026-04-20 15:22:45 +02:00
Viktor Scharf 7d98f03703 [full-ci] chore: bump web to v6.2.0 (#2628) 2026-04-20 14:51:57 +02:00
Viktor Scharf f8b28b12e9 combine version placeholder check steps [🎉 release]. set 6.1.0. version for upcoming release (#2626)
* 🎉 release: combine version placeholder check steps

* set 6.1.0 version
2026-04-20 10:43:22 +02:00
opencloudeu 7a7a727cf3 [tx] updated from transifex 2026-04-20 00:04:46 +00:00
opencloudeu bdf7cc7b8b [tx] updated from transifex 2026-04-19 00:04:47 +00:00
Viktor Scharf c538952311 Update CI badge URL in README.md (#2614) 2026-04-17 21:18:25 +02:00
Viktor Scharf 8e804944f7 adjust all-check-finished step (#2616) 2026-04-17 16:08:17 +02:00
opencloudeu bfb03b6973 [tx] updated from transifex 2026-04-17 00:04:32 +00:00
Andre Duffeck 4603d9a278 Merge pull request #2606 from aduffeck/force-reindex
Add a flag to the reindex command to force a full reindex
2026-04-16 15:38:22 +02:00
opencloudeu 8d6c5d7160 [tx] updated from transifex 2026-04-16 00:04:30 +00:00
Jörn Friedrich Dreyer 5683e0d441 Merge pull request #2560 from pedropintosilva/feat/add-userextrainfo-to-checkfileinfo
feat(collaboration): add UserExtraInfo with avatar and mail to CheckFileInfo
2026-04-15 16:07:42 +02:00
Michael Barz 35aaf92384 test: add tests for new features 2026-04-15 12:14:24 +02:00
Christian Richter 24803cadf6 reformat woodpecker.star
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-04-15 09:10:42 +02:00
Christian Richter a76846f375 Update .woodpecker.star
Co-authored-by: Artur Neumann <artur@jankaritech.com>
2026-04-15 09:10:42 +02:00
Christian Richter 045511a982 reinstate || true
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2026-04-15 09:10:42 +02:00
Christian Richter 99cda9c701 adapt pipeline for prod releases
Signed-off-by: Christian Richter <c.richter@opencloud.eu>

# Conflicts:
#	.woodpecker.star
2026-04-15 09:10:42 +02:00
Michael Barz 940bfe5d65 fix: use libregraph client 2026-04-15 08:00:35 +02:00
opencloudeu 2b15d557ea [tx] updated from transifex 2026-04-15 00:04:54 +00:00
Michael Barz d05db011e5 refactor: move implementation to fileconnector 2026-04-14 17:46:45 +02:00
André Duffeck 5aed50e835 Adjust quota test to fixed behavior
We now report a quota of -3 for unlimited quota instead of 0, which
clients interpreted as a quota of 0.
2026-04-14 12:30:16 +02:00
André Duffeck 56a6b0c5d0 Bump reva 2026-04-14 12:30:16 +02:00
André Duffeck bcdfbda08d Fix test 2026-04-14 08:20:28 +02:00
André Duffeck 60bcc6b0f2 Add a flag to the reindex command to force a full reindex
That can be helpful when the search service configuration has changed,
e.g. by enabling TIKA. Previously files that had already been indexed
were not indexed again and thus were no part of the fulltext index.

Fixes #2285
Fixes #2578
2026-04-14 08:20:28 +02:00
Jannik Stehle 366296eba6 chore(idp): remove jest 2026-04-13 17:04:09 +02:00
Jannik Stehle 2e523fdbb3 chore(idp): remove eslint 2026-04-13 17:04:09 +02:00
Jannik Stehle 3f40a534e3 chore(idp): remove unused and unneeded dependencies 2026-04-13 17:04:09 +02:00
dependabot[bot] 113de08e28 build(deps-dev): bump dotenv from 16.4.7 to 17.4.2 in /services/idp
Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.4.7 to 17.4.2.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v16.4.7...v17.4.2)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 15:27:26 +02:00
Ralf Haferkamp 233ff383e7 chore: bump IDP javascript dependencies 2026-04-13 12:01:52 +02:00
dependabot[bot] b78d3ed42b build(deps): bump github.com/nats-io/nats.go from 1.49.0 to 1.50.0
Bumps [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) from 1.49.0 to 1.50.0.
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](https://github.com/nats-io/nats.go/compare/v1.49.0...v1.50.0)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 09:53:48 +02:00
dependabot[bot] d029201b83 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 09:52:58 +02:00
opencloudeu b9ed197a23 [tx] updated from transifex 2026-04-12 00:05:15 +00:00
Ralf Haferkamp 9cfe4dadb6 bump reva to get TenantAPI service 2026-04-09 17:46:50 +02:00
Ralf Haferkamp d9f39773e7 proxy: add memory cache for tenant id mapping
This is to reduce the number of "proxy->gateway->users->ldap" roundtrips
for the tenant id mapping.

The cache currently has a non-configurable ttl of 10 min.

Related: #2310
2026-04-09 17:46:50 +02:00
Ralf Haferkamp a931e53c26 proxy: Allow mapping from an external tenant id to the internal id
When the tenant id coming in via the OIDC claims doesn't match the
tenant id on the provisioned user, a mapping can be configured and
resolved via the reva TenantAPI service (now started as part of the
"users" service).

Closes: #2310
2026-04-09 17:46:50 +02:00
Pedro Pinto Silva 864e20028f feat(collaboration): add UserExtraInfo with avatar and mail to CheckFileInfo
Add UserExtraInfo (avatar + mail) to the WOPI CheckFileInfo response for
authenticated, non-public-share users.

UserExtraInfo format (per Collabora SDK):
https://sdk.collaboraonline.com/docs/advanced_integration.html#userextrainfo

```json
{
  "avatar": "http://url/to/user/avatar",
  "mail": "user@server.com"
}
```

After this change, CheckFileInfo returns:

```json
{
  "BaseFileName": "Pedro-filled-hazcom.docx",
  "UserFriendlyName": "Admin",
  "UserId": "346364...39323030",
  "UserCanWrite": true,
  "UserCanRename": true,
  "IsAdminUser": true,
  "EnableInsertRemoteImage": true,
  "EnableInsertRemoteFile": true,
  "EnableOwnerTermination": true,
  "UserExtraInfo": {
    "avatar": "https://host:9300/wopi/avatars/{userID}?access_token={wopiToken}",
    "mail": "admin@example.org"
  },
  "PostMessageOrigin": "https://localhost:9200",
  "message": "CheckFileInfo: success"
}
```

Avatars are served via a new /wopi/avatars/{userID} endpoint on the
collaboration service, authenticated by the WOPI token. The endpoint
calls the Graph service directly (bypassing the proxy) using the reva
access token via x-access-token header.

All tests pass:
go test ./services/collaboration/... ./services/graph/... ./services/proxy/...

Signed-off-by: Pedro Pinto Silva <pedro.silva@collabora.com>
2026-04-09 09:08:26 +02:00
Ralf Haferkamp b8c4f581fb chore: bump reva to latest main 2026-04-08 11:45:37 +02:00