Commit Graph

10689 Commits

Author SHA1 Message Date
Michael Barz
8d97b7e1a2 Automated changelog update [skip ci] 2022-08-03 12:41:12 +00:00
Michael Barz
1808fa0bdf Merge pull request #4323 from owncloud/fix-user-drives-quota
fix listing of drives and quota
2022-08-03 14:40:41 +02:00
Benedikt Kulmann
ee2378b138 Merge pull request #4324 from owncloud/alias-link-capability-to-false
Set the alias link capability to `false`
2022-08-03 13:15:37 +02:00
Michael Barz
cb7d024d89 fix listing of drives and quota 2022-08-03 12:50:00 +02:00
Jannik Stehle
492ac5ced4 Set the alias link capability to false 2022-08-03 12:17:27 +02:00
Ralf Haferkamp
a0213938bd Automated changelog update [skip ci] 2022-08-03 10:00:56 +00:00
Ralf Haferkamp
6e848c7254 Use mutex for lazy init function
To avoid possible threading issues
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
74d9d0f3e0 Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at>
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
0c9bfb2260 Update changelog 2022-08-03 12:00:31 +02:00
Ralf Haferkamp
8229567213 Allow to configure the JWKS refresh settings
This exposes a couple for knobs for the jwks keyfunc module to adjust
timeout and refresh intervals.
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
eb94530433 Add option to configure access token verification
Allow to switch jwt access token verification and off. Many (most?) IDP
provide JWT encoded access tokens. If ocis is configure to assume jwt
access tokens (access_token_verify_method==jwt) we now properly verify
the tokens signature and a set of standard claims ("exp", "iat" and nbf"
by way of the jwt module's standard verification and "iss" explicitliy).

This change also allows for introduction of other access token verification
mechanism in the future (e.g. through introspection (RFC7662).
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
454cea8a1c Try to verify access_token as JWT and extract expiry
We try to parse the access token as a JWT now. Verifying the signature
using the keys downloaded from the jwks_uri of the IDP. Currently we
only use it to extract the expiry information from the JWT. This could
be reworked to extract other claims from the token for authorization
purposes.

Fixes: #3841
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
0b055ca621 Remove obsolete comment
Token/Userinfo caching is already present since a while
2022-08-03 12:00:31 +02:00
Michael Barz
74fa98ac68 Merge pull request #4317 from owncloud/dependabot/go_modules/github.com/grpc-ecosystem/grpc-gateway/v2-2.11.1
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.0 to 2.11.1
2022-08-03 10:09:36 +02:00
Michael Barz
cd59658720 Merge pull request #4319 from owncloud/bump-commit-id-20220803
[tests-only][full-ci]Bump commit id for tests
2022-08-03 10:09:07 +02:00
Michael Barz
05ac511651 Merge pull request #4320 from aduffeck/bump_reva
[full-ci] Bump reva
2022-08-03 10:08:03 +02:00
Michael Barz
8463b01cf2 Merge pull request #4318 from owncloud/runEverythingE2etest
Run e2e at every PR
2022-08-03 09:39:47 +02:00
André Duffeck
3b99ae96b3 Bump reva 2022-08-03 09:12:16 +02:00
Swikriti Tripathi
ebd352b849 bump middleware version and update expected to fail file 2022-08-03 12:50:49 +05:45
Swikriti Tripathi
b0b4d52feb Bump commit id for tests 2022-08-03 11:13:48 +05:45
Viktor Scharf
22f9902e3f ci format 2022-08-02 22:57:47 +02:00
Viktor Scharf
fc033e1dd5 run e2e every PR 2022-08-02 20:32:23 +02:00
Michael Barz
861398ba0a Automated changelog update [skip ci] 2022-08-02 18:07:04 +00:00
Michael Barz
645b1a025b Merge pull request #4314 from owncloud/update-web-5.7.0-rc.7
[full-ci] bump web to v5.7.0-rc.7
2022-08-02 20:06:35 +02:00
Michael Barz
3b7d8b555e Automated changelog update [skip ci] 2022-08-02 16:31:26 +00:00
Benedikt Kulmann
ca3c6ff570 chore: bump web to v5.7.0-rc.7 2022-08-02 18:19:55 +02:00
dependabot[bot]
6039d4376f Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.0 to 2.11.1
Bumps [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/master/.goreleaser.yml)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.11.0...v2.11.1)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-02 16:14:21 +00:00
Michael Barz
4a1f5d3f6e Merge pull request #4315 from owncloud/update-reva-index-fix
[full-ci] update reva to include index fix in the decomposedfs
2022-08-02 18:11:25 +02:00
Artur Neumann
a02d689fcd Merge pull request #3840 from owncloud/runE2eTestsInCi
[full-ci] Run e2e tests in ocis CI
2022-08-02 21:38:08 +05:45
Michael Barz
7391cee468 Automated changelog update [skip ci] 2022-08-02 15:14:33 +00:00
Michael Barz
20467dfe35 update reva to include index fix in the decomposedfs 2022-08-02 17:12:34 +02:00
Michael Barz
7f4f4019b6 Merge pull request #4294 from owncloud/dependabot/go_modules/github.com/go-ldap/ldap/v3-3.4.4
[full-ci] Bump github.com/go-ldap/ldap/v3 from 3.4.3 to 3.4.4
2022-08-02 17:11:16 +02:00
Ralf Haferkamp
53751339a6 Use existing mockery mock instead of manual ldap.Client mock 2022-08-02 16:14:39 +02:00
Ralf Haferkamp
f99e968dc8 Bump reva to latest edge 2022-08-02 15:34:59 +02:00
Ralf Haferkamp
fa36a73c54 Add missing new methods to fulfill ldap.Client interface 2022-08-02 15:34:59 +02:00
dependabot[bot]
aaa3143cb4 Bump github.com/go-ldap/ldap/v3 from 3.4.3 to 3.4.4
Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.3 to 3.4.4.
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](https://github.com/go-ldap/ldap/compare/v3.4.3...v3.4.4)

---
updated-dependencies:
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-02 15:18:12 +02:00
Viktor Scharf
6ae1b56976 try run test in webTestRunner 2022-08-02 13:32:21 +02:00
Andre Duffeck
26f15c2fa9 Automated changelog update [skip ci] 2022-08-02 07:19:16 +00:00
Andre Duffeck
9fc485c95f Merge pull request #4308 from aduffeck/fix-search-in-received-shares
Fix search in received shares
2022-08-02 09:11:32 +02:00
Michael Barz
c8c4d574e7 Automated changelog update [skip ci] 2022-08-01 15:48:53 +00:00
Michael Barz
28811adeb9 Merge pull request #4244 from owncloud/space-owner
[full-ci] set no owner on non-personal spaces
2022-08-01 17:45:17 +02:00
André Duffeck
d8905734a8 Add changelog 2022-08-01 13:58:45 +02:00
André Duffeck
814342a101 Fix search in received shares
It apparently broke as a fallout of the shareid refactoring.
2022-08-01 13:55:52 +02:00
Michael Barz
cce04f94ff set virtual owner on non-personal spaces 2022-08-01 12:53:24 +02:00
Christian Richter
19c9125fdf Automated changelog update [skip ci] 2022-08-01 10:10:00 +00:00
Christian Richter
c94960cb83 Merge pull request #4072 from owncloud/fix-user-drives-endpoint
Add drives output & user filter
2022-08-01 12:09:27 +02:00
Christian Richter
3212348727 add expected failures
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-08-01 11:21:49 +02:00
Viktor Scharf
ccc07597b6 gave web commit back 2022-08-01 00:08:14 +02:00
Viktor Scharf
775b7614b5 add e2e pipline 2022-07-31 23:44:14 +02:00
Christian Richter
3da88ef608 use reva/v2@edge
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-07-29 14:39:19 +02:00