Commit Graph

103 Commits

Author SHA1 Message Date
jkoberg 481e332d52 don't protect unprotected endpoint
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-04-04 10:01:26 +02:00
Michael Barz b15db1794a update reva to version 2.0.0 (#3258) 2022-03-03 19:56:04 +01:00
Florian Schade e8702087f3 allow requesting capabilities from password protected links 2022-02-23 18:46:25 +01:00
Juan Pablo Villafáñez 7d8e334537 Revert v1 to v0 2022-01-31 12:17:56 +01:00
Juan Pablo Villafáñez 7bfb6c7d3e Migrate proto files for store and adjust paths 2022-01-31 09:35:40 +01:00
Juan Pablo Villafáñez 7557e4e0ea Migrate proto files for settings and adjusts paths 2022-01-31 09:35:39 +01:00
Juan Pablo Villafáñez 6c67ff765e Adjust import paths and service urls in index.js 2022-01-31 09:26:23 +01:00
David Christofas 0bfc1f08b7 implement graph endpoint to delete spaces 2022-01-20 11:34:15 +01:00
David Christofas a85644cddd enable signature auth in public share auth middleware 2021-12-09 17:47:36 +01:00
Willy Kloucek 62704ceb2e fix double "the" 2021-11-15 13:24:26 +01:00
Willy Kloucek 7dca7b4fae set only user oidc claim only if cs3 claim is userid 2021-11-15 10:31:07 +01:00
Willy Kloucek d05df2f85e fix basic auth with custom user claim 2021-11-11 11:43:10 +01:00
Florian Schade b416763599 fix(public-share): basic auth password prefix
fix wrong basic auth password prefix
2021-10-20 14:34:11 +02:00
Florian Schade 03de49e59b remove dev leftover 2021-10-18 15:48:09 +02:00
Florian Schade 0c66bdd6ad feat(public-token): get public-token from query string
retrieving public-token also from the query-string
2021-10-18 14:55:55 +02:00
David Christofas fb0380820c enable archiver for public shares 2021-10-15 17:45:06 +02:00
David Christofas 5713fe81a4 add public share auth middleware 2021-10-15 16:48:43 +02:00
David Christofas 04a8ef7c35 fix the account resolver middleware 2021-09-29 10:19:12 +02:00
Ishank Arora 08c51ee8c8 Use reva's Authenticate method instead of spawning token managers 2021-09-21 15:50:19 +02:00
Willy Kloucek b2d53b9ca1 always set cookie 2021-09-15 13:09:15 +02:00
Ralf Haferkamp 3a42fdc578 Move to go-chi/chi v5 2021-08-24 17:48:37 +02:00
A.Unger 46f0d6f7e4 remove dead code 2021-08-18 14:06:02 +02:00
Alex Unger 06fda516ec Update proxy/pkg/middleware/accesslog.go
Co-authored-by: David Christofas <dchristofas@owncloud.com>
2021-08-18 14:03:19 +02:00
A.Unger 0f0d305f6d linter: fix var name 2021-08-18 11:25:44 +02:00
A.Unger 1dd4644370 fix requestid 2021-08-18 11:10:50 +02:00
David Christofas ed85fedf1a update github.com/coreos/go-oidc to version 3.0.0 2021-08-13 09:55:17 +02:00
David Christofas eacdb8fa2f Merge pull request #2386 from owncloud/switch-jwt-lib
switch jwt library
2021-08-12 17:24:57 +02:00
David Christofas b8150f25b8 switch jwt library
The old library github.com/dgrijalva/jwt-go is now unmaintained and was replaced by the community maintained fork github.com/golang-jwt/jwt
2021-08-12 16:53:17 +02:00
Jörn Friedrich Dreyer 55aacdea13 update reva to ec4099da
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-08-12 11:08:10 +00:00
Jörn Friedrich Dreyer c3951d67c8 forward basic auth to OpenID connect token authentication endpoint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-26 11:12:33 +00:00
Jörn Friedrich Dreyer bea986fe26 pass only request instead of context
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 09:03:14 +00:00
Willy Kloucek a0dce56480 use cookie to enforce routing for regex and claim selector 2021-07-23 08:38:55 +00:00
Jörn Friedrich Dreyer cb70f4882f add todo for x-access-header handling
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:33:18 +00:00
Jörn Friedrich Dreyer 4385d3dacb add RegexSelector
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:22:40 +00:00
Jörn Friedrich Dreyer 40c8031441 add claims policy selector
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:07:17 +00:00
Jörn Friedrich Dreyer 2293403d45 use errors.Is()
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-22 16:35:31 +00:00
Jörn Friedrich Dreyer 1f3e963c29 use claims map instead of struct
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-22 09:20:36 +00:00
Jörn Friedrich Dreyer b148faada6 Merge pull request #2294 from owncloud/fix-trashbin-expected-failures
Fix Trashbin Expected Failures
2021-07-21 20:59:43 +02:00
A.Unger 74696dbd36 remove redundant line 2021-07-19 13:29:12 +02:00
Jörn Friedrich Dreyer 8c7f1f01ff do not try to add the selected policy to the context
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-14 20:45:38 +00:00
Jörn Friedrich Dreyer 1dc7aac6fd proxy access log
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-14 13:14:27 +00:00
A.Unger 7ab586b2ab proxy is now aware of webdav responses 2021-07-13 15:38:44 +02:00
A.Unger bfdcc0180c fix 230, 231 - first draft 2021-07-13 14:33:24 +02:00
A.Unger ac49348b41 fix 215, 216 - first draft 2021-07-13 14:29:26 +02:00
Ishank Arora 29c5cb627a Update scope usage and add Changes for lightweight accounts 2021-07-13 13:03:06 +02:00
Michael Barz 34e0877df7 Merge pull request #1951 from ishank011/uid-gid-user-object
Use CS3 user object fields to store UID and GID
2021-06-25 10:06:14 +02:00
Ishank Arora 6168ee7095 Use CS3 user object fields to store UID and GID 2021-06-16 18:05:40 +02:00
Willy Kloucek ed94da5104 ignore authentication header on status.php 2021-06-16 16:59:11 +02:00
David Christofas f6ac50244b update invocations of MintToken and DismantleToken 2021-05-11 14:18:43 +02:00
David Christofas c532073dd1 remove JWT from logs
secrets should not be exposed in the logs
2021-03-03 15:30:11 +01:00