Commit Graph

10700 Commits

Author SHA1 Message Date
Willy Kloucek
94646c8060 add middleware to rewrite the /.well-known/openid-configuration endpoint for external idps 2022-08-05 14:12:01 +02:00
Willy Kloucek
4699fba073 Merge pull request #4342 from wkloucek/cs3-claim-desc
improve PROXY_USER_CS3_CLAIM description
2022-08-05 12:50:27 +02:00
dependabot[bot]
f6c2e16676 Bump github.com/MicahParks/keyfunc from 1.1.0 to 1.2.0
Bumps [github.com/MicahParks/keyfunc](https://github.com/MicahParks/keyfunc) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/MicahParks/keyfunc/releases)
- [Commits](https://github.com/MicahParks/keyfunc/compare/v1.1.0...v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/MicahParks/keyfunc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-05 12:38:13 +02:00
Willy Kloucek
58ccdaca08 improve PROXY_USER_CS3_CLAIM description 2022-08-05 10:47:51 +02:00
Willy Kloucek
a87a18e2b8 Merge pull request #4333 from owncloud/dependabot/go_modules/go.opentelemetry.io/otel/trace-1.9.0
Bump go.opentelemetry.io/otel/trace from 1.8.0 to 1.9.0
2022-08-05 09:38:44 +02:00
Willy Kloucek
d2906876a7 Merge pull request #4334 from rhafer/issue4282
Switch default for user and group substring search
2022-08-05 09:38:08 +02:00
Ralf Haferkamp
03a8db45c1 Switch default for user and group substring search
We now default LDAP_GROUP_SUBSTRING_FILTER_TYPE and LDAP_USER_SUBSTRING_FILTER_TYPE
to "any", which means full substring search. The previous default was just using prefix
matching.

Closes #4282
2022-08-04 11:23:17 +02:00
dependabot[bot]
cefc5175ba Bump go.opentelemetry.io/otel/trace from 1.8.0 to 1.9.0
Bumps [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-04 09:15:09 +00:00
Willy Kloucek
3c2e179f0d Automated changelog update [skip ci] 2022-08-04 09:14:39 +00:00
Willy Kloucek
e1fabce8bf Merge pull request #4330 from kobergj/BumpReva
[full-ci]Bump reva version
2022-08-04 11:14:11 +02:00
jkoberg
48556a1232 bump reva version
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-08-04 10:26:33 +02:00
Michael Barz
8d97b7e1a2 Automated changelog update [skip ci] 2022-08-03 12:41:12 +00:00
Michael Barz
1808fa0bdf Merge pull request #4323 from owncloud/fix-user-drives-quota
fix listing of drives and quota
2022-08-03 14:40:41 +02:00
Benedikt Kulmann
ee2378b138 Merge pull request #4324 from owncloud/alias-link-capability-to-false
Set the alias link capability to `false`
2022-08-03 13:15:37 +02:00
Michael Barz
cb7d024d89 fix listing of drives and quota 2022-08-03 12:50:00 +02:00
Jannik Stehle
492ac5ced4 Set the alias link capability to false 2022-08-03 12:17:27 +02:00
Ralf Haferkamp
a0213938bd Automated changelog update [skip ci] 2022-08-03 10:00:56 +00:00
Ralf Haferkamp
6e848c7254 Use mutex for lazy init function
To avoid possible threading issues
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
74d9d0f3e0 Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at>
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
0c9bfb2260 Update changelog 2022-08-03 12:00:31 +02:00
Ralf Haferkamp
8229567213 Allow to configure the JWKS refresh settings
This exposes a couple for knobs for the jwks keyfunc module to adjust
timeout and refresh intervals.
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
eb94530433 Add option to configure access token verification
Allow to switch jwt access token verification and off. Many (most?) IDP
provide JWT encoded access tokens. If ocis is configure to assume jwt
access tokens (access_token_verify_method==jwt) we now properly verify
the tokens signature and a set of standard claims ("exp", "iat" and nbf"
by way of the jwt module's standard verification and "iss" explicitliy).

This change also allows for introduction of other access token verification
mechanism in the future (e.g. through introspection (RFC7662).
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
454cea8a1c Try to verify access_token as JWT and extract expiry
We try to parse the access token as a JWT now. Verifying the signature
using the keys downloaded from the jwks_uri of the IDP. Currently we
only use it to extract the expiry information from the JWT. This could
be reworked to extract other claims from the token for authorization
purposes.

Fixes: #3841
2022-08-03 12:00:31 +02:00
Ralf Haferkamp
0b055ca621 Remove obsolete comment
Token/Userinfo caching is already present since a while
2022-08-03 12:00:31 +02:00
Michael Barz
74fa98ac68 Merge pull request #4317 from owncloud/dependabot/go_modules/github.com/grpc-ecosystem/grpc-gateway/v2-2.11.1
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.0 to 2.11.1
2022-08-03 10:09:36 +02:00
Michael Barz
cd59658720 Merge pull request #4319 from owncloud/bump-commit-id-20220803
[tests-only][full-ci]Bump commit id for tests
2022-08-03 10:09:07 +02:00
Michael Barz
05ac511651 Merge pull request #4320 from aduffeck/bump_reva
[full-ci] Bump reva
2022-08-03 10:08:03 +02:00
Michael Barz
8463b01cf2 Merge pull request #4318 from owncloud/runEverythingE2etest
Run e2e at every PR
2022-08-03 09:39:47 +02:00
André Duffeck
3b99ae96b3 Bump reva 2022-08-03 09:12:16 +02:00
Swikriti Tripathi
ebd352b849 bump middleware version and update expected to fail file 2022-08-03 12:50:49 +05:45
Swikriti Tripathi
b0b4d52feb Bump commit id for tests 2022-08-03 11:13:48 +05:45
Viktor Scharf
22f9902e3f ci format 2022-08-02 22:57:47 +02:00
Viktor Scharf
fc033e1dd5 run e2e every PR 2022-08-02 20:32:23 +02:00
Michael Barz
861398ba0a Automated changelog update [skip ci] 2022-08-02 18:07:04 +00:00
Michael Barz
645b1a025b Merge pull request #4314 from owncloud/update-web-5.7.0-rc.7
[full-ci] bump web to v5.7.0-rc.7
2022-08-02 20:06:35 +02:00
Michael Barz
3b7d8b555e Automated changelog update [skip ci] 2022-08-02 16:31:26 +00:00
Benedikt Kulmann
ca3c6ff570 chore: bump web to v5.7.0-rc.7 2022-08-02 18:19:55 +02:00
dependabot[bot]
6039d4376f Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.0 to 2.11.1
Bumps [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/master/.goreleaser.yml)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.11.0...v2.11.1)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-02 16:14:21 +00:00
Michael Barz
4a1f5d3f6e Merge pull request #4315 from owncloud/update-reva-index-fix
[full-ci] update reva to include index fix in the decomposedfs
2022-08-02 18:11:25 +02:00
Artur Neumann
a02d689fcd Merge pull request #3840 from owncloud/runE2eTestsInCi
[full-ci] Run e2e tests in ocis CI
2022-08-02 21:38:08 +05:45
Michael Barz
7391cee468 Automated changelog update [skip ci] 2022-08-02 15:14:33 +00:00
Michael Barz
20467dfe35 update reva to include index fix in the decomposedfs 2022-08-02 17:12:34 +02:00
Michael Barz
7f4f4019b6 Merge pull request #4294 from owncloud/dependabot/go_modules/github.com/go-ldap/ldap/v3-3.4.4
[full-ci] Bump github.com/go-ldap/ldap/v3 from 3.4.3 to 3.4.4
2022-08-02 17:11:16 +02:00
Ralf Haferkamp
53751339a6 Use existing mockery mock instead of manual ldap.Client mock 2022-08-02 16:14:39 +02:00
Ralf Haferkamp
f99e968dc8 Bump reva to latest edge 2022-08-02 15:34:59 +02:00
Ralf Haferkamp
fa36a73c54 Add missing new methods to fulfill ldap.Client interface 2022-08-02 15:34:59 +02:00
dependabot[bot]
aaa3143cb4 Bump github.com/go-ldap/ldap/v3 from 3.4.3 to 3.4.4
Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.3 to 3.4.4.
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](https://github.com/go-ldap/ldap/compare/v3.4.3...v3.4.4)

---
updated-dependencies:
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-02 15:18:12 +02:00
Viktor Scharf
6ae1b56976 try run test in webTestRunner 2022-08-02 13:32:21 +02:00
Andre Duffeck
26f15c2fa9 Automated changelog update [skip ci] 2022-08-02 07:19:16 +00:00
Andre Duffeck
9fc485c95f Merge pull request #4308 from aduffeck/fix-search-in-received-shares
Fix search in received shares
2022-08-02 09:11:32 +02:00