Commit Graph

69 Commits

Author SHA1 Message Date
Alex Ackermann
0e758c687b feat: set idp logo defaul url 2025-04-29 09:54:25 +02:00
Christian Richter
16307e036d add new property IdentifierDefaultLogoTargetURI
Signed-off-by: Christian Richter <c.richter@opencloud.eu>
2025-04-28 13:36:13 +02:00
Michael Barz
cff4c78e8e feat: add post logout redirect uris for mobile clients 2025-03-17 17:46:18 +01:00
Jörn Friedrich Dreyer
54ab714a8f add sign in page text (#377)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Alex <abackermann91@gmail.com>
Co-authored-by: Michael Barz <mbarz@owncloud.com>
2025-03-14 10:50:58 +01:00
Ralf Haferkamp
8e1f68f315 Reset 'introductionVersion" struct tag to 1.0.0 2025-02-24 11:40:33 +01:00
Alex Ackermann
cf5b4f7dbf Change client names in idp 2025-02-11 09:52:32 +01:00
Ralf Haferkamp
0716b40fa0 Adjust LDAP Schema for new name 2025-01-29 11:58:57 +01:00
Ralf Haferkamp
3ef390c16b fix tld for ios client
Co-authored-by: Andre Duffeck <aduffeck@users.noreply.github.com>
2025-01-28 11:18:41 +01:00
Ralf Haferkamp
58940798bc Rebrand default IDP clients 2025-01-28 09:44:46 +01:00
Jörn Friedrich Dreyer
3df9ed3b91 use existing schema
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-01-16 12:26:46 +01:00
Jörn Friedrich Dreyer
95cd876ad8 leave supported clients as is
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-01-16 12:26:26 +01:00
Jörn Friedrich Dreyer
8e3ddfa725 idp
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-01-16 11:55:55 +01:00
Ralf Haferkamp
213e9663a9 Rename go-micro services 2025-01-16 09:45:46 +01:00
Jörn Friedrich Dreyer
5aa5ab843a ociscfg -> occfg
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-01-14 12:44:00 +01:00
Jörn Friedrich Dreyer
b07b5a1149 use plain pkg module
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-01-13 16:42:19 +01:00
Jörn Friedrich Dreyer
a46fd132bd use OC_ env prefix
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-01-13 16:11:11 +01:00
Jörn Friedrich Dreyer
8e028f17e9 change module name
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2025-01-13 09:58:18 +01:00
Juergen Weigert
0d719a7c72 fix: more colons after variables found.
cd owncloud/ocis/services
vi $(grep -l -r '[A-Z][A-Z][A-Z]:/')
2024-10-02 09:09:47 +02:00
Thomas Müller
a8cbc612cc chore: remove unused return value from BindSourcesToStructs (#9033) 2024-04-30 18:18:31 +02:00
Thomas Müller
ba2a658377 chore: fix typo in DyamicClientSecretDurationSeconds 2024-04-03 09:37:18 +02:00
Florian Schade
6840de574a enhancement: same site strict cookies (#8716)
To enhance the security of our application and prevent Cross-Site Request Forgery (CSRF) attacks, we have updated the
SameSite attribute of the build in Identity Provider (IDP) cookies to Strict.
2024-03-25 10:16:10 +01:00
Phil Davis
ae584af350 Adjust introductionVersion pre5.0 and 5.0
as per suggestions by micbar

Co-authored-by: Michael Barz <mbarz@owncloud.com>
2024-03-06 17:53:43 +05:45
Phil Davis
9d2be66a85 chore: add introductionVersion pre5.0 to environment variable docs 2024-03-06 17:50:20 +05:45
Benedikt Kulmann
7f2d2d2ca4 Merge pull request #7900 from brandon1024/idp-bg-config
feat(idp): support login page background configuration
2024-01-31 15:02:34 +01:00
Ralf Haferkamp
dca0c653fb Removed deprecated envars scheduled for removal with 5.0.0
Fixes: #8025
2024-01-09 11:28:31 +01:00
Brandon Richardson
9bbd993dfb feat(idp): support login page background configuration
This revision introduces a new environment variable
`IDP_LOGIN_BACKGROUND_URL` that overrides the default background image
of the IDP login page when present.
2024-01-05 11:27:25 -04:00
mmattel
5e74b50efb [docs-only] Fix envvars with a array slice ([]string) 2023-11-09 12:22:59 +01:00
Ralf Haferkamp
8f284e7c2b Add OCIS_LDAP_BIND_PASSWORD envvar and deprecate LDAP_BIND_PASSWORD
For some reason LDAP_BIND_PASSWORD was forgotten when all the other global LDAP_
variables got renamed.

Also marks LDAP_BIND_PASSWORD and LDAP_USER_SCHEMA_ID_IS_OCTETSTRING for removal with 5.0.0

Partial: #7176
2023-09-20 19:00:11 +02:00
Christian Richter
d7139d4127 remove deprecated variables
Signed-off-by: Christian Richter <crichter@owncloud.com>
2023-08-22 17:25:24 +02:00
Daniel Swärd
3c02f3b355 Merge pull request #6856 from owncloud/ainmosni/tracing/idp
Convert IDP service to service trace provider.
2023-07-26 11:18:18 +02:00
mmattel
ce318ca160 [docs-only] Replace double quotes with single quotes in envvar descriptions 2023-07-25 13:05:30 +02:00
Daniël Franke
d2d0461375 Convert IDP service to service trace provider.
This converts the IDP service to use the service trace provider.
2023-07-20 13:36:08 +02:00
mmattel
6ad53971ef [docs-only] Increase readability for log level values in the description 2023-07-07 10:33:42 +02:00
mmattel
d7b447b791 [docs-only] Increase readability for tracing values in the description 2023-07-07 09:50:39 +02:00
mmattel
758192bd6d [docs-only] Fix some envvar descriptions 2023-06-09 13:03:17 +02:00
Willy Kloucek
0f3dddafab remove references to oc.ios://ios.owncloud.com since it is no longer used 2023-06-05 13:57:05 +02:00
Ralf Haferkamp
7a4bc71e65 Revert "idp/proxy: Match users by ID instead of name by default"
This reverts commit 52951b42b0.

The change broke authentication for at least the desktop client when
using the builtin idp. There seem to be issues in the IDP (lico) which
result in the implicit scoped not being added correctly in some case.
When that scope is missing the `lg.uuid` claim will not be present in
the userinfo and we can correctly match users by id.

This reverts back to the old behaviour of matching users by name. Which
also brings some aspects of https://github.com/owncloud/ocis/issues/904

Fixes #6415
2023-06-01 11:13:47 +02:00
Ralf Haferkamp
52951b42b0 idp/proxy: Match users by ID instead of name by default
Reconfigure the oidc clients for lico, so that lico adds the "lg.uuid" to
tokens and userinfo by default. That claim will contain the userid. So
we can now use the userid for matching users when using the default
idm/idp configuration. This fixes further problems so that users being
recreated with the same name are correctly treated as differnt users.

Fixes: #904
2023-05-23 09:48:47 +02:00
Ralf Haferkamp
2baf86900d idp: Use the UUID attribute for computing the "sub" claim
This avoids that recreating the user with the same name will create the
same "sub" claim. Even though it gets a new UUID

Fixes: #904
2023-05-16 17:25:55 +02:00
mmattel
67b7b6bad5 [docs-only] Fix IDP envvar description 2023-05-04 08:39:32 +02:00
mmattel
8ed34926ef [docs-only] Correct the removal version according semver to 4.0.0 2023-04-19 10:16:06 +02:00
Martin
a5e99d39b1 Update IDM config.go
Fixes: 5906

After clarification and renaming th envvar and post a discussion with @rhafer, we should align the yaml name to the envvar name. Note that the backend name (`Insecure`) is not changed.
* In the deployment examples, we use ennvars and no yaml
* ocis init does not use it
2023-04-06 11:58:09 +02:00
Daniel Swärd
afbfd2d6b2 Deprecating and renaming many environment variables
Fixes #5767
Fixes #5905
Fixes #5532
2023-04-05 11:05:48 +02:00
mmattel
949e5c228f [docs-only] Rename / Deprecate userlog and eventhistory envvars 2023-04-04 11:07:31 +02:00
Daniel Swärd
f09d3c5a19 idp: Change name of environment variable to be more consistent. 2023-04-04 09:24:14 +02:00
Dennis Sieben
e28603e633 - fixed typos 2023-03-27 08:54:51 +02:00
mmattel
d25102c11e update 2023-03-22 17:02:34 +01:00
mmattel
777c302bc9 [docs-only] Clarify the description of the TLS_IDP envvar 2023-03-22 16:53:14 +01:00
Jörn Friedrich Dreyer
971dbe8682 bump lico to 0.59.4 (#5768)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-03-08 17:25:55 +01:00
David Christofas
924c2ca346 add missing comments 2023-03-06 19:01:16 +01:00