Commit Graph

2232 Commits

Author SHA1 Message Date
Ralf Haferkamp a5287af3bd fix(sharing-ng): Set permission id on space invitation response
When inviting a user to a space we now generate permission ids (based on
the invited user's/group's id)
2024-03-25 12:30:33 +01:00
Florian Schade 6840de574a enhancement: same site strict cookies (#8716)
To enhance the security of our application and prevent Cross-Site Request Forgery (CSRF) attacks, we have updated the
SameSite attribute of the build in Identity Provider (IDP) cookies to Strict.
2024-03-25 10:16:10 +01:00
ownClouders 7611f70dc5 [tx] updated from transifex 2024-03-25 05:38:06 +00:00
jkoberg 73a2ee5f87 initiatorid for uploads
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-22 15:15:55 +01:00
jkoberg 3a919ba7b9 add etag to sse event
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-22 15:15:55 +01:00
jkoberg 5f6c131477 add initiatorid to sse event
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-22 15:15:55 +01:00
Christian Richter 35d536f901 Merge pull request #8518 from dragonchaser/cors-issues
[full-ci] adapt cors headers
2024-03-20 14:43:33 +01:00
ownClouders fc95abd9ab [tx] updated from transifex 2024-03-20 03:44:03 +00:00
mmattel 5e2762774f [docs-only] Align web service readme with admin docs 2024-03-19 15:11:43 +01:00
Christian Richter fe4cd7a901 make code more readable
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-03-19 14:21:21 +01:00
Christian Richter b5ca297f54 prevent nil pointer
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-03-19 13:56:10 +01:00
Christian Richter 72916dc53c adapt cors headers
Signed-off-by: Christian Richter <crichter@owncloud.com>
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-03-19 10:54:58 +01:00
Martin cdd726aa37 Merge pull request #8688 from owncloud/mmattel-patch-1
Web README update
2024-03-19 09:52:25 +01:00
Christian Richter 2c50a89cd5 Merge pull request #8541 from dragonchaser/static-well-knowns
[full-ci] Move static `.well-knowns` for oidc from middleware to static route
2024-03-19 09:46:11 +01:00
Martin 627aa801b2 Web README update 2024-03-19 09:27:13 +01:00
Christian Richter 5cc286b8ef incorporate requested changes
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-03-19 08:38:54 +01:00
ownClouders 0473224bb9 [tx] updated from transifex 2024-03-19 00:40:36 +00:00
Christian Richter d31f5b9e15 remove obsolete comment
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-03-18 16:56:10 +01:00
Christian Richter 29549fade7 kill oidc well known middleware and move it to static route
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-03-18 16:56:10 +01:00
Christian Richter 1323a554bc move static routes to seperate package
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-03-18 16:56:10 +01:00
Roman Perekhod 246f7bf538 internal links shouldn't have a password (#8668)
* internal links shouldn't have a password

* commented out incorrect cases
2024-03-18 15:23:10 +01:00
Roman Perekhod 8f0364e015 Merge pull request #8543 from 2403905/issue-8471
fix the mount points naming
2024-03-18 12:36:08 +01:00
Roman Perekhod 9d2815b5ef Merge pull request #8651 from owncloud/fix-cors-patch-method
add PATCH to default allowed CORS methods
2024-03-18 12:33:27 +01:00
Ralf Haferkamp dcdbfd81d4 chore: rework cs3ReceivedSharesToDriveItems to make linter happy 2024-03-18 11:53:57 +01:00
Ralf Haferkamp 2352145b98 graph(sharing-ng): Permission on Spaceroots need to have an id
In order to work with (e.g. get/delete) permissions granted to space
we need to give them a stable id. As the CS3 API don't provide an id
we generate it base on the id of the identity that the permission applies
to. For users we use "u:<userid>" for groups "g:<groupid>".

Closes: #8352
2024-03-18 11:53:57 +01:00
Ralf Haferkamp a326d95232 enhancement(sharing): Return space permissions when looking up space root
Partial-Fix: #8352
2024-03-18 11:53:57 +01:00
Ralf Haferkamp 0f33c7ae96 enhancement(graph): cs3PermissionsToLibreGraph can also return v1beta1 format
This reworks the cs3PermissionsToLibreGraph() so that it is able to return
the libreGraph.Permissions in the legacy and the new v1beta1 format. The main
differences between both are that v1beta1 returns the identities in the
'grantedToV2' property and the 'roles' are returned as IDs instead of the
legacy role names.
2024-03-18 11:53:57 +01:00
Ralf Haferkamp 8fdfa1aee7 enhancement(graph): Remove unneded Coowner Role
This role was renamed to "Manager" a while ago.
2024-03-18 11:53:57 +01:00
dependabot[bot] a2660d1974 build(deps): bump follow-redirects in /services/idp
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.4...v1.15.6)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 09:45:00 +01:00
jkoberg f1a6472a6d disable multiparts uploads
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-15 15:59:57 +01:00
mmattel a2526bcf66 [docs-only] Update storage-users readme 2024-03-15 12:12:01 +01:00
mmattel f44e48e9e3 Add deprecation info for resharing
Co-authored-by: Christian Richter <crichter@owncloud.com>
2024-03-15 10:21:57 +01:00
ownClouders ee1178dea5 [tx] updated from transifex 2024-03-15 00:05:57 +00:00
Jörn Friedrich Dreyer 55c06b53bf add PATCH to default allowed CORS methods
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-03-14 13:51:32 +01:00
Roman Perekhod cd629c7521 fix the mount points naming 2024-03-13 17:26:57 +01:00
kobergj 02ea79c1c7 Merge pull request #8634 from owncloud/bump-web-9.0.0-alpha.2
[full-ci] chore: bump web to v9.0.0-alpha.2
2024-03-13 10:19:26 +01:00
Benedikt Kulmann b7aa2873f8 chore: bump web to v9.0.0-alpha.2 2024-03-13 09:37:29 +01:00
Martin 4a531c0a8c [docs-only] Just a small text fix for an envvar in storage-users 2024-03-13 08:36:50 +01:00
ownClouders ea347343be [tx] updated from transifex 2024-03-13 04:05:21 +00:00
kobergj 9b61096ad6 fix: static spaceid format for sse (#8625) 2024-03-12 12:42:15 +01:00
kobergj 7b92907713 enhancement: add spaceid to sse (#8620)
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-12 10:59:03 +01:00
Christian Richter ef188a14f7 Merge pull request #8608 from kobergj/BumpReva
[full-ci] Bump Reva
2024-03-11 15:34:34 +01:00
jkoberg a3044d1dd2 fix: pass signature and expiration through thumbnailer
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-11 13:54:07 +01:00
ownClouders 70dc3b67aa [tx] updated from transifex 2024-03-11 00:41:41 +00:00
ownClouders 8cfefc9b9d [tx] updated from transifex 2024-03-09 00:06:21 +00:00
kobergj e4ff26cd7e Merge pull request #8603 from kobergj/LockEventSSE
File(Un)Locked SSE
2024-03-08 14:52:37 +01:00
jkoberg 271a591850 send sse when file is locked/unlocked
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-07 13:46:43 +01:00
jkoberg a0e2648200 get template from request
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-07 13:01:51 +01:00
jkoberg edbc82bfc1 poc: server side space defaults
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-07 13:01:51 +01:00
ownClouders 2e7f0252f2 [tx] updated from transifex 2024-03-07 00:06:21 +00:00