Commit Graph

103 Commits

Author SHA1 Message Date
jkoberg
481e332d52 don't protect unprotected endpoint
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-04-04 10:01:26 +02:00
Michael Barz
b15db1794a update reva to version 2.0.0 (#3258) 2022-03-03 19:56:04 +01:00
Florian Schade
e8702087f3 allow requesting capabilities from password protected links 2022-02-23 18:46:25 +01:00
Juan Pablo Villafáñez
7d8e334537 Revert v1 to v0 2022-01-31 12:17:56 +01:00
Juan Pablo Villafáñez
7bfb6c7d3e Migrate proto files for store and adjust paths 2022-01-31 09:35:40 +01:00
Juan Pablo Villafáñez
7557e4e0ea Migrate proto files for settings and adjusts paths 2022-01-31 09:35:39 +01:00
Juan Pablo Villafáñez
6c67ff765e Adjust import paths and service urls in index.js 2022-01-31 09:26:23 +01:00
David Christofas
0bfc1f08b7 implement graph endpoint to delete spaces 2022-01-20 11:34:15 +01:00
David Christofas
a85644cddd enable signature auth in public share auth middleware 2021-12-09 17:47:36 +01:00
Willy Kloucek
62704ceb2e fix double "the" 2021-11-15 13:24:26 +01:00
Willy Kloucek
7dca7b4fae set only user oidc claim only if cs3 claim is userid 2021-11-15 10:31:07 +01:00
Willy Kloucek
d05df2f85e fix basic auth with custom user claim 2021-11-11 11:43:10 +01:00
Florian Schade
b416763599 fix(public-share): basic auth password prefix
fix wrong basic auth password prefix
2021-10-20 14:34:11 +02:00
Florian Schade
03de49e59b remove dev leftover 2021-10-18 15:48:09 +02:00
Florian Schade
0c66bdd6ad feat(public-token): get public-token from query string
retrieving public-token also from the query-string
2021-10-18 14:55:55 +02:00
David Christofas
fb0380820c enable archiver for public shares 2021-10-15 17:45:06 +02:00
David Christofas
5713fe81a4 add public share auth middleware 2021-10-15 16:48:43 +02:00
David Christofas
04a8ef7c35 fix the account resolver middleware 2021-09-29 10:19:12 +02:00
Ishank Arora
08c51ee8c8 Use reva's Authenticate method instead of spawning token managers 2021-09-21 15:50:19 +02:00
Willy Kloucek
b2d53b9ca1 always set cookie 2021-09-15 13:09:15 +02:00
Ralf Haferkamp
3a42fdc578 Move to go-chi/chi v5 2021-08-24 17:48:37 +02:00
A.Unger
46f0d6f7e4 remove dead code 2021-08-18 14:06:02 +02:00
Alex Unger
06fda516ec Update proxy/pkg/middleware/accesslog.go
Co-authored-by: David Christofas <dchristofas@owncloud.com>
2021-08-18 14:03:19 +02:00
A.Unger
0f0d305f6d linter: fix var name 2021-08-18 11:25:44 +02:00
A.Unger
1dd4644370 fix requestid 2021-08-18 11:10:50 +02:00
David Christofas
ed85fedf1a update github.com/coreos/go-oidc to version 3.0.0 2021-08-13 09:55:17 +02:00
David Christofas
eacdb8fa2f Merge pull request #2386 from owncloud/switch-jwt-lib
switch jwt library
2021-08-12 17:24:57 +02:00
David Christofas
b8150f25b8 switch jwt library
The old library github.com/dgrijalva/jwt-go is now unmaintained and was replaced by the community maintained fork github.com/golang-jwt/jwt
2021-08-12 16:53:17 +02:00
Jörn Friedrich Dreyer
55aacdea13 update reva to ec4099da
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-08-12 11:08:10 +00:00
Jörn Friedrich Dreyer
c3951d67c8 forward basic auth to OpenID connect token authentication endpoint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-26 11:12:33 +00:00
Jörn Friedrich Dreyer
bea986fe26 pass only request instead of context
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 09:03:14 +00:00
Willy Kloucek
a0dce56480 use cookie to enforce routing for regex and claim selector 2021-07-23 08:38:55 +00:00
Jörn Friedrich Dreyer
cb70f4882f add todo for x-access-header handling
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:33:18 +00:00
Jörn Friedrich Dreyer
4385d3dacb add RegexSelector
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:22:40 +00:00
Jörn Friedrich Dreyer
40c8031441 add claims policy selector
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-23 08:07:17 +00:00
Jörn Friedrich Dreyer
2293403d45 use errors.Is()
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-22 16:35:31 +00:00
Jörn Friedrich Dreyer
1f3e963c29 use claims map instead of struct
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-22 09:20:36 +00:00
Jörn Friedrich Dreyer
b148faada6 Merge pull request #2294 from owncloud/fix-trashbin-expected-failures
Fix Trashbin Expected Failures
2021-07-21 20:59:43 +02:00
A.Unger
74696dbd36 remove redundant line 2021-07-19 13:29:12 +02:00
Jörn Friedrich Dreyer
8c7f1f01ff do not try to add the selected policy to the context
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-14 20:45:38 +00:00
Jörn Friedrich Dreyer
1dc7aac6fd proxy access log
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-14 13:14:27 +00:00
A.Unger
7ab586b2ab proxy is now aware of webdav responses 2021-07-13 15:38:44 +02:00
A.Unger
bfdcc0180c fix 230, 231 - first draft 2021-07-13 14:33:24 +02:00
A.Unger
ac49348b41 fix 215, 216 - first draft 2021-07-13 14:29:26 +02:00
Ishank Arora
29c5cb627a Update scope usage and add Changes for lightweight accounts 2021-07-13 13:03:06 +02:00
Michael Barz
34e0877df7 Merge pull request #1951 from ishank011/uid-gid-user-object
Use CS3 user object fields to store UID and GID
2021-06-25 10:06:14 +02:00
Ishank Arora
6168ee7095 Use CS3 user object fields to store UID and GID 2021-06-16 18:05:40 +02:00
Willy Kloucek
ed94da5104 ignore authentication header on status.php 2021-06-16 16:59:11 +02:00
David Christofas
f6ac50244b update invocations of MintToken and DismantleToken 2021-05-11 14:18:43 +02:00
David Christofas
c532073dd1 remove JWT from logs
secrets should not be exposed in the logs
2021-03-03 15:30:11 +01:00