Commit Graph

397 Commits

Author SHA1 Message Date
Jörn Friedrich Dreyer 2930ac5282 small doc fixes
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-06-15 10:50:22 +00:00
Jörn Friedrich Dreyer 9b7149d8cc make idp only wait for certs when using ldap
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-06-15 09:23:25 +02:00
Willy Kloucek 444ffa5e75 add more configuration descriptions 2022-06-14 14:58:27 +02:00
Willy Kloucek 33299ceb3e Merge pull request #3960 from wkloucek/add-more-config-doc
add more config option documentation
2022-06-14 14:07:03 +02:00
Willy Kloucek c767b7efd1 Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at>
2022-06-14 13:23:18 +02:00
Willy Kloucek c450f45b25 Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at>
2022-06-14 13:21:52 +02:00
Willy Kloucek 7b87df02e1 Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at>
2022-06-14 13:17:24 +02:00
Willy Kloucek a308d5eeb1 Update extensions/app-provider/pkg/config/config.go
Co-authored-by: Martin <github@diemattels.at>
2022-06-14 13:03:17 +02:00
Willy Kloucek 7bc96443f6 unify log and tracing descriptions 2022-06-14 11:48:46 +02:00
Willy Kloucek 61e89ea48f fix tracing collecotr and endpoint descriptions 2022-06-14 10:57:36 +02:00
Jörn Friedrich Dreyer 028122da88 Merge pull request #3959 from owncloud/thumbnails-log
make thumbnails service log less noisy
2022-06-14 07:48:58 +00:00
Jörn Friedrich Dreyer f76cc17eb1 Merge pull request #3957 from owncloud/make-ocdav-service-behave
Make ocdav service behave
2022-06-14 07:48:06 +00:00
Martin c0ca11feb3 Merge pull request #3958 from owncloud/ocdav-namespace-docs
[docs-only] document ocdav namespaces config options
2022-06-13 15:54:06 +02:00
Willy Kloucek 751b90f332 add more config option documentation 2022-06-13 15:45:24 +02:00
Jörn Friedrich Dreyer 61257ef291 pass tracing config only when enabled
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-06-13 13:24:27 +00:00
David Christofas 46c2dd5b51 make thumbnails service log less noisy 2022-06-13 15:16:45 +02:00
Jörn Friedrich Dreyer 1a153527f8 cleanup whitespace 2022-06-13 13:16:00 +00:00
Jörn Friedrich Dreyer 2598ff623e document ocdav namespaces config options 2022-06-13 15:13:57 +02:00
David Christofas 4231d3768b Merge pull request #3956 from owncloud/default-roles
don't setup demo role assignments on default
2022-06-13 15:04:23 +02:00
David Christofas 358807fbbb Merge pull request #3955 from wkloucek/remove-unused-ocs-config-option
remove unused `OCS_STORAGE_USERS_DRIVER` configuration option
2022-06-13 13:35:46 +02:00
Jörn Friedrich Dreyer f3b53bf6d3 link issue for FIXME
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-06-13 11:04:31 +00:00
Jörn Friedrich Dreyer 176b560274 properly shut down service on kill signal
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-06-13 11:04:06 +00:00
Jörn Friedrich Dreyer 249f90fa3d actually pass tracing config to service
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-06-13 11:03:23 +00:00
David Christofas 21f6285b02 don't setup demo role assignments on default 2022-06-13 11:56:23 +02:00
Willy Kloucek a319b17459 remove unused OCS_STORAGE_USERS_DRIVER configuration option 2022-06-13 11:30:28 +02:00
Willy Kloucek 68a6f43538 fix version info 2022-06-13 10:43:52 +02:00
David Christofas ee184a046f handle event container created in audit service 2022-06-10 12:08:49 +02:00
Christian Richter bea9f2cb76 Merge pull request #3925 from owncloud/improve-graph
add memberOf to /users endpoint and members to /groups endpoint
2022-06-09 15:21:14 +02:00
Ralf Haferkamp d6e695076d Rework default role provisioning
This reworks the assignment of the default role at login. The assignment
now only happens if settings service is reachable and the current user
does not have an assignment yet (we check for the NotFound status).
If the settings service returns an error other than 404, the
GetUserByClaims() (and with it the authentication) will also error out.

Closes: #3900
2022-06-09 14:36:29 +02:00
Ralf Haferkamp 15fabb155f Remove bootstrapping workaround for ListRoleAssignments
Previously ListRoleAssignments needed to be able to return the default
assignments when the metadata client was not initialized. This was added
in order to be able to bootstrap the metadata client (which caused a
call to ListRoleAssignments by itself). With the recent switch to a
separate user-provider and permissions service for the metadata storage
this no longer needed.
2022-06-09 14:36:29 +02:00
Christian Richter c4f7a36f29 incorporate requested changes
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:36:23 +02:00
Christian Richter c358540361 add memberOf slice to /user/{id} & members slice to /groups/{id} endpoint
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:36:23 +02:00
Christian Richter fc3737f0cf add groups to /users endpoint
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-09 14:35:14 +02:00
Benedikt Kulmann cdcfca268e Update web to v5.5.0-rc.9 for ocis beta.3 2022-06-08 12:34:12 +02:00
David Christofas 4470c045ed fix webdav URL of drive roots in graph API 2022-06-02 14:24:56 +02:00
Ralf Haferkamp 24178e381b Fix inconsistent env var naming for LDAP filter configuration
There was a naming inconsitency for the enviroment variables used to define
LDAP filters for user and groups queries. Some services used `LDAP_USER_FILTER`
while others used `LDAP_USERFILTER`. This is now changed to use `LDAP_USER_FILTER`
and `LDAP_GROUP_FILTER`

Closes: #3890
2022-06-01 15:35:08 +02:00
Jörn Friedrich Dreyer 45522e4fea Merge pull request #3891 from owncloud/addmissingdefaultconfig
add missing default config
2022-05-31 11:19:27 +00:00
Willy Kloucek f7473df54b fix test by using insecure ldap 2022-05-31 12:04:09 +02:00
Willy Kloucek bfbab26d85 fix multiple ldap insecure options 2022-05-31 10:53:00 +02:00
David Christofas b3569d615b Merge pull request #3888 from owncloud/graph-cacert
add config option to provide TLS certificate
2022-05-31 09:58:21 +02:00
David Christofas 0f23ce6bed add config option to provide TLS certificate 2022-05-30 17:04:14 +02:00
Ralf Haferkamp 082c66beb7 graph: Fix role-id extraction from token
We can't use ReadPlainFromOpaque here since the OpaqueEntry entry is
"json" encoded (not "plain").

Fixes: #3893
2022-05-30 16:18:57 +02:00
Jörn Friedrich Dreyer 1a16384eee add missing default config
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-30 12:44:39 +00:00
Ralf Haferkamp 690a2bd1db Use utlis function to void nil pointer panics
Co-authored-by: kobergj <juliankoberg@googlemail.com>
2022-05-24 17:39:01 +02:00
Ralf Haferkamp 0ec88ed5d2 Fix typo
Co-authored-by: David Christofas <dchristofas@posteo.de>
2022-05-24 17:39:01 +02:00
Ralf Haferkamp 38127757e4 Add user autoprovisioning via libreGraph
When removing the accounts service we lost the user autoprovision
feature. This re-introduces it. When autoprovisioning is enabled (via
PROXY_AUTOPROVISION_ACCOUNTS, as in the past) accounts that are not
resolvable via cs3 will be provsioned via the libregraph API.

Closes: #3540
2022-05-24 17:39:01 +02:00
Ralf Haferkamp d322e50167 Return "nameAlreadyExists" error properly
When trying to create a user that already exist return a proper
error, that clients can check for.
2022-05-24 17:39:01 +02:00
Ralf Haferkamp a6f05e761e Let graph auth middleware add the roleids to the context
They were also added by the ExtractAccountUUID for the /drives endpoint.
We'll need some on other endpoints as well (for automatic user
provisioning).
2022-05-24 17:39:01 +02:00
Ralf Haferkamp a755f23e55 fix env separator in config struct annotation 2022-05-24 17:39:01 +02:00
Benedikt Kulmann 43a55161a9 Bump web to 5.5.0-rc.8 2022-05-24 14:38:08 +02:00