Commit Graph

1293 Commits

Author SHA1 Message Date
Michael Barz 58d8c1aa8a fix disable users by group 2023-06-02 17:42:51 +02:00
Roman Perekhod cd39dd4073 Fix to prevent the email notification X-Site scripting 2023-06-02 09:47:06 +02:00
Ralf Haferkamp 7a4bc71e65 Revert "idp/proxy: Match users by ID instead of name by default"
This reverts commit 52951b42b0.

The change broke authentication for at least the desktop client when
using the builtin idp. There seem to be issues in the IDP (lico) which
result in the implicit scoped not being added correctly in some case.
When that scope is missing the `lg.uuid` claim will not be present in
the userinfo and we can correctly match users by id.

This reverts back to the old behaviour of matching users by name. Which
also brings some aspects of https://github.com/owncloud/ocis/issues/904

Fixes #6415
2023-06-01 11:13:47 +02:00
Roman Perekhod 366d1c2c10 Fix the empty exact list while searching for a sharee #issue-4265 2023-05-31 15:46:11 +02:00
jkoberg 5eae568a32 use correct logo permission name
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-31 15:02:14 +02:00
jkoberg b41b1ec4cb rename permssions
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-30 10:35:51 +02:00
Jörn Friedrich Dreyer 632b206675 trace proxie middlewares (#6313)
* trace proxie middlewares

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* Update ocis-pkg/service/grpc/client.go

Co-authored-by: Christian Richter <1058116+dragonchaser@users.noreply.github.com>

* default tls is off

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

---------

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Christian Richter <1058116+dragonchaser@users.noreply.github.com>
2023-05-27 10:18:24 +02:00
Jörn Friedrich Dreyer b8bdd4573a introduce otlp tracing (#5132)
* introduce otel tracing

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* use new trace provider initialization

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* work

* bump reva

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* remove commented code

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* add vendor changes

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

---------

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-05-26 22:21:03 +02:00
Roman Perekhod e57e6046d3 Fix preview or viewing of shared animated GIFs (#6386)
* Fix preview or viewing of shared animated GIFs

---------

Co-authored-by: Roman Perekhod <rperekhod@owncloud.com>
2023-05-26 14:52:12 +02:00
jkoberg 9beb6090eb bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-25 15:52:01 +02:00
kobergj 924f0c408d Merge pull request #6370 from kobergj/AddFulltextsearchCapability
Add Fulltextsearch Capability
2023-05-25 15:50:43 +02:00
jkoberg 70391a0bf2 unify CACERT envvars
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-25 13:32:37 +02:00
Ralf Haferkamp 47f5245f55 ocis_keycloak: Fix deployment example
After commit 52951b42b0 we need to set PROXY_USER_CS3_CLAIM and
PROXY_USER_OIDC_CLAIM for the keycloak example to still work.

Also update release notes to mentions the changed default.
2023-05-24 17:12:38 +02:00
jkoberg 50ef698fda add fulltextsearch capability
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-24 13:58:37 +02:00
Benedikt Kulmann 9ab16e9e48 docs: add changelog item for web v7.0.0-rc.38 2023-05-24 12:42:05 +02:00
Michael Barz c08439f23b Merge pull request #6361 from 2403905/issue-6359
remove the email logo
2023-05-23 12:42:57 +02:00
Roman Perekhod 069e751c2d Merge pull request #6358 from 2403905/issue-6197
Fix error status when the user share the locked file
2023-05-23 12:31:16 +03:00
Ralf Haferkamp 52951b42b0 idp/proxy: Match users by ID instead of name by default
Reconfigure the oidc clients for lico, so that lico adds the "lg.uuid" to
tokens and userinfo by default. That claim will contain the userid. So
we can now use the userid for matching users when using the default
idm/idp configuration. This fixes further problems so that users being
recreated with the same name are correctly treated as differnt users.

Fixes: #904
2023-05-23 09:48:47 +02:00
Roman Perekhod 55b3bd2db7 Fix error status when the user share the locked file 2023-05-22 15:59:48 +02:00
Michael Barz 827116791b Merge pull request #6363 from owncloud/release-3.0.0-rc.4
[full-ci] prepare changelog, bump version
2023-05-22 15:52:45 +02:00
kobergj bf2103d65c Merge pull request #6362 from kobergj/DefaultLDAPWriteEnabledToTrue
Default `LDAP_WRITE_ENABLED` to true
2023-05-22 15:45:43 +02:00
Roman Perekhod 53f71bea13 remove the email logo 2023-05-22 15:29:44 +02:00
Benedikt Kulmann 6837006b58 chore: update web changelog item 2023-05-22 14:55:02 +02:00
Michael Barz 46696bffeb prepare changelog, bump version 2023-05-22 14:33:15 +02:00
jkoberg b3ec78ab24 default LDAP_WRITE_ENABLED to true
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-22 14:25:05 +02:00
jkoberg 2a5caf74e8 idcache configuration
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-22 09:51:37 +02:00
jkoberg 98e2778f1a bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-17 19:31:01 +02:00
jkoberg c76fb5f412 add graph user capabilities
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-17 19:27:07 +02:00
Michael Barz 8173bb3323 Merge pull request #6340 from owncloud/update-reva
[full-ci] update reva to 2.13.3
2023-05-17 19:23:44 +02:00
Ralf Haferkamp 1d85593c7e graph: Adjust defaults for user, group and SpaceProperties caches
The old default ttl of 30 minutes for the caches seems way too long. It
could cause outdated information users or groups to be returned for
quite a while. Especially since the TTL was reset every time an entry was
fetched from the cache. This is disabled now as well.

Fixes: #6320
2023-05-17 16:16:24 +02:00
Martin 55b5caec0b Merge pull request #6328 from owncloud/option-OpenLinksWithDefaultApp
Add config var OpenLinksWithDefaultApp
2023-05-17 15:15:11 +02:00
Jan d345db7dec Add config var OpenLinksWithDefaultApp 2023-05-17 14:31:52 +02:00
Michael Barz 9d050e237a update reva 2023-05-17 12:02:34 +02:00
Christian Richter 8f847501dc Merge pull request #6309 from dragonchaser/issue-4472-shared-jail-quote-api
remove quote from api response in share jails
2023-05-17 08:16:51 +02:00
Ralf Haferkamp 2baf86900d idp: Use the UUID attribute for computing the "sub" claim
This avoids that recreating the user with the same name will create the
same "sub" claim. Even though it gets a new UUID

Fixes: #904
2023-05-16 17:25:55 +02:00
Michael Barz 02fe615e1c update the default roles 2023-05-15 22:17:50 +02:00
Christian Richter 8cf35ba18e remove quote from api response in share jails
Signed-off-by: Christian Richter <crichter@owncloud.com>
2023-05-15 17:01:58 +02:00
Jörn Friedrich Dreyer 62878b6428 bump reva to e00c55c0a4d3
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-05-15 10:29:56 +02:00
Roman Perekhod 554e109141 Merge pull request #6276 from 2403905/issue-6037
fix the wrong status code when appRoleAssignments is forbidden #6037
2023-05-12 17:03:04 +02:00
jkoberg a324ad48a0 add a store to postprocessing
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-05-12 11:04:41 +02:00
Michael Barz 43ed7392be add missing response body to blocked requests 2023-05-11 16:31:19 +02:00
Roman Perekhod 082e450677 fix the wrong status code when appRoleAssignments is forbidden #6037 #6035 2023-05-11 09:39:41 +02:00
Roman Perekhod 21dfe2d7ca Merge pull request #6259 from 2403905/issue-5431
Omitempty givenName attribute when create user #5431
2023-05-10 09:52:25 +02:00
Roman Perekhod 11e51b9812 Omitempty givenName attribute when creating user #5431 2023-05-09 16:40:23 +02:00
Christian Richter 645f2b2423 Add debug env var for av
Co-authored-by: Julian Koberg <jkoberg@owncloud.com>

Signed-off-by: Christian Richter <crichter@owncloud.com>
2023-05-09 15:44:34 +02:00
Michael Barz d3a49c8b88 web changelog [skip ci] 2023-05-08 17:55:52 +02:00
Michael Barz c53da6ba96 reva changelog 2023-05-08 17:36:44 +02:00
Michael Barz aed04c983f bump version, prepare changelog 2023-05-08 17:28:42 +02:00
Roman Perekhod d69decdafe fix Graph delete request leaks existence of space #5031 2023-05-08 16:13:52 +02:00
Michael Barz 8cef413f02 Update fix-web-config.md 2023-05-08 15:14:17 +02:00