Commit Graph

204 Commits

Author SHA1 Message Date
Thomas Müller
de4ac360bc Merge pull request #8770 from owncloud/chore/typos-and-other-tourette-triggers
fix: typos, naming clashes, error messages and deprecations
2024-04-04 11:08:46 +02:00
Thomas Müller
07f0cd5574 fix: typos, naming clashes, error messages and deprecations 2024-04-03 15:34:36 +02:00
Thomas Müller
ba2a658377 chore: fix typo in DyamicClientSecretDurationSeconds 2024-04-03 09:37:18 +02:00
Florian Schade
6840de574a enhancement: same site strict cookies (#8716)
To enhance the security of our application and prevent Cross-Site Request Forgery (CSRF) attacks, we have updated the
SameSite attribute of the build in Identity Provider (IDP) cookies to Strict.
2024-03-25 10:16:10 +01:00
dependabot[bot]
a2660d1974 build(deps): bump follow-redirects in /services/idp
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.4...v1.15.6)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 09:45:00 +01:00
Phil Davis
ae584af350 Adjust introductionVersion pre5.0 and 5.0
as per suggestions by micbar

Co-authored-by: Michael Barz <mbarz@owncloud.com>
2024-03-06 17:53:43 +05:45
Phil Davis
9d2be66a85 chore: add introductionVersion pre5.0 to environment variable docs 2024-03-06 17:50:20 +05:45
Florian Schade
6814c61506 [full-ci] enhancement: allow ocis to provide custom web applications (#8523)
* enhancement: allow ocis to provide custom web applications

* enhancement: add an option to disable web apps

* test: add default logger tests

* test: add app loading tests

* test: add asset server tests

* enhancement: make use of dedicated app conf file and app asset paths

* enhancement: adjust asset locations and deprecate WEB_ASSET_PATH

* enhancement: get rid of default logger and use the service level logger instead

* Apply suggestions from code review

Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: kobergj <juliankoberg@googlemail.com>

* enhancement: use basename as app id

* Apply suggestions from code review

Co-authored-by: Martin <github@diemattels.at>

* enhancement: use afero as fs abstraction

* enhancement: simplify logo upload

* enhancement: make use of introductionVersion field annotations

---------

Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: kobergj <juliankoberg@googlemail.com>
Co-authored-by: Martin <github@diemattels.at>
2024-03-05 14:11:18 +01:00
Benedikt Kulmann
7f2d2d2ca4 Merge pull request #7900 from brandon1024/idp-bg-config
feat(idp): support login page background configuration
2024-01-31 15:02:34 +01:00
dependabot[bot]
418e304ab9 build(deps): bump follow-redirects in /services/idp
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.4.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.15.4)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-09 17:02:46 +01:00
Ralf Haferkamp
dca0c653fb Removed deprecated envars scheduled for removal with 5.0.0
Fixes: #8025
2024-01-09 11:28:31 +01:00
Jörn Friedrich Dreyer
9af780fda9 fix idp cs3 backend session refresh (#8142)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-01-08 11:05:52 +01:00
Brandon Richardson
9bbd993dfb feat(idp): support login page background configuration
This revision introduces a new environment variable
`IDP_LOGIN_BACKGROUND_URL` that overrides the default background image
of the IDP login page when present.
2024-01-05 11:27:25 -04:00
Benedikt Kulmann
da8ae85abf chore: remove outdated and unused cldr dep from kpop in idp package 2023-12-16 06:38:00 +01:00
dependabot[bot]
1788e1735c build(deps-dev): bump resolve from 1.22.4 to 1.22.8 in /services/idp
Bumps [resolve](https://github.com/browserify/resolve) from 1.22.4 to 1.22.8.
- [Commits](https://github.com/browserify/resolve/compare/v1.22.4...v1.22.8)

---
updated-dependencies:
- dependency-name: resolve
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-11 09:04:57 +01:00
dependabot[bot]
1f1b0b4e94 build(deps): bump @adobe/css-tools from 4.3.1 to 4.3.2 in /services/idp
Bumps [@adobe/css-tools](https://github.com/adobe/css-tools) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/adobe/css-tools/blob/main/History.md)
- [Commits](https://github.com/adobe/css-tools/commits)

---
updated-dependencies:
- dependency-name: "@adobe/css-tools"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-05 11:25:52 +01:00
dependabot[bot]
ee30eceb5d Bump react-i18next from 12.3.1 to 13.5.0 in /services/idp
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 12.3.1 to 13.5.0.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v12.3.1...v13.5.0)

---
updated-dependencies:
- dependency-name: react-i18next
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-05 09:38:49 +01:00
dependabot[bot]
90f186a3d0 Bump cldr from 7.4.1 to 7.5.0 in /services/idp
Bumps [cldr](https://github.com/papandreou/node-cldr) from 7.4.1 to 7.5.0.
- [Changelog](https://github.com/papandreou/node-cldr/blob/master/CHANGELOG.md)
- [Commits](https://github.com/papandreou/node-cldr/compare/v7.4.1...7.5.0)

---
updated-dependencies:
- dependency-name: cldr
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-22 11:15:12 +01:00
Roman Perekhod
7175316292 fix the tgz mime type, bump reva 2023-11-21 17:33:52 +01:00
dependabot[bot]
297089aba6 Bump axios from 1.5.0 to 1.6.1 in /services/idp
Bumps [axios](https://github.com/axios/axios) from 1.5.0 to 1.6.1.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.5.0...v1.6.1)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-13 11:12:15 +01:00
mmattel
5e74b50efb [docs-only] Fix envvars with a array slice ([]string) 2023-11-09 12:22:59 +01:00
dependabot[bot]
a83d90a1a7 Bump i18next from 23.4.6 to 23.6.0 in /services/idp
Bumps [i18next](https://github.com/i18next/i18next) from 23.4.6 to 23.6.0.
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next/compare/v23.4.6...v23.6.0)

---
updated-dependencies:
- dependency-name: i18next
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-06 09:56:55 +01:00
dependabot[bot]
378bcd55ab Bump web-vitals from 3.4.0 to 3.5.0 in /services/idp
Bumps [web-vitals](https://github.com/GoogleChrome/web-vitals) from 3.4.0 to 3.5.0.
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](https://github.com/GoogleChrome/web-vitals/compare/v3.4.0...v3.5.0)

---
updated-dependencies:
- dependency-name: web-vitals
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-02 11:35:36 +01:00
Michael Barz
18ce8fc3f5 Merge pull request #7613 from owncloud/dependabot/npm_and_yarn/services/idp/browserify-sign-4.2.2
Bump browserify-sign from 4.2.1 to 4.2.2 in /services/idp
2023-10-27 21:41:21 +02:00
dependabot[bot]
af26940705 Bump browserify-sign from 4.2.1 to 4.2.2 in /services/idp
Bumps [browserify-sign](https://github.com/crypto-browserify/browserify-sign) from 4.2.1 to 4.2.2.
- [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md)
- [Commits](https://github.com/crypto-browserify/browserify-sign/compare/v4.2.1...v4.2.2)

---
updated-dependencies:
- dependency-name: browserify-sign
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-27 19:12:39 +00:00
dependabot[bot]
ad92ad6e6b Bump crypto-js from 4.1.1 to 4.2.0 in /services/idp
Bumps [crypto-js](https://github.com/brix/crypto-js) from 4.1.1 to 4.2.0.
- [Commits](https://github.com/brix/crypto-js/compare/4.1.1...4.2.0)

---
updated-dependencies:
- dependency-name: crypto-js
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-25 23:25:40 +00:00
dependabot[bot]
991cc6e8ba Bump postcss-safe-parser from 6.0.0 to 7.0.0 in /services/idp
Bumps [postcss-safe-parser](https://github.com/postcss/postcss-safe-parser) from 6.0.0 to 7.0.0.
- [Changelog](https://github.com/postcss/postcss-safe-parser/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss-safe-parser/compare/6.0.0...7.0.0)

---
updated-dependencies:
- dependency-name: postcss-safe-parser
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-23 15:08:16 +02:00
dependabot[bot]
4bbb55a919 Bump @babel/traverse from 7.22.11 to 7.23.2 in /services/idp
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.22.11 to 7.23.2.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-17 11:26:21 +00:00
dependabot[bot]
b9c4f94e0e Bump license-checker-rseidelsohn from 4.2.6 to 4.2.10 in /services/idp
Bumps [license-checker-rseidelsohn](https://github.com/RSeidelsohn/license-checker-rseidelsohn) from 4.2.6 to 4.2.10.
- [Release notes](https://github.com/RSeidelsohn/license-checker-rseidelsohn/releases)
- [Changelog](https://github.com/RSeidelsohn/license-checker-rseidelsohn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RSeidelsohn/license-checker-rseidelsohn/compare/v4.2.6...v4.2.10)

---
updated-dependencies:
- dependency-name: license-checker-rseidelsohn
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 11:46:39 +02:00
dependabot[bot]
5f9c91582e Bump postcss from 8.4.29 to 8.4.31 in /services/idp
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.29 to 8.4.31.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.4.29...8.4.31)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-10 11:55:58 +02:00
case0sh
330e30c38e revert all changes to idp 2023-10-06 10:43:02 +02:00
case0sh
ace3664f6a fix formatting 2023-10-06 10:29:08 +02:00
case0sh
8adea0f38e edit wrong named enves 2023-10-06 10:29:08 +02:00
dependabot[bot]
81e8d830c7 Bump postcss from 8.4.29 to 8.4.31 in /services/idp
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.29 to 8.4.31.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.4.29...8.4.31)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-05 11:34:13 +02:00
dependabot[bot]
fda2b0e626 Bump jest and @types/jest in /services/idp
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.6.4 to 29.7.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest)

Updates `@types/jest` from 29.5.4 to 29.5.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/jest"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 17:14:08 +02:00
dependabot[bot]
50d8cf4c9b Bump webpack from 4.46.0 to 4.47.0 in /services/idp
Bumps [webpack](https://github.com/webpack/webpack) from 4.46.0 to 4.47.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v4.46.0...v4.47.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 11:52:07 +02:00
dependabot[bot]
8b0217147a Bump @testing-library/user-event from 14.4.3 to 14.5.1 in /services/idp
Bumps [@testing-library/user-event](https://github.com/testing-library/user-event) from 14.4.3 to 14.5.1.
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/user-event/compare/v14.4.3...v14.5.1)

---
updated-dependencies:
- dependency-name: "@testing-library/user-event"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 10:28:02 +02:00
kobergj
8bf3f2f84e Merge pull request #7309 from kobergj/ChaseThePipelineGhost
[full-ci] Chase the pipline ghost
2023-09-22 11:03:05 +02:00
Jörn Friedrich Dreyer
ea5a60cf56 prevent panic when session is nil
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-09-21 17:19:51 +02:00
jkoberg
1f1aa50c54 hard exit when services fail
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-09-21 13:53:18 +02:00
Ralf Haferkamp
8f284e7c2b Add OCIS_LDAP_BIND_PASSWORD envvar and deprecate LDAP_BIND_PASSWORD
For some reason LDAP_BIND_PASSWORD was forgotten when all the other global LDAP_
variables got renamed.

Also marks LDAP_BIND_PASSWORD and LDAP_USER_SCHEMA_ID_IS_OCTETSTRING for removal with 5.0.0

Partial: #7176
2023-09-20 19:00:11 +02:00
dependabot[bot]
cb837af8be Bump @testing-library/jest-dom from 6.1.2 to 6.1.3 in /services/idp
Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 6.1.2 to 6.1.3.
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.1.2...v6.1.3)

---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-20 12:11:37 +02:00
Ralf Haferkamp
9ad20361a7 idp license-checker: Add BlueOak-1.0.0 to the accept list
jackspeak@2.3.3 (required by license-checker-rseidelsohn itself) uses that
license.
2023-09-18 12:54:25 +02:00
Ralf Haferkamp
f559033649 idp: license-checker use clarifications file where heuristics fail
i18next-conv@14.0.0 and p-from-callback@1.0.1 are MIT licensed according
to there License files.

Also remove po2json from the exclude list, we don't seem to use that
anymore.
2023-09-18 12:54:25 +02:00
dependabot[bot]
1b85a9c597 Bump license-checker-rseidelsohn from 3.1.0 to 4.2.6 in /services/idp
Bumps [license-checker-rseidelsohn](https://github.com/RSeidelsohn/license-checker-rseidelsohn) from 3.1.0 to 4.2.6.
- [Release notes](https://github.com/RSeidelsohn/license-checker-rseidelsohn/releases)
- [Changelog](https://github.com/RSeidelsohn/license-checker-rseidelsohn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RSeidelsohn/license-checker-rseidelsohn/compare/v3.1.0...v4.2.6)

---
updated-dependencies:
- dependency-name: license-checker-rseidelsohn
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-18 12:54:25 +02:00
Ralf Haferkamp
b627e7a0d6 Bump loader-utils@2.0.3 and react-dev-utils@12.0.1
required a bump of fork-ts-checker-webpack-plugin@6.5.3 which needed
some adjustments to the webpack.config.
2023-09-04 12:44:49 +02:00
dependabot[bot]
a1b9265ac0 Bump loader-utils from 1.4.0 to 1.4.2 in /services/idp
Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.2.
- [Release notes](https://github.com/webpack/loader-utils/releases)
- [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md)
- [Commits](https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.2)

---
updated-dependencies:
- dependency-name: loader-utils
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-04 10:33:49 +02:00
dependabot[bot]
c976f28848 Bump @testing-library/jest-dom from 5.17.0 to 6.1.2 in /services/idp
Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 5.17.0 to 6.1.2.
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v5.17.0...v6.1.2)

---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-31 15:54:07 +02:00
Ralf Haferkamp
fc8f9d0740 Bump eslint-plugin-i18next from 5.2.1 to 6.0.3 /services/idp 2023-08-31 15:13:24 +02:00
Ralf Haferkamp
3490333038 Bump babel-loader from 8.1.0 to 8.3.0 /services/idp 2023-08-31 15:13:24 +02:00