Commit Graph

1671 Commits

Author SHA1 Message Date
Ralf Haferkamp e2849bf19d graph/education: Add getSchoolByNumber helper
Sometimes we explicit need to lookup by number and not numberOrID
2023-09-27 15:39:00 +02:00
Ralf Haferkamp ce808eaa17 graph/education: Remove unreachable code
An LDAP Modify operation never returns LDAPResultEntryAlreadyExists errors.
That error can only happen for LDAPAdd or LDAPModifyDN.
2023-09-27 15:39:00 +02:00
Ralf Haferkamp 16debe6fa5 graph/education: Use helper for creating attribute list 2023-09-27 15:39:00 +02:00
Ralf Haferkamp 164edd16c0 graph/education: Don't leak LDAP errors into the graph error message 2023-09-27 15:39:00 +02:00
jkoberg 2cd6ee361e dont reload web config on request
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-09-27 11:44:52 +02:00
Jörn Friedrich Dreyer c083f598b7 fix group id claim (#7352)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-09-26 15:13:15 +02:00
ownClouders a1b7dc34cd [tx] updated from transifex 2023-09-26 00:05:55 +00:00
dependabot[bot] fda2b0e626 Bump jest and @types/jest in /services/idp
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.6.4 to 29.7.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest)

Updates `@types/jest` from 29.5.4 to 29.5.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/jest"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 17:14:08 +02:00
dependabot[bot] 50d8cf4c9b Bump webpack from 4.46.0 to 4.47.0 in /services/idp
Bumps [webpack](https://github.com/webpack/webpack) from 4.46.0 to 4.47.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v4.46.0...v4.47.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 11:52:07 +02:00
dependabot[bot] 8b0217147a Bump @testing-library/user-event from 14.4.3 to 14.5.1 in /services/idp
Bumps [@testing-library/user-event](https://github.com/testing-library/user-event) from 14.4.3 to 14.5.1.
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/user-event/compare/v14.4.3...v14.5.1)

---
updated-dependencies:
- dependency-name: "@testing-library/user-event"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 10:28:02 +02:00
ownClouders 9e274e07a0 [tx] updated from transifex 2023-09-25 04:25:12 +00:00
kobergj 0535c62b63 Merge pull request #7325 from kobergj/SEEImprovements
Improve SSE Notifications
2023-09-22 12:45:11 +02:00
kobergj 8bf3f2f84e Merge pull request #7309 from kobergj/ChaseThePipelineGhost
[full-ci] Chase the pipline ghost
2023-09-22 11:03:05 +02:00
jkoberg 586bae4455 make picky variable namers happy
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-09-22 10:49:03 +02:00
Jörn Friedrich Dreyer 1a874ca89a store: decrease log level (#7329)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-09-22 09:33:28 +02:00
ownClouders c5ff99ec38 [tx] updated from transifex 2023-09-22 05:04:46 +00:00
Michael Barz 8931ee1187 Merge pull request #7330 from owncloud/idp-fix-panic
prevent panic when session is nil
2023-09-21 21:03:31 +02:00
Jörn Friedrich Dreyer ea5a60cf56 prevent panic when session is nil
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-09-21 17:19:51 +02:00
Jörn Friedrich Dreyer 3efe843742 prevent panic when user is nil
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-09-21 17:19:18 +02:00
Ralf Haferkamp 8f262c1dff users: fixup LDAP_BIND_PASSWORD
LDAP_BIND_PASSWORD was accidently removed in previous commit

Partial: #7176
2023-09-21 15:58:27 +02:00
jkoberg 1f1aa50c54 hard exit when services fail
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-09-21 13:53:18 +02:00
Roman Perekhod 2e7b423dcc Added an option to enable a password check against a Banned-Password List (#7315)
* Added an option to enable a password check against a Banned-Password-List

* Update services/frontend/README.md

Co-authored-by: Martin <github@diemattels.at>

Co-authored-by: Edith Parzefall <edith_parzefall@gmx.de>

---------

Co-authored-by: Roman Perekhod <rperekhod@owncloud.com>
Co-authored-by: Martin <github@diemattels.at>
Co-authored-by: Edith Parzefall <edith_parzefall@gmx.de>
2023-09-21 12:31:48 +02:00
jkoberg b59fec9e4e improve sse sending in clientlog service
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-09-21 11:59:29 +02:00
jkoberg 6e8f168157 improve sse for userlog
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-09-21 10:17:06 +02:00
Ralf Haferkamp 7b9200ff5d users: revive USERS_LDAP_USER_SCHEMA_ID variable
The config variable was accidently removed when cleaning up deprecated variables
for the 4.0.0 release

Fixes: #7312
2023-09-20 19:00:11 +02:00
Ralf Haferkamp 8f284e7c2b Add OCIS_LDAP_BIND_PASSWORD envvar and deprecate LDAP_BIND_PASSWORD
For some reason LDAP_BIND_PASSWORD was forgotten when all the other global LDAP_
variables got renamed.

Also marks LDAP_BIND_PASSWORD and LDAP_USER_SCHEMA_ID_IS_OCTETSTRING for removal with 5.0.0

Partial: #7176
2023-09-20 19:00:11 +02:00
dependabot[bot] cb837af8be Bump @testing-library/jest-dom from 6.1.2 to 6.1.3 in /services/idp
Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 6.1.2 to 6.1.3.
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.1.2...v6.1.3)

---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-20 12:11:37 +02:00
Jan e1148c6493 Add web config var LoginURL (#7317)
* Add web config var LoginURL

* Add changelog item
2023-09-20 10:45:11 +02:00
kobergj 7c9ce2305b Merge pull request #7291 from kobergj/NextDocsFix
[tests-only] Use OCIS_ASYNC_UPLOADS in docs
2023-09-19 11:28:07 +02:00
Ralf Haferkamp 9ad20361a7 idp license-checker: Add BlueOak-1.0.0 to the accept list
jackspeak@2.3.3 (required by license-checker-rseidelsohn itself) uses that
license.
2023-09-18 12:54:25 +02:00
Ralf Haferkamp f559033649 idp: license-checker use clarifications file where heuristics fail
i18next-conv@14.0.0 and p-from-callback@1.0.1 are MIT licensed according
to there License files.

Also remove po2json from the exclude list, we don't seem to use that
anymore.
2023-09-18 12:54:25 +02:00
dependabot[bot] 1b85a9c597 Bump license-checker-rseidelsohn from 3.1.0 to 4.2.6 in /services/idp
Bumps [license-checker-rseidelsohn](https://github.com/RSeidelsohn/license-checker-rseidelsohn) from 3.1.0 to 4.2.6.
- [Release notes](https://github.com/RSeidelsohn/license-checker-rseidelsohn/releases)
- [Changelog](https://github.com/RSeidelsohn/license-checker-rseidelsohn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RSeidelsohn/license-checker-rseidelsohn/compare/v3.1.0...v4.2.6)

---
updated-dependencies:
- dependency-name: license-checker-rseidelsohn
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-18 12:54:25 +02:00
ownClouders 78bc32e156 [tx] updated from transifex 2023-09-18 00:06:46 +00:00
Michael Barz 624d4b57f0 Fix capabilities for password policy, bump reva (#7285) 2023-09-17 10:21:06 +02:00
Roman Perekhod 911ea1c0f6 fix kql-bleve search. wildcards are excluded 2023-09-15 17:14:59 +02:00
jkoberg a8eb523b5b remove old STORAGE_USERS_ASYNC_UPLOADS envvar from docs
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-09-15 14:43:12 +02:00
Florian Schade 0f2b2b9a94 [full-ci] enhancement: add support for natural language kql date ranges (#7263)
* enhancement: add more kql spec tests and simplify ast normalization

* enhancement: kql parser error if query starts with AND

* enhancement: add kql docs and support for date and time only dateTimeRestriction queries

* enhancement: add the ability to decide how kql nodes get connected

connecting nodes (with edges) seem straight forward when not using group, the default connection for nodes with the same node is always OR. THis only applies for first level nodes, for grouped nodes it is defined differently. The KQL docs are saying, nodes inside a grouped node, with the same key are connected by a AND edge.

* enhancement: explicit error handling for falsy group nodes and queries with leading binary operator

* enhancement: use optimized grammar for kql parser and toolify pigeon

* enhancement: simplify error handling

* fix: kql implicit 'AND' and 'OR' follows the ms html spec instead of the pdf spec

* enhancement: add support for natural language kql date queries

* enhancement: structure kql parser tests into logical clusters

* fix: time-range error naming
2023-09-15 11:31:41 +02:00
ownClouders 9d09f007d6 [tx] updated from transifex 2023-09-15 00:05:23 +00:00
ownClouders 564685b447 [tx] updated from transifex 2023-09-14 00:28:37 +00:00
Michael Barz 4b741804b9 change the default value for TUS 2023-09-12 16:35:41 +02:00
Roman Perekhod 8ecda095e3 the variables renaming 2023-09-12 10:05:24 +02:00
Florian Schade c0553c7273 [full-ci] enhancement: add more kql spec tests and simplify ast normalization (#7254)
* enhancement: add more kql spec tests and simplify ast normalization

* enhancement: kql parser error if query starts with AND

* enhancement: add kql docs and support for date and time only dateTimeRestriction queries

* enhancement: add the ability to decide how kql nodes get connected

connecting nodes (with edges) seem straight forward when not using group, the default connection for nodes with the same node is always OR. THis only applies for first level nodes, for grouped nodes it is defined differently. The KQL docs are saying, nodes inside a grouped node, with the same key are connected by a AND edge.

* enhancement: explicit error handling for falsy group nodes and queries with leading binary operator

* enhancement: use optimized grammar for kql parser and toolify pigeon

* enhancement: simplify error handling

* fix: kql implicit 'AND' and 'OR' follows the ms html spec instead of the pdf spec
2023-09-11 13:49:53 +02:00
ownClouders 92ae593b4b [tx] updated from transifex 2023-09-11 04:26:38 +00:00
ownClouders 47db3332cb [tx] updated from transifex 2023-09-11 00:07:15 +00:00
Jörn Friedrich Dreyer 8cbf261568 give graph driveItems some love (#7250)
* give graph driveItems some love

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* extract parseIDParam()

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* add GetDriveItem(Children) tests

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

---------

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-09-08 15:40:06 +02:00
Roman Perekhod 9bec59bc63 [full-ci] The password policy added. Bump reva (#7195)
* The password policy added. Bump reva

* the special characters list became constant

---------

Co-authored-by: Roman Perekhod <rperekhod@owncloud.com>
2023-09-08 15:32:41 +02:00
ownClouders 422465b8f5 [tx] updated from transifex 2023-09-08 00:39:40 +00:00
Ralf Haferkamp a01f5d94c2 graph: debug logging for requireadmin middleware 2023-09-07 20:54:14 +02:00
Ralf Haferkamp 684f5c07e5 Use service user for role assignment and autoprovisioning
This gets us a rid of the need to configure the reva jwt secret in the
proxy. Also we no longer need to fake an internal admin user for
autoprovsioning user and/or assigning the roles to users from oidc
claims.
2023-09-07 20:54:14 +02:00
Roman Perekhod 3ab8226cd1 Merge pull request #7247 from 2403905/enable-kql-fix-unary
fix unary in the beginning. add tests
2023-09-07 16:40:24 +02:00