faf162704e
Merge pull request #9684 from owncloud/collaboration_improved_tracing
...
feat: include additional metadata for tracing the collaboration service
2024-08-13 11:35:52 +02:00
2a498daf07
feat(auth-app): list and delete endpoints
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-08-07 12:21:39 +02:00
48af3fae32
feat(auth-app): Add an API to generate AppTokens
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-08-07 10:29:54 +02:00
e7fd04bbe3
feat(tusd): bump tusd pkg to v2.4.0
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-08-07 09:13:50 +02:00
4511f875d2
fix tests
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-08-06 13:33:18 +02:00
4c6551501e
use less selectors
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-08-06 12:55:42 +02:00
a5d27b2f98
feat: include additional metadata for tracing the collaboration service
2024-08-05 13:15:12 +02:00
7999e2969b
do not force exit to let all services shutdown gracefully
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-07-24 14:02:52 +02:00
9d1515e8fc
rely on context from app
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-07-24 14:02:11 +02:00
008f379a01
pass config context when running apps
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-07-24 13:30:42 +02:00
83e6ba7d09
fix(proxy): fix pipeline
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-07-23 08:58:08 +02:00
a58a0f83f6
feat(auth-app): polish create cli
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-07-23 08:58:07 +02:00
11103a4220
feat(auth-app): make service optional plus docu
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-07-23 08:58:07 +02:00
3b3d30159d
fix(proxy): fix build after rebase
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-07-23 08:58:07 +02:00
7005cbc0fc
feat: add unit test for app auth middleware
2024-07-23 08:58:07 +02:00
4fa7ea0b20
feat: add cli command to generate app token for user
2024-07-23 08:58:07 +02:00
43403edfb8
feat: reva app auth
2024-07-23 08:58:07 +02:00
b2255bb3d5
Log user agent and remote addr on auth errors
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-07-16 12:41:04 +02:00
ff6674f97b
Fix fallout of reva bump
...
reva tries to avoid copying proto messages now. This changed some calls
to take pointers now (mainly e.g. FormatResourceId())
2024-07-11 15:21:56 +02:00
0d65908e82
autoprovisioning: sync group memberships
...
Add support for autoprovisioning group memberships from OIDC claims.
Users are added to and removed from groups based on the value of an OIDC
claim. If a group does not exist, it is created.
Closes : #5538
2024-07-08 09:32:23 +02:00
eac5eaea8f
Add the backchannel logout event
2024-06-25 12:13:24 +02:00
949c5d0848
enhancement(activitylog): enhance activitylog graph endpoint
...
- make use of libregraph artifacts
- add a basic activity kql ast parser
2024-06-24 16:23:54 +02:00
882689549f
feat(activitylog): add api
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-06-24 16:23:54 +02:00
b04f3209d4
chore: prepare release, bump version
2024-06-19 19:45:57 +02:00
ccb8228edd
fix: bump upstream sec middleware
2024-06-10 17:20:38 +02:00
b892a9ab28
Merge pull request #9312 from owncloud/var-placeholders
...
docs: use placeholder for next release
2024-06-05 21:36:25 +02:00
03bd1d5272
fix: CSP frame-src to enable PDF viewing ( #9313 )
2024-06-04 14:29:21 +02:00
5d99688161
docs: use placeholder for next release
2024-06-04 10:28:42 +02:00
c7281599d4
replacement for TokenInfo endpoint
2024-05-28 09:29:08 +02:00
2440ccb8b9
fix(autoprovision): fixup the service name of the graph service
...
This is a fixup for commit 799b12b8ddCloses : #9258
2024-05-27 14:00:46 +02:00
7b47d55837
Merge pull request #9149 from owncloud/correct-servicenames
...
fix service names for userlog, graph, invitations, sse and web
2024-05-24 10:40:31 +02:00
9bc958e8be
fix: token refresh in single binary and wopi deployment example ( #9167 )
2024-05-16 18:20:18 +02:00
7ca8391ce2
feat(proxy): Update selected attributes of autoprovisioned users
...
When autoprovisioning is enabled, we now update autoprovisioned users when their
display name or email address claims change.
Closes : #8955
2024-05-15 13:30:45 +02:00
ad4b3fc55c
proxy(autoprovision): Save the subject and issuer claims when creating a user
...
We now use the graph user's identities property to store the subject and issuer claims
when autoprovisioning a user. The attrbute is not really used anywhere yet, but will
allow us to detect renames and other changes in the future.
Closes : #8956
2024-05-13 17:22:37 +02:00
799b12b8dd
fix service names for userlog, graph, invitations, sse and web
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-05-13 17:04:01 +02:00
6356be8d51
Merge pull request #8952 from rhafer/issue/8635
...
Autoprovsioning fixes
2024-05-02 16:06:45 +02:00
a8cbc612cc
chore: remove unused return value from BindSourcesToStructs ( #9033 )
2024-04-30 18:18:31 +02:00
4f7480d322
feat: drop github.com/a8m/envsubst in favor of gookit/config ( #9028 )
2024-04-30 18:05:58 +02:00
54bb4b44b0
chore: Fix some linter complaints
2024-04-30 17:09:21 +02:00
0da7eccd1d
fix(autoprovision): make email optional
...
The mail address is not a required attrbute for our users. So we can auto-provision users without it.
Fixes : #6909
2024-04-30 17:09:21 +02:00
741dce501b
enhancement(autoprovision): Allow to configure which claims to use for auto-provisioning user accounts
...
When auto-provisioning user accounts we used a fixed mapping for claims
for the userinfo response to user attributes. This change introduces
configuration options to defined which claims should be user for the
username, display name and email address of the auto-provisioned
accounts.
This also removes the automatic fallback to use the 'mail' claim as the
username when the 'preferred_username' claim does not exist.
Fixes : #8635
2024-04-30 17:09:19 +02:00
bdbba929d0
feat: add CSP and other security related headers in the oCIS proxy service ( #8777 )
...
* feat: add CSP and other security related headers in the oCIS proxy service
* fix: consolidate security related headers - drop middleware.Secure
* fix: use github.com/DeepDiver1975/secure
* fix: acceptance tests
* feat: support env var replacements in csp.yaml
2024-04-26 09:10:35 +02:00
f8f864e566
always initialize http handler
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-04-24 10:39:12 +02:00
8d5a0c6dd8
fix(public-share-auth): allow to create new documents in public share folder
...
The public share authentication middleware only allowed to open existing documents
the /app/new route was missing.
Fixes #8691
2024-04-15 16:35:13 +02:00
07f0cd5574
fix: typos, naming clashes, error messages and deprecations
2024-04-03 15:34:36 +02:00
5cc286b8ef
incorporate requested changes
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2024-03-19 08:38:54 +01:00
d31f5b9e15
remove obsolete comment
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2024-03-18 16:56:10 +01:00
29549fade7
kill oidc well known middleware and move it to static route
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2024-03-18 16:56:10 +01:00
1323a554bc
move static routes to seperate package
...
Signed-off-by: Christian Richter <crichter@owncloud.com >
2024-03-18 16:56:10 +01:00
49a2202bdf
chore: set introductionVersion 5.0 in services/proxy
2024-03-06 17:50:21 +05:45
Juan Pablo Villafañez