Commit Graph

22725 Commits

Author SHA1 Message Date
Pascal Bleser
f52a645c8a groupware: session handling improvements
* remove the baseurl from the JMAP client configuration, and pass it to
   the session retrieval functions instead, as that is really the only
   place where it is relevant, and we gain flexibility to discover that
   session URL differently in the future without having to touch the
   JMAP client

 * move the default account identifier handling from the JMAP package to
   the Groupware one, as it really has nothing to do with JMAP itself,
   and is an opinionated feature of the Groupware REST API instead

 * add an event listener interface for JMAP events to be more flexible
   and universal, typically for metrics that are defined on the API
   level that uses the JMAP client

 * add errors for when default accounts cannot be determined

 * split groupware_framework.go into groupware_framework.go,
   groupware_request.go and groupware_response.go

 * move the accountId logging into the Groupware level instead of JMAP
   since it can also be relevant to other operations that might be
   worthy of logging before the JMAP client is even invoked
2026-02-04 09:40:20 +01:00
Pascal Bleser
b76bec1279 groupware: fix debug server, was missing a lot of configuration options and was binding to :80 2026-02-04 09:40:20 +01:00
Pascal Bleser
82095ab5b0 docs(groupware): add Groupware related ADRs 2026-02-04 09:40:20 +01:00
Pascal Bleser
3d85aa69b7 refactor(groupware): logging and metrics improvements
* some minor code refactorings to improve logging and metrics

 * more code documentation
2026-02-04 09:40:20 +01:00
Pascal Bleser
a31d1991e2 jmap: minor logging improvements 2026-02-04 09:40:20 +01:00
Pascal Bleser
7adb66dd16 groupware: improve metrics
* implement more metrics, in a more streamlined fashion

 * use concurrent-map to store SSE streams instead of a regular map with
   one big lock that will not scale when it grows, causing too much
   contention on that one lock

 * while testing error metrics, noticed a few bugs with error handling
   when Stalwart is down: fixed
2026-02-04 09:40:20 +01:00
Pascal Bleser
b86e4f388d groupware: jmap: add metrics 2026-02-04 09:40:20 +01:00
Pascal Bleser
ad9387119b groupware: implement metrics
* implement a framework for metrics, with a few exemplary ones
2026-02-04 09:40:20 +01:00
Pascal Bleser
780e125621 groupware: Etag handling
* implement correct Etag and If-None-Match handling, responding with
   304 Not Modified if they match

 * introduce SessionState and State string type aliases to ensure we are
   using the correct fields for those, respectively

 * extract the SessionState from the JMAP response bodies in the
   groupware framework instead of having to do that in every single
   groupware API

 * use uint instead of int in some places to clarify that the values are
   >= 0

 * trace-log how long a Session was held in cache before being evicted

 * add Trace-Id header handling: add to response when specified in
   request, and implement a custom request logger to include it as a
   field

 * implement a more compact trace-logging of all the methods and URIs
   that are served, to put them into a single log entry instead of
   creating one log entry for every URI
2026-02-04 09:40:20 +01:00
Pascal Bleser
c7bb866595 groupware: initial related emails implementation with SSE 2026-02-04 09:40:20 +01:00
Pascal Bleser
675e3e5fdb groupware: add /bootstrap
* add a GET /accounts/{a}/boostrap URI that delivers the same as GET /
   but also mailboxes for a given account, in case the UI remembers the
   last used account identifier, to avoid an additional roundtrip

 * streamline the use of simpleError()

 * add logging of errors at the calling site

 * add logging of evictions of Sessions from the cache

 * change default Session cache TTL to 5min instead of 30sec
2026-02-04 09:40:20 +01:00
Pascal Bleser
42a4c5c156 groupware: swagger API documentation improvements
* add more documentation for properties

 * fixes after a bit of trial-and-error with go-swagger

 * fix email filter marshalling when there are no search criteria

 * introduce an apidoc.yml that contains Swagger data and is merged when
   generating the swagger.yml from sources
2026-02-04 09:40:20 +01:00
Pascal Bleser
4d338ff6b8 Groupware improvements
* ensure that all the jmap responses contain the SessionState

 * implement missing errors that were marked as TODO

 * moved common functions from pkg/jmap and pkg/services/groupware to
   pkg/log and pkg/structs to commonalize them across both source trees

 * implement error handling for SetError occurences

 * Email: replace anonymous map[string]bool for mailbox rights with a
   MailboxRights struct, as the keys are well-defined, which allows for
   properly documenting them

 * introduce ObjectType as an "enum"

 * fix JSON marshalling and unmarshalling of EmailBodyStructure

 * move the swagger documentation structs from groupware_api.go to
   groupware_docs.go

 * fix: change verb for /groupware/accounts/*/vacation from POST to PUT
2026-02-04 09:40:20 +01:00
Pascal Bleser
17718abec5 groupware: minor email searching response improvements + started implementing vacation response setting API 2026-02-04 09:40:20 +01:00
Pascal Bleser
1309db5e43 groupware: add identities of all accounts to the index resource 2026-02-04 09:40:20 +01:00
Pascal Bleser
a9e22fc2b8 groupware: fix email search, add variant that includes the full emails 2026-02-04 09:40:20 +01:00
Pascal Bleser
8181569225 groupware: fix email search, add variant that includes the full emails 2026-02-04 09:40:20 +01:00
Pascal Bleser
d032c92a26 Groupware: refactor jmap package, implement Email/set, EmailSubmission
* refactor the jmap package to split it into several files as the
   jmap.api.go file was becoming too unwieldy

 * refactor the Groupware handler function response to be a Response
   object, to be more future-proof and avoid adding more and more
   return parameters while handling "no content" response as well

 * more godoc for the JMAP model

 * add Email creation, updating, deleting (Email/set,
   EmailSubmission/set)

 * add endpoints
   - POST /accounts/{accountid}/messages
   - PATCH|PUT /accounts/{accountid}/messages/{messageid}
   - DELETE /accounts/{accountid}/messages/{messageid}
2026-02-04 09:40:20 +01:00
Pascal Bleser
050f535d74 groupware: implement message search with snippets 2026-02-04 09:40:20 +01:00
Pascal Bleser
3fdfe714fd groupware: blob streaming (upload and download) 2026-02-04 09:40:20 +01:00
Pascal Bleser
cc41e511c3 groupware: more JMAP operations implementation 2026-02-04 09:40:20 +01:00
Pascal Bleser
b4c8b5a3f4 groupware: further implementation and improvements 2026-02-04 09:40:20 +01:00
Pascal Bleser
b326c1448f upgrade Stalwart to 0.13.2 2026-02-04 09:40:20 +01:00
Pascal Bleser
04336a9c3a refactored the Session object, refactored the services/groupware directory, and started Swagger documentation implementation 2026-02-04 09:40:20 +01:00
Pascal Bleser
115ae939a8 groupware: refactoring the API mechanisms 2026-02-04 09:40:20 +01:00
Pascal Bleser
6cbce01a46 groupware: implement JSON:API's error response format, with a revamped error handling in jmap and services/groupware 2026-02-04 09:40:20 +01:00
Pascal Bleser
09716cbe1b Refactor groupware service after ADR decision on the Groupware API
* after having decided that the Groupware API should be a standalone
   independent custom REST API that is using JMAP data models as much as
   possible,
 * removed Groupware APIs from the Graph service
 * moved Groupware implementation to the Groupware service, and
   refactored a few things accordingly
2026-02-04 09:40:20 +01:00
Pascal Bleser
2a4b528139 Groupware and jmap: cleanup and API documentation 2026-02-04 09:40:20 +01:00
Pascal Bleser
5acddf601c groupware: remove unneeded messages.go that was a remainder from an earlier implementation attempt, which also fixes compilation issues due to changes in main 2026-02-04 09:40:19 +01:00
Pascal Bleser
2eedafa6f6 opencloud_full: upgrade Stalwart to 0.12.5, and use the ghcr.io container repository to avoid Hub limits 2026-02-04 09:40:19 +01:00
Pascal Bleser
7cb9b128a8 Groupware improvements: refactoring, k6 tests
* refactored the models to be strongly typed with structs and mapstruct
   to decompose the dynamic parts of the JMAP payloads

 * externalized large JSON strings for tests into .json files under
   testdata/

 * added a couple of fantasy Graph groupware APIs to explore further
   options

 * added k6 scripts to test those graph/me/messages APIs, with a setup
   program to set up users in LDAP, fill their IMAP inbox, activate them
   in Stalwart, cleaning things up, etc...
2026-02-04 09:40:19 +01:00
Pascal Bleser
68e1942aff fix Stalwart LDAP configuration 2026-02-04 09:40:19 +01:00
Pascal Bleser
092f4815b5 Use password policy overlay in LDAP and configure Stalwart to use it 2026-02-04 09:40:19 +01:00
Pascal Bleser
041ec185f0 upgrade Stalwart to 0.12.4 2026-02-04 09:40:19 +01:00
Pascal Bleser
060f290637 groupware: removed debugging logs 2026-02-04 09:40:19 +01:00
Pascal Bleser
54bdd43df0 jwkset: remove debugging printlns 2026-02-04 09:40:19 +01:00
Pascal Bleser
fcace7229b auth-api: fix: was missing newly introduced metrics 2026-02-04 09:40:19 +01:00
Pascal Bleser
1ca1485286 groupware and jmap improvements and refactoring 2026-02-04 09:40:19 +01:00
Pascal Bleser
1669601d99 upgrade Stalwart to 0.12 2026-02-04 09:40:19 +01:00
Pascal Bleser
c6d15063e1 minor corrections to the Stalwart configuration 2026-02-04 09:40:19 +01:00
Pascal Bleser
23f40932b3 Introduce a the auth-api service
* primitive implementation to demonstrate how it could work, still to
   be considered WIP at best

 * add new dependency: MicahParks/jwkset and MicahParks/keyfunc to
   retrieve the JWK set from KeyCloak to verify the signature of the
   JWTs sent as part of Bearer authentication in the /auth API

 * (minor) opencloud/.../service.go: clean up a logging statement that
   was introduced earlier to hunt down why the auth-api service was not
   being started
2026-02-04 09:40:19 +01:00
Pascal Bleser
46690c81b3 add an auth-api service to make an exemplary implementation of an external authentication API for third party services such as Stalwart 2026-02-04 09:40:19 +01:00
Pascal Bleser
b48a6f3b45 move services/groupware/pkg/jmap to pkg/jmap 2026-02-04 09:40:19 +01:00
Pascal Bleser
bb1ff183bd WIP: restructure the Jmap client, and implement the /me/messages Graph API endpoint with it 2026-02-04 09:40:19 +01:00
Pascal Bleser
964a83a30b add an OIDC Directory to Stalwart, requires exposing Keycloak port 8080 directly to access the userinfo endpoint using HTTP since the certificates in traefik are self-signed and end up being rejected by Stalwart with no option to bypass the certificate check 2026-02-04 09:40:19 +01:00
Pascal Bleser
9b91751578 rename Stalwart fallback admin username from 'admin' to 'mailadmin' since 'admin' exists as a regular user in LDAP and thus won't have access to the administration 2026-02-04 09:40:19 +01:00
Pascal Bleser
6612b0afe2 add missing routing for /groupware (currently unprotected for testing) 2026-02-04 09:40:19 +01:00
Pascal Bleser
71ed48ace4 WIP: initial implementation of the groupware service 2026-02-04 09:40:19 +01:00
Pascal Bleser
d9a054604b Add Stalwart container to the opencloud_full deployment, using the OpenLDAP container as a directory for user authentication 2026-02-04 09:40:19 +01:00
Viktor Scharf
400dc9f8ae adapt test for #514 (#2255) 2026-02-03 19:51:33 +01:00