235 Commits (55e1270b94aa0f4ea003e2cbc87a8ea56bcae96d)

Author	SHA1	Message	Date
Micke Nordin	41cc0a4ed6	chore(http-sig): Simplify implementation ... Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	f0edd14c3a	chore(cloud_federation_api): move jwks ... Move from .well-known/jwks.json to the TokenController Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	dae8a36460	fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin ... RFC 7517 §4.5 leaves the keyid structure unspecified, so the receiver must not parse it. The signer origin now comes from the trusted OCM share/sender identity; the JWK Set is resolved against that origin and the keyid is matched opaquely to the JWKS kid. Aligns with the OCM verification procedure and fixes the origin-mismatch / flaky-kid failures in the two-port integration rig. Reverts the per-request host-based kid back to a stable persisted kid, drops keyid->host parsing, threads a sender-origin parameter through verification, and resolves that origin in every OCM inbound entry point (notifications, shares, token exchange, OCM requests) and the federation rate limiter. Cavage is unchanged. Assisted-by: ClaudeCode:glm-5.2 Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Nextcloud bot	7924c2f414	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	3 weeks ago
Nextcloud bot	b03799a266	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	1 month ago
Nextcloud bot	89adeb7342	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	1 month ago
Robin Appelman	a97fe9d2ae	feat: add rate limiting for creating federated shares for non-trusted servers ... Signed-off-by: Robin Appelman <robin@icewind.nl>	1 month ago
Antoon P.	5cbdfac055	fix(ocm): Move invite-accepted capability and implementation to contacts app. ... Signed-off-by: Antoon P. <antoon.prins@surf.nl>	1 month ago
Micke Nordin	dec38e5307	fix(OCM): Remove comment meant only for OCP APIs ... Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Nextcloud bot	dad4644546	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	2 months ago
Micke Nordin	4d5841761f	fix(cloud_federation_api): accept multi-protocol share envelopes ... Shares using the OCM multi-protocol envelope (name multi, with the secret carried in a sibling protocol entry such as webdav) were rejected with Missing sharedSecret in protocol. Scan every protocol entry for the shared secret during validation, resolve the secret from the matching entry, and let the files provider serve the webdav entry of a multi envelope. Covers the file and folder resource types. Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Enrique Pérez Arnaud	3956c4e9be	feat(cloud_federation_api): accept new protocol envelope and delegate validation ... Accept both the legacy options.sharedSecret envelope and the new protocol[name].sharedSecret form. Preserve the original cloud ID so the factory can discover capabilities, then reset shareWith to the local username for user lookup. Delegate per-protocol validation to providers via the new IValidationAwareCloudFederationProvider interface, with split exception handling: BadRequestException -> 400, ProviderCouldNotAddShareException -> the exception's own HTTP status (501 fallback). In the notification handler, fall back to looking up the refresh token via OcmTokenMapMapper when the access token cannot identify the federation. Co-authored-by: Micke Nordin <kano@sunet.se> Signed-off-by: Micke Nordin <kano@sunet.se> Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>	2 months ago
Enrique Pérez Arnaud	789ff6a8a3	feat(cloud_federation_api): add token exchange endpoint issuing JWT access tokens ... Co-authored-by: Micke Nordin <kano@sunet.se> Signed-off-by: Micke Nordin <kano@sunet.se> Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>	2 months ago
Micke Nordin	0f2003ebc8	test(OCM): Add test that tests the notificationReceived function ... Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Micke Nordin	2beb626995	feat(OCM): Add event for received notifications ... OCM is standardizing and expanding the use of notifications and having an event for acting on in apps will be very useful. Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Cristian Scheid	88df72a661	feat(ocm-add-share): add validation to detect idn homograph attacks ... Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>	2 months ago
Côme Chilliet	1ab09ec753	chore: Apply new coding standard to all files ... The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines To see only the changes not related to blank lines. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 months ago
Micke Nordin	c753aad9e3	refactor(ocm): expose confirmRequestOrigin as a function on ocmDiscoveryService ... Apps implementing OCM endpoints via OCMEndpointRequestEvent (e.g. SUNET/nextcloud-ocm_request_share for request-share, nextcloud/contacts for invite-accepted) need to apply the same identity check that the built-in addShare and receiveNotification handlers apply, so it makes sense to make it publicly accessible. It also allows us to refactor RequestHandlerController::confirmSignedOrigin to use the new public method and drop the confirmNotificationIdentity helper. Signed-off-by: Micke Nordin <kano@sunet.se>	3 months ago
Nextcloud bot	c8b29c9dac	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	3 months ago
Joas Schilling	820f2145a1	chore: Bump app versions and requirements ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 months ago
Ferdinand Thiessen	d8e8703796	chore: add missing `Override` attribute to app code ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 months ago
Joas Schilling	a51e58e800	fix(federation): Also sign requests with NCU providers ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 months ago
Joas Schilling	f4f93ed281	fix(ocm): Correctly track OCM requests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 months ago
Nextcloud bot	e61f0074f0	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	6 months ago
Nextcloud bot	be5dd03f92	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	6 months ago
Nextcloud bot	d65aa0b7c3	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	6 months ago
Nextcloud bot	dd8b274550	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	7 months ago
Joas Schilling	1d78386806	chore: Bump app versions and requirements ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 months ago
Nextcloud bot	c1dfdace98	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	7 months ago
Maxence Lange	42d745e17b	fix(ocm): empty response ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	7 months ago
Maxence Lange	327d691c23	feat(signed-request): moving out of unstable ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	7 months ago
Maxence Lange	6af64a5495	feat(ocm): event on ocm discovery and ocm request ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	8 months ago
Maxence Lange	4b684897ed	fix(ocm): fully disable signed request on config ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	8 months ago
Carl Schwan	3bdb344224	perf(external-sharing): Port to Entity and SnowflakeId ... This removes all the read after write and we don't need to queries all the time the same share in the same request anymore. Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	8 months ago
Carl Schwan	d877262e07	chore: Bump autoloader files for new composer version ... Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	9 months ago
Micke Nordin	432709328c	feat(cloud-federation-api): Make duplicate entries ... Solve the problem by adding the provider for both files and folders Signed-off-by: Micke Nordin <kano@sunet.se>	10 months ago
Micke Nordin	5a7f72c6a6	feat(cloud-federation-api): accept folder shares ... Normalize resourceType from folder to file in RequestHandlerController::addShare() to allow accepting OCM folder shares from oCIS/OpenCloud/CERNBox. Signed-off-by: Micke Nordin <kano@sunet.se>	10 months ago
Carl Schwan	9e77ab44fc	chore(composer): Bump autoloader ... Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	10 months ago
Micke Nordin	a171fbf318	fix(cloud-federation-api): align inviteAccepted parameter naming with spec ... - Rename method parameter from `userId` to `userID`. - Update log message and `setRecipientUserId` call to use new variable. - Without this change, we can not accept invites. Signed-off-by: Micke Nordin <kano@sunet.se>	10 months ago
Joas Schilling	e37dbc1487	chore: Bump app versions and requirements ... Signed-off-by: Joas Schilling <coding@schilljs.com>	12 months ago
Maxence Lange	a867ff8b27	feat(migration-attributes): missing attributes ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	12 months ago
Maxence Lange	fa60488ee7	feat(ocm): split ocm discovery and capacities ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	1 year ago
Nextcloud bot	7383858a8f	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	1 year ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	1 year ago
Nextcloud bot	894f963804	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	1 year ago
Joas Schilling	004eb61716	test: Adjust tests to match code again ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Micke Nordin	4d4b886607	fix(OCM-invites): Use the correct way of getting the email ... It seems primary email can sometimes be empty, even if the user has an email set. Signed-off-by: Micke Nordin <kano@sunet.se>	1 year ago
Micke Nordin	623f2f0240	feat(OCM-invites): Implementation of invitation flow ... This patchset: * implements the /invite-accepted endpoint * adds capabilities and inviteAceptDialog to the discovery * adds a FederatedInviteAcceptedEvent https://cs3org.github.io/OCM-API/docs.html?branch=v1.1.0&repo=OCM-API&user=cs3org#/paths/~1invite-accepted/post Co-authored-by: Anna <anna@nextcloud.com> Co-authored-by: Côme Chilliet <come.chilliet@nextcloud.com> Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com> Co-authored-by: Navid Shokri <navid.pdp11@gmail.com> Signed-off-by: Micke Nordin <kano@sunet.se>	1 year ago
Nextcloud bot	88aa80e847	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	1 year ago
Joas Schilling	4fc5eaeff0	fix(federation): Allow federation file sharing when federation app is disabled ... The app id might be misleading, the federation app is for syncing addressbooks with trusted servers. It is not always enabled and show not have to be. Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago