11 Commits (78d33182a01bb4da4d3d8afc6fcaa1b29fcd44c7)

Author	SHA1	Message	Date
Micke Nordin	41cc0a4ed6	chore(http-sig): Simplify implementation ... Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	dae8a36460	fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin ... RFC 7517 §4.5 leaves the keyid structure unspecified, so the receiver must not parse it. The signer origin now comes from the trusted OCM share/sender identity; the JWK Set is resolved against that origin and the keyid is matched opaquely to the JWKS kid. Aligns with the OCM verification procedure and fixes the origin-mismatch / flaky-kid failures in the two-port integration rig. Reverts the per-request host-based kid back to a stable persisted kid, drops keyid->host parsing, threads a sender-origin parameter through verification, and resolves that origin in every OCM inbound entry point (notifications, shares, token exchange, OCM requests) and the federation rate limiter. Cavage is unchanged. Assisted-by: ClaudeCode:glm-5.2 Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Antoon P.	5cbdfac055	fix(ocm): Move invite-accepted capability and implementation to contacts app. ... Signed-off-by: Antoon P. <antoon.prins@surf.nl>	1 month ago
Micke Nordin	4d5841761f	fix(cloud_federation_api): accept multi-protocol share envelopes ... Shares using the OCM multi-protocol envelope (name multi, with the secret carried in a sibling protocol entry such as webdav) were rejected with Missing sharedSecret in protocol. Scan every protocol entry for the shared secret during validation, resolve the secret from the matching entry, and let the files provider serve the webdav entry of a multi envelope. Covers the file and folder resource types. Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Enrique Pérez Arnaud	789ff6a8a3	feat(cloud_federation_api): add token exchange endpoint issuing JWT access tokens ... Co-authored-by: Micke Nordin <kano@sunet.se> Signed-off-by: Micke Nordin <kano@sunet.se> Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>	2 months ago
Micke Nordin	0f2003ebc8	test(OCM): Add test that tests the notificationReceived function ... Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Micke Nordin	c753aad9e3	refactor(ocm): expose confirmRequestOrigin as a function on ocmDiscoveryService ... Apps implementing OCM endpoints via OCMEndpointRequestEvent (e.g. SUNET/nextcloud-ocm_request_share for request-share, nextcloud/contacts for invite-accepted) need to apply the same identity check that the built-in addShare and receiveNotification handlers apply, so it makes sense to make it publicly accessible. It also allows us to refactor RequestHandlerController::confirmSignedOrigin to use the new public method and drop the confirmNotificationIdentity helper. Signed-off-by: Micke Nordin <kano@sunet.se>	3 months ago
Maxence Lange	327d691c23	feat(signed-request): moving out of unstable ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	7 months ago
Maxence Lange	6af64a5495	feat(ocm): event on ocm discovery and ocm request ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	8 months ago
Joas Schilling	004eb61716	test: Adjust tests to match code again ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Micke Nordin	623f2f0240	feat(OCM-invites): Implementation of invitation flow ... This patchset: * implements the /invite-accepted endpoint * adds capabilities and inviteAceptDialog to the discovery * adds a FederatedInviteAcceptedEvent https://cs3org.github.io/OCM-API/docs.html?branch=v1.1.0&repo=OCM-API&user=cs3org#/paths/~1invite-accepted/post Co-authored-by: Anna <anna@nextcloud.com> Co-authored-by: Côme Chilliet <come.chilliet@nextcloud.com> Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com> Co-authored-by: Navid Shokri <navid.pdp11@gmail.com> Signed-off-by: Micke Nordin <kano@sunet.se>	1 year ago