87 Commits (e3cbccefdec5e6dd7cd46fd8a24504f760b10e1a)

Author	SHA1	Message	Date
Robin Appelman	a97fe9d2ae	feat: add rate limiting for creating federated shares for non-trusted servers ... Signed-off-by: Robin Appelman <robin@icewind.nl>	1 month ago
Antoon P.	5cbdfac055	fix(ocm): Move invite-accepted capability and implementation to contacts app. ... Signed-off-by: Antoon P. <antoon.prins@surf.nl>	1 month ago
Micke Nordin	dec38e5307	fix(OCM): Remove comment meant only for OCP APIs ... Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Micke Nordin	4d5841761f	fix(cloud_federation_api): accept multi-protocol share envelopes ... Shares using the OCM multi-protocol envelope (name multi, with the secret carried in a sibling protocol entry such as webdav) were rejected with Missing sharedSecret in protocol. Scan every protocol entry for the shared secret during validation, resolve the secret from the matching entry, and let the files provider serve the webdav entry of a multi envelope. Covers the file and folder resource types. Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Enrique Pérez Arnaud	3956c4e9be	feat(cloud_federation_api): accept new protocol envelope and delegate validation ... Accept both the legacy options.sharedSecret envelope and the new protocol[name].sharedSecret form. Preserve the original cloud ID so the factory can discover capabilities, then reset shareWith to the local username for user lookup. Delegate per-protocol validation to providers via the new IValidationAwareCloudFederationProvider interface, with split exception handling: BadRequestException -> 400, ProviderCouldNotAddShareException -> the exception's own HTTP status (501 fallback). In the notification handler, fall back to looking up the refresh token via OcmTokenMapMapper when the access token cannot identify the federation. Co-authored-by: Micke Nordin <kano@sunet.se> Signed-off-by: Micke Nordin <kano@sunet.se> Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>	2 months ago
Enrique Pérez Arnaud	789ff6a8a3	feat(cloud_federation_api): add token exchange endpoint issuing JWT access tokens ... Co-authored-by: Micke Nordin <kano@sunet.se> Signed-off-by: Micke Nordin <kano@sunet.se> Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>	2 months ago
Micke Nordin	2beb626995	feat(OCM): Add event for received notifications ... OCM is standardizing and expanding the use of notifications and having an event for acting on in apps will be very useful. Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Cristian Scheid	88df72a661	feat(ocm-add-share): add validation to detect idn homograph attacks ... Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>	2 months ago
Côme Chilliet	1ab09ec753	chore: Apply new coding standard to all files ... The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines To see only the changes not related to blank lines. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 months ago
Micke Nordin	c753aad9e3	refactor(ocm): expose confirmRequestOrigin as a function on ocmDiscoveryService ... Apps implementing OCM endpoints via OCMEndpointRequestEvent (e.g. SUNET/nextcloud-ocm_request_share for request-share, nextcloud/contacts for invite-accepted) need to apply the same identity check that the built-in addShare and receiveNotification handlers apply, so it makes sense to make it publicly accessible. It also allows us to refactor RequestHandlerController::confirmSignedOrigin to use the new public method and drop the confirmNotificationIdentity helper. Signed-off-by: Micke Nordin <kano@sunet.se>	3 months ago
Ferdinand Thiessen	d8e8703796	chore: add missing `Override` attribute to app code ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 months ago
Joas Schilling	a51e58e800	fix(federation): Also sign requests with NCU providers ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 months ago
Joas Schilling	f4f93ed281	fix(ocm): Correctly track OCM requests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 months ago
Maxence Lange	42d745e17b	fix(ocm): empty response ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	7 months ago
Maxence Lange	327d691c23	feat(signed-request): moving out of unstable ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	7 months ago
Maxence Lange	6af64a5495	feat(ocm): event on ocm discovery and ocm request ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	8 months ago
Maxence Lange	4b684897ed	fix(ocm): fully disable signed request on config ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	8 months ago
Carl Schwan	3bdb344224	perf(external-sharing): Port to Entity and SnowflakeId ... This removes all the read after write and we don't need to queries all the time the same share in the same request anymore. Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	8 months ago
Micke Nordin	432709328c	feat(cloud-federation-api): Make duplicate entries ... Solve the problem by adding the provider for both files and folders Signed-off-by: Micke Nordin <kano@sunet.se>	10 months ago
Micke Nordin	5a7f72c6a6	feat(cloud-federation-api): accept folder shares ... Normalize resourceType from folder to file in RequestHandlerController::addShare() to allow accepting OCM folder shares from oCIS/OpenCloud/CERNBox. Signed-off-by: Micke Nordin <kano@sunet.se>	10 months ago
Micke Nordin	a171fbf318	fix(cloud-federation-api): align inviteAccepted parameter naming with spec ... - Rename method parameter from `userId` to `userID`. - Update log message and `setRecipientUserId` call to use new variable. - Without this change, we can not accept invites. Signed-off-by: Micke Nordin <kano@sunet.se>	10 months ago
Maxence Lange	a867ff8b27	feat(migration-attributes): missing attributes ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	12 months ago
Maxence Lange	fa60488ee7	feat(ocm): split ocm discovery and capacities ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	1 year ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	1 year ago
Micke Nordin	4d4b886607	fix(OCM-invites): Use the correct way of getting the email ... It seems primary email can sometimes be empty, even if the user has an email set. Signed-off-by: Micke Nordin <kano@sunet.se>	1 year ago
Micke Nordin	623f2f0240	feat(OCM-invites): Implementation of invitation flow ... This patchset: * implements the /invite-accepted endpoint * adds capabilities and inviteAceptDialog to the discovery * adds a FederatedInviteAcceptedEvent https://cs3org.github.io/OCM-API/docs.html?branch=v1.1.0&repo=OCM-API&user=cs3org#/paths/~1invite-accepted/post Co-authored-by: Anna <anna@nextcloud.com> Co-authored-by: Côme Chilliet <come.chilliet@nextcloud.com> Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com> Co-authored-by: Navid Shokri <navid.pdp11@gmail.com> Signed-off-by: Micke Nordin <kano@sunet.se>	1 year ago
Joas Schilling	4fc5eaeff0	fix(federation): Allow federation file sharing when federation app is disabled ... The app id might be misleading, the federation app is for syncing addressbooks with trusted servers. It is not always enabled and show not have to be. Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Ferdinand Thiessen	63052522a2	perf(cloud_federation_api): only provide capabilities if needed ... The capabilities can be quite expensive (e.g. on ARM board it takes 1s per request only for the capabilities). Also they are not used by the webui so they should not be included in initial state. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Ferdinand Thiessen	b9f9190894	fix(ocm): `publicKey` can be disabled so capabilities do not match ... When the public key feature is disabled null is returned for `publicKey`. So in this case we need to adjust the capabilities and return type of `jsonSerialize()`. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Maxence Lange	abd24f9bef	fix(signed-request): use share owner on reshare ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
Joas Schilling	bf897358ef	fix(typo): Fix message of exception ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Maxence Lange	ac470184e7	fix(ocm): get details from sharedSecret from provider ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
Maxence Lange	4df3155523	fix(signed-request): removing unstable from public ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
Maxence Lange	4b06620055	feat(signatory): switch to qbmapper ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
Maxence Lange	862a411118	fix(ocm): simpler code ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
Maxence Lange	f08d053290	fix(ocm): switching to IdentityProof ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
Maxence Lange	4591430c9c	feat(ocm): signing ocm requests ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
provokateurin	77114fb327	fix(OpenAPI): Adjust array syntax to avoid ambiguities ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
provokateurin	381077028a	refactor(apps): Use constructor property promotion when possible ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Côme Chilliet	1580c8612b	chore(apps): Apply new rector configuration to autouse classes ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Joas Schilling	15a530008f	fix(federation): Return the used userID to allow the inviting server to react to the famous `mapUid` result ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
provokateurin	8db6cfca1c	refactor(cloud_federation_api): Replace security annotations with respective attributes ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Andy Scherzinger	9d4b944098	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Côme Chilliet	ec5133b739	fix: Apply new coding standard to all files ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
provokateurin	c5808d0d10	refactor: Configure OpenAPI scopes ... Signed-off-by: provokateurin <kate@provokateurin.de>	3 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	3 years ago
jld3103	755de1e0b5	refactor: Rename OpenAPI type aliases to their namespaces ... Signed-off-by: jld3103 <jld3103yt@gmail.com>	3 years ago
Joas Schilling	fc445a2eaa	feat(OCM): Add a way for apps to create a new IOCMResource ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago