Repository navigation

groupware: merge main, fix JMAP capabilities and upgrade Stalwart to 0.16.27 - #3803

Draft

tammi-23 wants to merge 894 commits into

groupwarefrom

chore/groupware-merge-main-stalwart

Draft

groupware: merge main, fix JMAP capabilities and upgrade Stalwart to 0.16.27#3803
tammi-23 wants to merge 894 commits into
groupwarefrom
chore/groupware-merge-main-stalwart

This pull request is big! We're only showing the most recent 250 commits

Commits on Oct 6, 2026
- feat(guestauth): updated redeem endpoint response and dependencies
  
  maki5
  authored and
  aduffeck
  committed
  340851d
- feat(guestauth): global flag to disable the guest links feature
  
  maki5
  authored and
  aduffeck
  committed
  a1a8221
- feat(guestauth): renaming guest ivitations to guest links for consistency with libre-graph-api
  
  maki5
  authored and
  aduffeck
  committed
  c5879ca
- feat(guestauth): upd file manager lock, addtional filetrs for shareExpired and shareRemoved events, common config loading fix
  
  maki5
  authored and
  aduffeck
  committed
  2c89825
- feat(guestauth): upd readme with guest links flow diagram
  
  maki5
  authored and
  aduffeck
  committed
  c1dc12d
- Adapt to renamed env var about guest links
  aduffeck
  committed
  aeb11b0
- Merge pull request #3609 from maki5/feat/guestauth_service
  aduffeck
  authored
  6ff4794
- guestlinks: Setup guestlinks authprovider
  
  rhafer
  authored and
  aduffeck
  committed
  246d49e
- refactor(proxy): return typed authentication results from authenticators
  
  rhafer
  authored and
  aduffeck
  committed
  98cdbd0
- proxy: add guestlink auth middleware
  
  rhafer
  authored and
  aduffeck
  committed
  fbb6ac6
- feat(web): use the OpenCloud brand colors for the primary color role (#3631)
  AlexAndBear
  authored
  d761a48
- Only enable guest_link auth when the feature is enabled
  aduffeck
  committed
  713b9c5
- Don't use the same secret for signing sessions and reva tokens
  aduffeck
  committed
  adc8a51
- Do not leak information about tokens in errors
  aduffeck
  committed
  e8c78f4
- Limit body size on unauthenticated redeem endpoint
  aduffeck
  committed
  934232e
- Use subtle to compare the hash
  aduffeck
  committed
  7f7da7f
- Stream auth failure bodies through encoders
  aduffeck
  committed
  88e45f8
- Align env var names, fix port conflict
  aduffeck
  committed
  3a55525
- Set the guest_link capability according to the config
  aduffeck
  committed
  27a0195
- Add email notifications when a guest link has been created
  aduffeck
  committed
  ec7f3f6
- Merge pull request #3618 from rhafer/proxy-guestauth-middleware
  aduffeck
  authored
  22dfa5b
- Bump reva to pull in the new capability
  aduffeck
  committed
  3858d7e
- Merge pull request #3668 from aduffeck/send-guestlink-emails
  aduffeck
  authored
  1df2eb2
- build(deps): bump github.com/open-policy-agent/opa from 1.19.1 to 1.21.1
  dependabot[bot]
  authored
  3f7d649
Commits on Oct 7, 2026
Commits on Oct 8, 2026
- fix: translation makefile path (#3678)
  v-scharf
  authored
  a71eefa
- Merge pull request #3674 from aduffeck/guest-id-canonical-ascii
  aduffeck
  authored
  ba98b1d
- Merge pull request #3658 from opencloud-eu/cli-additions
  fschade
  authored
  371e84b
- [tx] updated from transifex
  openclouders
  committed
  26d638f
Commits on Oct 9, 2026
- test: retry acceptance requests while share manager is migrating (#3681)
  v-scharf
  authored
  658a782
- [tx] updated from transifex
  openclouders
  committed
  fda9651
- chore: bump reva to latest main
  micbar
  committed
  1dee937
- Merge pull request #3685 from opencloud-eu/bump-reva
  fschade
  authored
  84e10b3
- feat: make space2share migration repeatable
  micbar
  committed
  d3703fd
- fix: implement code review
  micbar
  committed
  db4ad0f
- feat: run the decomposed drivers on foreign metadata via metadata_prefix
  fschade
  committed
  a7811dc
- refactor: set the metadata prefix process wide
  fschade
  committed
  d4ccf05
- Also send SSEs to share recipients
  aduffeck
  committed
  5c7f49d
- Adjust to changed utils func
  aduffeck
  committed
  a9e408b
- Use the reva constant for the ancestor-grants key
  aduffeck
  committed
  a257d20
- Do not abort when group members can't be resolved
  aduffeck
  committed
  a9a7dd0
- Bump reva
  aduffeck
  committed
  1d07633
- Merge pull request #3670 from fschade/feat-decomposedfs-metadata-prefix
  fschade
  authored
  369d386
- Merge pull request #3669 from opencloud-eu/share-migration-2
  micbar
  authored
  d1818a0
- Merge pull request #3684 from aduffeck/guest_sse
  aduffeck
  authored
  f798e4f
- ci: run S3 cache purge on dedicated cron (#3691)
  v-scharf
  authored
  2b5d1d0
- ci: run save-pipeline-info inside build-opencloud pipeline (#3692)
  v-scharf
  authored
  c806682
- [tx] updated from transifex
  openclouders
  committed
  89f63e6
Commits on Oct 11, 2026
- [tx] updated from transifex
  openclouders
  committed
  9ceb2b0
Commits on Oct 12, 2026
- test(api): simply HTTP request retry conditions (#3696)
  saw-jan
  authored
  9bb2d22
- fix(proxy): make metrics table MDX-compatible (#3680)
  Svanvith
  authored
  25791bb
- chore: bump reva to latest main
  micbar
  committed
  4febcf9
- Merge pull request #3700 from opencloud-eu/bump-reva
  micbar
  authored
  8546642
Commits on Oct 13, 2026
- feat(guestauth): global flag to disable the guest links feature
  maki5
  committed
  7117c4a
- feat(authguest): added renew endpoint with basic handling
  maki5
  committed
  8e39386
- feat(authguest): pin logic and filemanager upd
  maki5
  committed
  d40bdf6
- feat(authguest): renewal logic and publishing event
  maki5
  committed
  a51f795
- feat(authguest): verify pin endpoint
  maki5
  committed
  7a26391
- feat(authguest): atomic verify pin, rollback mechanism for renew
  maki5
  committed
  46dce34
- feat(authguest): moved redeem from storage layer to service layer
  maki5
  committed
  5b7fd47
- feat(authguest): updated README
  maki5
  committed
  69d2f7f
- feat(authguest): upd README
  maki5
  committed
  fb09fed
- feat(authguest): upd renewal logic to verify token and session, storage has now revisions
  maki5
  committed
  b266546
- feat(authguest): fix codacy issues
  maki5
  committed
  7cfc601
- feat(authguest): removed stale comment after rebase
  maki5
  committed
  d6b5f81
- feat(authguest): /redeem endpoint rename to /verify/token
  maki5
  committed
  6198c21
- feat(authguest): renamed redeem to verify/token
  maki5
  committed
  62f2125
- feat(guestauth): bump libre_graph_api version
  maki5
  committed
  5a661c0
- feat(authguest): fix code style in readme
  maki5
  committed
  1c40729
- fix: add restart command output
  micbar
  committed
  8e51fa5
- Merge pull request #3667 from maki5/feat/authguest_renewal
  maki5
  authored
  f33d20c
- Merge pull request #3706 from opencloud-eu/fix-cli-output
  micbar
  authored
  16a22a1
- fix(collaboration): answer a wopi lock in a read-only session with 200 instead of locking
  fschade
  committed
  51cea60
- fix(collaboration): show the secure view watermark only for view-only tokens
  fschade
  committed
  fc619de
- Merge pull request #3712 from fschade/fix-collaboration-viewer-watermark
  micbar
  authored
  d59b068
- Merge pull request #3711 from fschade/fix-collaboration-read-only-lock
  micbar
  authored
  41784e4
- chore: bump reva to latest main
  micbar
  committed
  24b49bf
- test: add acceptance test
  micbar
  committed
  55cd9d3
Commits on Oct 14, 2026
- fix: bump reva again for status code fix
  micbar
  committed
  e766ed7
- api-test: check PROPFIND/REPORT has-preview (#3714)
  v-scharf
  authored
  bc6f016
- Merge pull request #3713 from opencloud-eu/bump-reva
  micbar
  authored
  4e251fa
- fix: add config to skip share manager migrations
  micbar
  committed
  f50701e
- chore: bump reva to latest main
  micbar
  committed
  38e2dbc
- test: changed behavior
  micbar
  committed
  5ce3fc3
- fix: change the wording
  micbar
  committed
  518e50e
- Merge pull request #3715 from opencloud-eu/fix-3705
  micbar
  authored
  af43e7d
- fix: nats checks were missing the configured auth
  micbar
  committed
  3662a94
- chore: bump reva to latest main
  fschade
  committed
  39c3868
- [tx] updated from transifex
  openclouders
  committed
  5b267fd
Commits on Oct 15, 2026
- feat: add cli command to test the blobstore
  
  kobergj
  authored and
  dragonchaser
  committed
  63028f2
- fix: adjust to comments from CR
  
  kobergj
  authored and
  dragonchaser
  committed
  059e902
- Merge pull request #3720 from fschade/chore-bump-reva-app-fallback
  fschade
  authored
  d80f41b
- feat: add dev docker make targets for different arches
  micbar
  committed
  ddf58bd
- Return ExpiresAt when issueing a session token
  aduffeck
  committed
  a230d7e
- Add email notifications when a guest link has been renewed
  aduffeck
  committed
  989a2e9
- Merge pull request #3724 from opencloud-eu/fix-nats-checks
  fschade
  authored
  4086fad
- feat(collaboration): close the CheckFileInfo gaps for the office apps
  fschade
  committed
  09dba5b
- fix: allow guests to list role definitions
  JammingBen
  committed
  a608418
- Merge pull request #3723 from aduffeck/send-guestlink-renewal-emails
  aduffeck
  authored
  a303d7f
- test(collaboration): expect ReadOnly in read-only and view-only sessions
  fschade
  committed
  a4cf381
- Merge pull request #3729 from opencloud-eu/feat/guest-role-definitions
  aduffeck
  authored
  51e2192
- Merge pull request #3728 from opencloud-eu/add-arch-docker-build
  fschade
  authored
  ea94099
- Merge pull request #3727 from aduffeck/guest-session-expiry
  aduffeck
  authored
  ddd0eda
- [tx] updated from transifex
  openclouders
  committed
  4009546
Commits on Oct 16, 2026
- feat(authguest): basica data structs and config for rate limiting
  maki5
  committed
  985c39d
- fix: allow guest link auth for app open and new endpoints
  JammingBen
  committed
  68cad13
- feat(authguest): nonce check for verifyPin call
  maki5
  committed
  42a411c
- feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters
  maki5
  committed
  d8ab8dc
- feat(authguest): upd readme
  maki5
  committed
  6e6330f
- feat(authguest): fix codacy issues
  maki5
  committed
  9d2c3d4
- feat(authguest): per share nonce cookie name
  maki5
  committed
  57e7221
- feat(authguest): removed session token verification on renew endpoint
  maki5
  committed
  fd25c8c
- feat(authguest): nonce and pin ttl are now using the same value
  maki5
  committed
  ddf388a
- feat(authguest): upd error mappings
  maki5
  committed
  dc59c53
- feat(authguest): fix README styling
  maki5
  committed
  4df88e7
- feat(authguest): upd renewal flow to rely on sessionToken
  maki5
  committed
  7eac7db
- feat(authguest): fix the renew sessionValid condition
  maki5
  committed
  7a7f43f
- feat(auhguest): upd renew quota limiting logic
  maki5
  committed
  e931d1a
- feat(authguest): fix codacy styling
  maki5
  committed
  c9345db
- feat(authguest): fixed tests after rebase
  maki5
  committed
  f6a3ff0
- Merge pull request #3737 from opencloud-eu/fix/guest-link-app-provider-paths
  JammingBen
  authored
  19f9da7
- feat(authguest): bump libre-graph-api-go to latest main
  maki5
  committed
  6a52769
- feat(collaboration): send DownloadUrl outside of secure view
  fschade
  committed
  e1cfacb
- Merge pull request #3704 from maki5/feat/authguest_rate_limit
  maki5
  authored
  14d9251
- docs: update unified Roles
  micbar
  committed
  2c3c1c2
- Make renewal mails without PINs work
  aduffeck
  committed
  5e4d722
- Don't issue PINs for renewals with expired guest sessions
  aduffeck
  committed
  60832cc
- Rate limit guest link renewals with a valid session separately
  aduffeck
  committed
  564e1c0
- Keep the newest guest link while it can still be redeemed
  aduffeck
  committed
  b7fd066
- Raise the default cap for guest link renewals without a session to 50
  aduffeck
  committed
  cf60057
- Merge pull request #3742 from aduffeck/guest-renewal-limits
  aduffeck
  authored
  34195a4
- Merge pull request #3739 from aduffeck/guestlink-renewal-mail-without-pin
  aduffeck
  authored
  0deb118
- fix(activitylog): fix for guestuser display name in activity list
  maki5
  committed
  753524a
- fix(authguest): fix diagram parsing in readme
  maki5
  committed
  6ed4fd3
- Merge pull request #3730 from fschade/feat-collaboration-checkfileinfo-gaps
  fschade
  authored
  3cc4774
- [tx] updated from transifex
  openclouders
  committed
  6b50d80
Commits on Oct 17, 2026
- [tx] updated from transifex
  openclouders
  committed
  1d4308e
Commits on Oct 19, 2026
- Merge pull request #3745 from maki5/fix/authguest_readme
  maki5
  authored
  fc1a055
- Make archiver work with guest link auth
  aduffeck
  committed
  855a728
- Merge pull request #3743 from maki5/fix/activitylog_display_guestuser_name
  maki5
  authored
  6bb1f2e
- tests: add acceptance tests for sharing with guests via email (#3751)
  v-scharf
  authored
  8517f84
- feat(guestauth): consume space shared event
  maki5
  committed
  2425b7e
- feat(guestauth): handling space shared event
  maki5
  committed
  281f18e
- feat(thumbnails): add imagor-compatible push-based thumbnail endpoint
  
  butonic
  authored and
  dschmidt
  committed
  924d742
- refactor(webdav): drive the thumbnail workflow via the push-based generator
  
  butonic
  authored and
  dschmidt
  committed
  81d0a86
- refactor(thumbnails): remove the pull-based pipeline
  
  butonic
  authored and
  dschmidt
  committed
  2037084
- fix(webdav): snap each thumbnail axis onto a ladder of edge lengths
  dschmidt
  committed
  95fcc4c
- fix(webdav): name the thumbnail config fields after what they configure
  dschmidt
  committed
  4c0768c
- fix(webdav): type the upload part and answer the small things
  dschmidt
  committed
  0f734ac
- feat(webdav): write a thumbnail in the type the source maps to
  dschmidt
  committed
  de467d7
- fix(webdav): hand an embedded image to the generator as it was found
  dschmidt
  committed
  07d6829
- feat(webdav): let a deployment add the types a preview is made of
  dschmidt
  committed
  32f4ee0
- refactor(webdav): a converter returns the image bytes and their type
  dschmidt
  committed
  9879927
- fix(thumbnails): answer like imagor, and write what imagor writes
  dschmidt
  committed
  2267b6d
- docs: describe the push endpoint and the preview settings as they are
  dschmidt
  committed
  7000230
- fix(webdav): refuse what it cannot serve and pass the generator through
  dschmidt
  committed
  918c2ba
- fix(webdav): make the legacy a flag mean something again
  dschmidt
  committed
  99c7666
- refactor: one gif resize, a request struct, half the routes
  dschmidt
  committed
  6c9dc28
- test(thumbnails): compare the built-in generator against two real imagors
  dschmidt
  committed
  9b4e173
- test(thumbnails): put the push endpoint on ginkgo
  dschmidt
  committed
  eb6d102
- fix(webdav): keep the acceptance contract for previews
  dschmidt
  committed
  f4792a0
- docs: fix what the thumbnail readmes get wrong
  dschmidt
  committed
  85b7ccc
- fix: answer the review, and read imagor's path the way imagor does
  dschmidt
  committed
  3572410
- refactor(thumbnails): let the backend answer for the image it decodes
  dschmidt
  committed
  18c5d72
- fix: the small things the review left over
  dschmidt
  committed
  67856fd
- refactor(webdav): own the list of types a preview is announced for
  dschmidt
  committed
  c5c5ec2
- fix: answer the third review round
  dschmidt
  committed
  1da9fa8
- refactor(thumbnails): one table for the output formats, one fit-in
  dschmidt
  committed
  e981a06
- docs: say what the code does, in the places that still described something else
  dschmidt
  committed
  4da8971
- docs: the thumbnail settings are only checked with previews enabled
  dschmidt
  committed
  a6fcc8d
- fix: answer the review from @orgaralf
  dschmidt
  committed
  999ad6f
- docs: say less in the comments, and name what matchOperation returns
  dschmidt
  committed
  c980083
- fix(webdav): ask the generator for the smart crop
  dschmidt
  committed
  48f9990
- fix(webdav): stop refusing a type mapping on a guess about the generator
  dschmidt
  committed
  ee4465f
- Merge pull request #3755 from aduffeck/guest-archive-download
  aduffeck
  authored
  3826240
- refactor(webdav): ask ForType for options, not for an any map
  dschmidt
  committed
  89e2f42
- fix(frontend): report content search only when full-text search is enabled
  fschade
  committed
  54f3343
- feat(guestauth): remove tests from expected failures
  maki5
  committed
  80d64ea
- feat: expose the default project space quota in the capabilities
  AlexAndBear
  committed
  6adeacf
- refactor: read the default quota only from OC_SPACES_DEFAULT_QUOTA and deprecate GRAPH_SPACES_DEFAULT_QUOTA
  AlexAndBear
  committed
  79a4499
- tests: check that a guest can only access the shared resource (#3752)
  v-scharf
  authored
  d0958f0
- Merge pull request #3738 from opencloud-eu/docs-unified-roles
  micbar
  authored
  a9a694c
- [tx] updated from transifex
  openclouders
  committed
  9cc0dd6
Commits on Oct 20, 2026
Commits on Oct 21, 2026
- bump reva
  dragonchaser
  committed
  db02471
- fix(idp): show keyboard focus on every control (#3732)
  AlexAndBear
  authored
  8acaef2
- fix(thumbnails): apply an embedded color profile in the pure Go build
  dschmidt
  committed
  6d7dd34
- refactor(webdav,graph,frontend): put the thumbnail settings in a thumbnails block
  dschmidt
  committed
  f7e8817
- fix(ci): quote the imagor body limit so the service starts
  dschmidt
  committed
  83a0fac
- refactor(webdav): keep ignoring the legacy a flag
  dschmidt
  committed
  8a80d75
- docs(webdav): name every thumbnail variable that stopped doing anything
  dschmidt
  committed
  afdaace
Commits on Oct 22, 2026
- feat(search): configurable query filter
  fschade
  committed
  3fe11ea
- feat(search): turn the query filter into a template
  fschade
  committed
  3850622
Commits on Oct 23, 2026
- feat(guestlinks): tmp reva bump from fork branch with updated events
  maki5
  committed
  a856d50
- feat(guestlinks): upd SpaceShared event handling
  maki5
  committed
  a189c79
- feat(guestlinks): handling of SpaceShare unshared and expired events
  maki5
  committed
  e95ca27
- feat(guestlinks): bumped reva to main
  maki5
  committed
  5d89930
- refactor: name the settings that extend a default list additional_*
  dschmidt
  committed
  8e508e5
- fix(search): strip the scope clause together with its boolean operator
  fschade
  committed
  a87aec0
- fix(search): expand is:favorite in place
  fschade
  committed
  9d972f1
- Bump reva
  aduffeck
  committed
  964b4c0
- Merge remote-tracking branch 'upstream/main' into imagor
  aduffeck
  committed
  94756cb
- Merge pull request #3397 from opencloud-eu/imagor
  aduffeck
  authored
  3884562
- Merge pull request #3765 from maki5/feat/guestlinks_spaceshare_cleanup_events
  maki5
  authored
  984c2c7
- tests: add acceptance tests for renewing guest links (#3753)
  v-scharf
  authored
  4e31826
- Merge pull request #3787 from fschade/feat-search-query-filter
  butonic
  authored
  a0ae834
- fix(cli): detect storage driver from storage path in revisions and trash commands (#3776)
  v-scharf
  authored
  ef9c6e7
Commits on Oct 24, 2026

Commits

Commits on Oct 6, 2026

Commits on Oct 7, 2026

Commits on Oct 8, 2026

Commits on Oct 9, 2026

Commits on Oct 11, 2026

Commits on Oct 12, 2026

Commits on Oct 13, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026