A.Unger
@@ -3,5 +3,5 @@ Enhancement: Load Proxy Policies at Runtime
|
||||
While a proxy without policies is of no use, the current state of ocis-proxy expects a config file either at an expected Viper location or specified via -- config-file flag.
|
||||
To ease deployments and ensure a working set of policies out of the box we need a series of defaults.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/17>
|
||||
<https://github.com/owncloud/ocis/proxy/pull/16>
|
||||
https://github.com/owncloud/ocis/proxy/issues/17
|
||||
https://github.com/owncloud/ocis/proxy/pull/16
|
||||
|
||||
@@ -3,4 +3,4 @@ Change: Route requests based on regex or query parameters
|
||||
Some requests needed to be distinguished based on a pattern or a query parameter.
|
||||
We've implemented the functionality to route requests based on different conditions.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/21>
|
||||
https://github.com/owncloud/ocis/proxy/issues/21
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
Enhancement: Proxy client urls in default configuration
|
||||
|
||||
Proxy /status.php and index.php/\*
|
||||
Proxy /status.php and index.php/*
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/19>
|
||||
https://github.com/owncloud/ocis/proxy/issues/19
|
||||
|
||||
@@ -2,4 +2,4 @@ Enhancement: Make TLS-Cert configurable
|
||||
|
||||
Before a generates certificates on every start was used for dev purposes.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/14>
|
||||
https://github.com/owncloud/ocis/proxy/pull/14
|
||||
|
||||
@@ -1,3 +1,3 @@
|
||||
Bugfix: Set TLS-Certificate correctly
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/25>
|
||||
https://github.com/owncloud/ocis/proxy/pull/25
|
||||
|
||||
@@ -4,4 +4,5 @@ The proxy will try to authenticate every request with the configured OIDC provid
|
||||
|
||||
See configs/proxy-example.oidc.json for an example-configuration.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/27>
|
||||
https://github.com/owncloud/ocis/proxy/pull/27
|
||||
|
||||
|
||||
@@ -6,4 +6,5 @@ See: config/proxy-example.json.
|
||||
"Migration-Policy" selects policy depending on existence of the uid in the ocis-accounts service.
|
||||
See: config/proxy-example-migration.json
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/4>
|
||||
https://github.com/owncloud/ocis/proxy/issues/4
|
||||
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
Change: Insecure http-requests are now redirected to https
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/29>
|
||||
https://github.com/owncloud/ocis/proxy/pull/29
|
||||
|
||||
|
||||
@@ -3,5 +3,5 @@ Enhancement: create account if it doesn't exist in ocis-accounts
|
||||
The accounts_uuid middleware tries to get the account from ocis-accounts.
|
||||
If it doens't exist there yet the proxy creates the account using the ocis-account api.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/55>
|
||||
<https://github.com/owncloud/ocis/proxy/issues/58>
|
||||
https://github.com/owncloud/ocis/proxy/issues/55
|
||||
https://github.com/owncloud/ocis/proxy/issues/58
|
||||
|
||||
@@ -3,4 +3,4 @@ Enhancement: respect account_enabled flag
|
||||
If the account returned by the accounts service has the account_enabled flag
|
||||
set to false, the proxy will return immediately with the status code unauthorized.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/53>
|
||||
https://github.com/owncloud/ocis/proxy/issues/53
|
||||
|
||||
@@ -1,10 +1,9 @@
|
||||
Enhancement: Add Accounts UI routes
|
||||
|
||||
The accounts service has a ui that requires routing
|
||||
- `/api/v0/accounts` and
|
||||
- `/accounts.js`
|
||||
|
||||
- `/api/v0/accounts` and
|
||||
- `/accounts.js`
|
||||
to http://localhost:9181
|
||||
|
||||
to http://localhost:9181
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/65>
|
||||
https://github.com/owncloud/ocis/proxy/pull/65
|
||||
|
||||
@@ -5,5 +5,5 @@ TLS-Terminating reverse proxy.
|
||||
|
||||
env PROXY_TLS=false or --tls=false
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/71>
|
||||
<https://github.com/owncloud/ocis/proxy/pull/72>
|
||||
https://github.com/owncloud/ocis/proxy/issues/71
|
||||
https://github.com/owncloud/ocis/proxy/pull/72
|
||||
|
||||
@@ -1,12 +1,11 @@
|
||||
Change: Add OIDC config flags
|
||||
|
||||
To authenticate requests with an oidc provider we added two environment variables:
|
||||
|
||||
- `PROXY_OIDC_ISSUER="https://localhost:9200"` and
|
||||
- `PROXY_OIDC_INSECURE=true`
|
||||
- `PROXY_OIDC_ISSUER="https://localhost:9200"` and
|
||||
- `PROXY_OIDC_INSECURE=true`
|
||||
|
||||
This changes ocis-proxy to now load the oidc-middleware by default, requiring a bearer token and exchanging the email in the OIDC claims for an account id at the ocis-accounts service.
|
||||
|
||||
Setting `PROXY_OIDC_ISSUER=""` will disable the OIDC middleware.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/66>
|
||||
https://github.com/owncloud/ocis/proxy/pull/66
|
||||
|
||||
@@ -3,5 +3,5 @@ Enhancement: only send create home request if an account has been migrated
|
||||
This change adds a check if an account has been migrated by getting it from the
|
||||
ocis-accounts service. If no account is returned it means it hasn't been migrated.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/52>
|
||||
<https://github.com/owncloud/ocis/proxy/pull/63>
|
||||
https://github.com/owncloud/ocis/proxy/issues/52
|
||||
https://github.com/owncloud/ocis/proxy/pull/63
|
||||
|
||||
@@ -2,4 +2,4 @@ Bugfix: Provide token configuration from config
|
||||
|
||||
Fixed a bug that causes the createHome middleware to crash if no configuration for the TokenManager is propagated.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/69>
|
||||
https://github.com/owncloud/ocis/proxy/pull/69
|
||||
|
||||
@@ -2,4 +2,4 @@ Bugfix: Provide token configuration from config
|
||||
|
||||
Fixed a bug that causes the createHome middleware to crash if the createHome response has no Status set
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/76>
|
||||
https://github.com/owncloud/ocis/proxy/pull/76
|
||||
|
||||
@@ -2,4 +2,4 @@ Enhancement: Create a root span on proxy that propagates down to consumers
|
||||
|
||||
In order to propagate and correctly associate a span with a request we need a root span that gets sent to other services.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/64>
|
||||
https://github.com/owncloud/ocis/proxy/pull/64
|
||||
|
||||
@@ -2,7 +2,7 @@ Enhancement: Support signed URLs
|
||||
|
||||
We added a middleware that verifies signed urls as generated by the owncloud-sdk. This allows directly downloading large files with browsers instead of using `blob://` urls, which eats memory ...
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/73>
|
||||
<https://github.com/owncloud/ocis/proxy/pull/75>
|
||||
<https://github.com/owncloud/ocis-ocs/pull/18>
|
||||
<https://github.com/owncloud/owncloud-sdk/pull/504>
|
||||
https://github.com/owncloud/ocis/proxy/issues/73
|
||||
https://github.com/owncloud/ocis/proxy/pull/75
|
||||
https://github.com/owncloud/ocis-ocs/pull/18
|
||||
https://github.com/owncloud/owncloud-sdk/pull/504
|
||||
|
||||
@@ -3,4 +3,4 @@ Change: mint new username property in the reva token
|
||||
An accounts username is now taken from the on_premises_sam_account_name property instead of the preferred_name.
|
||||
Furthermore the group name (also from on_premises_sam_account_name property) is now minted into the token as well.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/62>
|
||||
https://github.com/owncloud/ocis/proxy/pull/62
|
||||
|
||||
@@ -2,4 +2,4 @@ Bugfix: enable new accounts by default
|
||||
|
||||
When new accounts are created, they also need to be enabled to be useable.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/79>
|
||||
https://github.com/owncloud/ocis/proxy/pull/79
|
||||
|
||||
@@ -2,6 +2,6 @@ Bugfix: Lookup user by id for presigned URLs
|
||||
|
||||
Phoenix will send the `userid`, not the `username` as the `OC-Credential` for presigned URLs. This PR uses the new `ocisid` claim in the OIDC userinfo to pass the userid to the account middleware.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/85>
|
||||
<https://github.com/owncloud/ocis-pkg/pull/50>
|
||||
<https://github.com/owncloud/ocis/issues/436>
|
||||
https://github.com/owncloud/ocis/proxy/pull/85
|
||||
https://github.com/owncloud/ocis-pkg/pull/50
|
||||
https://github.com/owncloud/ocis/issues/436
|
||||
|
||||
@@ -2,4 +2,4 @@ Bugfix: build docker images with alpine:latest instead of alpine:edge
|
||||
|
||||
ARM builds were failing when built on alpine:edge, so we switched to alpine:latest instead.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/78>
|
||||
https://github.com/owncloud/ocis/proxy/pull/78
|
||||
|
||||
@@ -2,4 +2,4 @@ Change: Add route for user provisioning API in ocis-ocs
|
||||
|
||||
We added a route to send requests on the user provisioning API endpoints to ocis-ocs.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/80>
|
||||
https://github.com/owncloud/ocis/proxy/pull/80
|
||||
|
||||
@@ -2,4 +2,4 @@ Enhancement: Add numeric uid and gid to the access token
|
||||
|
||||
The eos storage driver is fetching the uid and gid of a user from the access token. This PR is using the response of the accounts service to mint them in the token.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/89>
|
||||
https://github.com/owncloud/ocis/proxy/pull/89
|
||||
|
||||
@@ -3,5 +3,5 @@ Enhancement: add configuration options for the pre-signed url middleware
|
||||
Added an option to define allowed http methods for pre-signed url requests.
|
||||
This is useful since we only want clients to GET resources and don't upload anything with presigned requests.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/issues/91>
|
||||
<https://github.com/owncloud/product/issues/150>
|
||||
https://github.com/owncloud/ocis/proxy/issues/91
|
||||
https://github.com/owncloud/product/issues/150
|
||||
|
||||
@@ -2,4 +2,4 @@ Bugfix: Fix director selection
|
||||
|
||||
We fixed a bug where simultaneous requests could be executed on the wrong backend.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/99>
|
||||
https://github.com/owncloud/ocis/proxy/pull/99
|
||||
|
||||
@@ -2,4 +2,4 @@ Enhancement: Add hello API and app endpoints to example config and builtin confi
|
||||
|
||||
We added the ocis-hello API and app endpoints to both the example config and the builtin config.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/96>
|
||||
https://github.com/owncloud/ocis/proxy/pull/96
|
||||
|
||||
@@ -2,4 +2,4 @@ Enhancement: Add roleIDs to the access token
|
||||
|
||||
We are using the roleIDs of the authenticated user for permission checks against ocis-settings. We added the roleIDs to the access token to have them available quickly.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/95>
|
||||
https://github.com/owncloud/ocis/proxy/pull/95
|
||||
|
||||
@@ -2,4 +2,4 @@ Change: Remove accounts caching
|
||||
|
||||
We removed the accounts cache in order to avoid problems with accounts that have been updated in the accounts service.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/100>
|
||||
https://github.com/owncloud/ocis/proxy/pull/100
|
||||
|
||||
@@ -3,4 +3,4 @@ Bugfix: Add settings API and app endpoints to example config
|
||||
We had the ocis-settings API and app endpoints in the builtin config already, but they were missing in the example
|
||||
config. Added them for consistency.
|
||||
|
||||
<https://github.com/owncloud/ocis/proxy/pull/93>
|
||||
https://github.com/owncloud/ocis/proxy/pull/93
|
||||
|
||||
Reference in New Issue
Block a user