Commit Graph
111 Commits
Author SHA1 Message Date
Ralf HaferkampandRalf Haferkamp 3f41dd7601 Add OCIS_LDAP_BIND_PASSWORD envvar and deprecate LDAP_BIND_PASSWORD
For some reason LDAP_BIND_PASSWORD was forgotten when all the other global LDAP_
variables got renamed.

Also marks LDAP_BIND_PASSWORD and LDAP_USER_SCHEMA_ID_IS_OCTETSTRING for removal with 5.0.0

Partial: #7176
(cherry picked from commit 8f284e7c2b)
2023-09-21 16:55:13 +02:00
Christian RichterandJulian Koberg ab0a676dee Fix broken map
Co-authored-by: Julian Koberg <jkoberg@owncloud.com>

Signed-off-by: Christian Richter <crichter@owncloud.com>
2023-08-22 17:25:24 +02:00
Christian Richter d7139d4127 remove deprecated variables
Signed-off-by: Christian Richter <crichter@owncloud.com>
2023-08-22 17:25:24 +02:00
Michael BarzandGitHub ae2dcf48f1 Merge pull request #6953 from owncloud/dependabot/npm_and_yarn/services/idp/xmldom/xmldom-0.8.10
Bump @xmldom/xmldom from 0.8.2 to 0.8.10 in /services/idp
2023-08-09 08:55:35 +02:00
Michael BarzandGitHub 96e5e2e1ba Merge pull request #6951 from owncloud/dependabot/npm_and_yarn/services/idp/tough-cookie-4.1.3
Bump tough-cookie from 4.0.0 to 4.1.3 in /services/idp
2023-08-08 22:54:02 +02:00
Michael BarzandGitHub 8b001fbc03 Merge pull request #6952 from owncloud/dependabot/npm_and_yarn/services/idp/json5-1.0.2
Bump json5 from 1.0.1 to 1.0.2 in /services/idp
2023-08-08 22:53:20 +02:00
Michael BarzandGitHub 4d3b3d4f3c Merge pull request #6860 from owncloud/dependabot/npm_and_yarn/services/idp/word-wrap-1.2.4
Bump word-wrap from 1.2.3 to 1.2.4 in /services/idp
2023-08-08 22:52:42 +02:00
dependabot[bot]andGitHub 6df1e05f16 Bump @xmldom/xmldom from 0.8.2 to 0.8.10 in /services/idp
Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.2 to 0.8.10.
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xmldom/xmldom/compare/0.8.2...0.8.10)

---
updated-dependencies:
- dependency-name: "@xmldom/xmldom"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-03 06:33:40 +00:00
dependabot[bot]andGitHub 76c274ef64 Bump json5 from 1.0.1 to 1.0.2 in /services/idp
Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-03 06:30:47 +00:00
dependabot[bot]andGitHub 7fc2a5916c Bump tough-cookie from 4.0.0 to 4.1.3 in /services/idp
Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 4.0.0 to 4.1.3.
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](https://github.com/salesforce/tough-cookie/compare/v4.0.0...v4.1.3)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-03 06:27:44 +00:00
dependabot[bot]andGitHub 9112ba1d74 Bump decode-uri-component from 0.2.0 to 0.2.2 in /services/idp
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-03 06:27:31 +00:00
Daniel SwärdandGitHub 3c02f3b355 Merge pull request #6856 from owncloud/ainmosni/tracing/idp
Convert IDP service to service trace provider.
2023-07-26 11:18:18 +02:00
mmattel ce318ca160 [docs-only] Replace double quotes with single quotes in envvar descriptions 2023-07-25 13:05:30 +02:00
Daniël Franke 48933fa2ee Package comment for middleware. 2023-07-21 09:16:58 +02:00
dependabot[bot]andGitHub d653a132cf Bump word-wrap from 1.2.3 to 1.2.4 in /services/idp
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-20 17:43:14 +00:00
Daniël Franke d2d0461375 Convert IDP service to service trace provider.
This converts the IDP service to use the service trace provider.
2023-07-20 13:36:08 +02:00
mmattel 6ad53971ef [docs-only] Increase readability for log level values in the description 2023-07-07 10:33:42 +02:00
mmattel d7b447b791 [docs-only] Increase readability for tracing values in the description 2023-07-07 09:50:39 +02:00
Daniel SwärdandGitHub 571d2318c0 Add missing span kind for tracing. (#6471)
* Add missing span kind for tracing.

* Add missing spanKind for tracing.
2023-06-22 10:09:10 +02:00
mmattel 758192bd6d [docs-only] Fix some envvar descriptions 2023-06-09 13:03:17 +02:00
Willy KloucekandGitHub 733e5efdda Merge pull request #6444 from owncloud/remove-references-to-oc.ios-protocol
remove references to oc.ios://ios.owncloud.com since it is no longer used
2023-06-05 15:28:03 +02:00
Willy Kloucek 0f3dddafab remove references to oc.ios://ios.owncloud.com since it is no longer used 2023-06-05 13:57:05 +02:00
jkoberg d347448ec0 remove duplicated sutureservice code
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-06-02 12:02:27 +02:00
Ralf HaferkampandRalf Haferkamp 7a4bc71e65 Revert "idp/proxy: Match users by ID instead of name by default"
This reverts commit 52951b42b0.

The change broke authentication for at least the desktop client when
using the builtin idp. There seem to be issues in the IDP (lico) which
result in the implicit scoped not being added correctly in some case.
When that scope is missing the `lg.uuid` claim will not be present in
the userinfo and we can correctly match users by id.

This reverts back to the old behaviour of matching users by name. Which
also brings some aspects of https://github.com/owncloud/ocis/issues/904

Fixes #6415
2023-06-01 11:13:47 +02:00
Sawjan GurungandGitHub 14de04cb52 update idp pnpm-lock file (#6385) 2023-05-25 12:30:04 +05:45
Ralf HaferkampandRalf Haferkamp 52951b42b0 idp/proxy: Match users by ID instead of name by default
Reconfigure the oidc clients for lico, so that lico adds the "lg.uuid" to
tokens and userinfo by default. That claim will contain the userid. So
we can now use the userid for matching users when using the default
idm/idp configuration. This fixes further problems so that users being
recreated with the same name are correctly treated as differnt users.

Fixes: #904
2023-05-23 09:48:47 +02:00
Ralf HaferkampandRalf Haferkamp 2baf86900d idp: Use the UUID attribute for computing the "sub" claim
This avoids that recreating the user with the same name will create the
same "sub" claim. Even though it gets a new UUID

Fixes: #904
2023-05-16 17:25:55 +02:00
mmattel 67b7b6bad5 [docs-only] Fix IDP envvar description 2023-05-04 08:39:32 +02:00
33e712f0ff Update services/idp/README.md
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
2023-04-27 16:40:08 +02:00
mmattel ea9e2e479d [docs-only] Fix idp readme.md 2023-04-27 16:33:08 +02:00
mmattel 4b7722a32b [docs-only] Update IDP README.md 2023-04-27 15:36:46 +02:00
mmattel 8ed34926ef [docs-only] Correct the removal version according semver to 4.0.0 2023-04-19 10:16:06 +02:00
mmattel b2504035e0 fix readme service names 2023-04-12 18:40:41 +02:00
MartinandGitHub a5e99d39b1 Update IDM config.go
Fixes: 5906

After clarification and renaming th envvar and post a discussion with @rhafer, we should align the yaml name to the envvar name. Note that the backend name (`Insecure`) is not changed.
* In the deployment examples, we use ennvars and no yaml
* ocis init does not use it
2023-04-06 11:58:09 +02:00
Daniel Swärd afbfd2d6b2 Deprecating and renaming many environment variables
Fixes #5767
Fixes #5905
Fixes #5532
2023-04-05 11:05:48 +02:00
mmattel 949e5c228f [docs-only] Rename / Deprecate userlog and eventhistory envvars 2023-04-04 11:07:31 +02:00
Daniel Swärd f09d3c5a19 idp: Change name of environment variable to be more consistent. 2023-04-04 09:24:14 +02:00
Dominik Schmidt cb39839641 idp: fix pnpm build for Node >= 17 and remove obsolete targets 2023-04-03 12:01:59 +02:00
Benedikt KulmannandGitHub ca05862279 Delete .DS_Store 2023-03-31 11:18:53 +02:00
Dennis Siebenandmmattel e28603e633 - fixed typos 2023-03-27 08:54:51 +02:00
mmattel d25102c11e update 2023-03-22 17:02:34 +01:00
mmattel 777c302bc9 [docs-only] Clarify the description of the TLS_IDP envvar 2023-03-22 16:53:14 +01:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Florian Schademmattel
e7fd4f93f4 Bump i18next from 21.10.0 to 22.0.4 in /services/idp (#4941)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Florian Schade <f.schade@icloud.com>
Co-authored-by: mmattel <github@diemattels.at>
2023-03-21 10:03:59 +01:00
Jörn Friedrich DreyerandGitHub 971dbe8682 bump lico to 0.59.4 (#5768)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2023-03-08 17:25:55 +01:00
David ChristofasandGitHub 7750492de4 Merge pull request #5721 from owncloud/clean-up-code
reduce duplication in configuration code
2023-03-07 10:58:33 +01:00
Benedikt KulmannandRalf Haferkamp e0d974dda9 chore: update pnpm lock file 2023-03-07 10:10:43 +01:00
dependabot[bot]andRalf Haferkamp 58f5845f2a Bump react-redux from 7.2.9 to 8.0.5 in /services/idp
Bumps [react-redux](https://github.com/reduxjs/react-redux) from 7.2.9 to 8.0.5.
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](https://github.com/reduxjs/react-redux/compare/v7.2.9...v8.0.5)

---
updated-dependencies:
- dependency-name: react-redux
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-07 10:10:43 +01:00
David Christofas 924c2ca346 add missing comments 2023-03-06 19:01:16 +01:00
David Christofas 63fa35fa50 reduce duplication in configuration code 2023-03-06 16:52:44 +01:00
Ralf HaferkampandRalf Haferkamp 9e73b17a40 idp: Utilize ownCloudUserEnabled Attribute to filter users
This adds support for configuring an LDAP Attribute that can be used as a flag
to disallow users to login. We currently default to 'ownCloudUserEnabled' as
used in the default configuration of the graph service.
2023-02-22 11:23:26 +01:00