Changes in 1.10.0

Summary

• Bugfix - Improve IDP Login Accessibility: #5376
• Bugfix - Forward basic auth to OpenID connect token authentication endpoint: #2095
• Bugfix - Log all requests in the proxy access log: #2301
• Bugfix - Update glauth to 20210729125545-b9aecdfcac31: #2336
• Change - Update ownCloud Web to v4.0.0: #2353
• Enhancement - Proxy: Add claims policy selector: #2248
• Enhancement - Add ocs cache warmup config and warn on protobuf ns conflicts: #2328
• Enhancement - Refactor graph API: #2277
• Enhancement - Update REVA: #2355
• Enhancement - Use only one go.mod file for project dependencies: #2344

Details

• Bugfix - Improve IDP Login Accessibility: #5376

  We have addressed the feedback from the a11y audit and improved the IDP login screen
  accordingly.

  owncloud/web#5376
  owncloud/web#5377

• Bugfix - Forward basic auth to OpenID connect token authentication endpoint: #2095

  When using PROXY_ENABLE_BASIC_AUTH=true we now forward request to the idp instead of
  trying to authenticate the request ourself.

  #2095
  #2094

• Bugfix - Log all requests in the proxy access log: #2301

  We now use a dedicated middleware to log all requests, regardless of routing selector outcome.
  While the log now includes the remote address, the selected routing policy is only logged when
  log level is set to debug because the request context cannot be changed in the
  directorSelectionDirector, as per the ReverseProxy.Director documentation.

  #2301

• Bugfix - Update glauth to 20210729125545-b9aecdfcac31: #2336

  • Fixes the backend config not being passed correctly in ocis
  • Fixes a mutex being copied, leading to concurrent writes
  • Fixes UTF8 chars in filters
  • Fixes case insensitive strings

  #2336
  glauth/glauth#198
  glauth/glauth#194

• Change - Update ownCloud Web to v4.0.0: #2353

  Tags: web

  We updated ownCloud Web to v4.0.0. Please refer to the changelog (linked) for details on the web
  release.

  #2353
  https://github.com/owncloud/web/releases/tag/v4.0.0

• Enhancement - Proxy: Add claims policy selector: #2248

  Using the proxy config file, it is now possible to let let the IdP determine the routing policy by
  sending an ocis.routing.policy claim. Its value will be used to determine the set of routes
  for the logged in user.

  #2248

• Enhancement - Add ocs cache warmup config and warn on protobuf ns conflicts: #2328

  #2328

• Enhancement - Refactor graph API: #2277

  We refactored the /graph/v1.0/ endpoint which now relies on the internal acces token fer
  authentication, getting rid of any LDAP or OIDC code to authenticate requests. This allows
  using the graph api when using basic auth or any other auth mechanism provided by the CS3 auth
  providers / reva gateway / ocis proxy.

  #2277

• Enhancement - Update REVA: #2355

  Update REVA from v1.10.1-0.20210730095301-fcb7a30a44a6 to
  v1.11.1-0.20210809134415-3fe79c870fb5 * Fix cs3org/reva#1978: Fix owner type is optional

  • Fix cs3org/reva#1899: Fix chunked uploads for new versions * Fix cs3org/reva#1906: Fix copy
    over existing resource * Fix cs3org/reva#1891: Delete Shared Resources as Receiver * Fix
    cs3org/reva#1907: Error when creating folder with existing name * Fix cs3org/reva#1937: Do
    not overwrite more specific matches when finding storage providers * Fix cs3org/reva#1939:
    Fix the share jail permissions in the decomposedfs * Fix cs3org/reva#1932: Numerous fixes to
    the owncloudsql storage driver * Fix cs3org/reva#1912: Fix response when listing versions of
    another user * Fix cs3org/reva#1910: Get user groups recursively in the cbox rest user driver *
    Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the datagateway * Fix
    cs3org/reva#1911: Fix version order in propfind responses * Fix cs3org/reva#1926: Trash Bin
    in oCIS Storage Operations * Fix cs3org/reva#1901: Fix response code when folder doesnt exist
    on upload * Enh cs3org/reva#1785: Extend app registry with AddProvider method and mimetype
    filters * Enh cs3org/reva#1938: Add methods to get and put context values * Enh
    cs3org/reva#1798: Add support for a deny-all permission on references * Enh
    cs3org/reva#1916: Generate updated protobuf bindings for EOS GRPC * Enh cs3org/reva#1887:
    Add "a" and "l" filter for grappa queries * Enh cs3org/reva#1919: Run gofmt before building *
    Enh cs3org/reva#1927: Implement RollbackToVersion for eosgrpc (needs a newer EOS MGM) * Enh
    cs3org/reva#1944: Implement listing supported mime types in app registry * Enh
    cs3org/reva#1870: Be defensive about wrongly quoted etags * Enh cs3org/reva#1940: Reduce
    memory usage when uploading with S3ng storage * Enh cs3org/reva#1888: Refactoring of the
    webdav code * Enh cs3org/reva#1900: Check for illegal names while uploading or moving files *
    Enh cs3org/reva#1925: Refactor listing and statting across providers for virtual views * Fix
    cs3org/reva#1883: Pass directories with trailing slashes to eosclient.GenerateToken * Fix
    cs3org/reva#1878: Improve the webdav error handling in the trashbin * Fix cs3org/reva#1884:
    Do not send body on failed range request * Enh cs3org/reva#1744: Add support for lightweight
    user types * Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the
    datagateway * Fix cs3org/reva#1899: Bugfix: Fix chunked uploads for new versions * Enh
    cs3org/reva#1888: Refactoring of the webdav code * Enh cs3org/reva#1887: Add "a" and "l"
    filter for grappa queries

  #2355
  #2295
  #2314

• Enhancement - Use only one go.mod file for project dependencies: #2344

  We now use one single go.mod file at the root of the repository rather than one per core
  extension.

  #2344