Changes in 1.10.0

Summary

• Bugfix - Improve IDP Login Accessibility: #5376
• Bugfix - Forward basic auth to OpenID connect token authentication endpoint: #2095
• Bugfix - Log all requests in the proxy access log: #2301
• Bugfix - Update glauth to 20210729125545-b9aecdfcac31: #2336
• Change - Update ownCloud Web to v4.0.0: #2353
• Enhancement - Proxy: Add claims policy selector: #2248
• Enhancement - Add ocs cache warmup config and warn on protobuf ns conflicts: #2328
• Enhancement - Refactor graph API: #2277
• Enhancement - Update REVA: #2355
• Enhancement - Use only one go.mod file for project dependencies: #2344

Details

• Bugfix - Improve IDP Login Accessibility: #5376

  We have addressed the feedback from the a11y audit and improved the IDP login screen
  accordingly.

  owncloud/web#5376
  owncloud/web#5377

• Bugfix - Forward basic auth to OpenID connect token authentication endpoint: #2095

  When using PROXY_ENABLE_BASIC_AUTH=true we now forward request to the idp instead of
  trying to authenticate the request ourself.

  #2095
  #2094

• Bugfix - Log all requests in the proxy access log: #2301

  We now use a dedicated middleware to log all requests, regardless of routing selector outcome.
  While the log now includes the remote address, the selected routing policy is only logged when
  log level is set to debug because the request context cannot be changed in the
  directorSelectionDirector, as per the ReverseProxy.Director documentation.

  #2301

• Bugfix - Update glauth to 20210729125545-b9aecdfcac31: #2336

  • Fixes the backend config not being passed correctly in ocis
  • Fixes a mutex being copied, leading to concurrent writes
  • Fixes UTF8 chars in filters
  • Fixes case insensitive strings

  #2336
  glauth/glauth#198
  glauth/glauth#194

• Change - Update ownCloud Web to v4.0.0: #2353

  Tags: web

  We updated ownCloud Web to v4.0.0. Please refer to the changelog (linked) for details on the web
  release.

  #2353
  https://github.com/owncloud/web/releases/tag/v4.0.0

• Enhancement - Proxy: Add claims policy selector: #2248

  Using the proxy config file, it is now possible to let let the IdP determine the routing policy by
  sending an ocis.routing.policy claim. Its value will be used to determine the set of routes
  for the logged in user.

  #2248

• Enhancement - Add ocs cache warmup config and warn on protobuf ns conflicts: #2328

  #2328

• Enhancement - Refactor graph API: #2277

  We refactored the /graph/v1.0/ endpoint which now relies on the internal acces token fer
  authentication, getting rid of any LDAP or OIDC code to authenticate requests. This allows
  using the graph api when using basic auth or any other auth mechanism provided by the CS3 auth
  providers / reva gateway / ocis proxy.

  #2277

• Enhancement - Update REVA: #2355

  Update REVA from v1.10.1-0.20210730095301-fcb7a30a44a6 to v1.11.0 * Fix
  cs3org/reva#1899: Fix chunked uploads for new versions * Fix cs3org/reva#1906: Fix copy over
  existing resource * Fix cs3org/reva#1891: Delete Shared Resources as Receiver * Fix
  cs3org/reva#1907: Error when creating folder with existing name * Fix cs3org/reva#1937: Do
  not overwrite more specific matches when finding storage providers * Fix cs3org/reva#1939:
  Fix the share jail permissions in the decomposedfs * Fix cs3org/reva#1932: Numerous fixes to
  the owncloudsql storage driver * Fix cs3org/reva#1912: Fix response when listing versions of
  another user * Fix cs3org/reva#1910: Get user groups recursively in the cbox rest user driver *
  Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the datagateway * Fix
  cs3org/reva#1911: Fix version order in propfind responses * Fix cs3org/reva#1926: Trash Bin
  in oCIS Storage Operations * Fix cs3org/reva#1901: Fix response code when folder doesnt exist
  on upload * Enh cs3org/reva#1785: Extend app registry with AddProvider method and mimetype
  filters * Enh cs3org/reva#1938: Add methods to get and put context values * Enh
  cs3org/reva#1798: Add support for a deny-all permission on references * Enh
  cs3org/reva#1916: Generate updated protobuf bindings for EOS GRPC * Enh cs3org/reva#1887:
  Add "a" and "l" filter for grappa queries * Enh cs3org/reva#1919: Run gofmt before building *
  Enh cs3org/reva#1927: Implement RollbackToVersion for eosgrpc (needs a newer EOS MGM) * Enh
  cs3org/reva#1944: Implement listing supported mime types in app registry * Enh
  cs3org/reva#1870: Be defensive about wrongly quoted etags * Enh cs3org/reva#1940: Reduce
  memory usage when uploading with S3ng storage * Enh cs3org/reva#1888: Refactoring of the
  webdav code * Enh cs3org/reva#1900: Check for illegal names while uploading or moving files *
  Enh cs3org/reva#1925: Refactor listing and statting across providers for virtual views * Fix
  cs3org/reva#1883: Pass directories with trailing slashes to eosclient.GenerateToken * Fix
  cs3org/reva#1878: Improve the webdav error handling in the trashbin * Fix cs3org/reva#1884:
  Do not send body on failed range request * Enh cs3org/reva#1744: Add support for lightweight
  user types * Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the
  datagateway * Fix cs3org/reva#1899: Bugfix: Fix chunked uploads for new versions * Enh
  cs3org/reva#1888: Refactoring of the webdav code * Enh cs3org/reva#1887: Add "a" and "l"
  filter for grappa queries

  #2355
  #2295
  #2314

• Enhancement - Use only one go.mod file for project dependencies: #2344

  We now use one single go.mod file at the root of the repository rather than one per core
  extension.

  #2344