Changes in 1.16.0

Summary

• Bugfix - Fix claim selector based routing for basic auth: #2779
• Bugfix - Disallow creation of a group with empty name via the OCS api: #2825
• Bugfix - Fix using s3ng as the metadata storage backend: #2807
• Bugfix - Use the CS3api up- and download workflow for the accounts service: #2837
• Change - Rename APP_PROVIDER_BASIC_* environment variables: #2812
• Change - Restructure Configuration Parsing: #2708
• Change - OIDC: fallback if IDP doesn't provide "preferred_username" claim: #2644
• Enhancement - Cleanup ocis-pkg config: #2813
• Enhancement - Correct shutdown of services under runtime: #2843
• Enhancement - Update REVA to v1.17.0: #2849
• Enhancement - Update ownCloud Web to v4.6.1: #2846

Details

• Bugfix - Fix claim selector based routing for basic auth: #2779

  We've fixed the claim selector based routing for requests using basic auth. Previously
  requests using basic auth have always been routed to the DefaultPolicy when using the claim
  selector despite the set cookie because the basic auth middleware fakes some OIDC claims.

  Now the cookie is checked before routing to the DefaultPolicy and therefore set cookie will
  also be respected for requests using basic auth.

  #2779

• Bugfix - Disallow creation of a group with empty name via the OCS api: #2825

  We've fixed the behavior for group creation on the OCS api, where it was possible to create a
  group with an empty name. This was is not possible on oC10 and is therefore also forbidden on oCIS
  to keep compatibility. This PR forbids the creation and also ensures the correct status code
  for both OCS v1 and OCS v2 apis.

  #2823
  #2825

• Bugfix - Fix using s3ng as the metadata storage backend: #2807

  It is now possible to use s3ng as the metadata storage backend.

  #2668
  #2807

• Bugfix - Use the CS3api up- and download workflow for the accounts service: #2837

  We've fixed the interaction of the accounts service with the metadata storage after bypassing
  the InitiateUpload and InitiateDownload have been removed from various storage drivers. The
  accounts service now uses the proper CS3apis workflow for up- and downloads.

  #2837
  cs3org/reva#2309

• Change - Rename APP_PROVIDER_BASIC_* environment variables: #2812

  We've renamed the APP_PROVIDER_BASIC_* to APP_PROVIDER_* since the _BASIC_ part is a
  copy and paste error. Now all app provider environment variables are consistently starting
  with APP_PROVIDER_*.

  #2812
  #2811

• Change - Restructure Configuration Parsing: #2708

  Tags: ocis

  CLI flags are no longer needed for subcommands, as we rely solely on env variables and config
  files. This greatly simplifies configuration and deployment.

  #2708

• Change - OIDC: fallback if IDP doesn't provide "preferred_username" claim: #2644

  Some IDPs don't add the "preferred_username" claim. Fallback to the "email" claim in that case

  #2644

• Enhancement - Cleanup ocis-pkg config: #2813

  Certain values were of no use when configuring the ocis runtime.

  #2813

• Enhancement - Correct shutdown of services under runtime: #2843

  Supervised goroutines now shut themselves down on context cancellation propagation.

  #2843

• Enhancement - Update REVA to v1.17.0: #2849

  Updated REVA to v1.17.0 This update includes:

  • Fix cs3org/reva#2305: Make sure /app/new takes target as absolute path
  • Fix cs3org/reva#2303: Fix content disposition header for public links files
  • Fix cs3org/reva#2316: Fix the share types in propfinds
  • Fix cs3org/reva#2803: Fix app provider for editor public links
  • Fix cs3org/reva#2298: Remove share refs from trashbin
  • Fix cs3org/reva#2309: Remove early finish for zero byte file uploads
  • Fix cs3org/reva#1941: Fix TUS uploads with transfer token only
  • Chg cs3org/reva#2210: Fix app provider new file creation and improved error codes
  • Enh cs3org/reva#2217: OIDC auth driver for ESCAPE IAM
  • Enh cs3org/reva#2256: Return user type in the response of the ocs GET user call
  • Enh cs3org/reva#2315: Add new attributes to public link propfinds
  • Enh cs3org/reva#2740: Implement space membership endpoints
  • Enh cs3org/reva#2252: Add the xattr sys.acl to SysACL (eosgrpc)
  • Enh cs3org/reva#2314: OIDC: fallback if IDP doesn't provide "preferred_username" claim

  #2849
  #2835
  #2837

• Enhancement - Update ownCloud Web to v4.6.1: #2846

  Tags: web

  We updated ownCloud Web to v4.6.1. Please refer to the changelog (linked) for details on the web
  release.

  #2846
  https://github.com/owncloud/web/releases/tag/v4.6.1