Changes in 5.0.0
Summary
- Bugfix - Return 423 status code on tag create: #7596
- Bugfix - Delete outdated userlog events: #7410
- Bugfix - Don't reload web config: #7369
- Bugfix - Fix the auth service env variable: #7523
- Bugfix - Fix the kql-bleve search: #7290
- Bugfix - Fix default language fallback: #7465
- Bugfix - Fix 403 in docs pipeline: #7509
- Bugfix - Check school number for duplicates before adding a school: #7351
- Bugfix - Do not reset state of received shares when rebuilding the jsoncs3 index: #7319
- Bugfix - Set existing mountpoint on auto accept: #7592
- Bugfix - Deprecate redundant encryptions settings for notification service: #7345
- Bugfix - Token storage config fixed: #7528
- Bugfix - Fix preview request 500 error when made too early: #7502
- Bugfix - GetUserByClaim fixed for Active Directory: #7476
- Bugfix - Bring back the USERS_LDAP_USER_SCHEMA_ID variable: #7312
- Bugfix - Set the mountpoint on auto accept: #7460
- Change - Auto-Accept Shares: #7097
- Change - Change the default TUS chunk size: #7273
- Enhancement - Support spec violating AD FS access token issuer: #7138
- Enhancement - Add "Last modified" filter Chip: #7455
- Enhancement - Add the Banned Passwords List: #4197
- Enhancement - Add the password policies: #7285
- Enhancement - Bump Reva: #7611
- Enhancement - Edit wrong named enves: #7406
- Enhancement - Introduce clientlog service: #7217
- Enhancement - Set default for Async Uploads to true: #7416
- Enhancement - The default language added: #7417
- Enhancement - Config for disabling Web extensions: #7486
- Enhancement - Add login URL config: #7317
- Enhancement - New value
auto
for NOTIFICATIONS_SMTP_AUTHENTICATION: #7356 - Enhancement - Tika content extraction cleanup for search: #7553
- Enhancement - SSE for messaging: #6992
- Enhancement - Implement sharing roles: #7524
- Enhancement - Improve SSE format: #7325
- Enhancement - Keyword Query Language (KQL) search syntax: #7212
- Enhancement - Add OCIS_LDAP_BIND_PASSWORD as replacement for LDAP_BIND_PASSWORD: #7176
- Enhancement - Add new permission to delete public link password: #7538
- Enhancement - The password policies change request: #7264
- Enhancement - Proxy uses service accounts for provisioning: #7240
- Enhancement - Add config to enforce passwords on all public links: #7547
- Enhancement - Introduce service accounts: #6427
- Enhancement - Make sse service scalable: #7382
- Enhancement - Allow configuring storage registry with envvars: #7554
- Enhancement - Thumbnail generation with image processors: #7409
- Enhancement - Update web to v8.0.0: #7622
Details
-
Bugfix - Return 423 status code on tag create: #7596
When a file is locked, return 423 status code instead 500 on tag create
-
Bugfix - Delete outdated userlog events: #7410
Userlog will now delete events when the user has no longer access to the underlying resource
-
Bugfix - Don't reload web config: #7369
When requesting
config.json
file from the server, web service would reload the file if a path
is set. This will remove config entries set via Envvar. Since we want to have the possiblity to
set configuration from both sources we removed the reading from file. The file will still be
loaded on service startup. -
Bugfix - Fix the auth service env variable: #7523
We the auth service env variable to the service specific name. Before it was configurable via
AUTH_MACHINE_JWT_SECRET
and now is configurable viaAUTH_SERVICE_JWT_SECRET
. -
Bugfix - Fix the kql-bleve search: #7290
We fixed the issue when 500 on searches that contain ":". Added the characters escaping
according to https://blevesearch.com/docs/Query-String-Query/ -
Bugfix - Fix default language fallback: #7465
Add the default language for the webui, the settings, userlog and notification service.
-
Bugfix - Fix 403 in docs pipeline: #7509
Docs pipeline was not routed through our proxies which could lead to requests being
blacklisted -
Bugfix - Check school number for duplicates before adding a school: #7351
We fixed an issue that allowed to create two schools with the same school number
-
Bugfix - Do not reset state of received shares when rebuilding the jsoncs3 index: #7319
We fixed a problem with the "ocis migrate rebuild-jsoncs3-indexes" command which reset the
state of received shares to "pending". -
Bugfix - Set existing mountpoint on auto accept: #7592
When already having a share for a specific resource, auto accept would use custom mountpoints
which lead to other errors. Now auto-accept is using the existing mountpoint of a share. -
Bugfix - Deprecate redundant encryptions settings for notification service: #7345
The values
tls
andssl
for thesmtp_encryption
configuration setting are duplicates of
starttls
andssltls
. They have been marked as deprecated. A warning will be logged when
they are still used. Please usestarttls
instead fortls
andssltls
instead of `ssl. -
Bugfix - Token storage config fixed: #7528
The token storage config in the config.json for web was missing when it was set to
false
. -
Bugfix - Fix preview request 500 error when made too early: #7502
Fix the status code and message when a thumbnail request is made too early.
-
Bugfix - GetUserByClaim fixed for Active Directory: #7476
The reva ldap backend for the users and groups service did not hex escape binary uuids in LDAP
filter correctly this could cause problems in Active Directory setups for services using the
GetUserByClaim CS3 request with claim "userid". -
Bugfix - Bring back the USERS_LDAP_USER_SCHEMA_ID variable: #7312
We reintroduced the USERS_LDAP_USER_SCHEMA_ID variable which was accidently removed from
the users service with the 4.0.0 release. -
Bugfix - Set the mountpoint on auto accept: #7460
On shares auto accept set a mountpoint with same logic as ocs handler
-
Change - Auto-Accept Shares: #7097
Automatically accepts shares. This feature is active by default and can be deactivated via the
environment variableFRONTEND_AUTO_ACCEPT_SHARES
. -
Change - Change the default TUS chunk size: #7273
We changed the default TUS chunk size from 100MB to 10MB. You can still use the old value by
configuring it in your deployment. -
Enhancement - Support spec violating AD FS access token issuer: #7138
AD FS
/adfs/.well-known/openid-configuration
has an optionalaccess_token_issuer
which, in violation of the OpenID Connect spec, takes precedence overissuer
. -
Enhancement - Add "Last modified" filter Chip: #7455
Add "Last modified" filter Chip
-
Enhancement - Add the Banned Passwords List: #4197
Added an option to enable a password check against a banned passwords list OCIS-3809
-
Enhancement - Add the password policies: #7285
Add the password policies OCIS-3767
-
Enhancement - Bump Reva: #7611
Bumps reva version
#7611
#7540
#7526
#7138
#6427
#7178
#7217
#7410
#7476
#7551
#7581 -
Enhancement - Edit wrong named enves: #7406
Checked and changed the envvars specified in the task and also removed those that are no longer
used. -
Enhancement - Introduce clientlog service: #7217
Add the clientlog service which will send machine readable notifications to clients
-
Enhancement - Set default for Async Uploads to true: #7416
Async Uploads are meanwhile standard and needed for multiple features. Hence we default them
to true -
Enhancement - The default language added: #7417
The ability of configuration the default language has been added to the setting service.
-
Enhancement - Config for disabling Web extensions: #7486
A new config for disabling specific Web extensions via their id has been added.
-
Enhancement - Add login URL config: #7317
Introduce a config to set the web login URL via
WEB_OPTION_LOGIN_URL
. -
Enhancement - New value
auto
for NOTIFICATIONS_SMTP_AUTHENTICATION: #7356This cause the notifications service to automatically pick a suitable authentication method
to use with the configured SMTP server. This is also the new default behavior. The previous
default was to not use authentication at all. -
Enhancement - Tika content extraction cleanup for search: #7553
So far it has not been possible to determine whether the content for search should be cleaned up
of 'stop words' or not. Stop words are filling words like "I, you, have, am" etc and defined by the
search engine.The behaviour can now be set with the newly introduced settings option
SEARCH_EXTRACTOR_TIKA_CLEAN_STOP_WORDS=false
which is enabled by default.In addition, the stop word cleanup is no longer as aggressive and now ignores numbers, urls,
basically everything except the defined stop words. -
Enhancement - SSE for messaging: #6992
So far, sse has only been used to exchange messages between the server and the client. In order to
be able to send more content to the client, we have moved the endpoint to a separate service and
are now also using it for other notifications like:- notify postprocessing state changes.
- notify file locking and unlocking.
- ... @todo
-
Enhancement - Implement sharing roles: #7524
Implement libre graph sharing roles
-
Enhancement - Improve SSE format: #7325
Improve format of sse notifications
-
Enhancement - Keyword Query Language (KQL) search syntax: #7212
We've introduced support for
KQL
as the default oCIS search query language.Simple queries:
tag:golden tag:"silver"
name:file.txt name:"file.docx"
content:ahab content:"captain aha*"
Date/-range queries
Mtime:"2023-09-05T08:42:11.23554+02:00"
Mtime>"2023-09-05T08:42:11.23554+02:00"
Mtime>="2023-09-05T08:42:11.23554+02:00"
Mtime<"2023-09-05T08:42:11.23554+02:00"
Mtime<="2023-09-05T08:42:11.23554+02:00"
Mtime:today
- range: start of today till end of todayMtime:yesterday
- range: start of yesterday till end of yesterdayMtime:"this week"
- range: start of this week till end of this weekMtime:"this month"
- range: start of this month till end of this monthMtime:"last month"
- range: start of last month till end of last monthMtime:"this year"
- range: start of this year till end of this yearMtime:"last year"
- range: start of last year till end of last year
Conjunctive normal form queries:
tag:golden AND tag:"silver
,tag:golden OR tag:"silver
,tag:golden NOT tag:"silver
(tag:book content:ahab*)
,tag:(book pdf)
Complex queries:
(name:"moby di*" OR tag:bestseller) AND tag:book NOT tag:read
#7042
#7179
#7114
owncloud/web#9636
owncloud/web#9646
#7212
#7043
#7247
#7248
#7254
#7262
owncloud/web#9653
owncloud/web#9672 -
Enhancement - Add OCIS_LDAP_BIND_PASSWORD as replacement for LDAP_BIND_PASSWORD: #7176
The enviroment variable
OCIS_LDAP_BIND_PASSWORD
was added to be more consistent with all
other global LDAP variables.LDAP_BIND_PASSWORD
is deprecated now and scheduled for removal with the 5.0.0 release.We also deprecated
LDAP_USER_SCHEMA_ID_IS_OCTETSTRING
for removal with 5.0.0. The
replacement for it isOCIS_LDAP_USER_SCHEMA_ID_IS_OCTETSTRING
. -
Enhancement - Add new permission to delete public link password: #7538
Users with this new permission can now delete passwords on read-only public links. The
permission is added to the default roles "Admin" and "Space Admin". -
Enhancement - The password policies change request: #7264
The variables renaming OCIS-3767
-
Enhancement - Proxy uses service accounts for provisioning: #7240
The proxy service now uses a service account for provsioning task, like role assignment and
user auto-provisioning. This cleans up some technical debt that required us to mint reva tokes
inside the proxy service. -
Enhancement - Add config to enforce passwords on all public links: #7547
We added the config
OCIS_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD
to enforce passwords
on all public shares. -
Enhancement - Introduce service accounts: #6427
Introduces service accounts to avoid impersonating users in async processes
-
Enhancement - Make sse service scalable: #7382
When running multiple sse instances some events would not be reported to the user. This is
fixed. -
Enhancement - Allow configuring storage registry with envvars: #7554
Introduced new envvars to configure the storage registry in the gateway service
-
Enhancement - Thumbnail generation with image processors: #7409
Thumbnails can now be changed during creation, previously the images were always scaled to fit
the given frame, but it could happen that the images were cut off because they could not be placed
better due to the aspect ratio.This pr introduces the possibility of specifying how the behavior should be, following
processors are available- resize
- fit
- fill
- thumbnail
The processor can be applied by adding the processor query param to the request, e.g.
processor=fit
,processor=fill
, ...To find out more how the individual processors work please read
https://github.com/disintegration/imagingIf no processor is provided it behaves the same as before (resize for gif's and thumbnail for all
other)https://github.com/owncloud/enterprise/issues/6057
#5179
owncloud/web#7728
#7409 -
Enhancement - Update web to v8.0.0: #7622
Tags: web
We updated ownCloud Web to v8.0.0. Please refer to the changelog (linked) for details on the web
release.Summary * Bugfix owncloud/web#9257
- Filter out shares without display name * Bugfix
owncloud/web#9483 - PDF loading
Safari * Bugfix owncloud/web#9513 - Set
or remove expiration date on group share not possible * Bugfix
owncloud/web#9529 - Shared with action
menu label alignment * Bugfix
owncloud/web#9587 - Internal public
link resolving * Bugfix
owncloud/web#9593 - Audio- &
video-loading on Shared with me page * Bugfix
owncloud/web#9649 - Add project space
filter * Bugfix owncloud/web#9663 -
Respect the open-in-new-tab-config for external apps * Bugfix
owncloud/web#9670 - Tiles view
accessibility * Bugfix
owncloud/web#9694 - Special
characters in username * Bugfix
owncloud/web#9788 - Create .space
folder if it does not exist * Bugfix
owncloud/web#9832 - Copy quicklinks for
webkit navigator * Bugfix
owncloud/web#9843 - Fix display path on
resources * Bugfix owncloud/web#9844 -
Upload space image * Bugfix
owncloud/web#9861 - Duplicated file
search request * Bugfix
owncloud/web#9873 - Tags are no longer
editable for a locked file * Bugfix
owncloud/web#9881 - Prevent rendering
of old/wrong set of resources in search list * Enhancement
owncloud/web#7317 - Make login url
configurable * Enhancement
owncloud/web#7600 - Scroll to newly
created folder * Enhancement
owncloud/web#9302 - Application
unification * Enhancement
owncloud/web#9423 - Show local loading
spinner in sharing button * Enhancement
owncloud/web#9441 - File versions
tooltip with absolute date * Enhancement
owncloud/web#9441 - Disabling
extensions * Enhancement
owncloud/web#9451 - Add SSE to get
notifications instantly * Enhancement
owncloud/web#9525 - Tags form improved *
Enhancement owncloud/web#9527 - Don't
display confirmation dialog on file deletion * Enhancement
owncloud/web#9531 - Personal shares
can be shown and hidden * Enhancement
owncloud/web#9561 - Indicate
processing state * Enhancement
owncloud/web#9566 - Display locking
information * Enhancement
owncloud/web#9584 - Moving share's "set
expiration date" function * Enhancement
owncloud/web#9625 - Add keyboard
navigation to spaces overview * Enhancement
owncloud/web#9627 - Add batch actions to
spaces * Enhancement owncloud/web#9653 - Keyword Query Language (KQL) search syntax * Enhancement
owncloud/web#9671 - OcModal set buttons
to same width * Enhancement
owncloud/web#9682 - Add password policy
compatibility * Enhancement
owncloud/web#9691 - Password generator
for public links * Enhancement
owncloud/web#9696 - Added app banner for
mobile devices * Enhancement
owncloud/web#9706 - Unify sharing
expiration date menu items * Enhancement
owncloud/web#9727 - Show error if
password is on a banned password list * Enhancement
owncloud/web#9771 - Handle
postprocessing state via Server Sent Events * Enhancement
owncloud/web#9806 - Preview image
presentation * Enhancement
owncloud/web#9809 - Add editors to the
application menu * Enhancement
owncloud/web#9814 - Registering nav
items as extension * Enhancement
owncloud/web#9815 - Add new portal into
runtime to include footer * Enhancement
owncloud/web#9818 - Addmode
config
option * Enhancement owncloud/web#9831 - Last modified filter chips * Enhancement
owncloud/web#9841 - Add embed mode
actions * Enhancement
owncloud/web#9853 - Show only create
folder button in embed mode * Enhancement
owncloud/web#9854 - Search query term
linking * Enhancement
owncloud/web#9857 - Add permission to
delete link passwords when password is enforced * Enhancement
owncloud/web#9858 - Remove settings
icon from searchbar * Enhancement
owncloud/web#9863 - Location picker in
embed mode * Enhancement
owncloud/web#9864 - Search tags filter
chips style aligned * Enhancement
owncloud/web#9884 - Enable dark theme on
importer
- Filter out shares without display name * Bugfix