github owncloud/ocis v5.0.0-alpha.1
5.0.0-alpha.1

latest releases: v7.0.0-rc.2, v7.0.0-rc.1, v6.6.1...
pre-release12 months ago

Changes in 5.0.0

Summary

  • Bugfix - Return 423 status code on tag create: #7596
  • Bugfix - Delete outdated userlog events: #7410
  • Bugfix - Don't reload web config: #7369
  • Bugfix - Fix the auth service env variable: #7523
  • Bugfix - Fix the kql-bleve search: #7290
  • Bugfix - Fix default language fallback: #7465
  • Bugfix - Fix 403 in docs pipeline: #7509
  • Bugfix - Check school number for duplicates before adding a school: #7351
  • Bugfix - Do not reset state of received shares when rebuilding the jsoncs3 index: #7319
  • Bugfix - Set existing mountpoint on auto accept: #7592
  • Bugfix - Deprecate redundant encryptions settings for notification service: #7345
  • Bugfix - Token storage config fixed: #7528
  • Bugfix - Fix preview request 500 error when made too early: #7502
  • Bugfix - GetUserByClaim fixed for Active Directory: #7476
  • Bugfix - Bring back the USERS_LDAP_USER_SCHEMA_ID variable: #7312
  • Bugfix - Set the mountpoint on auto accept: #7460
  • Change - Auto-Accept Shares: #7097
  • Change - Change the default TUS chunk size: #7273
  • Enhancement - Support spec violating AD FS access token issuer: #7138
  • Enhancement - Add "Last modified" filter Chip: #7455
  • Enhancement - Add the Banned Passwords List: #4197
  • Enhancement - Add the password policies: #7285
  • Enhancement - Bump Reva: #7611
  • Enhancement - Edit wrong named enves: #7406
  • Enhancement - Introduce clientlog service: #7217
  • Enhancement - Set default for Async Uploads to true: #7416
  • Enhancement - The default language added: #7417
  • Enhancement - Config for disabling Web extensions: #7486
  • Enhancement - Add login URL config: #7317
  • Enhancement - New value auto for NOTIFICATIONS_SMTP_AUTHENTICATION: #7356
  • Enhancement - Tika content extraction cleanup for search: #7553
  • Enhancement - SSE for messaging: #6992
  • Enhancement - Implement sharing roles: #7524
  • Enhancement - Improve SSE format: #7325
  • Enhancement - Keyword Query Language (KQL) search syntax: #7212
  • Enhancement - Add OCIS_LDAP_BIND_PASSWORD as replacement for LDAP_BIND_PASSWORD: #7176
  • Enhancement - Add new permission to delete public link password: #7538
  • Enhancement - The password policies change request: #7264
  • Enhancement - Proxy uses service accounts for provisioning: #7240
  • Enhancement - Add config to enforce passwords on all public links: #7547
  • Enhancement - Introduce service accounts: #6427
  • Enhancement - Make sse service scalable: #7382
  • Enhancement - Allow configuring storage registry with envvars: #7554
  • Enhancement - Thumbnail generation with image processors: #7409
  • Enhancement - Update web to v8.0.0: #7622

Details

  • Bugfix - Return 423 status code on tag create: #7596

    When a file is locked, return 423 status code instead 500 on tag create

    #7596

  • Bugfix - Delete outdated userlog events: #7410

    Userlog will now delete events when the user has no longer access to the underlying resource

    #7410

  • Bugfix - Don't reload web config: #7369

    When requesting config.json file from the server, web service would reload the file if a path
    is set. This will remove config entries set via Envvar. Since we want to have the possiblity to
    set configuration from both sources we removed the reading from file. The file will still be
    loaded on service startup.

    #7369

  • Bugfix - Fix the auth service env variable: #7523

    We the auth service env variable to the service specific name. Before it was configurable via
    AUTH_MACHINE_JWT_SECRET and now is configurable via AUTH_SERVICE_JWT_SECRET.

    #7523

  • Bugfix - Fix the kql-bleve search: #7290

    We fixed the issue when 500 on searches that contain ":". Added the characters escaping
    according to https://blevesearch.com/docs/Query-String-Query/

    #7282
    #7290

  • Bugfix - Fix default language fallback: #7465

    Add the default language for the webui, the settings, userlog and notification service.

    #7465

  • Bugfix - Fix 403 in docs pipeline: #7509

    Docs pipeline was not routed through our proxies which could lead to requests being
    blacklisted

    #7509
    #7511

  • Bugfix - Check school number for duplicates before adding a school: #7351

    We fixed an issue that allowed to create two schools with the same school number

    https://github.com/owncloud/enterprise/issues/6051
    #7351

  • Bugfix - Do not reset state of received shares when rebuilding the jsoncs3 index: #7319

    We fixed a problem with the "ocis migrate rebuild-jsoncs3-indexes" command which reset the
    state of received shares to "pending".

    #7319

  • Bugfix - Set existing mountpoint on auto accept: #7592

    When already having a share for a specific resource, auto accept would use custom mountpoints
    which lead to other errors. Now auto-accept is using the existing mountpoint of a share.

    #7592

  • Bugfix - Deprecate redundant encryptions settings for notification service: #7345

    The values tls and ssl for the smtp_encryption configuration setting are duplicates of
    starttls and ssltls. They have been marked as deprecated. A warning will be logged when
    they are still used. Please use starttls instead for tls and ssltls instead of `ssl.

    #7345

  • Bugfix - Token storage config fixed: #7528

    The token storage config in the config.json for web was missing when it was set to false.

    #7462
    #7528

  • Bugfix - Fix preview request 500 error when made too early: #7502

    Fix the status code and message when a thumbnail request is made too early.

    #7502
    #7507

  • Bugfix - GetUserByClaim fixed for Active Directory: #7476

    The reva ldap backend for the users and groups service did not hex escape binary uuids in LDAP
    filter correctly this could cause problems in Active Directory setups for services using the
    GetUserByClaim CS3 request with claim "userid".

    #7469
    #7476

  • Bugfix - Bring back the USERS_LDAP_USER_SCHEMA_ID variable: #7312

    We reintroduced the USERS_LDAP_USER_SCHEMA_ID variable which was accidently removed from
    the users service with the 4.0.0 release.

    #7312
    owncloud/ocis-charts#397

  • Bugfix - Set the mountpoint on auto accept: #7460

    On shares auto accept set a mountpoint with same logic as ocs handler

    #7460

  • Change - Auto-Accept Shares: #7097

    Automatically accepts shares. This feature is active by default and can be deactivated via the
    environment variable FRONTEND_AUTO_ACCEPT_SHARES.

    #7097

  • Change - Change the default TUS chunk size: #7273

    We changed the default TUS chunk size from 100MB to 10MB. You can still use the old value by
    configuring it in your deployment.

    #7273

  • Enhancement - Support spec violating AD FS access token issuer: #7138

    AD FS /adfs/.well-known/openid-configuration has an optional access_token_issuer
    which, in violation of the OpenID Connect spec, takes precedence over issuer.

    #7138

  • Enhancement - Add "Last modified" filter Chip: #7455

    Add "Last modified" filter Chip

    #7431
    #7551
    #7455

  • Enhancement - Add the Banned Passwords List: #4197

    Added an option to enable a password check against a banned passwords list OCIS-3809

    cs3org/reva#4197
    #7314

  • Enhancement - Add the password policies: #7285

    Add the password policies OCIS-3767

    #7285
    #7194
    cs3org/reva#4147

  • Enhancement - Bump Reva: #7611

    Bumps reva version

    #7611
    #7540
    #7526
    #7138
    #6427
    #7178
    #7217
    #7410
    #7476
    #7551
    #7581

  • Enhancement - Edit wrong named enves: #7406

    Checked and changed the envvars specified in the task and also removed those that are no longer
    used.

    #7406

  • Enhancement - Introduce clientlog service: #7217

    Add the clientlog service which will send machine readable notifications to clients

    #7217

  • Enhancement - Set default for Async Uploads to true: #7416

    Async Uploads are meanwhile standard and needed for multiple features. Hence we default them
    to true

    #7416

  • Enhancement - The default language added: #7417

    The ability of configuration the default language has been added to the setting service.

    https://github.com/owncloud/enterprise/issues/5915
    #7417

  • Enhancement - Config for disabling Web extensions: #7486

    A new config for disabling specific Web extensions via their id has been added.

    owncloud/web#8524
    #7486

  • Enhancement - Add login URL config: #7317

    Introduce a config to set the web login URL via WEB_OPTION_LOGIN_URL.

    #7317

  • Enhancement - New value auto for NOTIFICATIONS_SMTP_AUTHENTICATION: #7356

    This cause the notifications service to automatically pick a suitable authentication method
    to use with the configured SMTP server. This is also the new default behavior. The previous
    default was to not use authentication at all.

    #7356

  • Enhancement - Tika content extraction cleanup for search: #7553

    So far it has not been possible to determine whether the content for search should be cleaned up
    of 'stop words' or not. Stop words are filling words like "I, you, have, am" etc and defined by the
    search engine.

    The behaviour can now be set with the newly introduced settings option
    SEARCH_EXTRACTOR_TIKA_CLEAN_STOP_WORDS=false which is enabled by default.

    In addition, the stop word cleanup is no longer as aggressive and now ignores numbers, urls,
    basically everything except the defined stop words.

    #6674
    #7553

  • Enhancement - SSE for messaging: #6992

    So far, sse has only been used to exchange messages between the server and the client. In order to
    be able to send more content to the client, we have moved the endpoint to a separate service and
    are now also using it for other notifications like:

    • notify postprocessing state changes.
    • notify file locking and unlocking.
    • ... @todo

    #6992

  • Enhancement - Implement sharing roles: #7524

    Implement libre graph sharing roles

    #7418
    #7524

  • Enhancement - Improve SSE format: #7325

    Improve format of sse notifications

    #7325

  • Enhancement - Keyword Query Language (KQL) search syntax: #7212

    We've introduced support for
    KQL
    as the default oCIS search query language.

    Simple queries:

    • tag:golden tag:"silver"
    • name:file.txt name:"file.docx"
    • content:ahab content:"captain aha*"

    Date/-range queries

    • Mtime:"2023-09-05T08:42:11.23554+02:00"
    • Mtime>"2023-09-05T08:42:11.23554+02:00"
    • Mtime>="2023-09-05T08:42:11.23554+02:00"
    • Mtime<"2023-09-05T08:42:11.23554+02:00"
    • Mtime<="2023-09-05T08:42:11.23554+02:00"
    • Mtime:today - range: start of today till end of today
    • Mtime:yesterday - range: start of yesterday till end of yesterday
    • Mtime:"this week" - range: start of this week till end of this week
    • Mtime:"this month" - range: start of this month till end of this month
    • Mtime:"last month" - range: start of last month till end of last month
    • Mtime:"this year" - range: start of this year till end of this year
    • Mtime:"last year" - range: start of last year till end of last year

    Conjunctive normal form queries:

    • tag:golden AND tag:"silver, tag:golden OR tag:"silver, tag:golden NOT tag:"silver
    • (tag:book content:ahab*), tag:(book pdf)

    Complex queries:

    • (name:"moby di*" OR tag:bestseller) AND tag:book NOT tag:read

    #7042
    #7179
    #7114
    owncloud/web#9636
    owncloud/web#9646
    #7212
    #7043
    #7247
    #7248
    #7254
    #7262
    owncloud/web#9653
    owncloud/web#9672

  • Enhancement - Add OCIS_LDAP_BIND_PASSWORD as replacement for LDAP_BIND_PASSWORD: #7176

    The enviroment variable OCIS_LDAP_BIND_PASSWORD was added to be more consistent with all
    other global LDAP variables.

    LDAP_BIND_PASSWORD is deprecated now and scheduled for removal with the 5.0.0 release.

    We also deprecated LDAP_USER_SCHEMA_ID_IS_OCTETSTRING for removal with 5.0.0. The
    replacement for it is OCIS_LDAP_USER_SCHEMA_ID_IS_OCTETSTRING.

    #7176

  • Enhancement - Add new permission to delete public link password: #7538

    Users with this new permission can now delete passwords on read-only public links. The
    permission is added to the default roles "Admin" and "Space Admin".

    #7538
    #7538
    cs3org/reva#4270

  • Enhancement - The password policies change request: #7264

    The variables renaming OCIS-3767

    https://github.com/cs3org/reva/pull/7264

  • Enhancement - Proxy uses service accounts for provisioning: #7240

    The proxy service now uses a service account for provsioning task, like role assignment and
    user auto-provisioning. This cleans up some technical debt that required us to mint reva tokes
    inside the proxy service.

    #5550
    #7240

  • Enhancement - Add config to enforce passwords on all public links: #7547

    We added the config OCIS_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD to enforce passwords
    on all public shares.

    #7539
    #7547

  • Enhancement - Introduce service accounts: #6427

    Introduces service accounts to avoid impersonating users in async processes

    #5550
    #6427

  • Enhancement - Make sse service scalable: #7382

    When running multiple sse instances some events would not be reported to the user. This is
    fixed.

    #7382

  • Enhancement - Allow configuring storage registry with envvars: #7554

    Introduced new envvars to configure the storage registry in the gateway service

    #7554

  • Enhancement - Thumbnail generation with image processors: #7409

    Thumbnails can now be changed during creation, previously the images were always scaled to fit
    the given frame, but it could happen that the images were cut off because they could not be placed
    better due to the aspect ratio.

    This pr introduces the possibility of specifying how the behavior should be, following
    processors are available

    • resize
    • fit
    • fill
    • thumbnail

    The processor can be applied by adding the processor query param to the request, e.g.
    processor=fit, processor=fill, ...

    To find out more how the individual processors work please read
    https://github.com/disintegration/imaging

    If no processor is provided it behaves the same as before (resize for gif's and thumbnail for all
    other)

    https://github.com/owncloud/enterprise/issues/6057
    #5179
    owncloud/web#7728
    #7409

  • Enhancement - Update web to v8.0.0: #7622

    Tags: web

    We updated ownCloud Web to v8.0.0. Please refer to the changelog (linked) for details on the web
    release.

    Summary * Bugfix owncloud/web#9257

    #7622
    https://github.com/owncloud/web/releases/tag/v8.0.0

Don't miss a new ocis release

NewReleases is sending notifications on new releases.