Bugfix - Add ocis storage-auth-machine subcommand: #2910

We added the ocis subcommand to start the machine auth provider.

https://github.com/owncloud/ocis/pull/2910

Bugfix - Use same jwt secret for accounts as for metadata storage: #3081

We've the metadata storage uses the same jwt secret as all other REVA services. Therefore the
accounts service needs to use the same secret.

Secrets are documented here:
https://owncloud.dev/ocis/deployment/#change-default-secrets

https://github.com/owncloud/ocis/pull/3081

Bugfix - Make the default grpc client use the registry settings: #3041

We've fixed the default grpc client to use the registry settings. Previously it always used
mdns.

https://github.com/owncloud/ocis/pull/3041

Bugfix - Remove group memberships when deleting a user: #3027

The LDAP backend in the graph API now takes care of removing a user's group membership when
deleting the user.

https://github.com/owncloud/ocis/issues/3027

Bugfix - Fix retry handling for LDAP connections: #2974

We've fixed the handling of network issues (e.g. connection loss) during LDAP Write
Operations to correcty retry the request.

https://github.com/owncloud/ocis/issues/2974

Bugfix - Fix the default tracing provider: #2952

We've fixed the default tracing provider which was no longer configured after
owncloud/ocis#2818.

https://github.com/owncloud/ocis/pull/2952
https://github.com/owncloud/ocis/pull/2818

Bugfix - Fix configuration for space membership endpoint: #2893

Added a missing config value to the ocs config related to the space membership endpoint.

https://github.com/owncloud/ocis/pull/2893

Change - Change log level default from debug to error: #3071

We've changed the default log level for all services from "info" to "error".

https://github.com/owncloud/ocis/pull/3071

Change - Remove the ownCloud storage driver: #3072

We've removed the ownCloud storage driver because it was no longer maintained after the
ownCloud SQL storage driver was added.

If you have been using the ownCloud storage driver, please switch to the ownCloud SQL storage
driver which brings you more features and is under active maintenance.

https://github.com/owncloud/ocis/pull/3072

Change - Unify configuration and commands: #2818

We've unified the configuration and commands of all non storage services. This also includes
the change, that environment variables are now defined on the config struct as tags instead in a
separate mapping.

https://github.com/owncloud/ocis/pull/2818

Change - Functionality to restore spaces: #3092

Disabled spaces can now be restored via the graph api. An information was added to the root item
of each space when it is deleted

https://github.com/owncloud/ocis/pull/3092

Change - Extended Space Properties: #3141

We can now set and modify short description, space image and space readme. Only managers can set
the short description. Editors can change the space image and readme id.

https://github.com/owncloud/ocis/pull/3141

Change - Update the graph api: #2885

GraphApi has been updated to version 0.4.1 and the existing dependency was removed

https://github.com/owncloud/ocis/pull/2885

Change - Update libre-graph-api to v0.3.0: #2858

This updates the libre-graph-api to use the latest spec and types.

https://github.com/owncloud/ocis/pull/2858

Change - Return not found when updating non existent space: #2869

If a spaceid of a space which is updated doesn't exist, handle it as a not found error.

https://github.com/cs3org/reva/pull/2869

Enhancement - Provide Description when creating a space: #3167

We added the possibility to send a short description when creating a space.

https://github.com/owncloud/ocis/pull/3167

Enhancement - Add graph endpoint to delete and purge spaces: #2979

Added a new graph endpoint to delete and purge spaces.

https://github.com/owncloud/ocis/pull/2979
https://github.com/owncloud/ocis/pull/3000

Enhancement - Add permissions to graph drives: #3095

Added permissions to graph drives when listing drives.

https://github.com/owncloud/ocis/pull/3095

Enhancement - Add new file url of the app provider to the ocs capabilities: #2884

We've added the new file capability of the app provider to the ocs capabilities, so that clients
can discover this url analogous to the app list and file open urls.

https://github.com/owncloud/ocis/pull/2884
https://github.com/owncloud/ocis/pull/2907
https://github.com/cs3org/reva/pull/2379
https://github.com/owncloud/web/pull/5890#issuecomment-993905242

Enhancement - Add spaces capability: #2931

We've added the spaces capability with version 0.0.1 and enabled defaulting to true.

https://github.com/owncloud/ocis/pull/2931
https://github.com/cs3org/reva/pull/2015
https://github.com/owncloud/ocis/pull/2965

Enhancement - Consul as supported service registry: #3133

We have added Consul as an supported service registry. You can now use it to let oCIS services
discover each other.

https://github.com/owncloud/ocis/pull/3133

Enhancement - Introduce User and Group Management capabilities on GraphAPI: #2947

The GraphAPI LDAP Backend is now able to add/modify and delete Users and Groups

https://github.com/owncloud/ocis/pull/2947
https://github.com/owncloud/ocis/pull/2996

Enhancement - Support signature auth in the public share auth middleware: #2831

Enabled public share requests to be authenticated using the public share signature.

https://github.com/owncloud/ocis/pull/2831

Enhancement - Update REVA to v1.16.1-0.20220112085026-07451f6cd806: #2953

Update REVA to v1.16.1-0.20220112085026-07451f6cd806

https://github.com/owncloud/ocis/pull/2953

Enhancement - Add endpoint to retrieve a single space: #2978

We added the endpoint /drives/{driveID} to get a single space by id from the server.

https://github.com/owncloud/ocis/pull/2978

Enhancement - Add filter by driveType and id to /me/drives: #2946

We added two possible filter terms (driveType, id) to the /me/drives endpoint on the graph api.
These can be used with the odata query parameter "$filter". We only support the "eq" operator
for now.

https://github.com/owncloud/ocis/pull/2946

Enhancement - Update REVA to v1.16.1-0.20220215130802-df1264deff58: #2878

Updated REVA to v1.16.1-0.20220215130802-df1264deff58 This update includes:

• Enh cs3org/reva#2524: Remove space members
• Fix cs3org/reva#2541: fix xattr error types, remove error wrapper
• Chg cs3org/reva#2540: decomposedfs: refactor xattrs package errors
• Enh cs3org/reva#2533: Use space description on creation
• Enh cs3org/reva#2527: Add space props
• Enh cs3org/reva#2522: Events
• Chg cs3org/reva#2512: Consolidate all metadata Get's and Set's to central functions.
• Chg cs3org/reva#2511: Some error cleanup steps in the decomposed FS
• Enh cs3org/reva#2460: decomposedfs: add locking support
• Chg cs3org/reva#2519: remove creation of .space folder
• Fix cs3org/reva#2506: fix propfind listing for files
• Chg cs3org/reva#2503: unprotected ocs config endpoint
• Enh cs3org/reva#2458: Restoring Spaces
• Enh cs3org/reva#2498: add grants to list-spaces
• Fix cs3org/reva#2500: invalidate cache when modifying or deleting a space
• Fix cs3org/reva#2501: fix spaces stat requests
• Enh cs3org/reva#2472: Make owncloudsql spaces aware
• Enh cs3org/reva#2464: Space grants
• Fix cs3org/reva#2463: Do not log nodes
• Enh cs3org/reva#2437: Make gateway dumb again
• Enh cs3org/reva#2459: prevent purging of enabled spaces
• Fix cs3org/reva#2457: decomposedfs: do not swallow errors when creating nodes
• Fix cs3org/reva#2454: fix path construction in webdav propfind
• Fix cs3org/reva#2452: fix create space error message
• Enh cs3org/reva#2431: Purge spaces
• Fix cs3org/reva#2445: Fix publiclinks and decomposedfs
• Chg cs3org/reva#2439: ignore handled errors when creating spaces
• Enh cs3org/reva#2436: Adjust "groupfilter" to be able to search by member name
• Fix cs3org/reva#2434: Start splitting up ocdav
• Fix cs3org/reva#2433: fix shares provider filter
• Chg cs3org/reva#2432: use space reference when listing containers
• Fix cs3org/reva#2430: fix aggregated child folder id
• Enh cs3org/reva#2429: make archiver id based
• Fix cs3org/reva#2427: fix registry caching
• Fix cs3org/reva#2422: handle space does not exist
• Fix cs3org/reva#2419: Spaces fixes
• Chg cs3org/reva#2415: services should never return transport level errors
• Chg cs3org/reva#2396: Ocdav spaces aware
• Fix cs3org/reva#2348: fix-archiver
• Chg cs3org/reva#2344: allow listing all storage spaces
• Chg cs3org/reva#2345: Switch LDAP test to use entryUUID as unique id for groups
• Chg cs3org/reva#2343: allow multiple space type filters on decomposedfs
• Enh cs3org/reva#2329: Activate Statcache
• Enh cs3org/reva#2340: Space registry multiple spaces per provider
• Chg cs3org/reva#2336: handle sending all permissions when creating public links
• Fix cs3org/reva#2330: fix decomposedfs upload
• Enh cs3org/reva#2234: Spaces registry
• Enh cs3org/reva#2217: New OIDC ESCAPE auth driver.
• Enh cs3org/reva#2250: Implement space membership endpoints
• Fix cs3org/reva#1941: fix tus with transfer token only
• Fix cs3org/reva#2309: Bugfix: Remove early finish for zero byte file uploads
• Fix cs3org/reva#2303: Fix content disposition
• Fix cs3org/reva#2314: OIDC: fallback to "email" if IDP doesn't provide "preferred_username" claim
• Enh cs3org/reva#2256: Return user type in the response of the ocs GET user call
• Enh cs3org/reva#2310: Implement setting arbitrary metadata for the public storage provider
• Fix cs3org/reva#2305: Make sure /app/new takes target as absolute path
• Fix cs3org/reva#2297: Fix public link paths for file shares

https://github.com/owncloud/ocis/pull/2878
https://github.com/owncloud/ocis/pull/2901
https://github.com/owncloud/ocis/pull/2997
https://github.com/owncloud/ocis/pull/3116
https://github.com/owncloud/ocis/pull/3130
https://github.com/owncloud/ocis/pull/3175
https://github.com/owncloud/ocis/pull/3182

Enhancement - Update ownCloud Web to v5.0.0: #2895

Tags: web

We updated ownCloud Web to v5.0.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2895
https://github.com/owncloud/ocis/pull/3157
https://github.com/owncloud/web/releases/tag/v4.8.0
https://github.com/owncloud/web/releases/tag/v5.0.0

Bugfix - Add ocis storage-auth-machine subcommand: #2910

We added the ocis subcommand to start the machine auth provider.

https://github.com/owncloud/ocis/pull/2910

Bugfix - Use same jwt secret for accounts as for metadata storage: #3081

We've the metadata storage uses the same jwt secret as all other REVA services. Therefore the
accounts service needs to use the same secret.

Secrets are documented here:
https://owncloud.dev/ocis/deployment/#change-default-secrets

https://github.com/owncloud/ocis/pull/3081

Bugfix - Make the default grpc client use the registry settings: #3041

We've fixed the default grpc client to use the registry settings. Previously it always used
mdns.

https://github.com/owncloud/ocis/pull/3041

Bugfix - Remove group memberships when deleting a user: #3027

The LDAP backend in the graph API now takes care of removing a user's group membership when
deleting the user.

https://github.com/owncloud/ocis/issues/3027

Bugfix - Fix retry handling for LDAP connections: #2974

We've fixed the handling of network issues (e.g. connection loss) during LDAP Write
Operations to correcty retry the request.

https://github.com/owncloud/ocis/issues/2974

Bugfix - Fix the default tracing provider: #2952

We've fixed the default tracing provider which was no longer configured after
owncloud/ocis#2818.

https://github.com/owncloud/ocis/pull/2952
https://github.com/owncloud/ocis/pull/2818

Bugfix - Fix configuration for space membership endpoint: #2893

Added a missing config value to the ocs config related to the space membership endpoint.

https://github.com/owncloud/ocis/pull/2893

Change - Change log level default from debug to error: #3071

We've changed the default log level for all services from "info" to "error".

https://github.com/owncloud/ocis/pull/3071

Change - Remove the ownCloud storage driver: #3072

We've removed the ownCloud storage driver because it was no longer maintained after the
ownCloud SQL storage driver was added.

If you have been using the ownCloud storage driver, please switch to the ownCloud SQL storage
driver which brings you more features and is under active maintenance.

https://github.com/owncloud/ocis/pull/3072

Change - Unify configuration and commands: #2818

We've unified the configuration and commands of all non storage services. This also includes
the change, that environment variables are now defined on the config struct as tags instead in a
separate mapping.

https://github.com/owncloud/ocis/pull/2818

Change - Functionality to restore spaces: #3092

Disabled spaces can now be restored via the graph api. An information was added to the root item
of each space when it is deleted

https://github.com/owncloud/ocis/pull/3092

Change - Extended Space Properties: #3141

We can now set and modify short description, space image and space readme. Only managers can set
the short description. Editors can change the space image and readme id.

https://github.com/owncloud/ocis/pull/3141

Change - Update the graph api: #2885

GraphApi has been updated to version 0.4.1 and the existing dependency was removed

https://github.com/owncloud/ocis/pull/2885

Change - Update libre-graph-api to v0.3.0: #2858

This updates the libre-graph-api to use the latest spec and types.

https://github.com/owncloud/ocis/pull/2858

Change - Return not found when updating non existent space: #2869

If a spaceid of a space which is updated doesn't exist, handle it as a not found error.

https://github.com/cs3org/reva/pull/2869

Enhancement - Provide Description when creating a space: #3167

We added the possibility to send a short description when creating a space.

https://github.com/owncloud/ocis/pull/3167

Enhancement - Add graph endpoint to delete and purge spaces: #2979

Added a new graph endpoint to delete and purge spaces.

https://github.com/owncloud/ocis/pull/2979
https://github.com/owncloud/ocis/pull/3000

Enhancement - Add permissions to graph drives: #3095

Added permissions to graph drives when listing drives.

https://github.com/owncloud/ocis/pull/3095

Enhancement - Add new file url of the app provider to the ocs capabilities: #2884

We've added the new file capability of the app provider to the ocs capabilities, so that clients
can discover this url analogous to the app list and file open urls.

https://github.com/owncloud/ocis/pull/2884
https://github.com/owncloud/ocis/pull/2907
https://github.com/cs3org/reva/pull/2379
https://github.com/owncloud/web/pull/5890#issuecomment-993905242

Enhancement - Add spaces capability: #2931

We've added the spaces capability with version 0.0.1 and enabled defaulting to true.

https://github.com/owncloud/ocis/pull/2931
https://github.com/cs3org/reva/pull/2015
https://github.com/owncloud/ocis/pull/2965

Enhancement - Consul as supported service registry: #3133

We have added Consul as an supported service registry. You can now use it to let oCIS services
discover each other.

https://github.com/owncloud/ocis/pull/3133

Enhancement - Introduce User and Group Management capabilities on GraphAPI: #2947

The GraphAPI LDAP Backend is now able to add/modify and delete Users and Groups

https://github.com/owncloud/ocis/pull/2947
https://github.com/owncloud/ocis/pull/2996

Enhancement - Support signature auth in the public share auth middleware: #2831

Enabled public share requests to be authenticated using the public share signature.

https://github.com/owncloud/ocis/pull/2831

Enhancement - Update REVA to v1.16.1-0.20220112085026-07451f6cd806: #2953

Update REVA to v1.16.1-0.20220112085026-07451f6cd806

https://github.com/owncloud/ocis/pull/2953

Enhancement - Add endpoint to retrieve a single space: #2978

We added the endpoint /drives/{driveID} to get a single space by id from the server.

https://github.com/owncloud/ocis/pull/2978

Enhancement - Add filter by driveType and id to /me/drives: #2946

We added two possible filter terms (driveType, id) to the /me/drives endpoint on the graph api.
These can be used with the odata query parameter "$filter". We only support the "eq" operator
for now.

https://github.com/owncloud/ocis/pull/2946

Enhancement - Update REVA to xxx: #2878

Updated REVA to xxx This update includes:

• Enh cs3org/reva#2524: Remove space members
• Fix cs3org/reva#2541: fix xattr error types, remove error wrapper
• Chg cs3org/reva#2540: decomposedfs: refactor xattrs package errors
• Enh cs3org/reva#2533: Use space description on creation
• Enh cs3org/reva#2527: Add space props
• Enh cs3org/reva#2522: Events
• Chg cs3org/reva#2512: Consolidate all metadata Get's and Set's to central functions.
• Chg cs3org/reva#2511: Some error cleanup steps in the decomposed FS
• Enh cs3org/reva#2460: decomposedfs: add locking support
• Chg cs3org/reva#2519: remove creation of .space folder
• Fix cs3org/reva#2506: fix propfind listing for files
• Chg cs3org/reva#2503: unprotected ocs config endpoint
• Enh cs3org/reva#2458: Restoring Spaces
• Enh cs3org/reva#2498: add grants to list-spaces
• Fix cs3org/reva#2500: invalidate cache when modifying or deleting a space
• Fix cs3org/reva#2501: fix spaces stat requests
• Enh cs3org/reva#2472: Make owncloudsql spaces aware
• Enh cs3org/reva#2464: Space grants
• Fix cs3org/reva#2463: Do not log nodes
• Enh cs3org/reva#2437: Make gateway dumb again
• Enh cs3org/reva#2459: prevent purging of enabled spaces
• Fix cs3org/reva#2457: decomposedfs: do not swallow errors when creating nodes
• Fix cs3org/reva#2454: fix path construction in webdav propfind
• Fix cs3org/reva#2452: fix create space error message
• Enh cs3org/reva#2431: Purge spaces
• Fix cs3org/reva#2445: Fix publiclinks and decomposedfs
• Chg cs3org/reva#2439: ignore handled errors when creating spaces
• Enh cs3org/reva#2436: Adjust "groupfilter" to be able to search by member name
• Fix cs3org/reva#2434: Start splitting up ocdav
• Fix cs3org/reva#2433: fix shares provider filter
• Chg cs3org/reva#2432: use space reference when listing containers
• Fix cs3org/reva#2430: fix aggregated child folder id
• Enh cs3org/reva#2429: make archiver id based
• Fix cs3org/reva#2427: fix registry caching
• Fix cs3org/reva#2422: handle space does not exist
• Fix cs3org/reva#2419: Spaces fixes
• Chg cs3org/reva#2415: services should never return transport level errors
• Chg cs3org/reva#2396: Ocdav spaces aware
• Fix cs3org/reva#2348: fix-archiver
• Chg cs3org/reva#2344: allow listing all storage spaces
• Chg cs3org/reva#2345: Switch LDAP test to use entryUUID as unique id for groups
• Chg cs3org/reva#2343: allow multiple space type filters on decomposedfs
• Enh cs3org/reva#2329: Activate Statcache
• Enh cs3org/reva#2340: Space registry multiple spaces per provider
• Chg cs3org/reva#2336: handle sending all permissions when creating public links
• Fix cs3org/reva#2330: fix decomposedfs upload
• Enh cs3org/reva#2234: Spaces registry
• Enh cs3org/reva#2217: New OIDC ESCAPE auth driver.
• Enh cs3org/reva#2250: Implement space membership endpoints
• Fix cs3org/reva#1941: fix tus with transfer token only
• Fix cs3org/reva#2309: Bugfix: Remove early finish for zero byte file uploads
• Fix cs3org/reva#2303: Fix content disposition
• Fix cs3org/reva#2314: OIDC: fallback to "email" if IDP doesn't provide "preferred_username" claim
• Enh cs3org/reva#2256: Return user type in the response of the ocs GET user call
• Enh cs3org/reva#2310: Implement setting arbitrary metadata for the public storage provider
• Fix cs3org/reva#2305: Make sure /app/new takes target as absolute path
• Fix cs3org/reva#2297: Fix public link paths for file shares

https://github.com/owncloud/ocis/pull/2878
https://github.com/owncloud/ocis/pull/2901
https://github.com/owncloud/ocis/pull/2997
https://github.com/owncloud/ocis/pull/3116
https://github.com/owncloud/ocis/pull/3130
https://github.com/owncloud/ocis/pull/3175
https://github.com/owncloud/ocis/pull/3182

Enhancement - Update ownCloud Web to v5.0.0: #2895

Tags: web

We updated ownCloud Web to v5.0.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2895
https://github.com/owncloud/ocis/pull/3157
https://github.com/owncloud/web/releases/tag/v4.8.0
https://github.com/owncloud/web/releases/tag/v5.0.0

Bugfix - Fix claim selector based routing for basic auth: #2779

We've fixed the claim selector based routing for requests using basic auth. Previously
requests using basic auth have always been routed to the DefaultPolicy when using the claim
selector despite the set cookie because the basic auth middleware fakes some OIDC claims.

Now the cookie is checked before routing to the DefaultPolicy and therefore set cookie will
also be respected for requests using basic auth.

https://github.com/owncloud/ocis/pull/2779

Bugfix - Disallow creation of a group with empty name via the OCS api: #2825

We've fixed the behavior for group creation on the OCS api, where it was possible to create a
group with an empty name. This was is not possible on oC10 and is therefore also forbidden on oCIS
to keep compatibility. This PR forbids the creation and also ensures the correct status code
for both OCS v1 and OCS v2 apis.

https://github.com/owncloud/ocis/issues/2823
https://github.com/owncloud/ocis/pull/2825

Bugfix - Fix using s3ng as the metadata storage backend: #2807

It is now possible to use s3ng as the metadata storage backend.

https://github.com/owncloud/ocis/issues/2668
https://github.com/owncloud/ocis/pull/2807

Bugfix - Use the CS3api up- and download workflow for the accounts service: #2837

We've fixed the interaction of the accounts service with the metadata storage after bypassing
the InitiateUpload and InitiateDownload have been removed from various storage drivers. The
accounts service now uses the proper CS3apis workflow for up- and downloads.

https://github.com/owncloud/ocis/pull/2837
https://github.com/cs3org/reva/pull/2309

Change - Rename APP_PROVIDER_BASIC_* environment variables: #2812

We've renamed the APP_PROVIDER_BASIC_* to APP_PROVIDER_* since the _BASIC_ part is a
copy and paste error. Now all app provider environment variables are consistently starting
with APP_PROVIDER_*.

https://github.com/owncloud/ocis/pull/2812
https://github.com/owncloud/ocis/pull/2811

Change - Restructure Configuration Parsing: #2708

Tags: ocis

CLI flags are no longer needed for subcommands, as we rely solely on env variables and config
files. This greatly simplifies configuration and deployment.

https://github.com/owncloud/ocis/pull/2708

Change - OIDC: fallback if IDP doesn't provide "preferred_username" claim: #2644

Some IDPs don't add the "preferred_username" claim. Fallback to the "email" claim in that case

https://github.com/owncloud/ocis/issues/2644

Enhancement - Cleanup ocis-pkg config: #2813

Certain values were of no use when configuring the ocis runtime.

https://github.com/owncloud/ocis/pull/2813

Enhancement - Correct shutdown of services under runtime: #2843

Supervised goroutines now shut themselves down on context cancellation propagation.

https://github.com/owncloud/ocis/pull/2843

Enhancement - Update REVA to v1.17.0: #2849

Updated REVA to v1.17.0 This update includes:

• Fix cs3org/reva#2305: Make sure /app/new takes target as absolute path
• Fix cs3org/reva#2303: Fix content disposition header for public links files
• Fix cs3org/reva#2316: Fix the share types in propfinds
• Fix cs3org/reva#2803: Fix app provider for editor public links
• Fix cs3org/reva#2298: Remove share refs from trashbin
• Fix cs3org/reva#2309: Remove early finish for zero byte file uploads
• Fix cs3org/reva#1941: Fix TUS uploads with transfer token only
• Chg cs3org/reva#2210: Fix app provider new file creation and improved error codes
• Enh cs3org/reva#2217: OIDC auth driver for ESCAPE IAM
• Enh cs3org/reva#2256: Return user type in the response of the ocs GET user call
• Enh cs3org/reva#2315: Add new attributes to public link propfinds
• Enh cs3org/reva#2740: Implement space membership endpoints
• Enh cs3org/reva#2252: Add the xattr sys.acl to SysACL (eosgrpc)
• Enh cs3org/reva#2314: OIDC: fallback if IDP doesn't provide "preferred_username" claim

https://github.com/owncloud/ocis/pull/2849
https://github.com/owncloud/ocis/pull/2835
https://github.com/owncloud/ocis/pull/2837

Enhancement - Update ownCloud Web to v4.6.1: #2846

Tags: web

We updated ownCloud Web to v4.6.1. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2846
https://github.com/owncloud/web/releases/tag/v4.6.1

Bugfix - Fix claim selector based routing for basic auth: #2779

We've fixed the claim selector based routing for requests using basic auth. Previously
requests using basic auth have always been routed to the DefaultPolicy when using the claim
selector despite the set cookie because the basic auth middleware fakes some OIDC claims.

Now the cookie is checked before routing to the DefaultPolicy and therefore set cookie will
also be respected for requests using basic auth.

https://github.com/owncloud/ocis/pull/2779

Bugfix - Disallow creation of a group with empty name via the OCS api: #2825

We've fixed the behavior for group creation on the OCS api, where it was possible to create a
group with an empty name. This was is not possible on oC10 and is therefore also forbidden on oCIS
to keep compatibility. This PR forbids the creation and also ensures the correct status code
for both OCS v1 and OCS v2 apis.

https://github.com/owncloud/ocis/issues/2823
https://github.com/owncloud/ocis/pull/2825

Bugfix - Fix using s3ng as the metadata storage backend: #2807

It is now possible to use s3ng as the metadata storage backend.

https://github.com/owncloud/ocis/issues/2668
https://github.com/owncloud/ocis/pull/2807

Bugfix - Use the CS3api up- and download workflow for the accounts service: #2837

We've fixed the interaction of the accounts service with the metadata storage after bypassing
the InitiateUpload and InitiateDownload have been removed from various storage drivers. The
accounts service now uses the proper CS3apis workflow for up- and downloads.

https://github.com/owncloud/ocis/pull/2837
https://github.com/cs3org/reva/pull/2309

Change - Rename APP_PROVIDER_BASIC_* environment variables: #2812

We've renamed the APP_PROVIDER_BASIC_* to APP_PROVIDER_* since the _BASIC_ part is a
copy and paste error. Now all app provider environment variables are consistently starting
with APP_PROVIDER_*.

https://github.com/owncloud/ocis/pull/2812
https://github.com/owncloud/ocis/pull/2811

Change - Restructure Configuration Parsing: #2708

Tags: ocis

CLI flags are no longer needed for subcommands, as we rely solely on env variables and config
files. This greatly simplifies configuration and deployment.

https://github.com/owncloud/ocis/pull/2708

Change - OIDC: fallback if IDP doesn't provide "preferred_username" claim: #2644

Some IDPs don't add the "preferred_username" claim. Fallback to the "email" claim in that case

https://github.com/owncloud/ocis/issues/2644

Enhancement - Cleanup ocis-pkg config: #2813

Certain values were of no use when configuring the ocis runtime.

https://github.com/owncloud/ocis/pull/2813

Enhancement - Correct shutdown of services under runtime: #2843

Supervised goroutines now shut themselves down on context cancellation propagation.

https://github.com/owncloud/ocis/pull/2843

Enhancement - Update REVA to v1.17.0: #2849

Updated REVA to v1.17.0 This update includes:

• Fix cs3org/reva#2305: Make sure /app/new takes target as absolute path
• Fix cs3org/reva#2303: Fix content disposition header for public links files
• Fix cs3org/reva#2316: Fix the share types in propfinds
• Fix cs3org/reva#2803: Fix app provider for editor public links
• Fix cs3org/reva#2298: Remove share refs from trashbin
• Fix cs3org/reva#2309: Remove early finish for zero byte file uploads
• Fix cs3org/reva#1941: Fix TUS uploads with transfer token only
• Chg cs3org/reva#2210: Fix app provider new file creation and improved error codes
• Enh cs3org/reva#2217: OIDC auth driver for ESCAPE IAM
• Enh cs3org/reva#2256: Return user type in the response of the ocs GET user call
• Enh cs3org/reva#2315: Add new attributes to public link propfinds
• Enh cs3org/reva#2740: Implement space membership endpoints
• Enh cs3org/reva#2252: Add the xattr sys.acl to SysACL (eosgrpc)
• Enh cs3org/reva#2314: OIDC: fallback if IDP doesn't provide "preferred_username" claim

https://github.com/owncloud/ocis/pull/2849
https://github.com/owncloud/ocis/pull/2835
https://github.com/owncloud/ocis/pull/2837

Enhancement - Update ownCloud Web to v4.6.1: #2846

Tags: web

We updated ownCloud Web to v4.6.1. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2846
https://github.com/owncloud/web/releases/tag/v4.6.1

Bugfix - Fix claim selector based routing for basic auth: #2779

We've fixed the claim selector based routing for requests using basic auth. Previously
requests using basic auth have always been routed to the DefaultPolicy when using the claim
selector despite the set cookie because the basic auth middleware fakes some OIDC claims.

Now the cookie is checked before routing to the DefaultPolicy and therefore set cookie will
also be respected for requests using basic auth.

https://github.com/owncloud/ocis/pull/2779

Bugfix - Disallow creation of a group with empty name via the OCS api: #2825

We've fixed the behavior for group creation on the OCS api, where it was possible to create a
group with an empty name. This was is not possible on oC10 and is therefore also forbidden on oCIS
to keep compatibility. This PR forbids the creation and also ensures the correct status code
for both OCS v1 and OCS v2 apis.

https://github.com/owncloud/ocis/issues/2823
https://github.com/owncloud/ocis/pull/2825

Bugfix - Fix using s3ng as the metadata storage backend: #2807

It is now possible to use s3ng as the metadata storage backend.

https://github.com/owncloud/ocis/issues/2668
https://github.com/owncloud/ocis/pull/2807

Bugfix - Use the CS3api up- and download workflow for the accounts service: #2837

We've fixed the interaction of the accounts service with the metadata storage after bypassing
the InitiateUpload and InitiateDownload have been removed from various storage drivers. The
accounts service now uses the proper CS3apis workflow for up- and downloads.

https://github.com/owncloud/ocis/pull/2837
https://github.com/cs3org/reva/pull/2309

Change - Rename APP_PROVIDER_BASIC_* environment variables: #2812

We've renamed the APP_PROVIDER_BASIC_* to APP_PROVIDER_* since the _BASIC_ part is a
copy and paste error. Now all app provider environment variables are consistently starting
with APP_PROVIDER_*.

https://github.com/owncloud/ocis/pull/2812
https://github.com/owncloud/ocis/pull/2811

Change - Restructure Configuration Parsing: #2708

Tags: ocis

CLI flags are no longer needed for subcommands, as we rely solely on env variables and config
files. This greatly simplifies configuration and deployment.

https://github.com/owncloud/ocis/pull/2708

Change - OIDC: fallback if IDP doesn't provide "preferred_username" claim: #2644

Some IDPs don't add the "preferred_username" claim. Fallback to the "email" claim in that case

https://github.com/owncloud/ocis/issues/2644

Enhancement - Cleanup ocis-pkg config: #2813

Certain values were of no use when configuring the ocis runtime.

https://github.com/owncloud/ocis/pull/2813

Enhancement - Correct shutdown of services under runtime: #2843

Supervised goroutines now shut themselves down on context cancellation propagation.

https://github.com/owncloud/ocis/pull/2843

Enhancement - Update REVA to v1.17.0: #2849

Updated REVA to v1.17.0 This update includes:

• Fix cs3org/reva#2305: Make sure /app/new takes target as absolute path
• Fix cs3org/reva#2303: Fix content disposition header for public links files
• Fix cs3org/reva#2316: Fix the share types in propfinds
• Fix cs3org/reva#2803: Fix app provider for editor public links
• Fix cs3org/reva#2298: Remove share refs from trashbin
• Fix cs3org/reva#2309: Remove early finish for zero byte file uploads
• Fix cs3org/reva#1941: Fix TUS uploads with transfer token only
• Chg cs3org/reva#2210: Fix app provider new file creation and improved error codes
• Enh cs3org/reva#2217: OIDC auth driver for ESCAPE IAM
• Enh cs3org/reva#2256: Return user type in the response of the ocs GET user call
• Enh cs3org/reva#2315: Add new attributes to public link propfinds
• Enh cs3org/reva#2740: Implement space membership endpoints
• Enh cs3org/reva#2252: Add the xattr sys.acl to SysACL (eosgrpc)
• Enh cs3org/reva#2314: OIDC: fallback if IDP doesn't provide "preferred_username" claim

https://github.com/owncloud/ocis/pull/2849
https://github.com/owncloud/ocis/pull/2835
https://github.com/owncloud/ocis/pull/2837

Enhancement - Update ownCloud Web to v4.6.0: #2846

Tags: web

We updated ownCloud Web to v4.6.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2846
https://github.com/owncloud/web/releases/tag/v4.6.0

Bugfix - Don't allow empty password: #197

It was allowed to create users with empty or spaces-only password. This is fixed

https://github.com/owncloud/product/issues/197

Bugfix - Fix basic auth config: #2719

Users could authenticate using basic auth even though PROXY_ENABLE_BASIC_AUTH was set to
false.

https://github.com/owncloud/ocis/issues/2466
https://github.com/owncloud/ocis/pull/2719

Bugfix - Fix basic auth with custom user claim: #2755

We've fixed authentication with basic if oCIS is configured to use a non-standard claim as user
claim (PROXY_USER_OIDC_CLAIM). Prior to this bugfix the authentication always failed and
is now working.

https://github.com/owncloud/ocis/pull/2755

Bugfix - Fix oCIS startup ony systems with IPv6: #2698

We've fixed failing startup of oCIS on systems with IPv6 addresses.

https://github.com/owncloud/ocis/issues/2300
https://github.com/owncloud/ocis/pull/2698

Bugfix - Fix opening images in media viewer for some usernames: #2738

We've fixed the opening of images in the media viewer for user names containing special
characters (eg. @) which will be URL-escaped. Before this fix users could not see the image in
the media viewer. Now the user name is correctly escaped and the user can view the image in the
media viewer.

https://github.com/owncloud/ocis/pull/2738

Bugfix - Fix error logging when there is no thumbnail for a file: #2702

We've fixed the behavior of the logging when there is no thumbnail for a file (because the
filetype is not supported for thumbnail generation). Previously the WebDAV service always
issues an error log in this case. Now, we don't log this event any more.

https://github.com/owncloud/ocis/pull/2702

Bugfix - Don't announce resharing via capabilities: #2690

OCIS / Reva is not capable of resharing, yet. We've set the resharing capability to false, so
that clients have a chance to react accordingly.

https://github.com/owncloud/ocis/pull/2690

Change - Make all insecure options configurable and change the default to false: #2700

We had several hard-coded 'insecure' flags. These options are now configurable and default to
false. Also we changed all other 'insecure' flags with a previous default of true to false.

In development environments using self signed certs (the default) you now need to set these
flags:

STORAGE_FRONTEND_ARCHIVER_INSECURE=true STORAGE_FRONTEND_OCDAV_INSECURE=true
STORAGE_HOME_DATAPROVIDER_INSECURE=true
STORAGE_METADATA_DATAPROVIDER_INSECURE=true STORAGE_OIDC_INSECURE=true
STORAGE_USERS_DATAPROVIDER_INSECURE=true THUMBNAILS_CS3SOURCE_INSECURE=true
THUMBNAILS_WEBDAVSOURCE_INSECURE=true ```

As an alternative you also can set a single flag, which configures all options together:

``` OCIS_INSECURE=true ```

https://github.com/owncloud/ocis/issues/2700
https://github.com/owncloud/ocis/pull/2745

Change - Update ownCloud Web to v4.5.0: #2780

Tags: web

We updated ownCloud Web to v4.5.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2780
https://github.com/owncloud/web/releases/tag/v4.5.0

Enhancement - Add API to list all spaces: #2692

Added a graph endpoint to enable users with the list-all-spaces permission to list all
spaces.

https://github.com/owncloud/ocis/pull/2692

Enhancement - Update REVA to v1.16.0: #2737

Updated REVA to v1.16.0 This update includes:

• Fix cs3org/reva#2245: Don't announce search-files capability
• Fix cs3org/reva#2247: Merge user ACLs from EOS to sys ACLs
• Fix cs3org/reva#2279: Return the inode of the version folder for files when listing in EOS
• Fix cs3org/reva#2294: Fix HTTP return code when path is invalid
• Fix cs3org/reva#2231: Fix share permission on a single file in sql share driver (cbox pkg)
• Fix cs3org/reva#2230: Fix open by default app and expose default app
• Fix cs3org/reva#2265: Fix nil pointer exception when resolving members of a group (rest driver)
• Fix cs3org/reva#1214: Fix restoring versions
• Fix cs3org/reva#2254: Fix spaces propfind
• Fix cs3org/reva#2260: Fix unset quota xattr on darwin
• Fix cs3org/reva#5776: Enforce permissions in public share apps
• Fix cs3org/reva#2767: Fix status code for WebDAV mkcol requests where an ancestor is missing
• Fix cs3org/reva#2287: Add public link access via mount-ID:token/relative-path to the scope
• Fix cs3org/reva#2244: Fix the permissions response for shared files in the cbox sql driver
• Enh cs3org/reva#2219: Add virtual view tests
• Enh cs3org/reva#2230: Add priority to app providers
• Enh cs3org/reva#2258: Improved error messages from the AppProviders
• Enh cs3org/reva#2119: Add authprovider owncloudsql
• Enh cs3org/reva#2211: Enhance the cbox share sql driver to store accepted group shares
• Enh cs3org/reva#2212: Filter root path according to the agent that makes the request
• Enh cs3org/reva#2237: Skip get user call in eosfs in case previous ones also failed
• Enh cs3org/reva#2266: Callback for the EOS UID cache to retry fetch for failed keys
• Enh cs3org/reva#2215: Aggregrate resource info properties for virtual views
• Enh cs3org/reva#2271: Revamp the favorite manager and add the cbox sql driver
• Enh cs3org/reva#2248: Cache whether a user home was created or not
• Enh cs3org/reva#2282: Return a proper NOT_FOUND error when a user or group is not found
• Enh cs3org/reva#2268: Add the reverseproxy http service
• Enh cs3org/reva#2207: Enable users to list all spaces
• Enh cs3org/reva#2286: Add trace ID to middleware loggers
• Enh cs3org/reva#2251: Mentix service inference
• Enh cs3org/reva#2218: Allow filtering of mime types supported by app providers
• Enh cs3org/reva#2213: Add public link share type to propfind response
• Enh cs3org/reva#2253: Support the file editor role for public links
• Enh cs3org/reva#2208: Reduce redundant stat calls when statting by resource ID
• Enh cs3org/reva#2235: Specify a list of allowed folders/files to be archived
• Enh cs3org/reva#2267: Restrict the paths where share creation is allowed
• Enh cs3org/reva#2252: Add the xattr sys.acl to SysACL (eosgrpc)
• Enh cs3org/reva#2239: Update toml configs

https://github.com/owncloud/ocis/pull/2737
https://github.com/owncloud/ocis/pull/2726
https://github.com/owncloud/ocis/pull/2790
https://github.com/owncloud/ocis/pull/2797

Bugfix - Don't allow empty password: #197

It was allowed to create users with empty or spaces-only password. This is fixed

https://github.com/owncloud/product/issues/197

Bugfix - Fix basic auth config: #2719

Users could authenticate using basic auth even though PROXY_ENABLE_BASIC_AUTH was set to
false.

https://github.com/owncloud/ocis/issues/2466
https://github.com/owncloud/ocis/pull/2719

Bugfix - Fix basic auth with custom user claim: #2755

We've fixed authentication with basic if oCIS is configured to use a non-standard claim as user
claim (PROXY_USER_OIDC_CLAIM). Prior to this bugfix the authentication always failed and
is now working.

https://github.com/owncloud/ocis/pull/2755

Bugfix - Fix oCIS startup ony systems with IPv6: #2698

We've fixed failing startup of oCIS on systems with IPv6 addresses.

https://github.com/owncloud/ocis/issues/2300
https://github.com/owncloud/ocis/pull/2698

Bugfix - Fix opening images in media viewer for some usernames: #2738

We've fixed the opening of images in the media viewer for user names containing special
characters (eg. @) which will be URL-escaped. Before this fix users could not see the image in
the media viewer. Now the user name is correctly escaped and the user can view the image in the
media viewer.

https://github.com/owncloud/ocis/pull/2738

Bugfix - Fix error logging when there is no thumbnail for a file: #2702

We've fixed the behavior of the logging when there is no thumbnail for a file (because the
filetype is not supported for thumbnail generation). Previously the WebDAV service always
issues an error log in this case. Now, we don't log this event any more.

https://github.com/owncloud/ocis/pull/2702

Bugfix - Don't announce resharing via capabilities: #2690

OCIS / Reva is not capable of resharing, yet. We've set the resharing capability to false, so
that clients have a chance to react accordingly.

https://github.com/owncloud/ocis/pull/2690

Change - Make all insecure options configurable and change the default to false: #2700

We had several hard-coded 'insecure' flags. These options are now configurable and default to
false. Also we changed all other 'insecure' flags with a previous default of true to false.

In development environments using self signed certs (the default) you now need to set these
flags:

STORAGE_FRONTEND_ARCHIVER_INSECURE=true STORAGE_FRONTEND_OCDAV_INSECURE=true
STORAGE_HOME_DATAPROVIDER_INSECURE=true
STORAGE_METADATA_DATAPROVIDER_INSECURE=true STORAGE_OIDC_INSECURE=true
STORAGE_USERS_DATAPROVIDER_INSECURE=true THUMBNAILS_CS3SOURCE_INSECURE=true
THUMBNAILS_WEBDAVSOURCE_INSECURE=true ```

As an alternative you also can set a single flag, which configures all options together:

``` OCIS_INSECURE=true ```

https://github.com/owncloud/ocis/issues/2700
https://github.com/owncloud/ocis/pull/2745

Change - Update ownCloud Web to v4.5.0: #2780

Tags: web

We updated ownCloud Web to v4.5.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2780
https://github.com/owncloud/web/releases/tag/v4.5.0

Enhancement - Add API to list all spaces: #2692

Added a graph endpoint to enable users with the list-all-spaces permission to list all
spaces.

https://github.com/owncloud/ocis/pull/2692

Enhancement - Update REVA to v1.16.0: #2737

Updated REVA to v1.16.0 This update includes:

• Fix cs3org/reva#2245: Don't announce search-files capability
• Fix cs3org/reva#2247: Merge user ACLs from EOS to sys ACLs
• Fix cs3org/reva#2279: Return the inode of the version folder for files when listing in EOS
• Fix cs3org/reva#2294: Fix HTTP return code when path is invalid
• Fix cs3org/reva#2231: Fix share permission on a single file in sql share driver (cbox pkg)
• Fix cs3org/reva#2230: Fix open by default app and expose default app
• Fix cs3org/reva#2265: Fix nil pointer exception when resolving members of a group (rest driver)
• Fix cs3org/reva#1214: Fix restoring versions
• Fix cs3org/reva#2254: Fix spaces propfind
• Fix cs3org/reva#2260: Fix unset quota xattr on darwin
• Fix cs3org/reva#5776: Enforce permissions in public share apps
• Fix cs3org/reva#2767: Fix status code for WebDAV mkcol requests where an ancestor is missing
• Fix cs3org/reva#2287: Add public link access via mount-ID:token/relative-path to the scope
• Fix cs3org/reva#2244: Fix the permissions response for shared files in the cbox sql driver
• Enh cs3org/reva#2219: Add virtual view tests
• Enh cs3org/reva#2230: Add priority to app providers
• Enh cs3org/reva#2258: Improved error messages from the AppProviders
• Enh cs3org/reva#2119: Add authprovider owncloudsql
• Enh cs3org/reva#2211: Enhance the cbox share sql driver to store accepted group shares
• Enh cs3org/reva#2212: Filter root path according to the agent that makes the request
• Enh cs3org/reva#2237: Skip get user call in eosfs in case previous ones also failed
• Enh cs3org/reva#2266: Callback for the EOS UID cache to retry fetch for failed keys
• Enh cs3org/reva#2215: Aggregrate resource info properties for virtual views
• Enh cs3org/reva#2271: Revamp the favorite manager and add the cbox sql driver
• Enh cs3org/reva#2248: Cache whether a user home was created or not
• Enh cs3org/reva#2282: Return a proper NOT_FOUND error when a user or group is not found
• Enh cs3org/reva#2268: Add the reverseproxy http service
• Enh cs3org/reva#2207: Enable users to list all spaces
• Enh cs3org/reva#2286: Add trace ID to middleware loggers
• Enh cs3org/reva#2251: Mentix service inference
• Enh cs3org/reva#2218: Allow filtering of mime types supported by app providers
• Enh cs3org/reva#2213: Add public link share type to propfind response
• Enh cs3org/reva#2253: Support the file editor role for public links
• Enh cs3org/reva#2208: Reduce redundant stat calls when statting by resource ID
• Enh cs3org/reva#2235: Specify a list of allowed folders/files to be archived
• Enh cs3org/reva#2267: Restrict the paths where share creation is allowed
• Enh cs3org/reva#2252: Add the xattr sys.acl to SysACL (eosgrpc)
• Enh cs3org/reva#2239: Update toml configs

https://github.com/owncloud/ocis/pull/2737
https://github.com/owncloud/ocis/pull/2726
https://github.com/owncloud/ocis/pull/2790
https://github.com/owncloud/ocis/pull/2797

Security - Don't expose services by default: #2612

We've changed the bind behaviour for all non public facing services. Before this PR all
services would listen on all interfaces. After this PR, all services listen on 127.0.0.1 only,
except the proxy which is listening on 0.0.0.0:9200.

https://github.com/owncloud/ocis/issues/2612

Bugfix - Create parent directories for idp configuration: #2667

The parent directories of the identifier-registration.yaml config file might not exist when
starting idp. Create them, when that is the case.

https://github.com/owncloud/ocis/issues/2667

Change - Configurable default quota: #2621

When creating a new space a (configurable) default quota will be used (instead the hardcoded
one). One can set the EnvVar GRAPH_SPACES_DEFAULT_QUOTA to configure it

https://github.com/owncloud/ocis/issues/2621
https://jira.owncloud.com/browse/OCIS-2070

Change - New default data paths and easier configuration of the data path: #2590

We've changed the default data path for our release artifacts: - oCIS docker images will now
store all data in /var/lib/ocis instead in /var/tmp/ocis - binary releases will now store
all data in ~/.ocis instead of /var/tmp/ocis

Also if you're a developer and you run oCIS from source, it will store all data in ~/.ocis from
now on.

You can now easily change the data path for all extensions by setting the environment variable
OCIS_BASE_DATA_PATH.

If you want to package oCIS, you also can set the default data path at compile time, eg. by passing
-X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathType=path" -X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathValue=/var/lib/ocis"
to your go build step.

https://github.com/owncloud/ocis/pull/2590

Change - Split spaces webdav url and graph url in base and path: #2660

We've fixed the behavior for the spaces webdav url and graph explorer graph url settings, so
that they respect the environment variable OCIS_URL. Previously oCIS admins needed to set
these URLs manually to make spaces and the graph explorer work.

https://github.com/owncloud/ocis/issues/2659
https://github.com/owncloud/ocis/pull/2660

Change - Update ownCloud Web to v4.4.0: #2681

Tags: web

We updated ownCloud Web to v4.4.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2681
https://github.com/owncloud/web/releases/tag/v4.4.0

Enhancement - Add user setting capability: #2655

We've added a capability to communicate the existance of a user settings service to clients.

https://github.com/owncloud/web/issues/5926
https://github.com/owncloud/ocis/pull/2655

Enhancement - Broaden bufbuild/Buf usage: #2630

We've switched the usage of bufbuild/Buf from a protoc replacement only to also using it to
confige the outputs and pinning dependencies.

https://github.com/owncloud/ocis/pull/2630
https://github.com/owncloud/ocis/pull/2616

Enhancement - Replace fileb0x with go-embed: #1199

Go-embed already brings the functionality we need but with less code. We decided to use it
instead of 3rd party fileb0x

https://github.com/owncloud/ocis/issues/1199
https://github.com/owncloud/ocis/pull/2631
https://github.com/owncloud/ocis/pull/2649

Enhancement - Upgrade to go-micro v4.1.0: #2616

We've upgraded to go-micro v4.1.0

https://github.com/owncloud/ocis/pull/2616

Enhancement - Review and correct http header: #2666

Reviewed and corrected the necessary http headers. Made CORS configurable.

https://github.com/owncloud/ocis/pull/2666

Enhancement - Lower TUS max chunk size: #2584

We've lowered the TUS max chunk size from infinite to 0.1GB so that chunking actually happens.

https://github.com/owncloud/ocis/pull/2584
https://github.com/cs3org/reva/pull/2136

Enhancement - Add sharees additional info paramater config to ocs: #2637

https://github.com/owncloud/ocis/pull/2637

Enhancement - Add a middleware to authenticate public share requests: #2536

Added a new middleware to authenticate public share requests. This makes it possible to use
APIs which require an authenticated context with public shares.

https://github.com/owncloud/ocis/issues/2479
https://github.com/owncloud/ocis/pull/2536
https://github.com/owncloud/ocis/pull/2652

Enhancement - Report quota states: #2628

When listing the available spaces via the GraphAPI we now return quota states to make it easier
for the clients to add visual indicators.

https://github.com/owncloud/ocis/pull/2628

Enhancement - Start up a new machine auth provider in the storage service: #2528

This PR also adds the config to skip encoding user groups in reva tokens

https://github.com/owncloud/ocis/pull/2528
https://github.com/owncloud/ocis/pull/2529

Enhancement - Enforce permission on update space quota: #2650

Added a check that only users with the set-space-quota permission can update the space
quota.

https://github.com/owncloud/ocis/pull/2650

Enhancement - Update lico to v0.51.1: #2654

Updated lico to v0.51.1 This update includes: * Apply LibreGraph naming treewide * move to
go1.17 * Update 3rd party Go dependencies

https://github.com/owncloud/ocis/pull/2654

Enhancement - Update reva to v1.15: #2658

Updated reva to v1.15 This update includes: * Fix
cs3org/reva#2168: Override provider if
was previously registered * Fix
cs3org/reva#2173: Fix archiver max size
reached error * Fix cs3org/reva#2167:
Handle nil quota in decomposedfs * Fix
cs3org/reva#2153: Restrict EOS project
spaces sharing permissions to admins and writers * Fix
cs3org/reva#2179: Fix the returned
permissions for webdav uploads * Chg
cs3org/reva#2479: Make apps able to work
with public shares * Enh
cs3org/reva#2174: Inherit ACLs for files
from parent directories * Enh
cs3org/reva#2152: Add a reference
parameter to the getQuota request * Enh
cs3org/reva#2171: Add optional claim
parameter to machine auth * Enh
cs3org/reva#2135: Nextcloud test
improvements * Enh cs3org/reva#2180:
Remove OCDAV options namespace parameter * Enh
cs3org/reva#2170: Handle propfind
requests for existing files * Enh
cs3org/reva#2165: Allow access to
recycle bin for arbitrary paths outside homes * Enh
cs3org/reva#2189: Add user settings
capability * Enh cs3org/reva#2162:
Implement the UpdateStorageSpace method * Enh
cs3org/reva#2117: Add ocs cache warmup
strategy for first request from the user

https://github.com/owncloud/ocis/pull/2658
https://github.com/owncloud/ocis/pull/2536
https://github.com/owncloud/ocis/pull/2650
https://github.com/owncloud/ocis/pull/2680

Security - Don't expose services by default: #2612

We've changed the bind behaviour for all non public facing services. Before this PR all
services would listen on all interfaces. After this PR, all services listen on 127.0.0.1 only,
except the proxy which is listening on 0.0.0.0:9200.

https://github.com/owncloud/ocis/issues/2612

Bugfix - Create parent directories for idp configuration: #2667

The parent directories of the identifier-registration.yaml config file might not exist when
starting idp. Create them, when that is the case.

https://github.com/owncloud/ocis/issues/2667

Change - Configurable default quota: #2621

When creating a new space a (configurable) default quota will be used (instead the hardcoded
one). One can set the EnvVar GRAPH_SPACES_DEFAULT_QUOTA to configure it

https://github.com/owncloud/ocis/issues/2621
https://jira.owncloud.com/browse/OCIS-2070

Change - New default data paths and easier configuration of the data path: #2590

We've changed the default data path for our release artifacts: - oCIS docker images will now
store all data in /var/lib/ocis instead in /var/tmp/ocis - binary releases will now store
all data in ~/.ocis instead of /var/tmp/ocis

Also if you're a developer and you run oCIS from source, it will store all data in ~/.ocis from
now on.

You can now easily change the data path for all extensions by setting the environment variable
OCIS_BASE_DATA_PATH.

If you want to package oCIS, you also can set the default data path at compile time, eg. by passing
-X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathType=path" -X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathValue=/var/lib/ocis"
to your go build step.

https://github.com/owncloud/ocis/pull/2590

Change - Split spaces webdav url and graph url in base and path: #2660

We've fixed the behavior for the spaces webdav url and graph explorer graph url settings, so
that they respect the environment variable OCIS_URL. Previously oCIS admins needed to set
these URLs manually to make spaces and the graph explorer work.

https://github.com/owncloud/ocis/issues/2659
https://github.com/owncloud/ocis/pull/2660

Change - Update ownCloud Web to v4.4.0: #2681

Tags: web

We updated ownCloud Web to v4.4.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2681
https://github.com/owncloud/web/releases/tag/v4.4.0

Enhancement - Add user setting capability: #2655

We've added a capability to communicate the existance of a user settings service to clients.

https://github.com/owncloud/web/issues/5926
https://github.com/owncloud/ocis/pull/2655

Enhancement - Broaden bufbuild/Buf usage: #2630

We've switched the usage of bufbuild/Buf from a protoc replacement only to also using it to
confige the outputs and pinning dependencies.

https://github.com/owncloud/ocis/pull/2630
https://github.com/owncloud/ocis/pull/2616

Enhancement - Replace fileb0x with go-embed: #1199

Go-embed already brings the functionality we need but with less code. We decided to use it
instead of 3rd party fileb0x

https://github.com/owncloud/ocis/issues/1199
https://github.com/owncloud/ocis/pull/2631
https://github.com/owncloud/ocis/pull/2649

Enhancement - Upgrade to go-micro v4.1.0: #2616

We've upgraded to go-micro v4.1.0

https://github.com/owncloud/ocis/pull/2616

Enhancement - Review and correct http header: #2666

Reviewed and corrected the necessary http headers. Made CORS configurable.

https://github.com/owncloud/ocis/pull/2666

Enhancement - Lower TUS max chunk size: #2584

We've lowered the TUS max chunk size from infinite to 0.1GB so that chunking actually happens.

https://github.com/owncloud/ocis/pull/2584
https://github.com/cs3org/reva/pull/2136

Enhancement - Add sharees additional info paramater config to ocs: #2637

https://github.com/owncloud/ocis/pull/2637

Enhancement - Add a middleware to authenticate public share requests: #2536

Added a new middleware to authenticate public share requests. This makes it possible to use
APIs which require an authenticated context with public shares.

https://github.com/owncloud/ocis/issues/2479
https://github.com/owncloud/ocis/pull/2536
https://github.com/owncloud/ocis/pull/2652

Enhancement - Report quota states: #2628

When listing the available spaces via the GraphAPI we now return quota states to make it easier
for the clients to add visual indicators.

https://github.com/owncloud/ocis/pull/2628

Enhancement - Start up a new machine auth provider in the storage service: #2528

This PR also adds the config to skip encoding user groups in reva tokens

https://github.com/owncloud/ocis/pull/2528
https://github.com/owncloud/ocis/pull/2529

Enhancement - Enforce permission on update space quota: #2650

Added a check that only users with the set-space-quota permission can update the space
quota.

https://github.com/owncloud/ocis/pull/2650

Enhancement - Update lico to v0.51.1: #2654

Updated lico to v0.51.1 This update includes: * Apply LibreGraph naming treewide * move to
go1.17 * Update 3rd party Go dependencies

https://github.com/owncloud/ocis/pull/2654

Enhancement - Update reva to v1.15: #2658

Updated reva to v1.15 This update includes: * Fix
cs3org/reva#2168: Override provider if
was previously registered * Fix
cs3org/reva#2173: Fix archiver max size
reached error * Fix cs3org/reva#2167:
Handle nil quota in decomposedfs * Fix
cs3org/reva#2153: Restrict EOS project
spaces sharing permissions to admins and writers * Fix
cs3org/reva#2179: Fix the returned
permissions for webdav uploads * Chg
cs3org/reva#2479: Make apps able to work
with public shares * Enh
cs3org/reva#2174: Inherit ACLs for files
from parent directories * Enh
cs3org/reva#2152: Add a reference
parameter to the getQuota request * Enh
cs3org/reva#2171: Add optional claim
parameter to machine auth * Enh
cs3org/reva#2135: Nextcloud test
improvements * Enh cs3org/reva#2180:
Remove OCDAV options namespace parameter * Enh
cs3org/reva#2170: Handle propfind
requests for existing files * Enh
cs3org/reva#2165: Allow access to
recycle bin for arbitrary paths outside homes * Enh
cs3org/reva#2189: Add user settings
capability * Enh cs3org/reva#2162:
Implement the UpdateStorageSpace method * Enh
cs3org/reva#2117: Add ocs cache warmup
strategy for first request from the user

https://github.com/owncloud/ocis/pull/2658
https://github.com/owncloud/ocis/pull/2536
https://github.com/owncloud/ocis/pull/2650
https://github.com/owncloud/ocis/pull/2680

Security - Don't expose services by default: #2612

We've changed the bind behaviour for all non public facing services. Before this PR all
services would listen on all interfaces. After this PR, all services listen on 127.0.0.1 only,
except the proxy which is listening on 0.0.0.0:9200.

https://github.com/owncloud/ocis/issues/2612

Bugfix - Create parent directories for idp configuration: #2667

The parent directories of the identifier-registration.yaml config file might not exist when
starting idp. Create them, when that is the case.

https://github.com/owncloud/ocis/issues/2667

Change - Configurable default quota: #2621

When creating a new space a (configurable) default quota will be used (instead the hardcoded
one). One can set the EnvVar GRAPH_SPACES_DEFAULT_QUOTA to configure it

https://github.com/owncloud/ocis/issues/2621
https://jira.owncloud.com/browse/OCIS-2070

Change - New default data paths and easier configuration of the data path: #2590

We've changed the default data path for our release artifacts: - oCIS docker images will now
store all data in /var/lib/ocis instead in /var/tmp/ocis - binary releases will now store
all data in ~/.ocis instead of /var/tmp/ocis

Also if you're a developer and you run oCIS from source, it will store all data in ~/.ocis from
now on.

You can now easily change the data path for all extensions by setting the environment variable
OCIS_BASE_DATA_PATH.

If you want to package oCIS, you also can set the default data path at compile time, eg. by passing
-X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathType=path" -X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathValue=/var/lib/ocis"
to your go build step.

https://github.com/owncloud/ocis/pull/2590

Change - Split spaces webdav url and graph url in base and path: #2660

We've fixed the behavior for the spaces webdav url and graph explorer graph url settings, so
that they respect the environment variable OCIS_URL. Previously oCIS admins needed to set
these URLs manually to make spaces and the graph explorer work.

https://github.com/owncloud/ocis/issues/2659
https://github.com/owncloud/ocis/pull/2660

Change - Update ownCloud Web to v4.4.0: #2681

Tags: web

We updated ownCloud Web to v4.4.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2681
https://github.com/owncloud/web/releases/tag/v4.4.0

Enhancement - Add user setting capability: #2655

We've added a capability to communicate the existance of a user settings service to clients.

https://github.com/owncloud/web/issues/5926
https://github.com/owncloud/ocis/pull/2655

Enhancement - Broaden bufbuild/Buf usage: #2630

We've switched the usage of bufbuild/Buf from a protoc replacement only to also using it to
confige the outputs and pinning dependencies.

https://github.com/owncloud/ocis/pull/2630
https://github.com/owncloud/ocis/pull/2616

Enhancement - Replace fileb0x with go-embed: #1199

Go-embed already brings the functionality we need but with less code. We decided to use it
instead of 3rd party fileb0x

https://github.com/owncloud/ocis/issues/1199
https://github.com/owncloud/ocis/pull/2631
https://github.com/owncloud/ocis/pull/2649

Enhancement - Upgrade to go-micro v4.1.0: #2616

We've upgraded to go-micro v4.1.0

https://github.com/owncloud/ocis/pull/2616

Enhancement - Review and correct http header: #2666

Reviewed and corrected the necessary http headers. Made CORS configurable.

https://github.com/owncloud/ocis/pull/2666

Enhancement - Lower TUS max chunk size: #2584

We've lowered the TUS max chunk size from infinite to 0.1GB so that chunking actually happens.

https://github.com/owncloud/ocis/pull/2584
https://github.com/cs3org/reva/pull/2136

Enhancement - Add sharees additional info paramater config to ocs: #2637

https://github.com/owncloud/ocis/pull/2637

Enhancement - Add a middleware to authenticate public share requests: #2536

Added a new middleware to authenticate public share requests. This makes it possible to use
APIs which require an authenticated context with public shares.

https://github.com/owncloud/ocis/issues/2479
https://github.com/owncloud/ocis/pull/2536
https://github.com/owncloud/ocis/pull/2652

Enhancement - Report quota states: #2628

When listing the available spaces via the GraphAPI we now return quota states to make it easier
for the clients to add visual indicators.

https://github.com/owncloud/ocis/pull/2628

Enhancement - Start up a new machine auth provider in the storage service: #2528

This PR also adds the config to skip encoding user groups in reva tokens

https://github.com/owncloud/ocis/pull/2528
https://github.com/owncloud/ocis/pull/2529

Enhancement - Enforce permission on update space quota: #2650

Added a check that only users with the set-space-quota permission can update the space
quota.

https://github.com/owncloud/ocis/pull/2650

Enhancement - Update lico to v0.51.1: #2654

Updated lico to v0.51.1 This update includes: * Apply LibreGraph naming treewide * move to
go1.17 * Update 3rd party Go dependencies

https://github.com/owncloud/ocis/pull/2654

Enhancement - Update reva to v1.15: #2658

Updated reva to v1.15 This update includes: * Fix
cs3org/reva#2168: Override provider if
was previously registered * Fix
cs3org/reva#2173: Fix archiver max size
reached error * Fix cs3org/reva#2167:
Handle nil quota in decomposedfs * Fix
cs3org/reva#2153: Restrict EOS project
spaces sharing permissions to admins and writers * Fix
cs3org/reva#2179: Fix the returned
permissions for webdav uploads * Chg
cs3org/reva#2479: Make apps able to work
with public shares * Enh
cs3org/reva#2174: Inherit ACLs for files
from parent directories * Enh
cs3org/reva#2152: Add a reference
parameter to the getQuota request * Enh
cs3org/reva#2171: Add optional claim
parameter to machine auth * Enh
cs3org/reva#2135: Nextcloud test
improvements * Enh cs3org/reva#2180:
Remove OCDAV options namespace parameter * Enh
cs3org/reva#2170: Handle propfind
requests for existing files * Enh
cs3org/reva#2165: Allow access to
recycle bin for arbitrary paths outside homes * Enh
cs3org/reva#2189: Add user settings
capability * Enh cs3org/reva#2162:
Implement the UpdateStorageSpace method * Enh
cs3org/reva#2117: Add ocs cache warmup
strategy for first request from the user

https://github.com/owncloud/ocis/pull/2658
https://github.com/owncloud/ocis/pull/2536
https://github.com/owncloud/ocis/pull/2650
https://github.com/owncloud/ocis/pull/2680

Bugfix - Fix the account resolver middleware: #2557

The accounts resolver middleware put an empty token into the request when the user was already
present. Added a step to get the token for the user.

https://github.com/owncloud/ocis/pull/2557

Bugfix - Fix version information for extensions: #2575

We've fixed the behavior for ocis version which previously always showed 0.0.0 as version
for extensions. Now the real version of the extensions are shown.

https://github.com/owncloud/ocis/pull/2575

Bugfix - Add the gatewaysvc to all shared configuration in REVA services: #2597

We've fixed the configuration for REVA services which didn't have a gatewaysvc in their shared
configuration. This could lead to default gatewaysvc addresses in the auth middleware. Now it
is set everywhere.

https://github.com/owncloud/ocis/pull/2597

Bugfix - Use proper url path decode on the username: #2511

We now properly decode the username when reading it from a url parameter

https://github.com/owncloud/ocis/pull/2511

Bugfix - Remove notifications placeholder: #2514

Since Reva was communicating its notification capabilities incorrectly, oCIS relied on a
hardcoded string to overwrite them. This has been fixed in
reva#1819 so we now removed the hardcoded
string and don't modify Reva's notification capabilities anymore in order to fix clients
having to poll a (non-existent) notifications endpoint.

https://github.com/owncloud/ocis/pull/2514

Bugfix - Remove asset path configuration option from proxy: #2576

We've remove the asset path configuration option (--asset-path or PROXY_ASSET_PATH)
since it didn't do anything at all.

https://github.com/owncloud/ocis/pull/2576

Bugfix - Race condition in config parsing: #2574

There was a race condition in the config parsing when configuring the storage services caused
by services overwriting a pointer to a config value. We fixed it by setting sane defaults.

https://github.com/owncloud/ocis/pull/2574

Change - Configure users and metadata storage separately: #2598

We've fixed the configuration behaviour of the user and metadata service writing in the same
directory when using oCIS storage.

Therefore we needed to separate the configuration of the users and metadata storage so that
they now can be configured totally separate.

https://github.com/owncloud/ocis/pull/2598

Change - Make the drives create method odata compliant: #2531

When creating a space on the graph API we now use the POST Body to provide the parameters.

https://github.com/owncloud/ocis/pull/2531
https://github.com/owncloud/ocis/pull/2535
https://www.odata.org/getting-started/basic-tutorial/#modifyData

Change - Unify Envvar names configuring REVA gateway address: #2587

We've renamed all envvars configuring REVA gateway address to REVA_GATEWAY, additionally
we renamed the cli parameters to --reva-gateway-addr and adjusted the description

https://github.com/owncloud/ocis/issues/2091
https://github.com/owncloud/ocis/pull/2587

Change - Update ownCloud Web to v4.3.0: #2589

Tags: web

We updated ownCloud Web to v4.3.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2589
https://github.com/owncloud/web/releases/tag/v4.3.0

Enhancement - Updated MimeTypes configuration for AppRegistry: #2603

We updated the type of the mime types config to a list, to keep the order of mime types from the
config.

https://github.com/owncloud/ocis/pull/2603

Enhancement - Add maximum files and size to archiver capabilities: #2544

We added the maximum files count and maximum archive size of the archiver to the capabilities
endpoint. Clients can use this to generate warnings before the actual archive creation fails.

https://github.com/owncloud/ocis/issues/2537
https://github.com/owncloud/ocis/pull/2544
https://github.com/cs3org/reva/pull/2105

Enhancement - Reduced repository size: #2579

We removed leftover artifacts from the migration to a single repository.

https://github.com/owncloud/ocis/pull/2579

Enhancement - Return the newly created space: #2610

Changed the response of the CreateSpace method to include the newly created space.

https://github.com/owncloud/ocis/pull/2610
https://github.com/cs3org/reva/pull/2158

Enhancement - Expose the reva archiver in OCIS: #2509

The reva archiver can now be accessed through the storage frontend service

https://github.com/owncloud/ocis/pull/2509

Enhancement - Favorites capability: #2599

We've added a capability for the storage frontend which can be used to announce to clients
whether or not favorites are supported. By default this is disabled because the listing of
favorites doesn't survive service restarts at the moment.

https://github.com/owncloud/ocis/pull/2599

Enhancement - Upgrade to GO 1.17: #2605

We've upgraded the used GO version from 1.16 to 1.17.

https://github.com/owncloud/ocis/pull/2605

Enhancement - Make mimetype allow list configurable for app provider: #2553

We've added a configuration option to configure the mimetype allow list introduced in
cs3org/reva#2095. This also makes it possible to set one application per mime type as a
default.

https://github.com/owncloud/ocis/issues/2563
https://github.com/owncloud/ocis/pull/2553
https://github.com/cs3org/reva/pull/2095

Enhancement - Add allow_creation parameter to mime type config: #2591

https://github.com/owncloud/ocis/pull/2591

Enhancement - Add option to skip generation of demo users and groups: #2495

We've added a new environment variable to decide whether we should generate the demo users and
groups or not. This environment variable is set to true by default, so the demo users and
groups will get generated by default as long as oCIS is in its "technical preview" stage.

In any case, there are still some users and groups automatically generated: for users: Reva
IOP, Kopano IDP, admin; for groups: sysusers and users.

https://github.com/owncloud/ocis/pull/2495

Enhancement - Allow overriding the cookie based route by claim: #2508

When determining the routing policy we now let the claim override the cookie so that users are
routed to the correct backend after login.

https://github.com/owncloud/ocis/pull/2508

Enhancement - Redirect invalid links to oC Web: #2493

Invalid links (eg. https://foo.bar/index.php/apps/pdfviewer) will be redirect to
ownCloud Web instead of displaying a blank page with a "not found" message.

https://github.com/owncloud/ocis/pull/2493
https://github.com/owncloud/ocis/pull/2512

Enhancement - Use reva's Authenticate method instead of spawning token managers: #2528

When using the CS3 proxy backend, we previously obtained the user from reva's userprovider
service and minted the token ourselves. This required maintaining a shared JWT secret between
ocis and reva, as well duplication of logic. This PR delegates this logic by using the
Authenticate method provided by the reva gateway service to obtain this token, making it an
arbitrary, indestructible entry. Currently, the changes have been made to the proxy service
but will be extended to others as well.

https://github.com/owncloud/ocis/pull/2528

Enhancement - TLS config options for ldap in reva: #2492

We added the new config options "ldap-cacert" and "ldap-insecure" to the auth-, users- and
groups-provider services to be able to do proper TLS configuration for the LDAP clients.
"ldap-cacert" is by default configured to add the bundled glauth LDAP servers certificate to
the trusted set for the LDAP clients. "ldap-insecure" is set to "false" by default and can be
used to disable certificate checks (only advisable for development and test enviroments).

https://github.com/owncloud/ocis/pull/2492

Enhancement - Set reva JWT token expiration time to 24 hours by default: #2527

https://github.com/owncloud/ocis/pull/2527

Enhancement - Update reva to v1.14.0: #2615

This update includes:

• Bugfix cs3org/reva#2103: AppProvider: propagate back errors reported by WOPI
• Bugfix cs3org/reva#2149: Remove excess info from the http list app providers endpoint
• Bugfix cs3org/reva#2114: Add as default app while registering and skip unset mimetypes
• Bugfix cs3org/reva#2095: Fix app open when multiple app providers are present
• Bugfix cs3org/reva#2135: Make TUS capabilities configurable
• Bugfix cs3org/reva#2076: Fix chi routing
• Bugfix cs3org/reva#2077: Fix concurrent registration of mimetypes
• Bugfix cs3org/reva#2154: Return OK when trying to delete a non existing reference
• Bugfix cs3org/reva#2078: Fix nil pointer exception in stat
• Bugfix cs3org/reva#2073: Fix opening a readonly filetype with WOPI
• Bugfix cs3org/reva#2140: Map GRPC error codes to REVA errors
• Bugfix cs3org/reva#2147: Follow up of #2138: this is the new expected format
• Bugfix cs3org/reva#2116: Differentiate share types when retrieving received shares in sql driver
• Bugfix cs3org/reva#2074: Fix Stat() for EOS storage provider
• Bugfix cs3org/reva#2151: Fix return code for webdav uploads when the token expired
• Change cs3org/reva#2121: Sharemanager API change
• Enhancement cs3org/reva#2090: Return space name during list storage spaces
• Enhancement cs3org/reva#2138: Default AppProvider on top of the providers list
• Enhancement cs3org/reva#2137: Revamp app registry and add parameter to control file creation
• Enhancement cs3org/reva#145: UI improvements for the AppProviders
• Enhancement cs3org/reva#2088: Add archiver and app provider to ocs capabilities
• Enhancement cs3org/reva#2537: Add maximum files and size to archiver capabilities
• Enhancement cs3org/reva#2100: Add support for resource id to the archiver
• Enhancement cs3org/reva#2158: Augment the Id of new spaces
• Enhancement cs3org/reva#2085: Make encoding user groups in access tokens configurable
• Enhancement cs3org/reva#146: Filter the denial shares (permission = 0) out of
• Enhancement cs3org/reva#2141: Use golang v1.17
• Enhancement cs3org/reva#2053: Safer defaults for TLS verification on LDAP connections
• Enhancement cs3org/reva#2115: Reduce code duplication in LDAP related drivers
• Enhancement cs3org/reva#1989: Add redirects from OC10 URL formats
• Enhancement cs3org/reva#2479: Limit publicshare and resourceinfo scope content
• Enhancement cs3org/reva#2071: Implement listing favorites via the dav report API
• Enhancement cs3org/reva#2091: Nextcloud share managers
• Enhancement cs3org/reva#2070: More unit tests for the Nextcloud storage provider
• Enhancement cs3org/reva#2087: More unit tests for the Nextcloud auth and user managers
• Enhancement cs3org/reva#2075: Make owncloudsql leverage existing filecache index
• Enhancement cs3org/reva#2050: Add a share types filter to the OCS API
• Enhancement cs3org/reva#2134: Use space Type from request
• Enhancement cs3org/reva#2132: Align local tests with drone setup
• Enhancement cs3org/reva#2095: Whitelisting for apps
• Enhancement cs3org/reva#2155: Pass an extra query parameter to WOPI /openinapp with a

https://github.com/owncloud/ocis/pull/2615
https://github.com/owncloud/ocis/pull/2566
https://github.com/owncloud/ocis/pull/2520

Bugfix - Fix the account resolver middleware: #2557

The accounts resolver middleware put an empty token into the request when the user was already
present. Added a step to get the token for the user.

https://github.com/owncloud/ocis/pull/2557

Bugfix - Fix version information for extensions: #2575

We've fixed the behavior for ocis version which previously always showed 0.0.0 as version
for extensions. Now the real version of the extensions are shown.

https://github.com/owncloud/ocis/pull/2575

Bugfix - Add the gatewaysvc to all shared configuration in REVA services: #2597

We've fixed the configuration for REVA services which didn't have a gatewaysvc in their shared
configuration. This could lead to default gatewaysvc addresses in the auth middleware. Now it
is set everywhere.

https://github.com/owncloud/ocis/pull/2597

Bugfix - Use proper url path decode on the username: #2511

We now properly decode the username when reading it from a url parameter

https://github.com/owncloud/ocis/pull/2511

Bugfix - Remove notifications placeholder: #2514

Since Reva was communicating its notification capabilities incorrectly, oCIS relied on a
hardcoded string to overwrite them. This has been fixed in
reva#1819 so we now removed the hardcoded
string and don't modify Reva's notification capabilities anymore in order to fix clients
having to poll a (non-existent) notifications endpoint.

https://github.com/owncloud/ocis/pull/2514

Bugfix - Remove asset path configuration option from proxy: #2576

We've remove the asset path configuration option (--asset-path or PROXY_ASSET_PATH)
since it didn't do anything at all.

https://github.com/owncloud/ocis/pull/2576

Bugfix - Race condition in config parsing: #2574

There was a race condition in the config parsing when configuring the storage services caused
by services overwriting a pointer to a config value. We fixed it by setting sane defaults.

https://github.com/owncloud/ocis/pull/2574

Change - Configure users and metadata storage separately: #2598

We've fixed the configuration behaviour of the user and metadata service writing in the same
directory when using oCIS storage.

Therefore we needed to separate the configuration of the users and metadata storage so that
they now can be configured totally separate.

https://github.com/owncloud/ocis/pull/2598

Change - Make the drives create method odata compliant: #2531

When creating a space on the graph API we now use the POST Body to provide the parameters.

https://github.com/owncloud/ocis/pull/2531
https://github.com/owncloud/ocis/pull/2535
https://www.odata.org/getting-started/basic-tutorial/#modifyData

Change - Unify Envvar names configuring REVA gateway address: #2587

We've renamed all envvars configuring REVA gateway address to REVA_GATEWAY, additionally
we renamed the cli parameters to --reva-gateway-addr and adjusted the description

https://github.com/owncloud/ocis/issues/2091
https://github.com/owncloud/ocis/pull/2587

Change - Update ownCloud Web to v4.3.0: #2589

Tags: web

We updated ownCloud Web to v4.3.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2589
https://github.com/owncloud/web/releases/tag/v4.3.0

Enhancement - Updated MimeTypes configuration for AppRegistry: #2603

We updated the type of the mime types config to a list, to keep the order of mime types from the
config.

https://github.com/owncloud/ocis/pull/2603

Enhancement - Add maximum files and size to archiver capabilities: #2544

We added the maximum files count and maximum archive size of the archiver to the capabilities
endpoint. Clients can use this to generate warnings before the actual archive creation fails.

https://github.com/owncloud/ocis/issues/2537
https://github.com/owncloud/ocis/pull/2544
https://github.com/cs3org/reva/pull/2105

Enhancement - Reduced repository size: #2579

We removed leftover artifacts from the migration to a single repository.

https://github.com/owncloud/ocis/pull/2579

Enhancement - Return the newly created space: #2610

Changed the response of the CreateSpace method to include the newly created space.

https://github.com/owncloud/ocis/pull/2610
https://github.com/cs3org/reva/pull/2158

Enhancement - Expose the reva archiver in OCIS: #2509

The reva archiver can now be accessed through the storage frontend service

https://github.com/owncloud/ocis/pull/2509

Enhancement - Favorites capability: #2599

We've added a capability for the storage frontend which can be used to announce to clients
whether or not favorites are supported. By default this is disabled because the listing of
favorites doesn't survive service restarts at the moment.

https://github.com/owncloud/ocis/pull/2599

Enhancement - Upgrade to GO 1.17: #2605

We've upgraded the used GO version from 1.16 to 1.17.

https://github.com/owncloud/ocis/pull/2605

Enhancement - Make mimetype allow list configurable for app provider: #2553

We've added a configuration option to configure the mimetype allow list introduced in
cs3org/reva#2095. This also makes it possible to set one application per mime type as a
default.

https://github.com/owncloud/ocis/issues/2563
https://github.com/owncloud/ocis/pull/2553
https://github.com/cs3org/reva/pull/2095

Enhancement - Add allow_creation parameter to mime type config: #2591

https://github.com/owncloud/ocis/pull/2591

Enhancement - Add option to skip generation of demo users and groups: #2495

We've added a new environment variable to decide whether we should generate the demo users and
groups or not. This environment variable is set to true by default, so the demo users and
groups will get generated by default as long as oCIS is in its "technical preview" stage.

In any case, there are still some users and groups automatically generated: for users: Reva
IOP, Kopano IDP, admin; for groups: sysusers and users.

https://github.com/owncloud/ocis/pull/2495

Enhancement - Allow overriding the cookie based route by claim: #2508

When determining the routing policy we now let the claim override the cookie so that users are
routed to the correct backend after login.

https://github.com/owncloud/ocis/pull/2508

Enhancement - Redirect invalid links to oC Web: #2493

Invalid links (eg. https://foo.bar/index.php/apps/pdfviewer) will be redirect to
ownCloud Web instead of displaying a blank page with a "not found" message.

https://github.com/owncloud/ocis/pull/2493
https://github.com/owncloud/ocis/pull/2512

Enhancement - Use reva's Authenticate method instead of spawning token managers: #2528

When using the CS3 proxy backend, we previously obtained the user from reva's userprovider
service and minted the token ourselves. This required maintaining a shared JWT secret between
ocis and reva, as well duplication of logic. This PR delegates this logic by using the
Authenticate method provided by the reva gateway service to obtain this token, making it an
arbitrary, indestructible entry. Currently, the changes have been made to the proxy service
but will be extended to others as well.

https://github.com/owncloud/ocis/pull/2528

Enhancement - TLS config options for ldap in reva: #2492

We added the new config options "ldap-cacert" and "ldap-insecure" to the auth-, users- and
groups-provider services to be able to do proper TLS configuration for the LDAP clients.
"ldap-cacert" is by default configured to add the bundled glauth LDAP servers certificate to
the trusted set for the LDAP clients. "ldap-insecure" is set to "false" by default and can be
used to disable certificate checks (only advisable for development and test enviroments).

https://github.com/owncloud/ocis/pull/2492

Enhancement - Set reva JWT token expiration time to 24 hours by default: #2527

https://github.com/owncloud/ocis/pull/2527

Enhancement - Update reva to v1.14.0: #2615

This update includes:

• Bugfix cs3org/reva#2103: AppProvider: propagate back errors reported by WOPI
• Bugfix cs3org/reva#2149: Remove excess info from the http list app providers endpoint
• Bugfix cs3org/reva#2114: Add as default app while registering and skip unset mimetypes
• Bugfix cs3org/reva#2095: Fix app open when multiple app providers are present
• Bugfix cs3org/reva#2135: Make TUS capabilities configurable
• Bugfix cs3org/reva#2076: Fix chi routing
• Bugfix cs3org/reva#2077: Fix concurrent registration of mimetypes
• Bugfix cs3org/reva#2154: Return OK when trying to delete a non existing reference
• Bugfix cs3org/reva#2078: Fix nil pointer exception in stat
• Bugfix cs3org/reva#2073: Fix opening a readonly filetype with WOPI
• Bugfix cs3org/reva#2140: Map GRPC error codes to REVA errors
• Bugfix cs3org/reva#2147: Follow up of #2138: this is the new expected format
• Bugfix cs3org/reva#2116: Differentiate share types when retrieving received shares in sql driver
• Bugfix cs3org/reva#2074: Fix Stat() for EOS storage provider
• Bugfix cs3org/reva#2151: Fix return code for webdav uploads when the token expired
• Change cs3org/reva#2121: Sharemanager API change
• Enhancement cs3org/reva#2090: Return space name during list storage spaces
• Enhancement cs3org/reva#2138: Default AppProvider on top of the providers list
• Enhancement cs3org/reva#2137: Revamp app registry and add parameter to control file creation
• Enhancement cs3org/reva#145: UI improvements for the AppProviders
• Enhancement cs3org/reva#2088: Add archiver and app provider to ocs capabilities
• Enhancement cs3org/reva#2537: Add maximum files and size to archiver capabilities
• Enhancement cs3org/reva#2100: Add support for resource id to the archiver
• Enhancement cs3org/reva#2158: Augment the Id of new spaces
• Enhancement cs3org/reva#2085: Make encoding user groups in access tokens configurable
• Enhancement cs3org/reva#146: Filter the denial shares (permission = 0) out of
• Enhancement cs3org/reva#2141: Use golang v1.17
• Enhancement cs3org/reva#2053: Safer defaults for TLS verification on LDAP connections
• Enhancement cs3org/reva#2115: Reduce code duplication in LDAP related drivers
• Enhancement cs3org/reva#1989: Add redirects from OC10 URL formats
• Enhancement cs3org/reva#2479: Limit publicshare and resourceinfo scope content
• Enhancement cs3org/reva#2071: Implement listing favorites via the dav report API
• Enhancement cs3org/reva#2091: Nextcloud share managers
• Enhancement cs3org/reva#2070: More unit tests for the Nextcloud storage provider
• Enhancement cs3org/reva#2087: More unit tests for the Nextcloud auth and user managers
• Enhancement cs3org/reva#2075: Make owncloudsql leverage existing filecache index
• Enhancement cs3org/reva#2050: Add a share types filter to the OCS API
• Enhancement cs3org/reva#2134: Use space Type from request
• Enhancement cs3org/reva#2132: Align local tests with drone setup
• Enhancement cs3org/reva#2095: Whitelisting for apps
• Enhancement cs3org/reva#2155: Pass an extra query parameter to WOPI /openinapp with a

https://github.com/owncloud/ocis/pull/2615
https://github.com/owncloud/ocis/pull/2566
https://github.com/owncloud/ocis/pull/2520

Bugfix - Remove non working proxy route and fix cs3 users example: #2474

We removed a non working route from the proxy default configuration and fixed the cs3 users
deployment example since it still used the accounts service. It now only uses the configured
LDAP.

https://github.com/owncloud/ocis/pull/2474

Bugfix - Set English as default language in the dropdown in the settings page: #2465

The language dropdown didn't have a default language selected, and it was showing an empty
value. Now it shows English instead.

https://github.com/owncloud/ocis/pull/2465

Change - Remove OnlyOffice extension: #2433

Tags: OnlyOffice

We've removed the OnlyOffice extension in oCIS. OnlyOffice has their own web extension for
OC10 backend now with a dedicated
guide. In
oCIS, we will follow up with a guide on how to start a WOPI server providing OnlyOffice soon.

https://github.com/owncloud/ocis/pull/2433

Change - Remove OnlyOffice extension: #2433

Tags: OnlyOffice

We've removed the OnlyOffice extension in oCIS. OnlyOffice has their own web extension for
OC10 backend now with a dedicated
guide. In
oCIS, we will follow up with a guide on how to start a WOPI server providing OnlyOffice soon.

https://github.com/owncloud/ocis/pull/2433

Change - Update ownCloud Web to v4.2.0: #2501

Tags: web

We updated ownCloud Web to v4.2.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2501
https://github.com/owncloud/web/releases/tag/v4.2.0

Enhancement - Add app provider and app provider registry: #2204

We added the app provider and app provider registry. Now the CS3org WOPI server can be
registered and OpenInApp requests can be done.

https://github.com/owncloud/ocis/pull/2204
https://github.com/cs3org/reva/pull/1785

Enhancement - Add the create space permission: #2461

In preparation for the upcoming spaces features a Create Space permission was added.

https://github.com/owncloud/ocis/pull/2461

Enhancement - Add set space quota permission: #2459

In preparation for the upcoming spaces features a SetSpaceQuota permission was added.

https://github.com/owncloud/ocis/pull/2459

Enhancement - Create a Space using the Graph API: #2471

Spaces can now be created on POST /drives/{drive-name}. Only users with the create-space
permissions can perform this operation.

Allowed body form values are:

• quota (bytes) maximum amount of bytes stored in the space. - maxQuotaFiles (integer)
  maximum amount of files supported by the space.

https://github.com/owncloud/ocis/pull/2471

Enhancement - Update go-chi/chi to version 5.0.3: #2429

Updated go-chi/chi to the lastest release

https://github.com/owncloud/ocis/pull/2429

Enhancement - Upgrade go micro to v3.6.0: #2451

Go micro and all go micro plugins are now on v3.6.0

https://github.com/owncloud/ocis/pull/2451

Enhancement - Update reva to v1.13.0: #2477

This update includes:

• Bugfix cs3org/reva#2054: Fix the response after deleting a share
• Bugfix cs3org/reva#2026: Fix moving of a shared file
• Bugfix cs3org/reva#1605: Allow to expose full paths in OCS API
• Bugfix cs3org/reva#2033: Fix the storage id of shares
• Bugfix cs3org/reva#1991: Remove share references when declining shares
• Enhancement cs3org/reva#1994: Add owncloudsql driver for the userprovider
• Enhancement cs3org/reva#2065: New sharing role Manager
• Enhancement cs3org/reva#2015: Add spaces to the list of capabilities
• Enhancement cs3org/reva#2041: Create operations for Spaces
• Enhancement cs3org/reva#2029: Tracing agent configuration

https://github.com/owncloud/ocis/pull/2477

Bugfix - Remove non working proxy route and fix cs3 users example: #2474

We removed a non working route from the proxy default configuration and fixed the cs3 users
deployment example since it still used the accounts service. It now only uses the configured
LDAP.

https://github.com/owncloud/ocis/pull/2474

Bugfix - Set English as default language in the dropdown in the settings page: #2465

The language dropdown didn't have a default language selected, and it was showing an empty
value. Now it shows English instead.

https://github.com/owncloud/ocis/pull/2465

Change - Remove OnlyOffice extension: #2433

Tags: OnlyOffice

We've removed the OnlyOffice extension in oCIS. OnlyOffice has their own web extension for
OC10 backend now with a dedicated
guide. In
oCIS, we will follow up with a guide on how to start a WOPI server providing OnlyOffice soon.

https://github.com/owncloud/ocis/pull/2433

Change - Remove OnlyOffice extension: #2433

Tags: OnlyOffice

We've removed the OnlyOffice extension in oCIS. OnlyOffice has their own web extension for
OC10 backend now with a dedicated
guide. In
oCIS, we will follow up with a guide on how to start a WOPI server providing OnlyOffice soon.

https://github.com/owncloud/ocis/pull/2433

Change - Update ownCloud Web to v4.2.0: #2501

Tags: web

We updated ownCloud Web to v4.2.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2501
https://github.com/owncloud/web/releases/tag/v4.2.0

Enhancement - Add app provider and app provider registry: #2204

We added the app provider and app provider registry. Now the CS3org WOPI server can be
registered and OpenInApp requests can be done.

https://github.com/owncloud/ocis/pull/2204
https://github.com/cs3org/reva/pull/1785

Enhancement - Add the create space permission: #2461

In preparation for the upcoming spaces features a Create Space permission was added.

https://github.com/owncloud/ocis/pull/2461

Enhancement - Add set space quota permission: #2459

In preparation for the upcoming spaces features a SetSpaceQuota permission was added.

https://github.com/owncloud/ocis/pull/2459

Enhancement - Create a Space using the Graph API: #2471

Spaces can now be created on POST /drives/{drive-name}. Only users with the create-space
permissions can perform this operation.

Allowed body form values are:

• quota (bytes) maximum amount of bytes stored in the space. - maxQuotaFiles (integer)
  maximum amount of files supported by the space.

https://github.com/owncloud/ocis/pull/2471

Enhancement - Update go-chi/chi to version 5.0.3: #2429

Updated go-chi/chi to the lastest release

https://github.com/owncloud/ocis/pull/2429

Enhancement - Upgrade go micro to v3.6.0: #2451

Go micro and all go micro plugins are now on v3.6.0

https://github.com/owncloud/ocis/pull/2451

Enhancement - Update reva to v1.13.0: #2477

This update includes:

• Bugfix cs3org/reva#2054: Fix the response after deleting a share
• Bugfix cs3org/reva#2026: Fix moving of a shared file
• Bugfix cs3org/reva#1605: Allow to expose full paths in OCS API
• Bugfix cs3org/reva#2033: Fix the storage id of shares
• Bugfix cs3org/reva#1991: Remove share references when declining shares
• Enhancement cs3org/reva#1994: Add owncloudsql driver for the userprovider
• Enhancement cs3org/reva#2065: New sharing role Manager
• Enhancement cs3org/reva#2015: Add spaces to the list of capabilities
• Enhancement cs3org/reva#2041: Create operations for Spaces
• Enhancement cs3org/reva#2029: Tracing agent configuration

https://github.com/owncloud/ocis/pull/2477

Bugfix - Specify primary user type for all accounts: #2364

https://github.com/owncloud/ocis/pull/2364

Bugfix - Fix naming of the user- and groupprovider services: #2388

The services are called "storage-userprovider" and "storage-groupprovider". The 'ocis
help' output was misleading.

https://github.com/owncloud/ocis/pull/2388

Change - Update ownCloud Web to v4.1.0: #2426

Tags: web

We updated ownCloud Web to v4.1.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2426
https://github.com/owncloud/web/releases/tag/v4.1.0

Enhancement - Use non root user for the owncloud/ocis docker image: #2380

The owncloud/ocis docker image now uses a non root user and enables you to set a different user
with the docker --user parameter. The default user has the UID 1000 is part of a group with the
GID 1000.

This is a breaking change for existing docker deployments. The permission on the files and
folders in persistent volumes need to be changed to the UID and GID used for oCIS (default
1000:1000 if not changed by the user).

https://github.com/owncloud/ocis/pull/2380

Enhancement - Replace unmaintained jwt library: #2386

The old library github.com/dgrijalva/jwt-go
is unmaintained and was replaced by the community maintained fork
github.com/golang-jwt/jwt.

https://github.com/owncloud/ocis/pull/2386

Enhancement - Update bleve to version 2.1.0: #2391

Updated bleve to the current version.

https://github.com/owncloud/ocis/pull/2391

Enhancement - Update github.com/coreos/go-oidc to v3.0.0: #2393

Updated the github.com/coreos/go-oidc library to the version 3.0.0.

https://github.com/owncloud/ocis/pull/2393

Enhancement - Update reva to v1.12: #2423

• Enhancement cs3org/reva#1803: Introduce new webdav spaces endpoint
• Bugfix cs3org/reva#1819: Disable notifications
• Enhancement cs3org/reva#1861: Add support for runtime plugins
• Bugfix cs3org/reva#1913: Logic to restore files to readonly nodes
• Enhancement cs3org/reva#1946: Add share manager that connects to oc10 databases
• Bugfix cs3org/reva#1954: Fix response format of the sharees API
• Bugfix cs3org/reva#1956: Fix trashbin listing with depth 0
• Bugfix cs3org/reva#1957: Fix etag propagation on deletes
• Bugfix cs3org/reva#1960: Return the updated share after updating
• Bugfix cs3org/reva#1965 cs3org/reva#1967: Fix the file target of user and group shares
• Bugfix cs3org/reva#1980: Propagate the etag after restoring a file version
• Enhancement cs3org/reva#1984: Replace OpenCensus with OpenTelemetry
• Bugfix cs3org/reva#1985: Add quota stubs
• Bugfix cs3org/reva#1987: Fix windows build
• Bugfix cs3org/reva#1990: Increase oc10 compatibility of owncloudsql
• Bugfix cs3org/reva#1992: Check if symlink exists instead of spamming the console
• Bugfix cs3org/reva#1993: fix owncloudsql GetMD

https://github.com/owncloud/ocis/pull/2423

Bugfix - Specify primary user type for all accounts: #2364

https://github.com/owncloud/ocis/pull/2364

Bugfix - Fix naming of the user- and groupprovider services: #2388

The services are called "storage-userprovider" and "storage-groupprovider". The 'ocis
help' output was misleading.

https://github.com/owncloud/ocis/pull/2388

Change - Update ownCloud Web to v4.1.0: #2426

Tags: web

We updated ownCloud Web to v4.1.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2426
https://github.com/owncloud/web/releases/tag/v4.1.0

Enhancement - Use non root user for the owncloud/ocis docker image: #2380

The owncloud/ocis docker image now uses a non root user and enables you to set a different user
with the docker --user parameter. The default user has the UID 1000 is part of a group with the
GID 1000.

This is a breaking change for existing docker deployments. The permission on the files and
folders in persistent volumes need to be changed to the UID and GID used for oCIS (default
1000:1000 if not changed by the user).

https://github.com/owncloud/ocis/pull/2380

Enhancement - Replace unmaintained jwt library: #2386

The old library github.com/dgrijalva/jwt-go
is unmaintained and was replaced by the community maintained fork
github.com/golang-jwt/jwt.

https://github.com/owncloud/ocis/pull/2386

Enhancement - Update bleve to version 2.1.0: #2391

Updated bleve to the current version.

https://github.com/owncloud/ocis/pull/2391

Enhancement - Update github.com/coreos/go-oidc to v3.0.0: #2393

Updated the github.com/coreos/go-oidc library to the version 3.0.0.

https://github.com/owncloud/ocis/pull/2393

Enhancement - Update reva to v1.12: #2423

• Enhancement cs3org/reva#1803: Introduce new webdav spaces endpoint
• Bugfix cs3org/reva#1819: Disable notifications
• Enhancement cs3org/reva#1861: Add support for runtime plugins
• Bugfix cs3org/reva#1913: Logic to restore files to readonly nodes
• Enhancement cs3org/reva#1946: Add share manager that connects to oc10 databases
• Bugfix cs3org/reva#1954: Fix response format of the sharees API
• Bugfix cs3org/reva#1956: Fix trashbin listing with depth 0
• Bugfix cs3org/reva#1957: Fix etag propagation on deletes
• Bugfix cs3org/reva#1960: Return the updated share after updating
• Bugfix cs3org/reva#1965 cs3org/reva#1967: Fix the file target of user and group shares
• Bugfix cs3org/reva#1980: Propagate the etag after restoring a file version
• Enhancement cs3org/reva#1984: Replace OpenCensus with OpenTelemetry
• Bugfix cs3org/reva#1985: Add quota stubs
• Bugfix cs3org/reva#1987: Fix windows build
• Bugfix cs3org/reva#1990: Increase oc10 compatibility of owncloudsql
• Bugfix cs3org/reva#1992: Check if symlink exists instead of spamming the console
• Bugfix cs3org/reva#1993: fix owncloudsql GetMD

https://github.com/owncloud/ocis/pull/2423

Bugfix - Improve IDP Login Accessibility: #5376

We have addressed the feedback from the a11y audit and improved the IDP login screen
accordingly.

https://github.com/owncloud/web/issues/5376
https://github.com/owncloud/web/issues/5377

Bugfix - Forward basic auth to OpenID connect token authentication endpoint: #2095

When using PROXY_ENABLE_BASIC_AUTH=true we now forward request to the idp instead of
trying to authenticate the request ourself.

https://github.com/owncloud/ocis/issues/2095
https://github.com/owncloud/ocis/issues/2094

Bugfix - Log all requests in the proxy access log: #2301

We now use a dedicated middleware to log all requests, regardless of routing selector outcome.
While the log now includes the remote address, the selected routing policy is only logged when
log level is set to debug because the request context cannot be changed in the
directorSelectionDirector, as per the ReverseProxy.Director documentation.

https://github.com/owncloud/ocis/pull/2301

Bugfix - Update glauth to 20210729125545-b9aecdfcac31: #2336

• Fixes the backend config not being passed correctly in ocis
• Fixes a mutex being copied, leading to concurrent writes
• Fixes UTF8 chars in filters
• Fixes case insensitive strings

https://github.com/owncloud/ocis/pull/2336
https://github.com/glauth/glauth/pull/198
https://github.com/glauth/glauth/pull/194

Change - Update ownCloud Web to v4.0.0: #2353

Tags: web

We updated ownCloud Web to v4.0.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2353
https://github.com/owncloud/web/releases/tag/v4.0.0

Enhancement - Proxy: Add claims policy selector: #2248

Using the proxy config file, it is now possible to let let the IdP determine the routing policy by
sending an ocis.routing.policy claim. Its value will be used to determine the set of routes
for the logged in user.

https://github.com/owncloud/ocis/pull/2248

Enhancement - Add ocs cache warmup config and warn on protobuf ns conflicts: #2328

https://github.com/owncloud/ocis/pull/2328

Enhancement - Refactor graph API: #2277

We refactored the /graph/v1.0/ endpoint which now relies on the internal acces token fer
authentication, getting rid of any LDAP or OIDC code to authenticate requests. This allows
using the graph api when using basic auth or any other auth mechanism provided by the CS3 auth
providers / reva gateway / ocis proxy.

https://github.com/owncloud/ocis/pull/2277

Enhancement - Update REVA: #2355

Update REVA from v1.10.1-0.20210730095301-fcb7a30a44a6 to
v1.11.1-0.20210809134415-3fe79c870fb5 * Fix cs3org/reva#1978: Fix owner type is optional

• Fix cs3org/reva#1899: Fix chunked uploads for new versions * Fix cs3org/reva#1906: Fix copy
  over existing resource * Fix cs3org/reva#1891: Delete Shared Resources as Receiver * Fix
  cs3org/reva#1907: Error when creating folder with existing name * Fix cs3org/reva#1937: Do
  not overwrite more specific matches when finding storage providers * Fix cs3org/reva#1939:
  Fix the share jail permissions in the decomposedfs * Fix cs3org/reva#1932: Numerous fixes to
  the owncloudsql storage driver * Fix cs3org/reva#1912: Fix response when listing versions of
  another user * Fix cs3org/reva#1910: Get user groups recursively in the cbox rest user driver *
  Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the datagateway * Fix
  cs3org/reva#1911: Fix version order in propfind responses * Fix cs3org/reva#1926: Trash Bin
  in oCIS Storage Operations * Fix cs3org/reva#1901: Fix response code when folder doesnt exist
  on upload * Enh cs3org/reva#1785: Extend app registry with AddProvider method and mimetype
  filters * Enh cs3org/reva#1938: Add methods to get and put context values * Enh
  cs3org/reva#1798: Add support for a deny-all permission on references * Enh
  cs3org/reva#1916: Generate updated protobuf bindings for EOS GRPC * Enh cs3org/reva#1887:
  Add "a" and "l" filter for grappa queries * Enh cs3org/reva#1919: Run gofmt before building *
  Enh cs3org/reva#1927: Implement RollbackToVersion for eosgrpc (needs a newer EOS MGM) * Enh
  cs3org/reva#1944: Implement listing supported mime types in app registry * Enh
  cs3org/reva#1870: Be defensive about wrongly quoted etags * Enh cs3org/reva#1940: Reduce
  memory usage when uploading with S3ng storage * Enh cs3org/reva#1888: Refactoring of the
  webdav code * Enh cs3org/reva#1900: Check for illegal names while uploading or moving files *
  Enh cs3org/reva#1925: Refactor listing and statting across providers for virtual views * Fix
  cs3org/reva#1883: Pass directories with trailing slashes to eosclient.GenerateToken * Fix
  cs3org/reva#1878: Improve the webdav error handling in the trashbin * Fix cs3org/reva#1884:
  Do not send body on failed range request * Enh cs3org/reva#1744: Add support for lightweight
  user types * Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the
  datagateway * Fix cs3org/reva#1899: Bugfix: Fix chunked uploads for new versions * Enh
  cs3org/reva#1888: Refactoring of the webdav code * Enh cs3org/reva#1887: Add "a" and "l"
  filter for grappa queries

https://github.com/owncloud/ocis/pull/2355
https://github.com/owncloud/ocis/pull/2295
https://github.com/owncloud/ocis/pull/2314

Enhancement - Use only one go.mod file for project dependencies: #2344

We now use one single go.mod file at the root of the repository rather than one per core
extension.

https://github.com/owncloud/ocis/pull/2344

Bugfix - Improve IDP Login Accessibility: #5376

We have addressed the feedback from the a11y audit and improved the IDP login screen
accordingly.

https://github.com/owncloud/web/issues/5376
https://github.com/owncloud/web/issues/5377

Bugfix - Forward basic auth to OpenID connect token authentication endpoint: #2095

When using PROXY_ENABLE_BASIC_AUTH=true we now forward request to the idp instead of
trying to authenticate the request ourself.

https://github.com/owncloud/ocis/issues/2095
https://github.com/owncloud/ocis/issues/2094

Bugfix - Log all requests in the proxy access log: #2301

We now use a dedicated middleware to log all requests, regardless of routing selector outcome.
While the log now includes the remote address, the selected routing policy is only logged when
log level is set to debug because the request context cannot be changed in the
directorSelectionDirector, as per the ReverseProxy.Director documentation.

https://github.com/owncloud/ocis/pull/2301

Bugfix - Update glauth to 20210729125545-b9aecdfcac31: #2336

• Fixes the backend config not being passed correctly in ocis
• Fixes a mutex being copied, leading to concurrent writes
• Fixes UTF8 chars in filters
• Fixes case insensitive strings

https://github.com/owncloud/ocis/pull/2336
https://github.com/glauth/glauth/pull/198
https://github.com/glauth/glauth/pull/194

Change - Update ownCloud Web to v4.0.0: #2353

Tags: web

We updated ownCloud Web to v4.0.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2353
https://github.com/owncloud/web/releases/tag/v4.0.0

Enhancement - Proxy: Add claims policy selector: #2248

Using the proxy config file, it is now possible to let let the IdP determine the routing policy by
sending an ocis.routing.policy claim. Its value will be used to determine the set of routes
for the logged in user.

https://github.com/owncloud/ocis/pull/2248

Enhancement - Add ocs cache warmup config and warn on protobuf ns conflicts: #2328

https://github.com/owncloud/ocis/pull/2328

Enhancement - Refactor graph API: #2277

We refactored the /graph/v1.0/ endpoint which now relies on the internal acces token fer
authentication, getting rid of any LDAP or OIDC code to authenticate requests. This allows
using the graph api when using basic auth or any other auth mechanism provided by the CS3 auth
providers / reva gateway / ocis proxy.

https://github.com/owncloud/ocis/pull/2277

Enhancement - Update REVA: #2355

Update REVA from v1.10.1-0.20210730095301-fcb7a30a44a6 to v1.11.0 * Fix
cs3org/reva#1899: Fix chunked uploads for new versions * Fix cs3org/reva#1906: Fix copy over
existing resource * Fix cs3org/reva#1891: Delete Shared Resources as Receiver * Fix
cs3org/reva#1907: Error when creating folder with existing name * Fix cs3org/reva#1937: Do
not overwrite more specific matches when finding storage providers * Fix cs3org/reva#1939:
Fix the share jail permissions in the decomposedfs * Fix cs3org/reva#1932: Numerous fixes to
the owncloudsql storage driver * Fix cs3org/reva#1912: Fix response when listing versions of
another user * Fix cs3org/reva#1910: Get user groups recursively in the cbox rest user driver *
Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the datagateway * Fix
cs3org/reva#1911: Fix version order in propfind responses * Fix cs3org/reva#1926: Trash Bin
in oCIS Storage Operations * Fix cs3org/reva#1901: Fix response code when folder doesnt exist
on upload * Enh cs3org/reva#1785: Extend app registry with AddProvider method and mimetype
filters * Enh cs3org/reva#1938: Add methods to get and put context values * Enh
cs3org/reva#1798: Add support for a deny-all permission on references * Enh
cs3org/reva#1916: Generate updated protobuf bindings for EOS GRPC * Enh cs3org/reva#1887:
Add "a" and "l" filter for grappa queries * Enh cs3org/reva#1919: Run gofmt before building *
Enh cs3org/reva#1927: Implement RollbackToVersion for eosgrpc (needs a newer EOS MGM) * Enh
cs3org/reva#1944: Implement listing supported mime types in app registry * Enh
cs3org/reva#1870: Be defensive about wrongly quoted etags * Enh cs3org/reva#1940: Reduce
memory usage when uploading with S3ng storage * Enh cs3org/reva#1888: Refactoring of the
webdav code * Enh cs3org/reva#1900: Check for illegal names while uploading or moving files *
Enh cs3org/reva#1925: Refactor listing and statting across providers for virtual views * Fix
cs3org/reva#1883: Pass directories with trailing slashes to eosclient.GenerateToken * Fix
cs3org/reva#1878: Improve the webdav error handling in the trashbin * Fix cs3org/reva#1884:
Do not send body on failed range request * Enh cs3org/reva#1744: Add support for lightweight
user types * Fix cs3org/reva#1904: Set Content-Length to 0 when swallowing body in the
datagateway * Fix cs3org/reva#1899: Bugfix: Fix chunked uploads for new versions * Enh
cs3org/reva#1888: Refactoring of the webdav code * Enh cs3org/reva#1887: Add "a" and "l"
filter for grappa queries

https://github.com/owncloud/ocis/pull/2355
https://github.com/owncloud/ocis/pull/2295
https://github.com/owncloud/ocis/pull/2314

Enhancement - Use only one go.mod file for project dependencies: #2344

We now use one single go.mod file at the root of the repository rather than one per core
extension.

https://github.com/owncloud/ocis/pull/2344

Bugfix - Panic when service fails to start: #2252

Tags: runtime

When attempting to run a service through the runtime that is currently running and fails to
start, a race condition still redirect os Interrupt signals to a closed channel.

https://github.com/owncloud/ocis/pull/2252

Bugfix - Dont use port 80 as debug for GroupsProvider: #2271

A copy/paste error where the configuration for the groupsprovider's debug address was not
present leaves go-micro to start the debug service in port 80 by default.

https://github.com/owncloud/ocis/pull/2271

Change - Update ownCloud Web to v3.4.0: #2276

Tags: web

We updated ownCloud Web to v3.4.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2276
https://github.com/owncloud/web/releases/tag/v3.4.0

Change - Update WEB to v3.4.1: #2283

• Fix 5501: loading previews in the right sidebar
• Fix 5493: view options position

https://github.com/owncloud/ocis/pull/2283
https://github.com/owncloud/web/releases/tag/v3.4.1

Enhancement - Runtime support for cherry picking extensions: #2229

Support for running certain extensions supervised via cli flags. Example usage:

> ocis server --extensions="proxy, idp, storage-metadata, accounts"

https://github.com/owncloud/ocis/pull/2229

Enhancement - Add readonly mode for storagehome and storageusers: #2230

To enable the readonly mode use STORAGE_HOME_READ_ONLY=true and
STORAGE_USERS_READ_ONLY=true. Alternative: use OCIS_STORAGE_READ_ONLY=true

https://github.com/owncloud/ocis/pull/2230

Enhancement - Remove unnecessary Service.Init(): #1705

As it turns out oCIS already calls this method. Invoking it twice would end in accidentally
resetting values.

https://github.com/owncloud/ocis/pull/1705

Enhancement - Update REVA to v1.9.1-0.20210628143859-9d29c36c0c3f: #2227

https://github.com/owncloud/ocis/pull/2227

Enhancement - Update REVA to v1.9.1: #2280

• Fix cs3org/reva#1843: Correct Dockerfile path for the reva CLI and alpine3.13 as builder
• Fix cs3org/reva#1835: Cleanup owncloudsql driver
• Fix cs3org/reva#1868: Minor fixes to the grpc/http plugin: checksum, url escaping
• Fix cs3org/reva#1885: Fix template in eoshomewrapper to use context user rather than resource
• Fix cs3org/reva#1833: Properly handle name collisions for deletes in the owncloud driver
• Fix cs3org/reva#1874: Use the original file mtime during upload
• Fix cs3org/reva#1854: Add the uid/gid to the url for eos
• Fix cs3org/reva#1848: Fill in missing gid/uid number with nobody
• Fix cs3org/reva#1831: Make the ocm-provider endpoint in the ocmd service unprotected
• Fix cs3org/reva#1808: Use empty array in OCS Notifications endpoints
• Fix cs3org/reva#1825: Raise max grpc message size
• Fix cs3org/reva#1828: Send a proper XML header with error messages
• Chg cs3org/reva#1828: Remove the oidc provider in order to upgrad mattn/go-sqlite3 to v1.14.7
• Enh cs3org/reva#1834: Add API key to Mentix GOCDB connector
• Enh cs3org/reva#1855: Minor optimization in parsing EOS ACLs
• Enh cs3org/reva#1873: Update the EOS image tag to be for revad-eos image
• Enh cs3org/reva#1802: Introduce list spaces
• Enh cs3org/reva#1849: Add readonly interceptor
• Enh cs3org/reva#1875: Simplify resource comparison
• Enh cs3org/reva#1827: Support trashbin sub paths in the recycle API

https://github.com/owncloud/ocis/pull/2280

Bugfix - Panic when service fails to start: #2252

Tags: runtime

When attempting to run a service through the runtime that is currently running and fails to
start, a race condition still redirect os Interrupt signals to a closed channel.

https://github.com/owncloud/ocis/pull/2252

Bugfix - Dont use port 80 as debug for GroupsProvider: #2271

A copy/paste error where the configuration for the groupsprovider's debug address was not
present leaves go-micro to start the debug service in port 80 by default.

https://github.com/owncloud/ocis/pull/2271

Change - Update ownCloud Web to v3.4.0: #2276

Tags: web

We updated ownCloud Web to v3.4.0. Please refer to the changelog (linked) for details on the web
release.

https://github.com/owncloud/ocis/pull/2276
https://github.com/owncloud/web/releases/tag/v3.4.0

Change - Update WEB to v3.4.1: #2283

• Fix 5501: loading previews in the right sidebar
• Fix 5493: view options position

https://github.com/owncloud/ocis/pull/2283
https://github.com/owncloud/web/releases/tag/v3.4.1

Enhancement - Runtime support for cherry picking extensions: #2229

Support for running certain extensions supervised via cli flags. Example usage:

> ocis server --extensions="proxy, idp, storage-metadata, accounts"

https://github.com/owncloud/ocis/pull/2229

Enhancement - Add readonly mode for storagehome and storageusers: #2230

To enable the readonly mode use STORAGE_HOME_READ_ONLY=true and
STORAGE_USERS_READ_ONLY=true. Alternative: use OCIS_STORAGE_READ_ONLY=true

https://github.com/owncloud/ocis/pull/2230

Enhancement - Remove unnecessary Service.Init(): #1705

As it turns out oCIS already calls this method. Invoking it twice would end in accidentally
resetting values.

https://github.com/owncloud/ocis/pull/1705

Enhancement - Update REVA to v1.9.1-0.20210628143859-9d29c36c0c3f: #2227

https://github.com/owncloud/ocis/pull/2227

Enhancement - Update REVA to v1.9.1: #2280

• Fix cs3org/reva#1843: Correct Dockerfile path for the reva CLI and alpine3.13 as builder
• Fix cs3org/reva#1835: Cleanup owncloudsql driver
• Fix cs3org/reva#1868: Minor fixes to the grpc/http plugin: checksum, url escaping
• Fix cs3org/reva#1885: Fix template in eoshomewrapper to use context user rather than resource
• Fix cs3org/reva#1833: Properly handle name collisions for deletes in the owncloud driver
• Fix cs3org/reva#1874: Use the original file mtime during upload
• Fix cs3org/reva#1854: Add the uid/gid to the url for eos
• Fix cs3org/reva#1848: Fill in missing gid/uid number with nobody
• Fix cs3org/reva#1831: Make the ocm-provider endpoint in the ocmd service unprotected
• Fix cs3org/reva#1808: Use empty array in OCS Notifications endpoints
• Fix cs3org/reva#1825: Raise max grpc message size
• Fix cs3org/reva#1828: Send a proper XML header with error messages
• Chg cs3org/reva#1828: Remove the oidc provider in order to upgrad mattn/go-sqlite3 to v1.14.7
• Enh cs3org/reva#1834: Add API key to Mentix GOCDB connector
• Enh cs3org/reva#1855: Minor optimization in parsing EOS ACLs
• Enh cs3org/reva#1873: Update the EOS image tag to be for revad-eos image
• Enh cs3org/reva#1802: Introduce list spaces
• Enh cs3org/reva#1849: Add readonly interceptor
• Enh cs3org/reva#1875: Simplify resource comparison
• Enh cs3org/reva#1827: Support trashbin sub paths in the recycle API

https://github.com/owncloud/ocis/pull/2280