clam

• Fixed a regression (might have been introduced in v3.2.6) that caused file parameter selection not to fully slow.
• Upgraded jquery to 3.7.1

Minor update:

• clamnewproject: fix generated Dockerfile for Alpine 3.19
• clamnewproject: allow using DATADIR in environment variable
• documentation: improved/clarified installation instructions

Minor update, fixes forwarded authentication test

Note: When using forwarded authentication, do not use the REMOTE_USER header, the underlying flask or werkzeug library filters it.

[Maarten van Gompel]

• archive fix: download of tar.gz had wrong mimetype and was uncompressed by the browser again
• minor fixes/cleanup

[Sheaan Spoel]

• Update index when project is started/reset

• upgraded jquery, addresses CVE-2020-11022
• clamclient: use basic auth by default, added -D option for digest.
• info page: list all possible authentication methods in curl calls (as already advertised)

Software metadata update only, no functional changes

Minor bugfix release:

• Fixed JSON-LD output of info page

• Fixes two remaining leaks of the oauth2 access token, users using OAuth2 are urged to upgrade.

• Unset oauth_access_token cookie when token is invalid/expired
• Fix Www-authenticate header response for OAuth2

• making HTTP Basic Authentication the default over HTTP Digest Authentication (people need to use SSL anyway so Digest has no added value)
• allow explicitly requesting fallback (basic) authentication, also from interface
• info page: updated with more accurate information on authentication methods (and curl/python examples)
• added interface customisation options to config template

Users using OAuth2 or OpenID Connect are urged to upgrade to this release because of security improvements:

• Removed OAuth2 tokens from query parameters #109 , now using cookies instead
• Generate Dockerfile with clamnewproject #104
• Allow JSON-LD content request for service metadata, using schema.org vocabulary #110
• Allow using OAuth2 and HTTP Basic at the same time
• Implemented USERS_FILE directive to load user credentials from a simple tsv file
• Made wrapper shell script template POSIX-compliant
• Revised documentation regarding installation and deployment, favouring containerised setups (e.g. Docker) in production scenarios.

Fixed regression in oauth2 authentication introduced in v3.1.6

Bugfix release: status log has to be utf-8 encoded

Bugfix release: redirect (401) when oauth tokens expire or other unexpected errors occurs

Minor bugfix release, metadata update (no functional changes)

Bugfix release:

• Fixed project creation when using OAuth2 authentication
• Fixed/disabled automatic redirects in flask/werkzeug that were having unwanted side-effects
• Fix for parsing json environment variables in external configuration
• Increased debug output in OAuth2 login process

Minor bugfix release: fixes environment variables to JSON mapping in external configuration files

Implemented some type casts for handling environment variables in config files:

• Now supports constructions like: {{VAR|int}} {{VAR|bool}}
• Fixed a small regression issue in the test suite (#107)

• Implemented more extensive support for handling environment variables in config files,
  • Now supports required variables: {{VAR!}} and defaults {{VAR=defaultvalue}}

• Implemented the ability to share output publicly over a one-time download link to overcome authentication barriers #95
  • Implemented support for temporary unauthenticated storage (enabled by default) in the Forwarder
  • Defer building of downloadable archives to when temporary storage is accessed
  • Implemented a share option in the interface, using a new ShareView. Implemented the ability to share more persistently.
  • fixes for return mime types on error responses for the storage endpoint
  • Implemented a downloadstorage() method in the client library
• Forwarders now automatically urlencode the backlink #86
  • Resolve more variables in Forwarder urls and updated documentation accordingly #86
• Implemented OpenID Connect support (#93). Various fixes and improvements for OAuth2 authentication:
  • added OAUTH_CLIENT_URL configuration directive
  • Implemented OAUTH_USERINFO_URL parameter and implemented more general behaviour for getting usernames (email) that should work with OpenID Connect #93
• Augmented the interface so things don't get cluttered when there are many viewers for a file #102
• Do not serialise empty/unfilled input parameters in CLAM metadata #103
• Added utility functions isncname and makencname to check if a string is a valid XML NCName and to make it so if not. Duplicated from the folia library but included here so we don't need an external dependency.
• Implemented an allowdefault option on viewers, can be used to state that you don't want a feature to be used as default viewer.
• ensure textstats example also works without external configuration file (it is used as a simple demo case)
• Implemented ability to read original host from X-Forwarded-Host (#105)
• Updated dependencies to the latest versions, deprecated Python 3.5 support (use 3.6 or higher)