Releases: owncloud/ocis
7.0.0
Table of Contents
Changes in 7.0.0
Summary
- Bugfix - Generate short tokens to be used as access tokens for WOPI: #10391
- Bugfix - Fix put relative wopi operation for microsoft: #10403
- Bugfix - Make SSE keepalive interval configurable: #10411
- Bugfix - Removed 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' setting: #10425
- Bugfix - Micro registry cache fixes: #10429
- Bugfix - Fix the memlimit loglevel: #10433
- Bugfix - Log GRPC requests in debug mode: #10438
- Bugfix - Restart Postprocessing properly: #10439
- Bugfix - Allow to configure data server URL for ocm: #10440
- Bugfix - Respect proxy url when validating proofkeys: #10462
- Bugfix - Return wopi lock header in get lock response: #10470
- Bugfix - 'ocis backup consistency' fixed for file revisions: #10493
- Bugfix - Wait for services to be ready before registering them: #10498
- Bugfix - Fix 0-byte file uploads: #10500
- Bugfix - Fixed
sharedWithMe
response for OCM shares: #10501 - Bugfix - Fix gateway nats checks: #10502
- Bugfix - Fix idp guest role default assignment: #10511
- Bugfix - Remove mbreaker: #10524
- Bugfix - Fix impersonated request user mismatch: #10548
- Bugfix - Fix federated sharing when using an external IDP: #10567
- Bugfix - Fix node cache ttl updates: #10575
- Bugfix - We now limit the number of workers of the jsoncs3 share manager: #10578
- Bugfix - Set MaxConcurrency to 1: #10580
- Bugfix - Reuse go-micro service clients: #10582
- Bugfix - Make collaboration service use a gateway selector: #10584
- Bugfix - Return an error if we can't get the keys and ensure they're cached: #10590
- Bugfix - Fix status code for thumbnail requests: #10592
- Bugfix - Fix the activity field mapping: #10593
- Bugfix - Fix deny access for graph roles: #10627
- Bugfix - Fix link activity message: #10663
- Bugfix - Fix possible race condition when a thumbnails is stored in the FS: #10693
- Bugfix - Skip fetching members: #10701
- Bugfix - Fix FileInfo BreadcrumbFolderURL: #10718
- Bugfix - Fix graph drives response for federated shares: #10730
- Bugfix - GetLastModified property in the REPORT response will use RFC1123 format: #10738
- Bugfix - Unifi logging: #10743
- Bugfix - Fix FileInfo BreadcrumbFolderURL upd: #10757
- Bugfix - Bump Reva: #10766
- Enhancement - Create thumbnails for GGP MIME types: #10304
- Enhancement - Include a product name in the collaboration service: #10335
- Enhancement - Add web extensions to the ocis_full example: #10399
- Enhancement - Remove deprecated CLI commands: #10432
- Enhancement - Bump cs3api: #10449
- Enhancement - Bump reva to latest: #10472
- Enhancement - Concurrent userlog processing: #10504
- Enhancement - Concurrent autoaccept for shares: #10507
- Enhancement - Fetch shared resource metadata concurrently in graph: #10683
- Enhancement - Update web to v11.0.6: #10755
Details
-
Bugfix - Generate short tokens to be used as access tokens for WOPI: #10391
Currently, the access tokens being used might be too long. In particular,
Microsoft Office Online complains about the URL (which contains the access
token) is too long and refuses to work. -
Bugfix - Fix put relative wopi operation for microsoft: #10403
We fixed a bug in the put relative wopi operation for microsoft. The response
now contains the correct properties. -
Bugfix - Make SSE keepalive interval configurable: #10411
To prevent intermediate proxies from closing the SSE connection admins can now
configure aSSE_KEEPALIVE_INTERVAL
. -
Bugfix - Removed 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' setting: #10425
The config option 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' was
removed from the OCM service. The additional security provided by this setting
is somewhat questionable and only provided in very specific setups.We are not going through the normal deprecation process for this setting, as it
was never really working anyway. If you have this setting in your configuration,
it will be ignored. You can safely remove it. -
Bugfix - Micro registry cache fixes: #10429
We now invalidate cache entries when any of the nodes was not updated.
-
Bugfix - Fix the memlimit loglevel: #10433
We set the memlimit default loglevel to error.
-
Bugfix - Log GRPC requests in debug mode: #10438
When log level is set to debug we will now also log grpc requests.
-
Bugfix - Restart Postprocessing properly: #10439
Properly differentiate between resume and restart postprocessing.
-
Bugfix - Allow to configure data server URL for ocm: #10440
We introduced the
OCM_OCM_STORAGE_DATA_SERVER_URL
setting to fix a bug when
downloading files from an OCM share. Before the data server URL defaulted to the
listen address of the OCM server, which did not work when using 0.0.0.0 as the
listen address. -
Bugfix - Respect proxy url when validating proofkeys: #10462
We fixed a bug where the proxied wopi URL was not used when validating
proofkeys. This caused the validation to fail when the proxy was used. -
Bugfix - Return wopi lock header in get lock response: #10470
We fixed a bug where the wopi lock header was not returned in the get lock
response. This is now fixed and the wopi validator tests are passing. -
Bugfix - 'ocis backup consistency' fixed for file revisions: #10493
A bug was fixed that caused the 'ocis backup consistency' command to incorrectly
report inconistencies when file revisions with a zero value for the nano-second
part of the timestamp were present. -
Bugfix - Wait for services to be ready before registering them: #10498
-
Bugfix - Fix 0-byte file uploads: #10500
We fixed an issue where 0-byte files upload did not return the Location header.
-
Bugfix - Fixed
sharedWithMe
response for OCM shares: #10501OCM shares returned in the
sharedWithMe
response did not have themimeType
property populated correctly. -
Bugfix - Fix gateway nats chec...
7.0.0-rc.5
Table of Contents
Changes in 7.0.0-rc.5
Summary
- Bugfix - Fix link activity message: #10663
- Bugfix - Fix graph drives response for federated shares: #10730
- Bugfix - GetLastModified property in the REPORT response will use RFC1123 format: #10738
- Bugfix - Unifi logging: #10743
- Bugfix - Fix FileInfo BreadcrumbFolderURL upd: #10757
- Bugfix - Bump Reva: #10766
- Enhancement - Update web to v11.0.6: #10755
Details
-
Bugfix - Fix link activity message: #10663
We changed the link token to display name in the activity message.
-
Bugfix - Fix graph drives response for federated shares: #10730
Federated shares where erroneously showing up in the /me/drives response on the
graph API. -
Bugfix - GetLastModified property in the REPORT response will use RFC1123 format: #10738
This will follow the standard and will also match the format of the same
property in the PROPFIND response -
Bugfix - Unifi logging: #10743
We fixed some cases where we did not use the correct logger.
-
Bugfix - Fix FileInfo BreadcrumbFolderURL upd: #10757
Made GetScopeByKeyPrefix function as a private method of the FileConnector
-
Bugfix - Bump Reva: #10766
Bumps reva version to 2.27.0
- Bugfix cs3org/reva#4985: Drop unneeded session locks
- Bugfix cs3org/reva#5000: Fix ceph build
- Bugfix cs3org/reva#4989: Deleting OCM share also updates storageprovider
- Enhancement cs3org/reva#4998: Emit event when an ocm share is received
- Enhancement cs3org/reva#4996: Get rid of some cases of unstructured logging
-
Enhancement - Update web to v11.0.6: #10755
Tags: web
We updated ownCloud Web to v11.0.6. Please refer to the changelog (linked) for
details on the web release.- Bugfix owncloud/web#11992: OCM
invite flow - Bugfix
owncloud/web#11997: Change search
scope without search term - Bugfix
owncloud/web#11998: Do not load
version when sidebar is closed - Bugfix
owncloud/web#12000: Use only space
resource with driveType "project" as space in sidebar - Bugfix
owncloud/web#12002: OCM share
editing - Bugfix
owncloud/web#12002: OCM share
recipient issuer - Bugfix
owncloud/web#12008: Missing
activities on Shared with me page - Bugfix
owncloud/web#12010: Sidebar file
info for shares - Bugfix
owncloud/web#12012: Show missing
role name in link share panel - Bugfix
owncloud/web#12013: Missing
translations for share type filters - Bugfix
owncloud/web#12022: Permanent link
for shares
- Bugfix owncloud/web#11992: OCM
7.0.0-rc.4
Table of Contents
Changes in 7.0.0-rc.4
Summary
- Bugfix - Fix deny access for graph roles: #10627
- Bugfix - Fix possible race condition when a thumbnails is stored in the FS: #10693
- Bugfix - Skip fetching members: #10701
- Bugfix - Fix FileInfo BreadcrumbFolderURL: #10718
- Bugfix - Bump Reva: #10735
- Enhancement - Fetch shared resource metadata concurrently in graph: #10683
Details
-
Bugfix - Fix deny access for graph roles: #10627
We added a unified role "Cannot access" to prevent a regression when switching
the share implementation to the graph API. This role is now used to deny access
to a resource.The new role is not enabled by default. The whole deny feature is
still experimental. -
Bugfix - Fix possible race condition when a thumbnails is stored in the FS: #10693
A race condition could cause the thumbnail service to return a thumbnail with 0
bytes or with partial content. In order to fix this, the service will create a
temporary file with the contents and then rename that file to its final
location. -
Bugfix - Skip fetching members: #10701
We now skip fetching group members when they are not needed.
-
Bugfix - Fix FileInfo BreadcrumbFolderURL: #10718
We fixed the FileInfo.BreadcrumbFolderURL in a collaboration api"
-
Bugfix - Bump Reva: #10735
Bumps reva version to 2.26.8
- Fix cs3org/reva#4983: Delete stale shares in the jsoncs3 share manager
- Fix cs3org/reva#4963: Fix name and displayName in an ocm
- Fix cs3org/reva#4968: Jsoncs3 cache fixes
- Fix cs3org/reva#4928: Propagate lock in PROPPATCH
- Fix cs3org/reva#4971: Use manager to list shares
- Fix cs3org/reva#4978: We added more trace spans in decomposedfs
- Fix cs3org/reva#4921: Polish propagation related code
-
Enhancement - Fetch shared resource metadata concurrently in graph: #10683
We now concurrently stat shared resources when listing shares
7.0.0-rc.3
Table of Contents
Changes in 7.0.0-rc.3
Summary
- Bugfix - Log GRPC requests in debug mode: #10438
- Bugfix - Fix impersonated request user mismatch: #10548
- Bugfix - Fix federated sharing when using an external IDP: #10567
- Bugfix - Fix node cache ttl updates: #10575
- Bugfix - We now limit the number of workers of the jsoncs3 share manager: #10578
- Bugfix - Set MaxConcurrency to 1: #10580
- Bugfix - Reuse go-micro service clients: #10582
- Bugfix - Make collaboration service use a gateway selector: #10584
- Bugfix - Return an error if we can't get the keys and ensure they're cached: #10590
- Bugfix - Fix status code for thumbnail requests: #10592
- Bugfix - Fix the activity field mapping: #10593
- Bugfix - Bump Reva to v2.26.7: #10612
- Enhancement - Update web to v11.0.4: #10569
Details
-
Bugfix - Log GRPC requests in debug mode: #10438
When log level is set to debug we will now also log grpc requests.
-
Bugfix - Fix impersonated request user mismatch: #10548
We fixed a user id and name mismatch in the impersonated auth-app API request
-
Bugfix - Fix federated sharing when using an external IDP: #10567
We fixed a bug that caused federated sharing to fail, when the federated oCIS
instances where sharing the same external IDP. -
Bugfix - Fix node cache ttl updates: #10575
We now only udpate the TTL of the node that is created or updated.
-
Bugfix - We now limit the number of workers of the jsoncs3 share manager: #10578
We now restrict the number of workers that look up shares to 5. The number can
be changed withSHARING_USER_JSONCS3_MAX_CONCURRENCY
or
OCIS_MAX_CONCURRENCY
. -
Bugfix - Set MaxConcurrency to 1: #10580
Set MaxConcurrency for frontend and userlog and sharing services to 1. Too many
workers will negatively impact performance on small machines. -
Bugfix - Reuse go-micro service clients: #10582
Go micro clients must not be reinitialized. The internal selector will spawn a
new go routine to watch for registry changes. -
Bugfix - Make collaboration service use a gateway selector: #10584
-
Bugfix - Return an error if we can't get the keys and ensure they're cached: #10590
Previously, there was an issue where we could get an error while getting the
public keys from the /hosting/discovery endpoint but we're returning a wrong
success value instead. This is fixed now and we're returning the error.In addition, the public keys weren't being cached, so we hit the
/hosting/discovery endpoint every time we need to use the public keys. The keys
are now cached so we don't need to hit the endpoint more than what we need. -
Bugfix - Fix status code for thumbnail requests: #10592
We fixed the status code returned by the thumbnails service when the image
source for a thumbnail exceeds the configured maximum dimensions or file size.
The service now returns a 403 Forbidden status code instead of a 500 Internal
Server Error status code. -
Bugfix - Fix the activity field mapping: #10593
-
Bugfix - Bump Reva to v2.26.7: #10612
- Fix cs3org/reva#4964: Fix a wrong error code when approvider creates a new file
Bump Reva to v2.26.6
- Fix cs3org/reva#4955: Allow small clock skew in reva token validation
- Fix cs3org/reva#4929: Fix flaky posixfs integration tests
- Fix cs3org/reva#4953: Avoid gateway panics
- Fix cs3org/reva#4959: Fix missing file touched event
- Fix cs3org/reva#4933: Fix federated sharing when using an external identity provider
- Fix cs3org/reva#4935: Enable datatx log
- Fix cs3org/reva#4936: Do not delete mlock files
- Fix cs3org/reva#4954: Prevent a panic when logging an error
- Fix cs3org/reva#4956: Improve posixfs error handling and logging
- Fix cs3org/reva#4951: Pass the initialized logger down the stack
-
Enhancement - Update web to v11.0.4: #10569
Tags: web
We updated ownCloud Web to v11.0.4. Please refer to the changelog (linked) for
details on the web release.- Bugfix owncloud/web#11870:
Preview image retries postprocessing - Bugfix
owncloud/web#11883: Preview app
Shared with me page - Bugfix
owncloud/web#11897: "Save as" /
"Open" when embed delegate authentication is enabled - Bugfix
owncloud/web#11900: App top bar
does not show location when shared file is opened - Bugfix
owncloud/web#11900: Open from
app and Save As feature broken when opened via shared file - Bugfix
owncloud/web#11904: Public
folder reload - Bugfix
owncloud/web#11916: Fix order in
roles drop down - Bugfix
owncloud/web#11923: Allow create
template with different editors - Bugfix
owncloud/web#11924: Extension
actions in right sidebar - Bugfix
owncloud/web#11929: Unique
request ids
#10569
#10604
https://github.com/owncloud/web/releases/tag/v11.0.3
https://github.com/owncloud/web/releases/tag/v11.0.4 - Bugfix owncloud/web#11870:
5.0.9
Table of Contents
Changes in 5.0.9
Summary
- Bugfix - Thumbnail request limit: #10280
- Bugfix - Restart Postprocessing properly: #10439
- Change - Define maximum input image dimensions and size when generating previews: #10270
Details
-
Bugfix - Thumbnail request limit: #10280
The
THUMBNAILS_MAX_CONCURRENT_REQUESTS
setting was not working correctly.
Previously it was just limiting the number of concurrent thumbnail downloads.
Now the limit is applied to the number thumbnail generations requests.
Additionally the webdav service is now returning a "Retry-After" header when it
is hitting the ratelimit of the thumbnail service. -
Bugfix - Restart Postprocessing properly: #10439
Properly differentiate between resume and restart postprocessing.
-
Change - Define maximum input image dimensions and size when generating previews: #10270
This is a general hardening change to limit processing time and resources of the
thumbnailer.
7.0.0-rc.2
Table of Contents
7.0.0-rc.1
Table of Contents
Changes in 7.0.0-rc.1
Summary
- Bugfix - Removed 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' setting: #104
- Bugfix - Respect proxy url when validating proofkeys: #1234
- Bugfix - Generate short tokens to be used as access tokens for WOPI: #10391
- Bugfix - Fix put relative wopi operation for microsoft: #10403
- Bugfix - Make SSE keepalive interval configurable: #10411
- Bugfix - Micro registry cache fixes: #10429
- Bugfix - Fix the memlimit loglevel: #10431
- Bugfix - Restart Postprocessing properly: #10439
- Bugfix - Allow to configure data server URL for ocm: #10440
- Bugfix - Return wopi lock header in get lock response: #10469
- Bugfix - 'ocis backup consistency' fixed for file revisions: #10493
- Bugfix - Wait for services to be ready before registering them: #10498
- Bugfix - Fix 0-byte file uploads: #10500
- Bugfix - Fixed
sharedWithMe
response for OCM shares: #10501 - Bugfix - Fix gateway nats checks: #10502
- Enhancement - Create thumbnails for GGP MIME types: #10303
- Enhancement - Include a product name in the collaboration service: #10335
- Enhancement - Add web extensions to the ocis_full example: #10399
- Enhancement - Bump reva to 2.26.4: #10419
- Enhancement - Remove deprecated CLI commands: #10430
- Enhancement - Bump cs3api: #10448
- Enhancement - Update web to v11.0.2: #10467
- Enhancement - Bump reva to latest: #10472
- Enhancement - Concurrent userlog processing: #10504
- Enhancement - Concurrent autoaccept for shares: #10505
Details
-
Bugfix - Removed 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' setting: #104
The config option 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' was
removed from the OCM service. The additional security provided by this setting
is somewhat questionable and only provided in very specific setups.We are not going through the normal deprecation process for this setting, as it
was never really working anyway. If you have this setting in your configuration,
it will be ignored. You can safely remove it. -
Bugfix - Respect proxy url when validating proofkeys: #1234
We fixed a bug where the proxied wopi URL was not used when validating
proofkeys. This caused the validation to fail when the proxy was used. -
Bugfix - Generate short tokens to be used as access tokens for WOPI: #10391
Currently, the access tokens being used might be too long. In particular,
Microsoft Office Online complains about the URL (which contains the access
token) is too long and refuses to work. -
Bugfix - Fix put relative wopi operation for microsoft: #10403
We fixed a bug in the put relative wopi operation for microsoft. The response
now contains the correct properties. -
Bugfix - Make SSE keepalive interval configurable: #10411
To prevent intermediate proxies from closing the SSE connection admins can now
configure aSSE_KEEPALIVE_INTERVAL
. -
Bugfix - Micro registry cache fixes: #10429
We now invalidate cache entries when any of the nodes was not updated.
-
Bugfix - Fix the memlimit loglevel: #10431
We set the memlimit default loglevel to error.
-
Bugfix - Restart Postprocessing properly: #10439
Properly differentiate between resume and restart postprocessing.
-
Bugfix - Allow to configure data server URL for ocm: #10440
We introduced the
OCM_OCM_STORAGE_DATA_SERVER_URL
setting to fix a bug when
downloading files from an OCM share. Before the data server URL defaulted to the
listen address of the OCM server, which did not work when using 0.0.0.0 as the
listen address. -
Bugfix - Return wopi lock header in get lock response: #10469
We fixed a bug where the wopi lock header was not returned in the get lock
response. This is now fixed and the wopi validator tests are passing. -
Bugfix - 'ocis backup consistency' fixed for file revisions: #10493
A bug was fixed that caused the 'ocis backup consistency' command to incorrectly
report inconistencies when file revisions with a zero value for the nano-second
part of the timestamp were present. -
Bugfix - Wait for services to be ready before registering them: #10498
-
Bugfix - Fix 0-byte file uploads: #10500
We fixed an issue where 0-byte files upload did not return the Location header.
-
Bugfix - Fixed
sharedWithMe
response for OCM shares: #10501OCM shares returned in the
sharedWithMe
response did not have themimeType
property populated correctly. -
Bugfix - Fix gateway nats checks: #10502
We now only check if nats is available when the gateway actually uses it.
Furthermore, we added a backoff for checking the readys endpoint. -
Enhancement - Create thumbnails for GGP MIME types: #10303
Creates thumbnails for newly added ggp files
-
Enhancement - Include a product name in the collaboration service: #10335
The product name will allow using a different app name. For example, a "CoolBox"
app name might use a branded Collabora instance by using "Collabora" as product
name. -
Enhancement - Add web extensions to the ocis_full example: #10399
We added some of the web extensions from ownCloud to the ocis_full docker
compose example.- importer - draw-io - external-sites - json-viewer - unzip - progressbars
These can be enabled in the .env file one by one.
Read more about ocis extensions in
https://github.com/owncloud/web-extensions/blob/main/README.md -
Enhancement - Bump reva to 2.26.4: #10419
- Bugfix cs3org/reva#4917: Fix 0-byte file uploads
- Bugfix cs3org/reva#4918: Fix app templates
Bump reva to 2.26.3
- Bugfix cs3org/reva#4908: Add checksum to OCM storageprovider responses
- Enhancement cs3org/reva#4910: Bump cs3api
- Enhancement cs3org/reva#4909: Bump cs3api
- Enhancement cs3org/reva#4906: Bump cs3api
Bump reva to 2.26.2
- Enhancement cs3org/reva#4897: Fix remaining quota calculation
- Bugfix cs3org/reva#4902: Fix quota calculation
-
Enhancement - Remove deprecated CLI commands: #10430
We removed the following deprecated CLI commands:
ocis storage-users uploads list
ocis storage-users uploads clean
#10428
...
6.6.1
Table of Contents
Changes in 6.6.1
Summary
- Bugfix - Fix panic when stopping the nats: #10363
- Bugfix - Disable download activity: #10368
- Bugfix - Fix Activitylog issues: #10376
- Bugfix - Security fixes: #10376
- Bugfix - Make antivirus workers configurable: #10383
- Bugfix - Increase event processing workers: #10385
- Bugfix - Fix envvar deprecations for next production release: #10386
- Bugfix - Fix healthchecks: #10405
Details
-
Bugfix - Fix panic when stopping the nats: #10363
The nats server itself runs signal handling that the Shutdown() call in the ocis
code is redundant and led to a panic. -
Bugfix - Disable download activity: #10368
We disable the download activity until we have a proper solution for it.
-
Bugfix - Fix Activitylog issues: #10376
Fixes multiple activititylog issues. There was an error about
max payload exceeded
when there were too many activities on one folder. Listing would take
very long even with a limit activated. All of these issues are now fixed. -
Bugfix - Security fixes: #10376
We polished some of the sonarcloud issues.
-
Bugfix - Make antivirus workers configurable: #10383
We made the number of go routines that pull events from the queue configurable.
-
Bugfix - Increase event processing workers: #10385
We increased the number of go routines that pull events from the queue to three
and made the number off workers configurable. Furthermore, the postprocessing
delay no longer introduces a sleep that slows down pulling of events, but
asynchronously triggers the next step. -
Bugfix - Fix envvar deprecations for next production release: #10386
Some envvar deprecations were incomplete. One was missed to be removed, one had
missing information. -
Bugfix - Fix healthchecks: #10405
We needed to replace 0.0.0.0 bind addresses by outbound IP addresses in the
healthcheck routine.