Skip to content

1.14.0-rc1

Pre-release
Pre-release
Compare
Choose a tag to compare
@ownclouders ownclouders released this 27 Oct 06:39
· 12877 commits to master since this release
v1.14.0-rc1
1a01d21

Changes in 1.14.0

Summary

  • Security - Don't expose services by default: #2612
  • Bugfix - Create parent directories for idp configuration: #2667
  • Change - Configurable default quota: #2621
  • Change - New default data paths and easier configuration of the data path: #2590
  • Change - Split spaces webdav url and graph url in base and path: #2660
  • Change - Update ownCloud Web to v4.4.0: #2681
  • Enhancement - Add user setting capability: #2655
  • Enhancement - Broaden bufbuild/Buf usage: #2630
  • Enhancement - Replace fileb0x with go-embed: #1199
  • Enhancement - Upgrade to go-micro v4.1.0: #2616
  • Enhancement - Review and correct http header: #2666
  • Enhancement - Lower TUS max chunk size: #2584
  • Enhancement - Add sharees additional info paramater config to ocs: #2637
  • Enhancement - Add a middleware to authenticate public share requests: #2536
  • Enhancement - Report quota states: #2628
  • Enhancement - Start up a new machine auth provider in the storage service: #2528
  • Enhancement - Enforce permission on update space quota: #2650
  • Enhancement - Update lico to v0.51.1: #2654
  • Enhancement - Update reva to v1.15: #2658

Details

  • Security - Don't expose services by default: #2612

    We've changed the bind behaviour for all non public facing services. Before this PR all
    services would listen on all interfaces. After this PR, all services listen on 127.0.0.1 only,
    except the proxy which is listening on 0.0.0.0:9200.

    #2612

  • Bugfix - Create parent directories for idp configuration: #2667

    The parent directories of the identifier-registration.yaml config file might not exist when
    starting idp. Create them, when that is the case.

    #2667

  • Change - Configurable default quota: #2621

    When creating a new space a (configurable) default quota will be used (instead the hardcoded
    one). One can set the EnvVar GRAPH_SPACES_DEFAULT_QUOTA to configure it

    #2621
    https://jira.owncloud.com/browse/OCIS-2070

  • Change - New default data paths and easier configuration of the data path: #2590

    We've changed the default data path for our release artifacts: - oCIS docker images will now
    store all data in /var/lib/ocis instead in /var/tmp/ocis - binary releases will now store
    all data in ~/.ocis instead of /var/tmp/ocis

    Also if you're a developer and you run oCIS from source, it will store all data in ~/.ocis from
    now on.

    You can now easily change the data path for all extensions by setting the environment variable
    OCIS_BASE_DATA_PATH.

    If you want to package oCIS, you also can set the default data path at compile time, eg. by passing
    -X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathType=path" -X "github.com/owncloud/ocis/ocis-pkg/config/defaults.BaseDataPathValue=/var/lib/ocis"
    to your go build step.

    #2590

  • Change - Split spaces webdav url and graph url in base and path: #2660

    We've fixed the behavior for the spaces webdav url and graph explorer graph url settings, so
    that they respect the environment variable OCIS_URL. Previously oCIS admins needed to set
    these URLs manually to make spaces and the graph explorer work.

    #2659
    #2660

  • Change - Update ownCloud Web to v4.4.0: #2681

    Tags: web

    We updated ownCloud Web to v4.4.0. Please refer to the changelog (linked) for details on the web
    release.

    #2681
    https://github.com/owncloud/web/releases/tag/v4.4.0

  • Enhancement - Add user setting capability: #2655

    We've added a capability to communicate the existance of a user settings service to clients.

    owncloud/web#5926
    #2655

  • Enhancement - Broaden bufbuild/Buf usage: #2630

    We've switched the usage of bufbuild/Buf from a protoc replacement only to also using it to
    confige the outputs and pinning dependencies.

    #2630
    #2616

  • Enhancement - Replace fileb0x with go-embed: #1199

    Go-embed already brings the functionality we need but with less code. We decided to use it
    instead of 3rd party fileb0x

    #1199
    #2631
    #2649

  • Enhancement - Upgrade to go-micro v4.1.0: #2616

    We've upgraded to go-micro v4.1.0

    #2616

  • Enhancement - Review and correct http header: #2666

    Reviewed and corrected the necessary http headers. Made CORS configurable.

    #2666

  • Enhancement - Lower TUS max chunk size: #2584

    We've lowered the TUS max chunk size from infinite to 0.1GB so that chunking actually happens.

    #2584
    cs3org/reva#2136

  • Enhancement - Add sharees additional info paramater config to ocs: #2637

    #2637

  • Enhancement - Add a middleware to authenticate public share requests: #2536

    Added a new middleware to authenticate public share requests. This makes it possible to use
    APIs which require an authenticated context with public shares.

    #2479
    #2536
    #2652

  • Enhancement - Report quota states: #2628

    When listing the available spaces via the GraphAPI we now return quota states to make it easier
    for the clients to add visual indicators.

    #2628

  • Enhancement - Start up a new machine auth provider in the storage service: #2528

    This PR also adds the config to skip encoding user groups in reva tokens

    #2528
    #2529

  • Enhancement - Enforce permission on update space quota: #2650

    Added a check that only users with the set-space-quota permission can update the space
    quota.

    #2650

  • Enhancement - Update lico to v0.51.1: #2654

    Updated lico to v0.51.1 This update includes: * Apply LibreGraph naming treewide * move to
    go1.17 * Update 3rd party Go dependencies

    #2654

  • Enhancement - Update reva to v1.15: #2658

    Updated reva to v1.15 This update includes: * Fix
    cs3org/reva#2168: Override provider if
    was previously registered * Fix
    cs3org/reva#2173: Fix archiver max size
    reached error * Fix cs3org/reva#2167:
    Handle nil quota in decomposedfs * Fix
    cs3org/reva#2153: Restrict EOS project
    spaces sharing permissions to admins and writers * Fix
    cs3org/reva#2179: Fix the returned
    permissions for webdav uploads * Chg
    cs3org/reva#2479: Make apps able to work
    with public shares * Enh
    cs3org/reva#2174: Inherit ACLs for files
    from parent directories * Enh
    cs3org/reva#2152: Add a reference
    parameter to the getQuota request * Enh
    cs3org/reva#2171: Add optional claim
    parameter to machine auth * Enh
    cs3org/reva#2135: Nextcloud test
    improvements * Enh cs3org/reva#2180:
    Remove OCDAV options namespace parameter * Enh
    cs3org/reva#2170: Handle propfind
    requests for existing files * Enh
    cs3org/reva#2165: Allow access to
    recycle bin for arbitrary paths outside homes * Enh
    cs3org/reva#2189: Add user settings
    capability * Enh cs3org/reva#2162:
    Implement the UpdateStorageSpace method * Enh
    cs3org/reva#2117: Add ocs cache warmup
    strategy for first request from the user

    #2658
    #2536
    #2650
    #2680