8 Commits

Include renames

Author	SHA1	Message	Date
raucao	8dd0bf10ce	Add PKCE support to remoteStorage OAuth ... Implements the optional OAuth 2.0 Authorization Code grant with PKCE (RFC 7636) for remoteStorage, as described in the remoteStorage spec (section 10.1). - Advertise the authorization and token endpoints plus the supported code_challenge method (S256) in WebFinger, and bump the advertised spec version to draft-dejong-remotestorage-27 - Add RsAuthorizationCode: a short-lived (5 min), single-use authorization code stored only as a SHA256 digest - Add RsOauthManager services for issuing and exchanging codes, including S256 verification - Add a cross-origin POST /rs/oauth/token endpoint that exchanges a code (and code_verifier) for an access token, with CORS and no CSRF token - Consent dialog now carries response_type / code_challenge through the form and redirects with the code in the query string for the code flow - Remove the existing-token reuse shortcut so every authorization results in a distinct authorization (and token) Part of #254	2026-11-03 09:17:43 +04:00
raucao	8fae099c12	Gate remoteStorage by serviceEnabled instead of Flipper ... The admin "Default services" setting writes the LDAP serviceEnabled attribute, but remoteStorage access was also gated behind an unused per-user Flipper flag that nothing ever enabled, so remoteStorage was inaccessible for everyone. Gate remoteStorage on service_enabled? like the other services, and make the admin toggle reflect the LDAP attribute (this also fixes it reading current_user instead of the user being viewed). E-Mail keeps its Flipper gate for now.	2026-10-06 15:10:00 +02:00
raucao	a62d84e20a	Validate rs/oauth redirect_uri before storing return URL	2026-08-10 11:21:33 -06:00
raucao	dbbf116c52	Fix RS storage-first auth work in dev, remove token ... See https://github.com/remotestorage/remotestorage.js/issues/900	2025-05-16 15:59:40 +04:00
raucao	ee5c6d86d0	Port RS auth job removal to Solid Queue	2025-05-05 11:07:30 +04:00
Râu Cao	aa399b862a	Allow to launch RS apps from dashboard	2023-11-19 19:10:13 +01:00
Râu Cao	56c127ca0c	Only allow primary domain for RS ... Replace user addresses with usernames in the respective URLs	2023-11-01 21:46:38 +01:00
Râu Cao	353b55fe1a	Add RS OAuth controller specs	2023-08-01 14:29:24 +02:00