0f1dc0031e
fix(ci): trigger docker publish on tag push instead of release event
...
GitHub Actions events created by GITHUB_TOKEN don't trigger other
workflows. Changed trigger from 'release: published' to 'push: tags'
so docker-publish runs directly from the tag push.
2026-02-11 14:16:02 +01:00
ee131abeee
ci: add release workflow for automated GitHub releases
2026-02-11 14:11:16 +01:00
1e8a7dd5bb
feat: redesign admin panel & profile page, optimize Dockerfile, remove rootless
...
- Completely redesign admin.html matching OxiCloud design system
- Create standalone profile.html page with avatar, details & password change
- Optimize Dockerfile: 3-stage build, non-root user, OCI labels, layer cache
- Add .dockerignore to reduce build context
- Remove redundant Dockerfile.rootless & rootless-compose.yml
- Redesign login language selector as compact dropdown with search
- Fix CI/CD workflows (ci.yml, docker-build.yml, docker-publish.yml)
- Update app.js to navigate to profile page instead of modal
2026-02-11 14:09:40 +01:00
3050955f9c
feat: add admin/profile UI, i18n (fr/de/pt), fix CI pipelines
...
- Add admin panel link and profile modal in user menu dropdown
- Add French, German and Portuguese locale support (full translations)
- Register new locales across JS frontend and Rust backend
- Create CI pipeline (fmt, clippy, test, audit, build)
- Fix docker-build.yml (cache, real tests, reduced timeout)
- Fix docker-publish.yml (multi-arch via QEMU, latest tag, pre-publish tests)
- Add dependabot.yml for automated dependency updates
2026-02-11 12:37:03 +01:00
6b55cdf3c4
Merge pull request #71 from roswitina/main
...
feat(i18n): add Deutsch(de) to language list
2026-02-11 12:27:52 +01:00
f02a9c6d95
Merge pull request #1 from roswitina/dev
...
feat(i18n): add Deutsch(de) to language list
2026-02-11 09:25:09 +01:00
d1acb9677a
feat(i18n): add Deutsch(de) to language list --> de.json
2026-02-11 09:22:12 +01:00
6c900c51a3
feat(i18n): add Deutsch(de) to language list --> sw.js
2026-02-11 09:11:00 +01:00
d66af34beb
feat(i18n): add Deutsch(de) to language list
2026-02-11 08:56:01 +01:00
ccd071911d
feat(admin): add user management, quotas, and stats dashboard to admin panel
...
- Dashboard tab: total users, active users, admins, storage usage, quota warnings
- User management tab: list, edit role, activate/deactivate, update quota, delete
- Self-protection: cannot delete/deactivate/demote yourself
- Paginated user listing (default 50 per page)
- Efficient single-query dashboard stats with direct SQL aggregation
- Quota modal with GB/MB/TB unit selector
- Backend: added methods to UserStoragePort, UserRepository, PgRepository
- Backend: added 7 admin methods to AuthApplicationService
- Backend: added 5 new DTOs for admin operations
- Backend: 7 new endpoints under /api/admin/
Files modified:
- src/application/ports/auth_ports.rs (4 new UserStoragePort methods)
- src/domain/repositories/user_repository.rs (StorageStats + 3 methods)
- src/infrastructure/repositories/pg/user_pg_repository.rs (implementations)
- src/application/services/auth_application_service.rs (admin methods)
- src/application/dtos/settings_dto.rs (5 new DTOs)
- src/interfaces/api/handlers/admin_handler.rs (7 new endpoints)
- static/admin.html (complete UI with 3 tabs: Dashboard, Users, OIDC)
2026-02-11 01:08:00 +01:00
1a1dee9179
fix(oidc): add CSRF state validation, PKCE S256, nonce, secure token delivery, registration guard
...
Security fixes for OIDC authentication flow:
1. CSRF state validation (High): State nonce is now stored server-side
and validated on callback (single-use, 600s TTL)
2. PKCE S256 (Medium): code_challenge/code_verifier pair generated per
RFC 9126, sent in authorize URL and token exchange
3. Nonce in ID token (Medium): Random nonce included in authorize URL,
verified against ID token claims to prevent token replay
4. Secure token delivery (Medium): Tokens no longer in URL fragments.
One-time exchange code redirected to frontend, tokens retrieved via
POST /api/auth/oidc/exchange endpoint (60s TTL, single-use)
5. Registration guard (Low): POST /api/auth/register returns 403 when
disable_password_login is active in OIDC-only mode
2026-02-11 00:37:47 +01:00
f60c0df9f9
feat(admin): add admin settings panel for OIDC configuration
...
- Admin UI at /admin.html with settings management interface
- REST API: GET/PUT /api/admin/settings/oidc, POST .../test, GET .../general
- DB-backed settings in auth.admin_settings table (PostgreSQL)
- OIDC auto-discovery from issuer URL (.well-known/openid-configuration)
- Hot-reload: OIDC config changes apply without server restart
- Role-based access: admin-only endpoints with 403 for regular users
- Client secret stored securely, never exposed in GET responses
- Env var override detection shown in admin UI
- Clean architecture: repository trait, PG implementation, service, handler
2026-02-11 00:15:26 +01:00
8ef62109a3
feat(auth): add OpenID Connect (OIDC) authentication support
...
Implements OIDC Authorization Code Flow for external identity providers
(Authentik, Keycloak, etc.) with JIT user provisioning.
New features:
- OidcService with OpenID Discovery, JWKS caching, RS256 ID token validation
- Authorization Code Flow: /api/auth/oidc/authorize -> IdP -> /api/auth/oidc/callback
- JIT user provisioning from OIDC claims (sub, email, name, groups)
- OIDC group-to-role mapping (admin_groups config)
- Provider info endpoint: GET /api/auth/oidc/providers
- Option to disable password login entirely (OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN)
- Auto-provision toggle (OXICLOUD_OIDC_AUTO_PROVISION)
- Email collision detection (security: prevents account takeover)
Configuration (env vars):
- OXICLOUD_OIDC_ENABLED, OXICLOUD_OIDC_ISSUER_URL
- OXICLOUD_OIDC_CLIENT_ID, OXICLOUD_OIDC_CLIENT_SECRET
- OXICLOUD_OIDC_REDIRECT_URI, OXICLOUD_OIDC_SCOPES
- OXICLOUD_OIDC_FRONTEND_URL, OXICLOUD_OIDC_PROVIDER_NAME
- OXICLOUD_OIDC_AUTO_PROVISION, OXICLOUD_OIDC_ADMIN_GROUPS
- OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN
DB migration:
- ALTER TABLE auth.users ADD oidc_provider, oidc_subject columns
- UNIQUE index on (oidc_provider, oidc_subject)
Files changed: 14 files, ~1400 lines added
Dependencies: reqwest 0.12 (rustls-tls-webpki-roots), base64 0.22
2026-02-10 20:32:32 +01:00
65f4e10236
fix(webdav): fully working WebDAV RFC 4918 implementation
...
- Move WebDAV routes to top-level (out of /api nest) for proper path handling
- Add trailing slash routes and HEAD method support
- Refactor all 12 handlers to use Axum State extractor instead of req.extensions()
- Fix MOVE handler to support rename (same-folder move) via rename_file service
- Add Overwrite header support in MOVE/COPY operations
- Add extract_webdav_path() helper for consistent path parsing
- Add precondition_failed variant to AppError
- All 17 integration tests passing: OPTIONS, PROPFIND, MKCOL, PUT, GET, HEAD,
PROPPATCH, COPY, MOVE, LOCK, DELETE (files and folders)
2026-02-10 19:26:28 +01:00
ef9ed2cc31
feat: complete CalDAV (RFC 4791) and CardDAV (RFC 6352) implementation
...
- CalDAV: MKCALENDAR, PROPFIND, PUT/GET/DELETE events, REPORT calendar-query
- CardDAV: MKCOL, PROPFIND, PUT/GET/DELETE vCards, REPORT addressbook-query
- Fix routing: move CalDAV/CardDAV to top-level merge() with explicit routes
- Fix DB schema: VARCHAR(36) -> UUID for entity IDs, vcard_data -> vcard
- Fix 15 repository stub methods that returned empty results
- Fix vCard parser in ContactStorageAdapter (was hardcoded stub)
- All operations tested end-to-end in Docker (201/207/200/204 as expected)
2026-02-10 18:46:59 +01:00
5bd505ccd7
modernizing frontend
2026-02-08 22:44:42 +01:00
03b409bbbc
Merge pull request #70 from Goudarz/feature/bidirectional-support
...
Add RTL Support with Automatic HTML Attributes
2026-02-08 13:42:47 +01:00
a82faa5eaf
refactoring hexagonal and clean architecture
2026-02-08 13:40:23 +01:00
67ade90d95
feat: add RTL-specific CSS for bidirectional layout
2026-02-08 10:05:04 +03:30
449ac7a981
feat: add RTL-specific CSS for bidirectional layout
2026-02-08 10:04:58 +03:30
d05485c459
feat: add RTL-specific CSS for bidirectional layout
2026-02-08 10:04:49 +03:30
0096d2ee95
feat: add RTL-specific CSS for bidirectional layout
2026-02-08 10:04:37 +03:30
31ad2f878a
feat(i18n): add Persian(fa) to language list
2026-02-08 09:57:55 +03:30
00a8e0c361
feat(i18n): add Persian(fa) to language list
2026-02-08 09:57:38 +03:30
a3b2192b0e
feat(i18n): add Persian(fa) to language list
2026-02-08 09:57:11 +03:30
ad48b865f2
feat: add automatic HTML lang and dir attributes
...
- Add updateHtmlAttributes() function to set lang attribute on HTML element
- Automatically add dir=rtl for RTL languages (fa, ar) and remove for LTR
- Initialize attributes on component load with current locale
- Listen for locale changes to update attributes dynamically
- Add rtlLanguages configuration array for maintainability
2026-02-08 09:56:11 +03:30
3e4fb67c19
Delete src/domain/services/auth_service.rs
2026-02-07 10:42:39 +01:00
b9d10c7b5c
fix
2026-02-07 04:02:38 +01:00
dad185a8d5
Merge pull request #69 from DioCrafts/dev
...
refactoring hexagonal architecture
2026-02-06 20:58:27 +01:00
c952e82b27
refactoring hexagonal architecture
2026-02-06 20:57:00 +01:00
4ac141fe36
Merge pull request #68 from Goudarz/fa-translation
...
Add Persian translation
2026-02-06 08:38:04 +01:00
f9cac2037d
docs(i18n): document Persian(fa) language support
2026-02-06 10:31:48 +03:30
2c5c67311e
feat(i18n): add Persian(fa) to language list
2026-02-06 10:30:26 +03:30
fac45c4d44
feat(i18n): add Persian(fa) to language list
2026-02-06 10:29:19 +03:30
7008c22c12
feat(i18n): add Persian(fa) to language list
2026-02-06 10:29:13 +03:30
65aeefd508
feat(i18n): add Persian(fa) to language list
2026-02-06 10:29:05 +03:30
421f354a8e
feat(i18n): add Persian(fa) to language list
2026-02-06 10:28:32 +03:30
68ac691de7
feat(i18n): add Persian translations
2026-02-06 10:24:23 +03:30
bb45526f9c
Fix formatting in README architecture section
2026-02-03 18:00:34 +01:00
8f2b0a354c
big refactoring
2026-02-03 17:59:04 +01:00
52840e57df
refactor: remove serde from domain entities for Clean Architecture compliance
...
- Remove Serialize/Deserialize from File, Folder, Session, User, Contact entities
- Create contact_persistence_dto.rs for JSONB persistence in infrastructure layer
- Update contact_pg_repository to use persistence DTOs
- Fix dependency on zip crate (downgrade from 7.2.0 to 2.1.0)
- Fix unused variable warnings in main.rs
- Move PathService import from domain to infrastructure
- Add missing fields to CoreServices and RepositoryServices
- Create proper service initialization in main.rs
Clean Architecture improvements:
- Domain layer no longer depends on serde framework
- Persistence concerns isolated to infrastructure layer
- TokenClaims in auth_service.rs is only exception (required for JWT)
2026-02-02 23:56:40 +01:00
6aceb07f3f
Merge pull request #66 from shubhamg13/dotenv
2025-09-09 18:58:20 +02:00
727aee3ad0
Add dotenv to dependencies
2025-09-10 00:28:18 +08:00
912f221431
Merge pull request #64 from PathosEthosLogos/patch-1
...
Fix cacher circular dependency message
2025-06-17 09:00:29 +02:00
9f93351470
Fix cacher circular dependency message
...
It seems that some Git message/note was copy pasted into the Dockerfile. I put it back to original from previous commit. Built and working.
2025-06-16 09:27:18 -05:00
de60474c6c
Update docker-publish.yml
2025-04-22 16:24:14 +02:00
57fa057304
Update Dockerfile
2025-04-22 16:19:15 +02:00
74d5d2d644
Update Dockerfile
2025-04-22 11:44:46 +02:00
2a3503bcd0
Update docker-publish.yml
2025-04-22 11:44:12 +02:00
2aed76f9bc
Update docker-publish.yml
2025-04-22 09:00:12 +02:00
Dionisio