-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Draft: Webdav provider poc #4621
Draft
mifi
wants to merge
55
commits into
main
Choose a base branch
from
webdav-provider-poc
base: main
Could not load branches
Branch not found: {{ refName }}
Could not load tags
Nothing to show
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
+733
−10
Draft
Changes from 15 commits
Commits
Show all changes
55 commits
Select commit
Hold shift + click to select a range
df98cca
remove useless line
mifi 9ccf2ae
fix broken cookie removal logic
mifi 04128f9
fix mime type of thumbnails
mifi 9ceac7c
simplify/speedup token generation
mifi 600b2d0
use instanceof instead of prop check
mifi da67ac9
Implement alternative provider auth
mifi 7d59489
refactor
mifi ab06da6
use respondWithError
mifi 16d4e3f
fix prepareStream
mifi 2092387
don't throw when missing i18n key
mifi f575dbc
fix bugged try/catch
mifi 754e2e0
allow aborting login too
mifi 6441123
add json http error support
mifi f503d1f
don't tightly couple auth form with html form
mifi f0ba00f
implement webdav poc
mifi 272e3d1
fix i18n
mifi f2e5aa4
make contentType parameterized
mifi 8016a5d
merge main
mifi 9f160f4
Merge branch 'main' into provider-user-sessions
mifi a28fcec
allow sending certain errors to the user
mifi 3166db9
don't have default content-type
mifi 5c20186
make a loginSimpleAuth api too
mifi b10edf9
Merge branch 'provider-user-sessions' into webdav-provider-poc
mifi 367a0de
implement `size` for webdav
mifi 9600104
use new loginSimpleAuth method
mifi 55a9351
todo-fixme
mifi 13642fb
hopefully fix url replacer
mifi 59262c1
upgrade webdav
mifi b33f5b1
Merge branch 'main' into provider-user-sessions
mifi 47c4025
Merge branch 'provider-user-sessions' into webdav-provider-poc
mifi 4be2b6f
make removeAuthToken protected
mifi ff13823
support both nextcloud and normal webdavs
mifi 63d0b0c
trim inpiut
mifi 7549da4
make removeAuthToken protected
mifi a795d05
Merge branch 'provider-user-sessions' into webdav-provider-poc
mifi 0542371
rename webdav to webdavOauth, pass providerOptions
arturi 1302574
Fix incorrect options nesting when creating the webdav client
arturi 8794f63
Merge branch 'main' into provider-user-sessions
mifi 42f74b2
fix lint
mifi 7a84c8d
run yarn format
mifi 38eee72
Apply suggestions from code review
mifi 70a7a48
fix broken merge conflict
mifi 0d81a9b
improve inheritance
mifi 96eb565
fix bug
mifi 67d8595
fix bug with dynamic grant config
mifi 5025a73
use duck typing for error checks
mifi 761dcdc
Apply suggestions from code review
mifi 95c8e38
Merge branch 'main' into provider-user-sessions
mifi 64ce471
fix broken lint fix script
mifi 654da1a
fix broken merge code
mifi a69a1fe
try to fix flakey tets
mifi 6d766cb
fix lint
mifi 2af7b24
Merge branch 'main' into provider-user-sessions
mifi c6cafdc
Merge branch 'provider-user-sessions' into webdav-provider-poc
mifi 828c0ae
Merge branch 'main' into webdav-provider-poc
mifi File filter
Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure we should really set this as default/encourage it, it might be possible to craft a malicious redirect url with that and use it for phishing... haven't come up with anything clever for that so far (one of the reasons we did not enable this in production so far)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hmm, good point, but I wonder why grant does it for Mastodon if it's possible to abuse it for malicious purposes... Do you have any example of how one could abuse it?