Commit Graph

293 Commits

Author SHA1 Message Date
Peter Bieringer
d6369588f4 sharing/bday/summary: check for not to be empty 2026-05-31 07:26:19 +02:00
Peter Bieringer
07c5873bdd sharing/bday/templating: default config rework 2026-05-31 07:06:35 +02:00
Peter Bieringer
70ec043423 sharing/bday/add support for custom categories 2026-05-31 06:00:55 +02:00
Peter Bieringer
2360a50195 sharing/bday: parameter validation 2026-05-31 06:00:55 +02:00
Peter Bieringer
ebb359c5cc sharing/bday/age_max: input validation 2026-05-31 06:00:55 +02:00
Peter Bieringer
e821258fa0 sharing/bday/age_max: fix default 2026-05-31 06:00:55 +02:00
Peter Bieringer
586ae79b8e sharing/bday: option for age_max 2026-05-31 06:00:55 +02:00
Peter Bieringer
c54e41bccd sharing/bday/trigger: disable by default, adjust fallback pattern 2026-05-31 06:00:55 +02:00
Peter Bieringer
c5c74d1753 sharing/bday: trigger config parser 2026-05-31 06:00:55 +02:00
Peter Bieringer
8329cfa660 sharing/bday/template: config parser 2026-05-31 06:00:55 +02:00
Max Berger
19f9d0a8c7 web ui: New setting for browser-based login
This is useful in cases where OIDC login is active
which would then redirect the user to a central
login page.

See https://github.com/Kozea/Radicale/issues/2143
2026-05-27 19:43:57 +02:00
Peter Bieringer
5a1f6cbd02 log also exception text 2026-05-12 08:35:28 +02:00
Peter Bieringer
e695c28364 config/parser: add support for log on_notice_condition 2026-05-12 08:35:28 +02:00
Peter Bieringer
5a6bae0a2c user/path value check: add additional option 2026-04-23 06:13:32 +02:00
Peter Bieringer
af5121ab34 new option for checking path/user value 2026-04-23 06:13:31 +02:00
Peter Bieringer
bff39ccef5 sharing/token/create: change default permissions to rp 2026-04-09 20:41:59 +02:00
Peter Bieringer
5dda0af7c7 log/config parser: permit all available log levels 2026-04-08 21:49:55 +02:00
Peter Bieringer
c70f26395f log/config parser: update related to legacy trace_on_debug and trace_filter 2026-04-08 21:49:55 +02:00
Peter Bieringer
a6ddf4c9e9 sharing/config: check for invalid permission combination 2026-04-03 16:07:14 +02:00
Peter Bieringer
3ab7e2049f delay: delay_on_error only for 5xx, auth_delay for 401 in case login/user is missing 2026-04-02 13:06:28 +02:00
Peter Bieringer
1b633a4551 sharing/bday/config: remove legacy 2026-03-28 10:09:47 +01:00
Peter Bieringer
9485e58081 sharing/config: mark legacy config options 2026-03-24 21:40:29 +01:00
Peter Bieringer
8b7b060fe9 sharing/bday: config parser 2026-03-15 18:20:49 +01:00
Peter Bieringer
3cad049109 logging/limit_content: new option 2026-03-14 15:12:15 +01:00
Peter Bieringer
9cc373132f add delay_on_error option 2026-03-07 15:57:02 +01:00
Peter Bieringer
51fb882cab sharing: properties overlay by proppatch 2026-02-28 22:10:01 +01:00
Peter Bieringer
1cb622e903 sharing: add global and conditional permissions support 2026-02-26 08:14:49 +01:00
Peter Bieringer
3ad1b1a12a add rights value check 2026-02-26 08:12:49 +01:00
Peter Bieringer
a8bceb3ccd align order 2026-02-26 05:27:47 +01:00
Peter Bieringer
8372482ccd Merge branch 'master' into deprecate-ldap_use_ssl 2026-02-24 21:33:30 +01:00
magicfelix
74ad76b36d [OAuth2] Allow custom client_id and client_secret 2026-02-24 18:24:59 +01:00
Peter Bieringer
47d963a3a9 copyright: update 2026-02-24 08:19:51 +01:00
Peter Bieringer
bdff6307e4 sharing: add config options 2026-02-24 08:19:51 +01:00
Peter Marschall
8c9df49caf LDAP auth: remove config option 'ldap_use_ssl'
Remove the config option 'ldap_use_ssl' from the code and documentation,
deprecating it for good.
2026-02-22 12:51:45 +01:00
Peter Bieringer
bc2a14481f add new option max_resource_size 2025-12-11 22:53:02 +01:00
Peter Bieringer
e66d83cd84 add explanation to default value 2025-12-11 22:50:35 +01:00
Peter Bieringer
b51dcccd19 improve type specification 2025-12-11 22:44:19 +01:00
Peter Bieringer
dfb932a448 new options [logging] profiling_per_request_header profiling_per_request_xml 2025-12-10 17:48:05 +01:00
Peter Bieringer
b819febeb2 new option [logging] response_header_on_debug 2025-12-10 17:47:09 +01:00
Peter Bieringer
15ebb1e647 profiling: default is now 'none' and config option will be checked instantly 2025-12-08 17:54:18 +01:00
Peter Bieringer
3c0267c98a profiling: add options 2025-12-08 12:29:43 +01:00
Peter Bieringer
8a53939fae strict_preconditions: new config option 2025-10-19 18:54:37 +02:00
Johannes Berg
256ca59aaf auth: clean up remote IP parameter/documentation
Make the remote IP parameter more generic and make it an enum
determining the source instead of a boolean. Also fix the
changelog entry.

Both as requested, I managed to miss those comments previously.
2025-09-09 20:25:49 +02:00
Johannes Berg
b5a1ea911d auth: dovecot: pass remote IP (rip=) to auth server
If known, let the auth server know where the client came
from, using REMOTE_ADDR or, optionally/configurably, the
X-Remote-Addr header value (which is needed when running
behind a trusted proxy.)

Addresses #1859.
2025-09-09 12:10:00 +02:00
Peter Marschall
57a4d8d47d LDAP auth: update, consolidate & extend documentation 2025-09-08 22:01:13 +02:00
Peter Marschall
8821612fa8 LDAP auth: allow finding groups based on separate search
Instead of searching for the membership attribute on the user side
(usually AD: memberOf, Novell eDirectory: groupMembership) to determine
the groups the user loging on is a member of, allow performing a separate
search for the groups having the user as member and use the found groups' DNs.

The group search is performed in the context of 'ldap_reader_dn', after
the user DN has been found in the directory, but before the authentication
has been performed by doing an LDAP bind in the user's context.

Although this may - in the case of unsuccessful login attempts -
double the number of queries to the LDAP server, it has been done
this way to keep the number of LDAP contexts minimal.

Doing the group search in the context of the user logging on is no viable
option, because there are known implementations where regular users do not
have the necessary permissions to query the groups they are a member in.
2025-09-07 11:38:08 +02:00
Nate Harris
5c9c5b1572 - Linting 2025-08-13 23:46:26 -06:00
Nate Harris
80dc4995cf - Capture previous version of event pre-overwrite for use in notification hooks
- Use previous version of event in email hooks to determine added/deleted/updated email type
2025-08-13 23:46:24 -06:00
Peter Bieringer
de384d5f4a add hook option "dryrun" 2025-07-22 20:56:43 +02:00
Peter Bieringer
02471b6c90 add trace options 2025-07-19 14:39:47 +02:00