40bf43b292
fix: cap default storage quota to available disk space ( #92 )
...
Previously the admin quota was hardcoded to 100 GB and the regular
user quota to 1 GB, regardless of actual disk capacity. On systems
with less than 100 GB free this produced misleading quota values.
Added the fs2 crate to query available disk space on the storage
filesystem. A new capped_quota() helper now returns
min(default_quota, available_disk_space) when assigning quotas
during user registration, admin setup, and OIDC provisioning.
2026-02-13 21:58:54 +01:00
d0d5489994
Fix: add default-run to Cargo.toml so cargo run works without --bin
...
Fixes the 'could not determine which binary to run' error.
Ref #80
2026-02-13 20:47:26 +01:00
df0ebc36f1
chore: bump version to 0.3.4
2026-02-13 12:38:41 +01:00
e4df365e4e
chore: bump version to 0.3.3
2026-02-13 10:12:34 +01:00
915d9a4353
chore: bump version to 0.3.2
2026-02-12 23:27:20 +01:00
321fae7dcb
chore: bump version to 0.3.1
2026-02-12 12:33:45 +01:00
d448e632ed
fix: downgrade rand_core to 0.6 for argon2 compatibility
...
rand_core 0.9.x changed OsRng API (no longer implements RngCore directly)
and is incompatible with argon2 0.5.x which depends on rand_core 0.6.x.
This caused compilation failures in CI.
2026-02-11 17:59:18 +01:00
1e8a7dd5bb
feat: redesign admin panel & profile page, optimize Dockerfile, remove rootless
...
- Completely redesign admin.html matching OxiCloud design system
- Create standalone profile.html page with avatar, details & password change
- Optimize Dockerfile: 3-stage build, non-root user, OCI labels, layer cache
- Add .dockerignore to reduce build context
- Remove redundant Dockerfile.rootless & rootless-compose.yml
- Redesign login language selector as compact dropdown with search
- Fix CI/CD workflows (ci.yml, docker-build.yml, docker-publish.yml)
- Update app.js to navigate to profile page instead of modal
2026-02-11 14:09:40 +01:00
8ef62109a3
feat(auth): add OpenID Connect (OIDC) authentication support
...
Implements OIDC Authorization Code Flow for external identity providers
(Authentik, Keycloak, etc.) with JIT user provisioning.
New features:
- OidcService with OpenID Discovery, JWKS caching, RS256 ID token validation
- Authorization Code Flow: /api/auth/oidc/authorize -> IdP -> /api/auth/oidc/callback
- JIT user provisioning from OIDC claims (sub, email, name, groups)
- OIDC group-to-role mapping (admin_groups config)
- Provider info endpoint: GET /api/auth/oidc/providers
- Option to disable password login entirely (OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN)
- Auto-provision toggle (OXICLOUD_OIDC_AUTO_PROVISION)
- Email collision detection (security: prevents account takeover)
Configuration (env vars):
- OXICLOUD_OIDC_ENABLED, OXICLOUD_OIDC_ISSUER_URL
- OXICLOUD_OIDC_CLIENT_ID, OXICLOUD_OIDC_CLIENT_SECRET
- OXICLOUD_OIDC_REDIRECT_URI, OXICLOUD_OIDC_SCOPES
- OXICLOUD_OIDC_FRONTEND_URL, OXICLOUD_OIDC_PROVIDER_NAME
- OXICLOUD_OIDC_AUTO_PROVISION, OXICLOUD_OIDC_ADMIN_GROUPS
- OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN
DB migration:
- ALTER TABLE auth.users ADD oidc_provider, oidc_subject columns
- UNIQUE index on (oidc_provider, oidc_subject)
Files changed: 14 files, ~1400 lines added
Dependencies: reqwest 0.12 (rustls-tls-webpki-roots), base64 0.22
2026-02-10 20:32:32 +01:00
5bd505ccd7
modernizing frontend
2026-02-08 22:44:42 +01:00
a82faa5eaf
refactoring hexagonal and clean architecture
2026-02-08 13:40:23 +01:00
8f2b0a354c
big refactoring
2026-02-03 17:59:04 +01:00
52840e57df
refactor: remove serde from domain entities for Clean Architecture compliance
...
- Remove Serialize/Deserialize from File, Folder, Session, User, Contact entities
- Create contact_persistence_dto.rs for JSONB persistence in infrastructure layer
- Update contact_pg_repository to use persistence DTOs
- Fix dependency on zip crate (downgrade from 7.2.0 to 2.1.0)
- Fix unused variable warnings in main.rs
- Move PathService import from domain to infrastructure
- Add missing fields to CoreServices and RepositoryServices
- Create proper service initialization in main.rs
Clean Architecture improvements:
- Domain layer no longer depends on serde framework
- Persistence concerns isolated to infrastructure layer
- TokenClaims in auth_service.rs is only exception (required for JWT)
2026-02-02 23:56:40 +01:00
727aee3ad0
Add dotenv to dependencies
2025-09-10 00:28:18 +08:00
52d8250d51
adding card dav and cald dav
2025-04-13 01:04:04 +02:00
5d67bc4d84
fix several bugs
2025-04-10 01:43:25 +02:00
8f1d213526
improve postgresql performance
2025-04-09 00:21:20 +02:00
ba3ef2a530
adding webdav features
2025-04-04 21:31:41 +02:00
705cb5b069
adding pdf and image viewer
2025-04-02 01:22:05 +02:00
e79ca8304b
adding comments, moving technical documentation, improve Dockerfile, delete unuseful files
2025-03-30 14:17:09 +00:00
3a4cb75ac7
configuring backend topology
2025-03-28 12:38:48 +01:00
bfbef18117
fix warnings
2025-03-27 23:41:56 +01:00
e22c0ac855
fix trash and additional bugs
2025-03-26 18:33:22 +01:00
af70581f91
adding LTO to gain efficient
2025-03-26 11:04:07 +01:00
9a9fd72f61
fixing bugs
2025-03-23 22:44:18 +01:00
cafad0fbfd
adding user authentication
2025-03-20 09:22:31 +01:00
d9bbd575d2
adding several features
2025-03-19 00:44:27 +01:00
fe19bc8505
Initial commit
2025-03-17 21:28:08 +01:00
Dionisio