abnvle
3bc5c0873b
After successful POST /api/s/{token}/verify, the server issues a
short-lived signed JWT cookie (oxi_share_unlock_<token>; HttpOnly;
SameSite=Lax; 1h TTL). Subsequent /api/s/{token} and
/api/s/{token}/download requests honour the cookie to bypass the
password gate, so password-protected file downloads work end-to-end.
- New module src/infrastructure/services/share_unlock_cookie.rs:
issue_jwt, verify_jwt, extract_from_cookie_header, build_set_cookie
+ 10 unit tests.
- New ShareService methods issue_unlock_jwt and
get_shared_link_with_unlock; trait method get_shared_link_by_token
delegates to a private fetch_share_resolved with an
allow_password_protected flag.
- access_shared_item, verify_shared_item_password, and
download_shared_file honour the unlock cookie.
Reuses OXICLOUD_JWT_SECRET, no new env var. Auth-token JWTs and
unlock-cookie JWTs cannot be confused: auth requires
username/email/role/jti claims, unlock has only sub/exp/iat.
Cross-share replay rejected via claims.sub == requested_token check.
32 lines
862 B
Rust
32 lines
862 B
Rust
pub mod audio_metadata_service;
|
|
pub mod azure_blob_backend;
|
|
pub mod cached_blob_backend;
|
|
pub mod chunked_upload_service;
|
|
pub mod compression_service;
|
|
pub mod dedup_service;
|
|
pub mod encrypted_blob_backend;
|
|
pub mod exif_service;
|
|
pub mod file_content_cache;
|
|
pub mod file_system_i18n_service;
|
|
pub mod image_transcode_service;
|
|
pub mod jwt_service;
|
|
pub mod local_blob_backend;
|
|
pub mod login_lockout_service;
|
|
pub mod migration_blob_backend;
|
|
pub mod migration_job;
|
|
pub mod nextcloud_chunked_upload_service;
|
|
pub mod oidc_service;
|
|
pub mod password_hasher;
|
|
pub mod path_resolver_service;
|
|
pub mod path_service;
|
|
pub mod retry_blob_backend;
|
|
pub mod s3_blob_backend;
|
|
pub mod share_unlock_cookie;
|
|
pub mod thumbnail_service;
|
|
#[cfg(test)]
|
|
mod thumbnail_service_test;
|
|
pub mod trash_cleanup_service;
|
|
pub mod webdav_lock_service;
|
|
pub mod wopi_discovery_service;
|
|
pub mod zip_service;
|