Repository navigation

WOPI host (phase 1-5) rebased onto NC36 - #163

Closed

moodyjmz wants to merge 72 commits into

mainfrom

feat/wopi-nc36

Closed

WOPI host (phase 1-5) rebased onto NC36#163
moodyjmz wants to merge 72 commits into
mainfrom
feat/wopi-nc36

Commits on Jul 1, 2026
- feat: add database migration creating the office_wopi token table
  moodyjmz
  committed
  b573ea4
- feat: add ExpiredTokenException for WOPI token validation
  moodyjmz
  committed
  8a56d6e
- feat: add UnknownTokenException for WOPI token lookup failures
  moodyjmz
  committed
  af336a5
- feat: add Wopi entity mapping the office_wopi table
  moodyjmz
  committed
  32aab4a
- feat: add WopiMapper for token persistence and lookup
  moodyjmz
  committed
  16a8ba0
- feat: add DiscoveryService to fetch and cache WOPI discovery XML
  moodyjmz
  committed
  99d40f8
- feat: add TokenManager to generate WOPI access tokens for files
  moodyjmz
  committed
  b5c087d
- feat: add WopiController implementing CheckFileInfo, GetFile and PutFile
  moodyjmz
  committed
  aa0c9fb
- ✨ feat: register TokenManager in DI container with session user injection
  moodyjmz
  committed
  ddfdbf7
- ✨ feat: add Admin settings class registering the office settings section
  moodyjmz
  committed
  add97c5
- ✨ feat: register Admin settings in Application bootstrap
  moodyjmz
  committed
  b564962
- ✨ feat: add SettingsController with admin get/set endpoints
  moodyjmz
  committed
  4a3c498
- ✨ feat: add admin settings PHP template
  moodyjmz
  committed
  d18761b
- ✨ feat: add AdminSettings Vue component
  moodyjmz
  committed
  b39b1e2
- ✨ feat: add settings-admin entry point mounting AdminSettings
  moodyjmz
  committed
  57a6e4a
- ✨ feat: add EditorController generating WOPI token and editor URL
  moodyjmz
  committed
  7921a7d
- ✨ feat: add editor PHP template passing editor URL to Vue
  moodyjmz
  committed
  d373ff6
- ✨ feat: add Editor Vue component rendering the WOPI iframe with origin validation
  moodyjmz
  committed
  cf116a8
- ✨ feat: add editor entry point mounting Editor component
  moodyjmz
  committed
  90de35c
- 🔧 chore: add editor and settings-admin entry points to vite config
  moodyjmz
  committed
  737cb64
- 🐛 fix: correct query-string separator in buildEditorUrl
  moodyjmz
  committed
  74dc784
- 🔒 fix(security): prevent XPath injection via file extension in getUrlSrc
  moodyjmz
  committed
  4d8c58e
- 🔒 fix(security): validate wopi_url scheme in setAdmin to limit SSRF surface
  moodyjmz
  committed
  056dcb6
- 🔒 fix(security): fix range-request handling and close file handles in putFile
  moodyjmz
  committed
  aa2e8f8
- ✨ feat: add hourly CleanupJob to purge expired WOPI tokens
  moodyjmz
  committed
  12cda14
- ✨ feat: add office_wopi_locks migration for WOPI lock storage
  moodyjmz
  committed
  44682a1
- ✨ feat: add WopiLock entity and WopiLockMapper
  moodyjmz
  committed
  a63fd7e
- ✨ feat: add WOPI lock operations (Lock, Unlock, RefreshLock, GetLock)
  moodyjmz
  committed
  39879f3
- 🔒 fix(security): enforce WOPI lock and version checks on PutFile
  moodyjmz
  committed
  ccac67f
- ♻️ refactor: extend CleanupJob to also purge expired WOPI locks
  moodyjmz
  committed
  4664bef
- 🔧 chore: move background-jobs and settings registration to info.xml
  moodyjmz
  committed
  79c8629
- 🐛 fix: guard fclose() on php://input after putContent()
  moodyjmz
  committed
  40d891f
- 🐛 fix: set Content-Type: application/octet-stream on WOPI GetFile responses
  moodyjmz
  committed
  a212825
- 🔒 fix(security): reject WOPI lock operations on read-only tokens
  moodyjmz
  committed
  51e4fc5
- ✨ feat: add hide_download support to WOPI token row
  moodyjmz
  committed
  b452926
- ✨ feat: add public ShareController for WOPI share-link access
  moodyjmz
  committed
  a2e3aa0
- ✨ feat: propagate hideDownload flags in CheckFileInfo response
  moodyjmz
  committed
  d7ff5c6
- 🔒 fix(security): sanitize guestName and document P3 known gaps
  moodyjmz
  committed
  48fa1ef
- ✨ feat: add DiscoveryService::getSupportedMimeTypes()
  moodyjmz
  committed
  de677b0
- ✨ feat: issue user token for authenticated visitors on share links
  moodyjmz
  committed
  b902420
- ✨ feat: inject file-actions script and MIME types on Files app pages
  moodyjmz
  committed
  82907b8
- ✨ feat: register Files app file action to open documents in Office
  moodyjmz
  committed
  baffa82
- 🐛 fix: use history.back() on UI_Close instead of window.close()
  moodyjmz
  committed
  3da6dbe
- 📝 docs: replace scaffold README with WOPI backend developer guide
  moodyjmz
  committed
  d29de64
- 🐛 fix: resolve genuine Psalm errors across WOPI backend
  
  moodyjmz
  and
  claude
  committed
  8bce032
- 🔧 chore: upgrade Psalm to v6 and add baseline for false positives
  
  moodyjmz
  and
  claude
  committed
  8391e73
- 🎨 style: apply PHP CS Fixer (import ordering, docblock alignment)
  
  moodyjmz
  and
  claude
  committed
  378ad7c
- ✨ feat(wopi): implement RenameFile and fix CheckFileInfo capability flags
  
  moodyjmz
  and
  claude
  committed
  9785334
- 📝 docs: update README — WOPI spec compliance table, generic setup
  
  moodyjmz
  and
  claude
  committed
  25b6d50
- 🐛 fix: add missing Application import in LoadAdditionalScriptsListener
  
  moodyjmz
  and
  claude
  committed
  3138d51
- 🔒 fix(wopi): close C-1 path traversal, H-3 unlocked writes, H-2 lock TOCTOU
  
  moodyjmz
  and
  claude
  committed
  71e4f08
- 🔧 fix(psalm): remove stale PossiblyUnusedMethod baseline entry for TokenManager
  
  moodyjmz
  and
  claude
  committed
  807d718
- chore(assets): rebuild compiled js/css bundles
  
  moodyjmz
  and
  claude
  committed
  fb4ff7f
- chore(psalm): bump phpVersion to 8.3 and regenerate baseline
  
  moodyjmz
  and
  claude
  committed
  50754ca
- chore(deps): register @nextcloud/sharing as a root dependency
  
  moodyjmz
  and
  claude
  committed
  f773ecc
- style: fix eslint violations in AdminSettings and Editor
  
  moodyjmz
  and
  claude
  committed
  5bee9dd
- fix(settings): register admin settings routes as FrontpageRoute
  
  moodyjmz
  and
  claude
  committed
  6908e9d
- feat(wopi): add public_wopi_url and callback_url for split-URL deployments
  
  moodyjmz
  and
  claude
  committed
  f35352b
- test(bootstrap): split standalone unit tests from in-server integration tests
  
  moodyjmz
  and
  claude
  committed
  2a5b4e2
- test(discovery): add DiscoveryService unit tests and discovery fixtures
  
  moodyjmz
  and
  claude
  committed
  7dd6831
- test(spec): add WOPI coverage matrix and spec-coverage report script
  
  moodyjmz
  and
  claude
  committed
  ede31c8
Commits on Jul 2, 2026
- test(wopi): add WopiController lock and rename-file unit tests
  
  moodyjmz
  and
  claude
  committed
  b432ed9
- test(token): add TokenManager unit tests
  
  moodyjmz
  and
  claude
  committed
  43bfe38
- fix(tests): make integration bootstrap independent of mount layout
  
  moodyjmz
  and
  claude
  committed
  19ec8b3
- test(integration): add WOPI integration suite running in a server tree
  
  moodyjmz
  and
  claude
  committed
  754b62d
- fix(psalm): drop stale baseline entry for DiscoveryService::resetCache
  
  moodyjmz
  and
  claude
  committed
  54596a0
- fix(share): treat null and empty password as unprotected in openShare
  
  moodyjmz
  and
  claude
  committed
  c021e13
- fix(wopi): reject backslash-based names in RenameFile's traversal guard
  
  moodyjmz
  and
  claude
  committed
  b3fed25
- style: fix import ordering in SettingsController
  
  moodyjmz
  and
  claude
  committed
  4ec1a9a
Commits on Sep 7, 2026
- Merge branch 'feat/wopi-phase-5' into feat/wopi-nc36
  moodyjmz
  committed
  06533ad
- fix(tests): repoint OCP stub autoload at the vendor-bin namespace
  moodyjmz
  committed
  fd22164
- chore(assets): Recompile assets
  nextcloud-command
  committed
  09f2f16

Commits

Commits on Jul 1, 2026

Commits on Jul 2, 2026

Commits on Sep 7, 2026