Repository navigation

Feat/wopi phase 5 - #8

Draft

moodyjmz wants to merge 72 commits into

mainfrom

feat/wopi-phase-5

Draft

Feat/wopi phase 5#8
moodyjmz wants to merge 72 commits into
mainfrom
feat/wopi-phase-5

Commits on Oct 23, 2026
- feat: add database migration creating the office_wopi token table
  moodyjmz
  committed
  62cc903
- feat: add ExpiredTokenException for WOPI token validation
  moodyjmz
  committed
  57cd385
- feat: add UnknownTokenException for WOPI token lookup failures
  moodyjmz
  committed
  89f881a
- feat: add Wopi entity mapping the office_wopi table
  moodyjmz
  committed
  b2410d9
- feat: add WopiMapper for token persistence and lookup
  moodyjmz
  committed
  364d5d7
- feat: add DiscoveryService to fetch and cache WOPI discovery XML
  moodyjmz
  committed
  17b7e48
- feat: add TokenManager to generate WOPI access tokens for files
  moodyjmz
  committed
  f7d285a
- feat: add WopiController implementing CheckFileInfo, GetFile and PutFile
  moodyjmz
  committed
  17225a0
- ✨ feat: register TokenManager in DI container with session user injection
  moodyjmz
  committed
  93cec9d
- ✨ feat: add Admin settings class registering the office settings section
  moodyjmz
  committed
  5283d9e
- ✨ feat: register Admin settings in Application bootstrap
  moodyjmz
  committed
  5ed24cf
- ✨ feat: add SettingsController with admin get/set endpoints
  moodyjmz
  committed
  d4ff138
- ✨ feat: add admin settings PHP template
  moodyjmz
  committed
  eda1a67
- ✨ feat: add AdminSettings Vue component
  moodyjmz
  committed
  fc54876
- ✨ feat: add settings-admin entry point mounting AdminSettings
  moodyjmz
  committed
  24763fe
- ✨ feat: add EditorController generating WOPI token and editor URL
  moodyjmz
  committed
  84dae5b
- ✨ feat: add editor PHP template passing editor URL to Vue
  moodyjmz
  committed
  220426e
- ✨ feat: add Editor Vue component rendering the WOPI iframe with origin validation
  moodyjmz
  committed
  c3f409b
- ✨ feat: add editor entry point mounting Editor component
  moodyjmz
  committed
  84bc518
- 🔧 chore: add editor and settings-admin entry points to vite config
  moodyjmz
  committed
  acde8d0
- 🐛 fix: correct query-string separator in buildEditorUrl
  moodyjmz
  committed
  30e82f7
- 🔒 fix(security): prevent XPath injection via file extension in getUrlSrc
  moodyjmz
  committed
  50e5082
- 🔒 fix(security): validate wopi_url scheme in setAdmin to limit SSRF surface
  moodyjmz
  committed
  dcee5c1
- 🔒 fix(security): fix range-request handling and close file handles in putFile
  moodyjmz
  committed
  00092c7
- ✨ feat: add hourly CleanupJob to purge expired WOPI tokens
  moodyjmz
  committed
  f9ef09d
- ✨ feat: add office_wopi_locks migration for WOPI lock storage
  moodyjmz
  committed
  b06c96f
- ✨ feat: add WopiLock entity and WopiLockMapper
  moodyjmz
  committed
  3da9df9
- ✨ feat: add WOPI lock operations (Lock, Unlock, RefreshLock, GetLock)
  moodyjmz
  committed
  6edbf71
- 🔒 fix(security): enforce WOPI lock and version checks on PutFile
  moodyjmz
  committed
  478ef46
- ♻️ refactor: extend CleanupJob to also purge expired WOPI locks
  moodyjmz
  committed
  cfb166d
- 🔧 chore: move background-jobs and settings registration to info.xml
  moodyjmz
  committed
  eb295ce
- 🐛 fix: guard fclose() on php://input after putContent()
  moodyjmz
  committed
  76c305f
- 🐛 fix: set Content-Type: application/octet-stream on WOPI GetFile responses
  moodyjmz
  committed
  e79a205
- 🔒 fix(security): reject WOPI lock operations on read-only tokens
  moodyjmz
  committed
  39a8b8a
- ✨ feat: add hide_download support to WOPI token row
  moodyjmz
  committed
  1fa66f5
- ✨ feat: add public ShareController for WOPI share-link access
  moodyjmz
  committed
  0e5b312
- ✨ feat: propagate hideDownload flags in CheckFileInfo response
  moodyjmz
  committed
  80ceae7
- 🔒 fix(security): sanitize guestName and document P3 known gaps
  moodyjmz
  committed
  aed5d98
- ✨ feat: add DiscoveryService::getSupportedMimeTypes()
  moodyjmz
  committed
  b742219
- ✨ feat: issue user token for authenticated visitors on share links
  moodyjmz
  committed
  94d53a2
- ✨ feat: inject file-actions script and MIME types on Files app pages
  moodyjmz
  committed
  ab61728
- ✨ feat: register Files app file action to open documents in Office
  moodyjmz
  committed
  5b5582c
- 🐛 fix: use history.back() on UI_Close instead of window.close()
  moodyjmz
  committed
  7ce6645
- 📝 docs: replace scaffold README with WOPI backend developer guide
  moodyjmz
  committed
  bb72b4e
- 🐛 fix: resolve genuine Psalm errors across WOPI backend
  
  moodyjmz
  and
  claude
  committed
  e4fca16
- 🔧 chore: upgrade Psalm to v6 and add baseline for false positives
  
  moodyjmz
  and
  claude
  committed
  bba5691
- 🎨 style: apply PHP CS Fixer (import ordering, docblock alignment)
  
  moodyjmz
  and
  claude
  committed
  2370274
- ✨ feat(wopi): implement RenameFile and fix CheckFileInfo capability flags
  
  moodyjmz
  and
  claude
  committed
  5fa6685
- 📝 docs: update README — WOPI spec compliance table, generic setup
  
  moodyjmz
  and
  claude
  committed
  263a10a
- 🐛 fix: add missing Application import in LoadAdditionalScriptsListener
  
  moodyjmz
  and
  claude
  committed
  90f41ff
- 🔒 fix(wopi): close C-1 path traversal, H-3 unlocked writes, H-2 lock TOCTOU
  
  moodyjmz
  and
  claude
  committed
  25c02c7
- 🔧 fix(psalm): remove stale PossiblyUnusedMethod baseline entry for TokenManager
  
  moodyjmz
  and
  claude
  committed
  05e6154
- chore(psalm): bump phpVersion to 8.3 and regenerate baseline
  
  moodyjmz
  and
  claude
  committed
  54a3089
- chore(deps): register @nextcloud/sharing as a root dependency
  
  moodyjmz
  and
  claude
  committed
  54c57b5
- style: fix eslint violations in AdminSettings and Editor
  
  moodyjmz
  and
  claude
  committed
  040af21
- fix(settings): register admin settings routes as FrontpageRoute
  
  moodyjmz
  and
  claude
  committed
  96be5a4
- feat(wopi): add public_wopi_url and callback_url for split-URL deployments
  
  moodyjmz
  and
  claude
  committed
  1acda06
- test(bootstrap): split standalone unit tests from in-server integration tests
  
  moodyjmz
  and
  claude
  committed
  108ccd2
- test(discovery): add DiscoveryService unit tests and discovery fixtures
  
  moodyjmz
  and
  claude
  committed
  2d89653
- test(spec): add WOPI coverage matrix and spec-coverage report script
  
  moodyjmz
  and
  claude
  committed
  a7b1788
- test(wopi): add WopiController lock and rename-file unit tests
  
  moodyjmz
  and
  claude
  committed
  a211d1e
- test(token): add TokenManager unit tests
  
  moodyjmz
  and
  claude
  committed
  c77a5ba
- fix(tests): make integration bootstrap independent of mount layout
  
  moodyjmz
  and
  claude
  committed
  f207385
- test(integration): add WOPI integration suite running in a server tree
  
  moodyjmz
  and
  claude
  committed
  8965a4e
- fix(psalm): drop stale baseline entry for DiscoveryService::resetCache
  
  moodyjmz
  and
  claude
  committed
  df36b07
- fix(share): treat null and empty password as unprotected in openShare
  
  moodyjmz
  and
  claude
  committed
  8848aa4
- fix(wopi): reject backslash-based names in RenameFile's traversal guard
  
  moodyjmz
  and
  claude
  committed
  2fa0aff
- style: fix import ordering in SettingsController
  
  moodyjmz
  and
  claude
  committed
  74fa78b
- chore(psalm): prune baseline/config entries left stale by the main rebase
  
  moodyjmz
  and
  claude
  committed
  c445761
- fix(wopi): submit editor iframe via hidden POST form, not GET src
  moodyjmz
  committed
  90cd043
- fix(tests): repoint OCP stub autoload at the vendor-bin namespace
  moodyjmz
  committed
  a015055
- fix: 🐛 allow the editor origin in the editor page CSP
  
  moodyjmz
  and
  claude
  committed
  e16745e

Commits

Commits on Oct 23, 2026