Implement token exchange from OCM#57234

Open

enriquepablo wants to merge 65 commits intonextcloud:masterfrom

enriquepablo:master

Commits on May 5, 2026

feat: Bearer auth aware Sabre HTTP client

enriquepablo
authored and
mickenordin
committed
feat(dav): Add token endpoint to exchange refresh tokens for access tokens

enriquepablo
authored and
mickenordin
committed
feat(dav): Add Bearer auth backend for webdav requests

enriquepablo
authored and
mickenordin
committed
feat(dav): New method doTryTokenLogin to allow to try token login with token rather that request

enriquepablo
authored and
mickenordin
committed
feat(federatedfilesharing): Create permanent refresh token when creating a remote share

enriquepablo
authored and
mickenordin
committed
feat(federatedfilesharing): When a remote requests a share with a token, it may be an access token

enriquepablo
authored and
mickenordin
committed
feat(files_sharing): When requesting a remote share with bearer auth, get an access token to use as bearer token

enriquepablo
authored and
mickenordin
committed
feat: adapt to guzzle api

enriquepablo
authored and
mickenordin
committed
feat(cloud_federation_api): adapt to new format for share creation

enriquepablo
authored and
mickenordin
committed
feat(cloud_federation_api): support multi protocol for share creation

enriquepablo
authored and
mickenordin
committed
fix(dav): data sent to token endpoint must be application/x-www-form-urlencoded

enriquepablo
authored and
mickenordin
committed
fix(dav): when receiving a share, account for the must-exchange-token requirement, in addition to the exchaange-token capability

enriquepablo
authored and
mickenordin
committed
fix(federatedfilesharing): POSTs to token endpoint should be signed

enriquepablo
authored and
mickenordin
committed
fix(federatedfilesharing): POSTs to token endpoint MUST be signed

enriquepablo
authored and
mickenordin
committed
fix: federated share provider tests

enriquepablo
authored and
mickenordin
committed
fix: share manager test

enriquepablo
authored and
mickenordin
committed
fix(federatedfilesharing): fix federated share provider tests

enriquepablo
authored and
mickenordin
committed
fix(federatedfilesharing): fixing federated share provider tests

enriquepablo
authored and
mickenordin
committed
fix(federatedfilesharing): fixing federated share provider tests

enriquepablo
authored and
mickenordin
committed
fix: fixing code style

enriquepablo
authored and
mickenordin
committed
fix: fixing openapi specs

enriquepablo
authored and
mickenordin
committed
fix: fix psalm issues

enriquepablo
authored and
mickenordin
committed
fix: reorder import

enriquepablo
authored and
mickenordin
committed
fix(dav): do not import from NCU ns

enriquepablo
authored and
mickenordin
committed
fix: fix sqlite integration tests

enriquepablo
authored and
mickenordin
committed
fix(federatedfilesharing): order of imports

enriquepablo
authored and
mickenordin
committed
fix: fix session tests using Session::loginWithToken

enriquepablo
authored and
mickenordin
committed
fix: fix public key token provider test

enriquepablo
authored and
mickenordin
committed
fix: Fixed undefined $request variable

enriquepablo
authored and
mickenordin
committed
fix(files_external): Added missing doTryTokenLogin() method to implement the IUserSession interface

enriquepablo
authored and
mickenordin
committed
fix: Fixed parent::getType() to use ->getter('type') to avoid Psalm magic method detection issue

enriquepablo
authored and
mickenordin
committed
fix: Added getTokenEndPoint() and setTokenEndPoint() methods that should have been moved from ICapabilityAwareOCMProvider

enriquepablo
authored and
mickenordin
committed
fix: fix session tests

enriquepablo
authored and
mickenordin
committed
fix(federatedfilesharing): remove unused import

enriquepablo
authored and
mickenordin
committed
fix: fix user session tests

enriquepablo
authored and
mickenordin
committed
test: test token controller

enriquepablo
authored and
mickenordin
committed
test: test doTryTokenLogin method

enriquepablo
authored and
mickenordin
committed
fix(dav): remove unused import in TokenController test

enriquepablo
authored and
mickenordin
committed
feat(dav): refresh expired tokens

enriquepablo
authored and
mickenordin
committed
fix(files_sharing): refactor refreshing access tokens

enriquepablo
authored and
mickenordin
committed
fix(dav): keep refresh tokens in its own db table

enriquepablo
authored and
mickenordin
committed
fix(dav): validate token exchange response before using it

enriquepablo
authored and
mickenordin
committed
fix(dav): keep refresh tokens in its own db table, add migration for old shares

enriquepablo
authored and
mickenordin
committed
fix(files_sharing): keep access tokens in its own field in the external shares table

enriquepablo
authored and
mickenordin
committed
fix(files_sharing): prevent concurrent requests to refresh token independently

enriquepablo
authored and
mickenordin
committed
fix(dav): cleanup expired access tokens

enriquepablo
authored and
mickenordin
committed
fix(files_sharing): prevent infinite loop trying unsuccessfully to refresh access tokens

enriquepablo
authored and
mickenordin
committed
fix(files_sharing): missing autoloads

enriquepablo
authored and
mickenordin
committed
test(dav): test bearer token login

enriquepablo
authored and
mickenordin
committed
test(dav): test cleanup of expired access tokens

enriquepablo
authored and
mickenordin
committed
test(federatedfilesharing): test federated shares

enriquepablo
authored and
mickenordin
committed
test(files_sharing): test access tokens

enriquepablo
authored and
mickenordin
committed
fix(files_sharing): correct access level for appConfig

enriquepablo
authored and
mickenordin
committed
fix: backwards compatibility for shares from instances before upgrading

enriquepablo
authored and
mickenordin
committed
fix: backwards compatibility for shares for instances before upgrading

enriquepablo
authored and
mickenordin
committed
fix: backwards compatibility for shares for instances before upgrading

enriquepablo
authored and
mickenordin
committed
fix: re-order imports

enriquepablo
authored and
mickenordin
committed
fix: avoid changing the IUserSession interface

enriquepablo
authored and
mickenordin
committed
fix[dav]: composer autoload

enriquepablo
authored and
mickenordin
committed
fix[federatedfilesharing]: replace deprecated import

enriquepablo
authored and
mickenordin
committed
chore: bump 3rdparty and update psalm baseline
mickenordin
committed
fix(dav): respect storage scheme when discovering token endpoint
mickenordin
committed
fix(auth): allow OCM access tokens via Bearer header
mickenordin
committed
chore: add missing `Override` attributes flagged by psalm
mickenordin
committed
fix(dav): regenerate composer autoloader for new migration
mickenordin
committed