Changes in 5.0.1

Summary

• Bugfix - Update reva to v2.19.4: #8781
• Bugfix - Fix restarting of postprocessing: #8782
• Bugfix - Fix the create personal space cache: #8799
• Bugfix - Make IDP cookies same site strict: #8716

Details

• Bugfix - Update reva to v2.19.4: #8781

  We updated reva to v2.19.4

  • Bugfix cs3org/reva#4612: Use gateway selector in jsoncs3 to scale the service

  Https://github.com/owncloud/ocis/pull/8787

  We updated reva to v2.19.3

  • Bugfixcs3org/reva#4607: Mask user email in output

  https://github.com/owncloud/ocis/pull/8781

• Bugfix - Fix restarting of postprocessing: #8782

  When an upload is not found, the logic to restart postprocessing was bunked. Additionally we extended the upload sessions command to be able to restart the uploads without using a second command.

  NOTE: This also includes a breaking fix for the deprecated ocis storage-users uploads list command

  https://github.com/owncloud/ocis/pull/8782

• Bugfix - Fix the create personal space cache: #8799

  We fixed a problem with the config for the create personal space cache which resulted in the cache never being used.

  https://github.com/owncloud/ocis/pull/8799

• Enhancement - Make IDP cookies same site strict: #8716

  To enhance the security of our application and prevent Cross-Site Request Forgery (CSRF) attacks, we have updated the SameSite attribute of the build in Identity Provider (IDP) cookies to Strict.

  This change restricts the browser from sending these cookies with any cross-site requests, thereby limiting the exposure of the user’s session to potential threats.

  This update does not impact the existing functionality of the application but provides an additional layer of security where needed.

  This only affects cookies set by the built-in IDP. Production systems should not be affected.

  https://github.com/owncloud/ocis/pull/8716