9 Commits

Include renames

Author	SHA1	Message	Date
Linus Rath	a2e36e6e86	fix: open read-only documents in ONLYOFFICE without the -103 warning #1187	2026-10-08 14:32:39 +02:00
Linus Rath	7e1a659c06	fix: open the WOPI editor behind a reverse proxy with split addresses #1130	2026-10-04 22:16:29 +02:00
Linus Rath	5ce8c89c51	fix: open and save files shared with you in the office editor #1094	2026-09-26 22:28:34 +02:00
Linus Rath	204cd09951	fix: end office editor sessions when the user signs out ... A WOPI token carries the user's credentials to the editor server and stayed valid for its whole six-hour lifetime, so an editor opened before signing out could still read and save the document afterwards. Each token now records the browser (a random id in an HttpOnly cookie, hashed) and account slot that opened it. Signing out records a revocation time for that browser and slot, or for every slot on a full sign-out, and WOPI calls with a token minted before it are refused. Signing out on another device leaves this browser's editors alone. Revocations live in the state directory, so they survive a restart and reach replicas sharing the state volume, and are dropped once the tokens they cover have expired.	2026-09-26 16:40:46 +02:00
Linus Rath	a4bc303f45	fix: stop office attachment launch hanging while checking the blob #1047	2026-09-23 19:03:37 +02:00
Linus Rath	7e5b996ee6	feat: open office attachments in mail read-only in the document editor #1047	2026-09-23 19:01:47 +02:00
Linus Rath	b7f53a3a8b	fix: bind a purpose into encrypted payloads (GHSA-cqqx-mjcf-mh55)	2026-09-17 20:16:51 +02:00
Linus Rath	1e9b6ac497	fix: FileNode + blob round-trip in dev mock JMAP, WOPI support for same-origin dev server	2026-08-31 23:45:27 +02:00
Linus Rath	ca7fbbe416	feat: WOPI office document editing in Files (Collabora/OnlyOffice/EuroOffice) #425	2026-08-31 23:16:19 +02:00