konrad/go-nc-exapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6 Commits 2 Branches 6 Tags
198ef0e204c51c12aa164b65e55aea5c62afc850
Commit Graph
4 Commits
Author SHA1 Message Date
Konrad NeitzelandCursor cf3b396398 Document consumer README skeleton and add package Examples. 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-27 22:00:02 +02:00
Konrad NeitzelandCursor 69af4d19c8 Serve Access Gate denied HTML as 200 for iframe display. 
AppAPI sets frame-ancestors none on 403 proxy responses, which blanked the ExApp iframe; keep API denials as 403.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-27 18:43:01 +02:00
Konrad NeitzelandCursor 92d8efea47 Key Access Gate positive cache by user and Required Groups set. 
Avoids reusing an allow decision after the configured group list changes on a live gate.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-27 17:14:07 +02:00
Konrad NeitzelandCursor 3980263146 Add Access Gate for Required Groups on ExApp HTTP traffic. 
AppAPI cannot restrict ExApps by Nextcloud group; enforce any-of membership in-library with Wrap/Check, deploy-env helpers, and positive-only cache.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-27 17:10:58 +02:00