Konrad Neitzel and Cursor
69af4d19c8
Serve Access Gate denied HTML as 200 for iframe display.
...
AppAPI sets frame-ancestors none on 403 proxy responses, which blanked the ExApp iframe; keep API denials as 403.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 18:43:01 +02:00
Konrad Neitzel and Cursor
92d8efea47
Key Access Gate positive cache by user and Required Groups set.
...
Avoids reusing an allow decision after the configured group list changes on a live gate.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 17:14:07 +02:00
Konrad Neitzel and Cursor
3980263146
Add Access Gate for Required Groups on ExApp HTTP traffic.
...
AppAPI cannot restrict ExApps by Nextcloud group; enforce any-of membership in-library with Wrap/Check, deploy-env helpers, and positive-only cache.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 17:10:58 +02:00
Konrad Neitzel and Cursor
7921694782
Extract AppAPI auth and OCS preferences from CheckDNS.
...
Publish gonexapp v1 with Credentials, OCSClient, and parameterized
AppAPIPreferences so ExApps share Nextcloud ExApp plumbing per ADR 0013.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-26 19:14:22 +02:00
