Konrad Neitzel and Cursor
fc2f9f63c2
Add AppAPI Notifications and Users and Groups reads.
...
ExApps can Send/SendTo a bell for one Recipient and read group membership and directory OCS as the Requesting user, with Access Gate using UserGroups.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-28 14:44:42 +02:00
Konrad Neitzel and Cursor
984b0c2335
Skip /js/ in the Access Gate and set denied-page CSP so Denied UI can render.
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-28 12:39:47 +02:00
Konrad Neitzel and Cursor
cf3b396398
Document consumer README skeleton and add package Examples.
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 22:00:02 +02:00
Konrad Neitzel and Cursor
69af4d19c8
Serve Access Gate denied HTML as 200 for iframe display.
...
AppAPI sets frame-ancestors none on 403 proxy responses, which blanked the ExApp iframe; keep API denials as 403.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 18:43:01 +02:00
Konrad Neitzel and Cursor
92d8efea47
Key Access Gate positive cache by user and Required Groups set.
...
Avoids reusing an allow decision after the configured group list changes on a live gate.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 17:14:07 +02:00
Konrad Neitzel and Cursor
3980263146
Add Access Gate for Required Groups on ExApp HTTP traffic.
...
AppAPI cannot restrict ExApps by Nextcloud group; enforce any-of membership in-library with Wrap/Check, deploy-env helpers, and positive-only cache.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 17:10:58 +02:00
