5.0.1

Changes in 5.0.1

Summary

• Bugfix - Update reva to v2.19.4: #8781
• Bugfix - Fix restarting of postprocessing: #8782
• Bugfix - Fix the create personal space cache: #8799
• Bugfix - Make IDP cookies same site strict: #8716

Details

• Bugfix - Update reva to v2.19.4: #8781

  We updated reva to v2.19.4

  • Bugfix cs3org/reva#4612: Use gateway selector in jsoncs3 to scale the service

  Https://github.com/owncloud/ocis/pull/8787

  We updated reva to v2.19.3

  • Bugfixcs3org/reva#4607: Mask user email in output

  #8781

• Bugfix - Fix restarting of postprocessing: #8782

  When an upload is not found, the logic to restart postprocessing was bunked.
  Additionally we extended the upload sessions command to be able to restart the
  uploads without using a second command.

  NOTE: This also includes a breaking fix for the deprecated ocis storage-users uploads list command

  #8782

• Bugfix - Fix the create personal space cache: #8799

  We fixed a problem with the config for the create personal space cache which
  resulted in the cache never being used.

  #8799

• Enhancement - Make IDP cookies same site strict: #8716

  To enhance the security of our application and prevent Cross-Site Request
  Forgery (CSRF) attacks, we have updated the SameSite attribute of the build in
  Identity Provider (IDP) cookies to Strict.

  This change restricts the browser from sending these cookies with any cross-site
  requests, thereby limiting the exposure of the user's session to potential
  threats.

  This update does not impact the existing functionality of the application but
  provides an additional layer of security where needed.

  This only affects cookies set by the built-in IDP. Production systems should not be affected.

  #8716