Initial commit: OCA Server Auth packages (29 packages)

This commit is contained in:
Ernad Husremovic 2025-08-29 15:43:06 +02:00
commit 3ed80311c4
1325 changed files with 127292 additions and 0 deletions

View file

@ -0,0 +1 @@
* Florian Kantelberg <florian.kantelberg@initos.com>

View file

@ -0,0 +1,6 @@
This module implements possibilities to share specific secrets with external users. This bases on the vault implementation and the generated RSA key pair.
Share
~~~~~
This allows an user to share a secret with external users. A share can be generated from a vault entry or directly created by an user. The secret is symmetrically encrypted by a key derived from a pin. To grant access the user has to transmit the link and pin with the external. If either the access counter reaches 0 or the share expires it will be deleted automatically. Due to the usage of a numeric pin and the browser side decryption a share is vulnerable to brute-force attacks and shouldn't be used as a permanent storage for secrets. For long time uses the user should create an account and a vault should be used.

View file

@ -0,0 +1 @@
* Secure the download of the encrypted file behind a challenge/response