@sync-in/server 1.9.3 → 1.10.0

package/CHANGELOG.md

@@ -1,4 +1,45 @@
 
+## [1.10.0](https://github.com/Sync-in/server/compare/v1.9.6...v1.10.0) (2026-01-07)
+
+🔥🚀 Collabora Online integration
+
+### Features
+
+* **backend/frontend:files:** improve file locking logic, enhance compatibility across apps such as WebDAV and Collabora and OnlyOffice ([9eb5a17](https://github.com/Sync-in/server/commit/9eb5a17b26cc6c0928be6a16c71002e9bd4082de))
+* **files:** add Collabora Online integration to Docker setup ([abe4fa4](https://github.com/Sync-in/server/commit/abe4fa4f89edbb79265d3cdb94aa01725a35ddce))
+* **files:** collabora online integration ([dabeff6](https://github.com/Sync-in/server/commit/dabeff62d522cd2af4acb93c20d287221e0f2c30))
+* **files:** Collabora Online integration, multi-editor support, and improved file locking ([e6bedc1](https://github.com/Sync-in/server/commit/e6bedc1bff837ce477ff4e791f78e66e038209b2))
+* **files:** improve editor selection and add editor preference support ([8fea357](https://github.com/Sync-in/server/commit/8fea357925a6671393d4f02b1ff790134ca87912))
+* **frontend/backend:files:** simplify file opening flow and improve readonly handling ([6563f44](https://github.com/Sync-in/server/commit/6563f445441c755f392508d98caa9ba261e5c2d7))
+* **links:** allow direct access to spaces via public links; add file preview/edit/download; improve password validation ([5102e9a](https://github.com/Sync-in/server/commit/5102e9ae6b17b9924969839c69b7cbdc2421c518))
+
+
+### Bug Fixes
+
+* **backend:files-scheduler:** correct ordering of recent files ([aea6bcd](https://github.com/Sync-in/server/commit/aea6bcdf79763bf392b105e1c806bb70da0f00be))
+* **backend:shares:** clear cached permissions when share link permissions are changed ([95a455b](https://github.com/Sync-in/server/commit/95a455b07d44ac4761e1f9583f8be7d90939e614))
+* **backend:spaces:** apply MODIFY permission for PUT requests on existing files instead of ADD when the resource exists ([e73ae93](https://github.com/Sync-in/server/commit/e73ae93251e090f4f9f4aaf455f5098a3ee47a4b))
+* **backend:webdav:** properly handle HEAD requests on directories, match lock source file when the file is a space root and extend lock owner information ([f1f4836](https://github.com/Sync-in/server/commit/f1f4836d4038eb3960a1f08cc8579176d05d1b55))
+* **docker:collabora:** add capabilities for debian based hosts ([9275df6](https://github.com/Sync-in/server/commit/9275df653acde8a8abfa6dad5c92859a064021be))
+* **frontend:auth:** ensure server config is initialized during authentication to prevent OTP prompt from not appearing on desktop ([e0053ae](https://github.com/Sync-in/server/commit/e0053ae608954be7a1a85b7736e150c03ecb43cb))
+* **frontend:files:** adjust badge styles to use `white-space-normal` for consistent text wrapping ([615ea00](https://github.com/Sync-in/server/commit/615ea00bc79efe0cb3afa4e905dc3e0226336b84))
+* **frontend:files:** correct writeable condition ([288193e](https://github.com/Sync-in/server/commit/288193e3d8f0afb95db9212a33579fb33867bb30))
+* **frontend:files:** load tasks only when a user is logged in to prevent interceptor redirects when refreshing a public link URL ([bda58d6](https://github.com/Sync-in/server/commit/bda58d6094659231ead9c7c51878e57ed13b3d87))
+* **frontend:i18n:** remove explicit 'en' locale definition to prevent bs-datepicker translation conflicts ([13529f1](https://github.com/Sync-in/server/commit/13529f1b7c68e468c3aa195c81c4ce20bcd31c66))
+* **frontend:spaces:** display deactivation date when space is disabled ([7df2535](https://github.com/Sync-in/server/commit/7df2535f3f54e3ec6bced3525b16fb90edf1560b))
+
+## [1.9.6](https://github.com/Sync-in/server/compare/v1.9.5...v1.9.6) (2025-12-16)
+
+### Bug Fixes
+
+* **backend:files:** skip adding recents for trashed files ([c445196](https://github.com/Sync-in/server/commit/c445196914b2d351fba9218698a24496b1d6036c))
+* **backend:schedulers:** resolve scheduled methods being skipped because of @Timeout decorator overlap ([50f4140](https://github.com/Sync-in/server/commit/50f4140a7b0b478e6b499ea8884b43f13595bb71))
+* **frontend:files:** enable autoplay for video in media viewer component ([20fe25f](https://github.com/Sync-in/server/commit/20fe25fba00987994076d09489febd5593e08cef))
+* **frontend:files:** remove hidden class from buttons for consistent visibility across breakpoints ([a60538a](https://github.com/Sync-in/server/commit/a60538ad01c675dacdac7ed4d80ca2bdf5f369ba))
+* **frontend:files:** update file metadata timestamps on save and align OnlyOffice state change handlers ([db768e1](https://github.com/Sync-in/server/commit/db768e14452f4712df9f443350c214e0700b7270))
+* **frontend:search:** improve search input layout and update filter button visibility for responsiveness ([09ebce6](https://github.com/Sync-in/server/commit/09ebce612fa2d72699a4d60bf9896f8e3c0fc4e4))
+* **frontend:spaces:** show disabled space message to space managers ([f8bcdf7](https://github.com/Sync-in/server/commit/f8bcdf7fdd4b25abc2ba4b74715adbb0ae04a3e3))
+
 ## [1.9.3](https://github.com/Sync-in/server/compare/v1.9.1...v1.9.3) (2025-12-07)
 
 ### Security Fixes
@@ -10,10 +51,6 @@
 * **frontend:files:** fix DataTransfer usage after async operations and delay overwrite until analysis completes to restore overwrite on dropped files ([d9935e5](https://github.com/Sync-in/server/commit/d9935e5a3887448635c30fd49f22657461177610))
 * **frontend:styles:** add min-width on app-auth background class ([dffd5e5](https://github.com/Sync-in/server/commit/dffd5e5c7a1a65994970bedf33a95dd00827aa94))
 
-### Community Highlights ❤️
-
-We would like to thank @x0root for reporting this vulnerability and helping improve the security of the project.
-
 ## [1.9.1](https://github.com/Sync-in/server/compare/v1.8.1...v1.9.1) (2025-11-25)
 
 ### Features

package/environment/environment.dist.yaml

@@ -151,16 +151,26 @@ applications:
       # enable onlyoffice integration
       # default: false
       enabled: false
-      # For an external server (e.g., https://onlyoffice.domain.com), remember the url must be accessible from browser!
-      # If externalServer is empty (case of official docker compose), we use the local instance
-      # default: null
-      externalServer:
       # Secret used for jwt tokens, it must be the same on the onlyoffice server
       # required
       secret: onlyOfficeSecret
+      # If no external server is configured, the local Nginx service from the Docker Compose setup is used.
+      # If an external server is configured, it will be used instead.
+      # Note: when using an external server (e.g. https://onlyoffice.domain.com), make sure it is accessible from the client/browser.
+      # default: null
+      externalServer:
       # If you use https, set to `true`.
-      # default: `false`
+      # default: false
       verifySSL: false
+    collabora:
+      # enable collabora online integration
+      # default: false
+      enabled: false
+      # If no external server is configured, the local Nginx service from the Docker Compose setup is used.
+      # If an external server is configured, it will be used instead.
+      # Note: when using an external server (e.g. https://collabora.domain.com), make sure it is accessible from the client/browser.
+      # default: null
+      externalServer:
   appStore:
     # repository: `public` | `local`
     # default: `public`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sync-in/server",
-  "version": "1.9.3",
+  "version": "1.10.0",
   "description": "The secure, open-source platform for file storage, sharing, collaboration, and sync",
   "author": {
     "name": "Johan Legrand",
@@ -19,7 +19,7 @@
     "!win32"
   ],
   "engines": {
-    "node": ">=22.15.0"
+    "node": ">= 22"
   },
   "funding": [
     {
@@ -76,38 +76,37 @@
     "@fastify/helmet": "13.0.2",
     "@fastify/multipart": "9.3.0",
     "@fastify/send": "4.1.0",
-    "@fastify/static": "8.3.0",
+    "@fastify/static": "9.0.0",
     "@knaadh/nestjs-drizzle-mysql2": "1.2.0",
     "@lukeed/ms": "2.0.2",
     "@nestjs/axios": "4.0.1",
-    "@nestjs/common": "11.1.9",
+    "@nestjs/common": "11.1.11",
     "@nestjs/config": "4.0.2",
-    "@nestjs/core": "11.1.9",
-    "@nestjs/jwt": "11.0.1",
+    "@nestjs/core": "11.1.11",
+    "@nestjs/jwt": "11.0.2",
     "@nestjs/passport": "11.0.5",
-    "@nestjs/platform-fastify": "11.1.9",
-    "@nestjs/platform-socket.io": "11.1.9",
-    "@nestjs/schedule": "6.0.1",
-    "@nestjs/websockets": "11.1.9",
+    "@nestjs/platform-fastify": "11.1.11",
+    "@nestjs/platform-socket.io": "11.1.11",
+    "@nestjs/schedule": "6.1.0",
+    "@nestjs/websockets": "11.1.11",
     "@socket.io/cluster-adapter": "0.3.0",
     "@socket.io/redis-adapter": "8.3.0",
-    "@types/text-to-svg": "3.1.4",
     "archiver": "7.0.1",
     "bcryptjs": "3.0.3",
     "class-transformer": "0.5.1",
     "class-validator": "0.14.3",
     "deepmerge": "4.3.1",
-    "drizzle-kit": "0.31.7",
-    "drizzle-orm": "0.44.7",
-    "fast-xml-parser": "5.3.2",
-    "fs-extra": "11.3.2",
+    "drizzle-kit": "0.31.8",
+    "drizzle-orm": "0.45.1",
+    "fast-xml-parser": "5.3.3",
+    "fs-extra": "11.3.3",
     "html-to-text": "9.0.5",
     "js-yaml": "4.1.1",
-    "ldapts": "8.0.11",
+    "ldapts": "8.1.3",
     "mime-types": "3.0.2",
-    "mysql2": "3.15.3",
+    "mysql2": "3.16.0",
     "nestjs-pino": "4.5.0",
-    "nodemailer": "7.0.11",
+    "nodemailer": "7.0.12",
     "passport-http": "0.3.0",
     "passport-jwt": "4.0.1",
     "passport-local": "1.0.0",
@@ -117,7 +116,7 @@
     "redis": "5.10.0",
     "sax": "1.4.3",
     "sharp": "0.34.5",
-    "socket.io": "4.8.1",
+    "socket.io": "4.8.3",
     "tar": "7.5.2",
     "text-to-svg": "3.1.5",
     "time2fa": "1.4.2",

package/server/app.bootstrap.js

@@ -86,7 +86,7 @@ async function appBootstrap() {
         prefixAvoidTrailingSlash: true
     });
     /* SECURITY */ await app.register(_helmet.default, {
-        contentSecurityPolicy: (0, _appconstants.CONTENT_SECURITY_POLICY)(_configenvironment.configuration.applications.files.onlyoffice.externalServer)
+        contentSecurityPolicy: (0, _appconstants.CONTENT_SECURITY_POLICY)(_configenvironment.configuration.applications.files.onlyoffice.externalServer, _configenvironment.configuration.applications.files.collabora.externalServer)
     });
     /* COOKIES */ // we use csrf secret to unsign csrf cookie
     await app.register(_cookie.default, {

package/server/app.bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../backend/src/app.bootstrap.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport fastifyCookie from '@fastify/cookie'\nimport fastifyHelmet from '@fastify/helmet'\nimport multipart from '@fastify/multipart'\nimport { ClassSerializerInterceptor, ValidationPipe } from '@nestjs/common'\nimport { NestFactory, Reflector } from '@nestjs/core'\nimport { FastifyAdapter, NestFastifyApplication } from '@nestjs/platform-fastify'\nimport { FastifyRequest } from 'fastify'\nimport { Logger, LoggerErrorInterceptor } from 'nestjs-pino'\nimport { CONTENT_SECURITY_POLICY } from './app.constants'\nimport { AppModule } from './app.module'\nimport { HTTP_WEBDAV_METHOD } from './applications/applications.constants'\nimport { WEBDAV_NS, WEBDAV_SPACES } from './applications/webdav/constants/routes'\nimport { IS_TEST_ENV, STATIC_PATH } from './configuration/config.constants'\nimport { configuration } from './configuration/config.environment'\nimport { WebSocketAdapter } from './infrastructure/websocket/adapters/web-socket.adapter'\n\nexport async function appBootstrap(): Promise<NestFastifyApplication> {\n  /* APP */\n  const fastifyAdapter = new FastifyAdapter({\n    logger: false,\n    trustProxy: configuration.server.trustProxy,\n    routerOptions: {\n      ignoreTrailingSlash: true,\n      maxParamLength: 256\n    },\n    bodyLimit: 26214400 /* 25 MB */\n  })\n  const app: NestFastifyApplication = await NestFactory.create<NestFastifyApplication>(AppModule, fastifyAdapter, {\n    bufferLogs: true\n  })\n\n  /* NestJS starts listening for shutdown hooks */\n  app.enableShutdownHooks()\n\n  /* Fastify instance */\n  const fastifyInstance = fastifyAdapter.getInstance()\n\n  /* LOGGER */\n  app.useLogger(IS_TEST_ENV ? ['fatal'] : app.get(Logger))\n\n  /* PARSER */\n  // xml body parser is used for webdav methods\n  app.useBodyParser(['application/xml', 'text/xml'])\n  // add webdav methods\n  for (const method of Object.values(HTTP_WEBDAV_METHOD)) {\n    fastifyInstance.addHttpMethod(method, { hasBody: true })\n  }\n  // '*' body parser allow binary data as stream (unlimited body size)\n  fastifyInstance.addContentTypeParser('*', { bodyLimit: 0 }, (_req: FastifyRequest, _payload: FastifyRequest['raw'], done) => done(null))\n\n  // Joplin clients send incorrect `Content-Type` headers when syncing over WebDAV (issue: https://github.com/laurent22/joplin/issues/122499)\n  // This hook intercepts matching requests and sets `application/octet-stream` to ensure compatibility and successful sync.\n  // todo: remove it when fixed on Joplin side\n  fastifyInstance.addHook('onRequest', async (req, _reply) => {\n    if ((req.headers['user-agent'] || '').indexOf('Joplin') !== -1 && req.originalUrl.startsWith(WEBDAV_SPACES[WEBDAV_NS.WEBDAV].route)) {\n      req.headers['content-type'] = 'application/octet-stream'\n    }\n  })\n\n  /* INTERCEPTORS */\n  app.useGlobalInterceptors(\n    new LoggerErrorInterceptor(),\n    new ClassSerializerInterceptor(app.get(Reflector), {\n      excludePrefixes: ['_']\n    })\n  )\n  /* VALIDATION */\n  app.useGlobalPipes(new ValidationPipe({ transform: true, whitelist: true }))\n\n  /* STATIC */\n  app.useStaticAssets({ root: STATIC_PATH, prefixAvoidTrailingSlash: true })\n\n  /* SECURITY */\n  await app.register(fastifyHelmet, { contentSecurityPolicy: CONTENT_SECURITY_POLICY(configuration.applications.files.onlyoffice.externalServer) })\n\n  /* COOKIES */\n  // we use csrf secret to unsign csrf cookie\n  await app.register(fastifyCookie, {\n    secret: configuration.auth.token.csrf.secret,\n    parseOptions: {\n      secure: 'auto',\n      sameSite: configuration.auth.cookieSameSite,\n      httpOnly: true\n    }\n  })\n\n  /* UPLOAD */\n  await app.register(multipart, {\n    preservePath: true,\n    limits: { parts: Infinity, fileSize: configuration.applications.files.maxUploadSize }\n  })\n\n  /* WEBSOCKET */\n  if (!IS_TEST_ENV) {\n    const webSocketAdapter = new WebSocketAdapter(app)\n    await webSocketAdapter.initAdapter()\n    app.useWebSocketAdapter(webSocketAdapter)\n  }\n\n  return app\n}\n"],"names":["appBootstrap","fastifyAdapter","FastifyAdapter","logger","trustProxy","configuration","server","routerOptions","ignoreTrailingSlash","maxParamLength","bodyLimit","app","NestFactory","create","AppModule","bufferLogs","enableShutdownHooks","fastifyInstance","getInstance","useLogger","IS_TEST_ENV","get","Logger","useBodyParser","method","Object","values","HTTP_WEBDAV_METHOD","addHttpMethod","hasBody","addContentTypeParser","_req","_payload","done","addHook","req","_reply","headers","indexOf","originalUrl","startsWith","WEBDAV_SPACES","WEBDAV_NS","WEBDAV","route","useGlobalInterceptors","LoggerErrorInterceptor","ClassSerializerInterceptor","Reflector","excludePrefixes","useGlobalPipes","ValidationPipe","transform","whitelist","useStaticAssets","root","STATIC_PATH","prefixAvoidTrailingSlash","register","fastifyHelmet","contentSecurityPolicy","CONTENT_SECURITY_POLICY","applications","files","onlyoffice","externalServer","fastifyCookie","secret","auth","token","csrf","parseOptions","secure","sameSite","cookieSameSite","httpOnly","multipart","preservePath","limits","parts","Infinity","fileSize","maxUploadSize","webSocketAdapter","WebSocketAdapter","initAdapter","useWebSocketAdapter"],"mappings":"AAAA;;;;CAIC;;;;+BAkBqBA;;;eAAAA;;;+DAhBI;+DACA;kEACJ;wBACqC;sBACpB;iCACgB;4BAER;8BACP;2BACd;uCACS;wBACM;iCACA;mCACX;kCACG;;;;;;AAE1B,eAAeA;IACpB,OAAO,GACP,MAAMC,iBAAiB,IAAIC,+BAAc,CAAC;QACxCC,QAAQ;QACRC,YAAYC,gCAAa,CAACC,MAAM,CAACF,UAAU;QAC3CG,eAAe;YACbC,qBAAqB;YACrBC,gBAAgB;QAClB;QACAC,WAAW,SAAS,SAAS;IAC/B;IACA,MAAMC,MAA8B,MAAMC,iBAAW,CAACC,MAAM,CAAyBC,oBAAS,EAAEb,gBAAgB;QAC9Gc,YAAY;IACd;IAEA,8CAA8C,GAC9CJ,IAAIK,mBAAmB;IAEvB,oBAAoB,GACpB,MAAMC,kBAAkBhB,eAAeiB,WAAW;IAElD,UAAU,GACVP,IAAIQ,SAAS,CAACC,4BAAW,GAAG;QAAC;KAAQ,GAAGT,IAAIU,GAAG,CAACC,kBAAM;IAEtD,UAAU,GACV,6CAA6C;IAC7CX,IAAIY,aAAa,CAAC;QAAC;QAAmB;KAAW;IACjD,qBAAqB;IACrB,KAAK,MAAMC,UAAUC,OAAOC,MAAM,CAACC,yCAAkB,EAAG;QACtDV,gBAAgBW,aAAa,CAACJ,QAAQ;YAAEK,SAAS;QAAK;IACxD;IACA,oEAAoE;IACpEZ,gBAAgBa,oBAAoB,CAAC,KAAK;QAAEpB,WAAW;IAAE,GAAG,CAACqB,MAAsBC,UAAiCC,OAASA,KAAK;IAElI,2IAA2I;IAC3I,0HAA0H;IAC1H,4CAA4C;IAC5ChB,gBAAgBiB,OAAO,CAAC,aAAa,OAAOC,KAAKC;QAC/C,IAAI,AAACD,CAAAA,IAAIE,OAAO,CAAC,aAAa,IAAI,EAAC,EAAGC,OAAO,CAAC,cAAc,CAAC,KAAKH,IAAII,WAAW,CAACC,UAAU,CAACC,qBAAa,CAACC,iBAAS,CAACC,MAAM,CAAC,CAACC,KAAK,GAAG;YACnIT,IAAIE,OAAO,CAAC,eAAe,GAAG;QAChC;IACF;IAEA,gBAAgB,GAChB1B,IAAIkC,qBAAqB,CACvB,IAAIC,kCAAsB,IAC1B,IAAIC,kCAA0B,CAACpC,IAAIU,GAAG,CAAC2B,eAAS,GAAG;QACjDC,iBAAiB;YAAC;SAAI;IACxB;IAEF,cAAc,GACdtC,IAAIuC,cAAc,CAAC,IAAIC,sBAAc,CAAC;QAAEC,WAAW;QAAMC,WAAW;IAAK;IAEzE,UAAU,GACV1C,IAAI2C,eAAe,CAAC;QAAEC,MAAMC,4BAAW;QAAEC,0BAA0B;IAAK;IAExE,YAAY,GACZ,MAAM9C,IAAI+C,QAAQ,CAACC,eAAa,EAAE;QAAEC,uBAAuBC,IAAAA,qCAAuB,EAACxD,gCAAa,CAACyD,YAAY,CAACC,KAAK,CAACC,UAAU,CAACC,cAAc;IAAE;IAE/I,WAAW,GACX,2CAA2C;IAC3C,MAAMtD,IAAI+C,QAAQ,CAACQ,eAAa,EAAE;QAChCC,QAAQ9D,gCAAa,CAAC+D,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,MAAM;QAC5CI,cAAc;YACZC,QAAQ;YACRC,UAAUpE,gCAAa,CAAC+D,IAAI,CAACM,cAAc;YAC3CC,UAAU;QACZ;IACF;IAEA,UAAU,GACV,MAAMhE,IAAI+C,QAAQ,CAACkB,kBAAS,EAAE;QAC5BC,cAAc;QACdC,QAAQ;YAAEC,OAAOC;YAAUC,UAAU5E,gCAAa,CAACyD,YAAY,CAACC,KAAK,CAACmB,aAAa;QAAC;IACtF;IAEA,aAAa,GACb,IAAI,CAAC9D,4BAAW,EAAE;QAChB,MAAM+D,mBAAmB,IAAIC,kCAAgB,CAACzE;QAC9C,MAAMwE,iBAAiBE,WAAW;QAClC1E,IAAI2E,mBAAmB,CAACH;IAC1B;IAEA,OAAOxE;AACT"}
+{"version":3,"sources":["../../backend/src/app.bootstrap.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport fastifyCookie from '@fastify/cookie'\nimport fastifyHelmet from '@fastify/helmet'\nimport multipart from '@fastify/multipart'\nimport { ClassSerializerInterceptor, ValidationPipe } from '@nestjs/common'\nimport { NestFactory, Reflector } from '@nestjs/core'\nimport { FastifyAdapter, NestFastifyApplication } from '@nestjs/platform-fastify'\nimport { FastifyRequest } from 'fastify'\nimport { Logger, LoggerErrorInterceptor } from 'nestjs-pino'\nimport { CONTENT_SECURITY_POLICY } from './app.constants'\nimport { AppModule } from './app.module'\nimport { HTTP_WEBDAV_METHOD } from './applications/applications.constants'\nimport { WEBDAV_NS, WEBDAV_SPACES } from './applications/webdav/constants/routes'\nimport { IS_TEST_ENV, STATIC_PATH } from './configuration/config.constants'\nimport { configuration } from './configuration/config.environment'\nimport { WebSocketAdapter } from './infrastructure/websocket/adapters/web-socket.adapter'\n\nexport async function appBootstrap(): Promise<NestFastifyApplication> {\n  /* APP */\n  const fastifyAdapter = new FastifyAdapter({\n    logger: false,\n    trustProxy: configuration.server.trustProxy,\n    routerOptions: {\n      ignoreTrailingSlash: true,\n      maxParamLength: 256\n    },\n    bodyLimit: 26214400 /* 25 MB */\n  })\n  const app: NestFastifyApplication = await NestFactory.create<NestFastifyApplication>(AppModule, fastifyAdapter, {\n    bufferLogs: true\n  })\n\n  /* NestJS starts listening for shutdown hooks */\n  app.enableShutdownHooks()\n\n  /* Fastify instance */\n  const fastifyInstance = fastifyAdapter.getInstance()\n\n  /* LOGGER */\n  app.useLogger(IS_TEST_ENV ? ['fatal'] : app.get(Logger))\n\n  /* PARSER */\n  // xml body parser is used for webdav methods\n  app.useBodyParser(['application/xml', 'text/xml'])\n  // add webdav methods\n  for (const method of Object.values(HTTP_WEBDAV_METHOD)) {\n    fastifyInstance.addHttpMethod(method, { hasBody: true })\n  }\n  // '*' body parser allow binary data as stream (unlimited body size)\n  fastifyInstance.addContentTypeParser('*', { bodyLimit: 0 }, (_req: FastifyRequest, _payload: FastifyRequest['raw'], done) => done(null))\n\n  // Joplin clients send incorrect `Content-Type` headers when syncing over WebDAV (issue: https://github.com/laurent22/joplin/issues/122499)\n  // This hook intercepts matching requests and sets `application/octet-stream` to ensure compatibility and successful sync.\n  // todo: remove it when fixed on Joplin side\n  fastifyInstance.addHook('onRequest', async (req, _reply) => {\n    if ((req.headers['user-agent'] || '').indexOf('Joplin') !== -1 && req.originalUrl.startsWith(WEBDAV_SPACES[WEBDAV_NS.WEBDAV].route)) {\n      req.headers['content-type'] = 'application/octet-stream'\n    }\n  })\n\n  /* INTERCEPTORS */\n  app.useGlobalInterceptors(\n    new LoggerErrorInterceptor(),\n    new ClassSerializerInterceptor(app.get(Reflector), {\n      excludePrefixes: ['_']\n    })\n  )\n  /* VALIDATION */\n  app.useGlobalPipes(new ValidationPipe({ transform: true, whitelist: true }))\n\n  /* STATIC */\n  app.useStaticAssets({ root: STATIC_PATH, prefixAvoidTrailingSlash: true })\n\n  /* SECURITY */\n  await app.register(fastifyHelmet, {\n    contentSecurityPolicy: CONTENT_SECURITY_POLICY(\n      configuration.applications.files.onlyoffice.externalServer,\n      configuration.applications.files.collabora.externalServer\n    )\n  })\n\n  /* COOKIES */\n  // we use csrf secret to unsign csrf cookie\n  await app.register(fastifyCookie, {\n    secret: configuration.auth.token.csrf.secret,\n    parseOptions: {\n      secure: 'auto',\n      sameSite: configuration.auth.cookieSameSite,\n      httpOnly: true\n    }\n  })\n\n  /* UPLOAD */\n  await app.register(multipart, {\n    preservePath: true,\n    limits: { parts: Infinity, fileSize: configuration.applications.files.maxUploadSize }\n  })\n\n  /* WEBSOCKET */\n  if (!IS_TEST_ENV) {\n    const webSocketAdapter = new WebSocketAdapter(app)\n    await webSocketAdapter.initAdapter()\n    app.useWebSocketAdapter(webSocketAdapter)\n  }\n\n  return app\n}\n"],"names":["appBootstrap","fastifyAdapter","FastifyAdapter","logger","trustProxy","configuration","server","routerOptions","ignoreTrailingSlash","maxParamLength","bodyLimit","app","NestFactory","create","AppModule","bufferLogs","enableShutdownHooks","fastifyInstance","getInstance","useLogger","IS_TEST_ENV","get","Logger","useBodyParser","method","Object","values","HTTP_WEBDAV_METHOD","addHttpMethod","hasBody","addContentTypeParser","_req","_payload","done","addHook","req","_reply","headers","indexOf","originalUrl","startsWith","WEBDAV_SPACES","WEBDAV_NS","WEBDAV","route","useGlobalInterceptors","LoggerErrorInterceptor","ClassSerializerInterceptor","Reflector","excludePrefixes","useGlobalPipes","ValidationPipe","transform","whitelist","useStaticAssets","root","STATIC_PATH","prefixAvoidTrailingSlash","register","fastifyHelmet","contentSecurityPolicy","CONTENT_SECURITY_POLICY","applications","files","onlyoffice","externalServer","collabora","fastifyCookie","secret","auth","token","csrf","parseOptions","secure","sameSite","cookieSameSite","httpOnly","multipart","preservePath","limits","parts","Infinity","fileSize","maxUploadSize","webSocketAdapter","WebSocketAdapter","initAdapter","useWebSocketAdapter"],"mappings":"AAAA;;;;CAIC;;;;+BAkBqBA;;;eAAAA;;;+DAhBI;+DACA;kEACJ;wBACqC;sBACpB;iCACgB;4BAER;8BACP;2BACd;uCACS;wBACM;iCACA;mCACX;kCACG;;;;;;AAE1B,eAAeA;IACpB,OAAO,GACP,MAAMC,iBAAiB,IAAIC,+BAAc,CAAC;QACxCC,QAAQ;QACRC,YAAYC,gCAAa,CAACC,MAAM,CAACF,UAAU;QAC3CG,eAAe;YACbC,qBAAqB;YACrBC,gBAAgB;QAClB;QACAC,WAAW,SAAS,SAAS;IAC/B;IACA,MAAMC,MAA8B,MAAMC,iBAAW,CAACC,MAAM,CAAyBC,oBAAS,EAAEb,gBAAgB;QAC9Gc,YAAY;IACd;IAEA,8CAA8C,GAC9CJ,IAAIK,mBAAmB;IAEvB,oBAAoB,GACpB,MAAMC,kBAAkBhB,eAAeiB,WAAW;IAElD,UAAU,GACVP,IAAIQ,SAAS,CAACC,4BAAW,GAAG;QAAC;KAAQ,GAAGT,IAAIU,GAAG,CAACC,kBAAM;IAEtD,UAAU,GACV,6CAA6C;IAC7CX,IAAIY,aAAa,CAAC;QAAC;QAAmB;KAAW;IACjD,qBAAqB;IACrB,KAAK,MAAMC,UAAUC,OAAOC,MAAM,CAACC,yCAAkB,EAAG;QACtDV,gBAAgBW,aAAa,CAACJ,QAAQ;YAAEK,SAAS;QAAK;IACxD;IACA,oEAAoE;IACpEZ,gBAAgBa,oBAAoB,CAAC,KAAK;QAAEpB,WAAW;IAAE,GAAG,CAACqB,MAAsBC,UAAiCC,OAASA,KAAK;IAElI,2IAA2I;IAC3I,0HAA0H;IAC1H,4CAA4C;IAC5ChB,gBAAgBiB,OAAO,CAAC,aAAa,OAAOC,KAAKC;QAC/C,IAAI,AAACD,CAAAA,IAAIE,OAAO,CAAC,aAAa,IAAI,EAAC,EAAGC,OAAO,CAAC,cAAc,CAAC,KAAKH,IAAII,WAAW,CAACC,UAAU,CAACC,qBAAa,CAACC,iBAAS,CAACC,MAAM,CAAC,CAACC,KAAK,GAAG;YACnIT,IAAIE,OAAO,CAAC,eAAe,GAAG;QAChC;IACF;IAEA,gBAAgB,GAChB1B,IAAIkC,qBAAqB,CACvB,IAAIC,kCAAsB,IAC1B,IAAIC,kCAA0B,CAACpC,IAAIU,GAAG,CAAC2B,eAAS,GAAG;QACjDC,iBAAiB;YAAC;SAAI;IACxB;IAEF,cAAc,GACdtC,IAAIuC,cAAc,CAAC,IAAIC,sBAAc,CAAC;QAAEC,WAAW;QAAMC,WAAW;IAAK;IAEzE,UAAU,GACV1C,IAAI2C,eAAe,CAAC;QAAEC,MAAMC,4BAAW;QAAEC,0BAA0B;IAAK;IAExE,YAAY,GACZ,MAAM9C,IAAI+C,QAAQ,CAACC,eAAa,EAAE;QAChCC,uBAAuBC,IAAAA,qCAAuB,EAC5CxD,gCAAa,CAACyD,YAAY,CAACC,KAAK,CAACC,UAAU,CAACC,cAAc,EAC1D5D,gCAAa,CAACyD,YAAY,CAACC,KAAK,CAACG,SAAS,CAACD,cAAc;IAE7D;IAEA,WAAW,GACX,2CAA2C;IAC3C,MAAMtD,IAAI+C,QAAQ,CAACS,eAAa,EAAE;QAChCC,QAAQ/D,gCAAa,CAACgE,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,MAAM;QAC5CI,cAAc;YACZC,QAAQ;YACRC,UAAUrE,gCAAa,CAACgE,IAAI,CAACM,cAAc;YAC3CC,UAAU;QACZ;IACF;IAEA,UAAU,GACV,MAAMjE,IAAI+C,QAAQ,CAACmB,kBAAS,EAAE;QAC5BC,cAAc;QACdC,QAAQ;YAAEC,OAAOC;YAAUC,UAAU7E,gCAAa,CAACyD,YAAY,CAACC,KAAK,CAACoB,aAAa;QAAC;IACtF;IAEA,aAAa,GACb,IAAI,CAAC/D,4BAAW,EAAE;QAChB,MAAMgE,mBAAmB,IAAIC,kCAAgB,CAAC1E;QAC9C,MAAMyE,iBAAiBE,WAAW;QAClC3E,IAAI4E,mBAAmB,CAACH;IAC1B;IAEA,OAAOzE;AACT"}

package/server/app.constants.js

@@ -29,12 +29,13 @@ _export(exports, {
 const _appfunctions = require("./app.functions");
 const VERSION = (0, _appfunctions.loadVersion)();
 const USER_AGENT = `sync-in-server/${VERSION}`;
-const CONTENT_SECURITY_POLICY = (onlyOfficeServer)=>({
+const CONTENT_SECURITY_POLICY = (onlyOfficeServer, collaboraServer)=>({
         useDefaults: false,
         directives: {
             defaultSrc: [
                 "'self'",
-                onlyOfficeServer || ''
+                onlyOfficeServer || '',
+                collaboraServer || ''
             ],
             scriptSrc: [
                 "'self'",

package/server/app.constants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../backend/src/app.constants.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { loadVersion } from './app.functions'\n\nexport const VERSION = loadVersion()\nexport const USER_AGENT = `sync-in-server/${VERSION}`\nexport const CONTENT_SECURITY_POLICY = (onlyOfficeServer: string) => ({\n  useDefaults: false,\n  directives: {\n    defaultSrc: [\"'self'\", onlyOfficeServer || ''],\n    scriptSrc: [\"'self'\", \"'unsafe-inline'\", onlyOfficeServer || ''],\n    styleSrc: [\"'self'\", \"'unsafe-inline'\"],\n    imgSrc: [\"'self'\", 'data:'],\n    fontSrc: [\"'self'\"]\n  }\n})\n\nexport const CONNECT_ERROR_CODE = new Set(['ECONNREFUSED', 'ETIMEDOUT', 'ENOTFOUND'])\n"],"names":["CONNECT_ERROR_CODE","CONTENT_SECURITY_POLICY","USER_AGENT","VERSION","loadVersion","onlyOfficeServer","useDefaults","directives","defaultSrc","scriptSrc","styleSrc","imgSrc","fontSrc","Set"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAiBYA;eAAAA;;QAXAC;eAAAA;;QADAC;eAAAA;;QADAC;eAAAA;;;8BAFe;AAErB,MAAMA,UAAUC,IAAAA,yBAAW;AAC3B,MAAMF,aAAa,CAAC,eAAe,EAAEC,SAAS;AAC9C,MAAMF,0BAA0B,CAACI,mBAA8B,CAAA;QACpEC,aAAa;QACbC,YAAY;YACVC,YAAY;gBAAC;gBAAUH,oBAAoB;aAAG;YAC9CI,WAAW;gBAAC;gBAAU;gBAAmBJ,oBAAoB;aAAG;YAChEK,UAAU;gBAAC;gBAAU;aAAkB;YACvCC,QAAQ;gBAAC;gBAAU;aAAQ;YAC3BC,SAAS;gBAAC;aAAS;QACrB;IACF,CAAA;AAEO,MAAMZ,qBAAqB,IAAIa,IAAI;IAAC;IAAgB;IAAa;CAAY"}
+{"version":3,"sources":["../../backend/src/app.constants.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { loadVersion } from './app.functions'\n\nexport const VERSION = loadVersion()\nexport const USER_AGENT = `sync-in-server/${VERSION}`\nexport const CONTENT_SECURITY_POLICY = (onlyOfficeServer: string, collaboraServer: string) => ({\n  useDefaults: false,\n  directives: {\n    defaultSrc: [\"'self'\", onlyOfficeServer || '', collaboraServer || ''],\n    scriptSrc: [\"'self'\", \"'unsafe-inline'\", onlyOfficeServer || ''],\n    styleSrc: [\"'self'\", \"'unsafe-inline'\"],\n    imgSrc: [\"'self'\", 'data:'],\n    fontSrc: [\"'self'\"]\n  }\n})\n\nexport const CONNECT_ERROR_CODE = new Set(['ECONNREFUSED', 'ETIMEDOUT', 'ENOTFOUND'])\n"],"names":["CONNECT_ERROR_CODE","CONTENT_SECURITY_POLICY","USER_AGENT","VERSION","loadVersion","onlyOfficeServer","collaboraServer","useDefaults","directives","defaultSrc","scriptSrc","styleSrc","imgSrc","fontSrc","Set"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAiBYA;eAAAA;;QAXAC;eAAAA;;QADAC;eAAAA;;QADAC;eAAAA;;;8BAFe;AAErB,MAAMA,UAAUC,IAAAA,yBAAW;AAC3B,MAAMF,aAAa,CAAC,eAAe,EAAEC,SAAS;AAC9C,MAAMF,0BAA0B,CAACI,kBAA0BC,kBAA6B,CAAA;QAC7FC,aAAa;QACbC,YAAY;YACVC,YAAY;gBAAC;gBAAUJ,oBAAoB;gBAAIC,mBAAmB;aAAG;YACrEI,WAAW;gBAAC;gBAAU;gBAAmBL,oBAAoB;aAAG;YAChEM,UAAU;gBAAC;gBAAU;aAAkB;YACvCC,QAAQ;gBAAC;gBAAU;aAAQ;YAC3BC,SAAS;gBAAC;aAAS;QACrB;IACF,CAAA;AAEO,MAAMb,qBAAqB,IAAIc,IAAI;IAAC;IAAgB;IAAa;CAAY"}

package/server/applications/files/constants/cache.js

@@ -23,9 +23,6 @@ _export(exports, {
     get CACHE_LOCK_PREFIX () {
         return CACHE_LOCK_PREFIX;
     },
-    get CACHE_ONLY_OFFICE () {
-        return CACHE_ONLY_OFFICE;
-    },
     get CACHE_TASK_PREFIX () {
         return CACHE_TASK_PREFIX;
     },
@@ -39,7 +36,7 @@ const CACHE_TASK_TTL = 86400// one day
 const CACHE_LOCK_PREFIX = 'flock';
 const CACHE_LOCK_DEFAULT_TTL = 28800// 8 hours in seconds
 ;
-const CACHE_LOCK_FILE_TTL = 3600;
-const CACHE_ONLY_OFFICE = 'foffice';
+const CACHE_LOCK_FILE_TTL = 3600// cache only office = `office|${fileId}` => docKey
+;
 
 //# sourceMappingURL=cache.js.map

package/server/applications/files/constants/cache.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../backend/src/applications/files/constants/cache.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\n// cache task key = `ftask-$(userId}-${taskId}` => FileTask\nexport const CACHE_TASK_PREFIX = 'ftask' as const\nexport const CACHE_TASK_TTL = 86400 as const // one day\n// cache token key = `flock|token?:${uuid}|path:${path}|ownerId?:${number}|spaceId?:${number}|...props` => FileLock\nexport const CACHE_LOCK_PREFIX = 'flock' as const\nexport const CACHE_LOCK_DEFAULT_TTL = 28800 as const // 8 hours in seconds\nexport const CACHE_LOCK_FILE_TTL = 3600 as const\n// cache only office = `office|${fileId}` => docKey\nexport const CACHE_ONLY_OFFICE = 'foffice' as const\n"],"names":["CACHE_LOCK_DEFAULT_TTL","CACHE_LOCK_FILE_TTL","CACHE_LOCK_PREFIX","CACHE_ONLY_OFFICE","CACHE_TASK_PREFIX","CACHE_TASK_TTL"],"mappings":"AAAA;;;;CAIC,GAED,2DAA2D;;;;;;;;;;;;QAK9CA;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QAIAC;eAAAA;;QAPAC;eAAAA;;QACAC;eAAAA;;;AADN,MAAMD,oBAAoB;AAC1B,MAAMC,iBAAiB,KAAe,UAAU;;AAEhD,MAAMH,oBAAoB;AAC1B,MAAMF,yBAAyB,KAAe,qBAAqB;;AACnE,MAAMC,sBAAsB;AAE5B,MAAME,oBAAoB"}
+{"version":3,"sources":["../../../../../backend/src/applications/files/constants/cache.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\n// cache task key = `ftask-$(userId}-${taskId}` => FileTask\nexport const CACHE_TASK_PREFIX = 'ftask' as const\nexport const CACHE_TASK_TTL = 86400 as const // one day\n// cache token key = `flock|token?:${uuid}|path:${path}|ownerId?:${number}|spaceId?:${number}|...props` => FileLock\nexport const CACHE_LOCK_PREFIX = 'flock' as const\nexport const CACHE_LOCK_DEFAULT_TTL = 28800 as const // 8 hours in seconds\nexport const CACHE_LOCK_FILE_TTL = 3600 as const\n// cache only office = `office|${fileId}` => docKey\n"],"names":["CACHE_LOCK_DEFAULT_TTL","CACHE_LOCK_FILE_TTL","CACHE_LOCK_PREFIX","CACHE_TASK_PREFIX","CACHE_TASK_TTL"],"mappings":"AAAA;;;;CAIC,GAED,2DAA2D;;;;;;;;;;;;QAK9CA;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QAHAC;eAAAA;;QACAC;eAAAA;;;AADN,MAAMD,oBAAoB;AAC1B,MAAMC,iBAAiB,KAAe,UAAU;;AAEhD,MAAMF,oBAAoB;AAC1B,MAAMF,yBAAyB,KAAe,qBAAqB;;AACnE,MAAMC,sBAAsB,IACnC,mDAAmD"}

package/server/applications/files/constants/files.js

@@ -16,6 +16,9 @@ _export(exports, {
     get COMPRESSION_EXTENSION () {
         return COMPRESSION_EXTENSION;
     },
+    get DEFAULT_CHECKSUM_ALGORITHM () {
+        return DEFAULT_CHECKSUM_ALGORITHM;
+    },
     get DEFAULT_HIGH_WATER_MARK () {
         return DEFAULT_HIGH_WATER_MARK;
     },
@@ -26,6 +29,7 @@ _export(exports, {
         return EXTRA_MIMES_TYPE;
     }
 });
+const DEFAULT_CHECKSUM_ALGORITHM = 'sha512-256';
 const DEFAULT_HIGH_WATER_MARK = 1024 * 1024;
 const DEFAULT_MIME_TYPE = 'application/octet-stream';
 const EXTRA_MIMES_TYPE = new Map([

package/server/applications/files/constants/files.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../backend/src/applications/files/constants/files.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport const DEFAULT_HIGH_WATER_MARK = 1024 * 1024\nexport const DEFAULT_MIME_TYPE = 'application/octet-stream'\nexport const EXTRA_MIMES_TYPE = new Map([\n  ['.ts', 'text-typescript'],\n  ['.py', 'text-x-python'],\n  ['.tgz', 'application-gzip'],\n  ['.gz', 'application-gzip'],\n  ['.gzip', 'application-gzip']\n])\nexport const COMPRESSION_EXTENSION = new Map([\n  ['.zip', 'zip'],\n  ['.gzip', 'gzip'],\n  ['.tgz', 'tgz'],\n  ['.gz', 'tgz'],\n  ['.tar.gz', 'tgz'],\n  ['.tar', 'tar']\n])\n"],"names":["COMPRESSION_EXTENSION","DEFAULT_HIGH_WATER_MARK","DEFAULT_MIME_TYPE","EXTRA_MIMES_TYPE","Map"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAWYA;eAAAA;;QATAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;;AAFN,MAAMF,0BAA0B,OAAO;AACvC,MAAMC,oBAAoB;AAC1B,MAAMC,mBAAmB,IAAIC,IAAI;IACtC;QAAC;QAAO;KAAkB;IAC1B;QAAC;QAAO;KAAgB;IACxB;QAAC;QAAQ;KAAmB;IAC5B;QAAC;QAAO;KAAmB;IAC3B;QAAC;QAAS;KAAmB;CAC9B;AACM,MAAMJ,wBAAwB,IAAII,IAAI;IAC3C;QAAC;QAAQ;KAAM;IACf;QAAC;QAAS;KAAO;IACjB;QAAC;QAAQ;KAAM;IACf;QAAC;QAAO;KAAM;IACd;QAAC;QAAW;KAAM;IAClB;QAAC;QAAQ;KAAM;CAChB"}
+{"version":3,"sources":["../../../../../backend/src/applications/files/constants/files.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport const DEFAULT_CHECKSUM_ALGORITHM = 'sha512-256'\nexport const DEFAULT_HIGH_WATER_MARK = 1024 * 1024\nexport const DEFAULT_MIME_TYPE = 'application/octet-stream'\nexport const EXTRA_MIMES_TYPE = new Map([\n  ['.ts', 'text-typescript'],\n  ['.py', 'text-x-python'],\n  ['.tgz', 'application-gzip'],\n  ['.gz', 'application-gzip'],\n  ['.gzip', 'application-gzip']\n])\nexport const COMPRESSION_EXTENSION = new Map([\n  ['.zip', 'zip'],\n  ['.gzip', 'gzip'],\n  ['.tgz', 'tgz'],\n  ['.gz', 'tgz'],\n  ['.tar.gz', 'tgz'],\n  ['.tar', 'tar']\n])\n"],"names":["COMPRESSION_EXTENSION","DEFAULT_CHECKSUM_ALGORITHM","DEFAULT_HIGH_WATER_MARK","DEFAULT_MIME_TYPE","EXTRA_MIMES_TYPE","Map"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAYYA;eAAAA;;QAVAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;QACAC;eAAAA;;;AAHN,MAAMH,6BAA6B;AACnC,MAAMC,0BAA0B,OAAO;AACvC,MAAMC,oBAAoB;AAC1B,MAAMC,mBAAmB,IAAIC,IAAI;IACtC;QAAC;QAAO;KAAkB;IAC1B;QAAC;QAAO;KAAgB;IACxB;QAAC;QAAQ;KAAmB;IAC5B;QAAC;QAAO;KAAmB;IAC3B;QAAC;QAAS;KAAmB;CAC9B;AACM,MAAML,wBAAwB,IAAIK,IAAI;IAC3C;QAAC;QAAQ;KAAM;IACf;QAAC;QAAS;KAAO;IACjB;QAAC;QAAQ;KAAM;IACf;QAAC;QAAO;KAAM;IACd;QAAC;QAAW;KAAM;IAClB;QAAC;QAAQ;KAAM;CAChB"}

package/server/applications/files/constants/operations.js

@@ -18,6 +18,9 @@ _export(exports, {
     },
     get FILE_OPERATION () {
         return FILE_OPERATION;
+    },
+    get FORCE_AS_FILE_OWNER () {
+        return FORCE_AS_FILE_OWNER;
     }
 });
 var FILE_OPERATION = /*#__PURE__*/ function(FILE_OPERATION) {
@@ -42,5 +45,6 @@ var FILE_MODE = /*#__PURE__*/ function(FILE_MODE) {
     FILE_MODE["EDIT"] = "edit";
     return FILE_MODE;
 }({});
+const FORCE_AS_FILE_OWNER = 'forceAsFileOwner';
 
 //# sourceMappingURL=operations.js.map

package/server/applications/files/constants/operations.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../backend/src/applications/files/constants/operations.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport enum FILE_OPERATION {\n  MAKE = 'make',\n  COPY = 'copy',\n  MOVE = 'move',\n  DELETE = 'delete',\n  COMPRESS = 'compress',\n  DECOMPRESS = 'decompress',\n  DOWNLOAD = 'download',\n  UPLOAD = 'upload',\n  TOUCH = 'touch',\n  THUMBNAIL = 'thumbnail',\n  GET_SIZE = 'getSize',\n  LOCK = 'lock',\n  UNLOCK = 'unlock',\n  UNLOCK_REQUEST = 'unlockRequest'\n}\n\nexport enum FILE_MODE {\n  VIEW = 'view',\n  EDIT = 'edit'\n}\n"],"names":["FILE_MODE","FILE_OPERATION"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAmBWA;eAAAA;;QAjBAC;eAAAA;;;AAAL,IAAA,AAAKA,wCAAAA;;;;;;;;;;;;;;;WAAAA;;AAiBL,IAAA,AAAKD,mCAAAA;;;WAAAA"}
+{"version":3,"sources":["../../../../../backend/src/applications/files/constants/operations.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport enum FILE_OPERATION {\n  MAKE = 'make',\n  COPY = 'copy',\n  MOVE = 'move',\n  DELETE = 'delete',\n  COMPRESS = 'compress',\n  DECOMPRESS = 'decompress',\n  DOWNLOAD = 'download',\n  UPLOAD = 'upload',\n  TOUCH = 'touch',\n  THUMBNAIL = 'thumbnail',\n  GET_SIZE = 'getSize',\n  LOCK = 'lock',\n  UNLOCK = 'unlock',\n  UNLOCK_REQUEST = 'unlockRequest'\n}\n\nexport enum FILE_MODE {\n  VIEW = 'view',\n  EDIT = 'edit'\n}\n\nexport const FORCE_AS_FILE_OWNER = 'forceAsFileOwner' as const\n"],"names":["FILE_MODE","FILE_OPERATION","FORCE_AS_FILE_OWNER"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAmBWA;eAAAA;;QAjBAC;eAAAA;;QAsBCC;eAAAA;;;AAtBN,IAAA,AAAKD,wCAAAA;;;;;;;;;;;;;;;WAAAA;;AAiBL,IAAA,AAAKD,mCAAAA;;;WAAAA;;AAKL,MAAME,sBAAsB"}

package/server/applications/files/constants/routes.js

@@ -13,21 +13,6 @@ function _export(target, all) {
     });
 }
 _export(exports, {
-    get API_FILES_ONLY_OFFICE () {
-        return API_FILES_ONLY_OFFICE;
-    },
-    get API_FILES_ONLY_OFFICE_CALLBACK () {
-        return API_FILES_ONLY_OFFICE_CALLBACK;
-    },
-    get API_FILES_ONLY_OFFICE_DOCUMENT () {
-        return API_FILES_ONLY_OFFICE_DOCUMENT;
-    },
-    get API_FILES_ONLY_OFFICE_SETTINGS () {
-        return API_FILES_ONLY_OFFICE_SETTINGS;
-    },
-    get API_FILES_ONLY_OFFICE_STATUS () {
-        return API_FILES_ONLY_OFFICE_STATUS;
-    },
     get API_FILES_OPERATION () {
         return API_FILES_OPERATION;
     },
@@ -77,12 +62,7 @@ const FILES_ROUTE = {
     TASKS: 'tasks',
     TASKS_DOWNLOAD: 'download',
     RECENTS: 'recents',
-    SEARCH: 'search',
-    ONLY_OFFICE: 'onlyoffice',
-    ONLY_OFFICE_SETTINGS: 'settings',
-    ONLY_OFFICE_DOCUMENT: 'document',
-    ONLY_OFFICE_CALLBACK: 'callback',
-    ONLY_OFFICE_STATUS: 'status'
+    SEARCH: 'search'
 };
 const API_FILES_OPERATION = `${FILES_ROUTE.BASE}/${FILES_ROUTE.OPERATION}`;
 const API_FILES_OPERATION_THUMBNAIL = `${API_FILES_OPERATION}/${_operations.FILE_OPERATION.THUMBNAIL}`;
@@ -96,10 +76,5 @@ const API_FILES_TASKS = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASKS}`;
 const API_FILES_TASKS_DOWNLOAD = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASKS}/${FILES_ROUTE.TASKS_DOWNLOAD}`;
 const API_FILES_RECENTS = `${FILES_ROUTE.BASE}/${FILES_ROUTE.RECENTS}`;
 const API_FILES_SEARCH = `${FILES_ROUTE.BASE}/${FILES_ROUTE.SEARCH}`;
-const API_FILES_ONLY_OFFICE = `${FILES_ROUTE.BASE}/${FILES_ROUTE.ONLY_OFFICE}`;
-const API_FILES_ONLY_OFFICE_SETTINGS = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_SETTINGS}`;
-const API_FILES_ONLY_OFFICE_DOCUMENT = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_DOCUMENT}`;
-const API_FILES_ONLY_OFFICE_CALLBACK = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_CALLBACK}`;
-const API_FILES_ONLY_OFFICE_STATUS = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_STATUS}`;
 
 //# sourceMappingURL=routes.js.map

package/server/applications/files/constants/routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../backend/src/applications/files/constants/routes.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { SPACES_ROUTE } from '../../spaces/constants/routes'\nimport { FILE_OPERATION } from './operations'\n\nexport const FILES_ROUTE = {\n  BASE: SPACES_ROUTE.BASE,\n  OPERATION: 'operation',\n  TASK_OPERATION: 'task/operation',\n  TASKS: 'tasks',\n  TASKS_DOWNLOAD: 'download',\n  RECENTS: 'recents',\n  SEARCH: 'search',\n  ONLY_OFFICE: 'onlyoffice',\n  ONLY_OFFICE_SETTINGS: 'settings',\n  ONLY_OFFICE_DOCUMENT: 'document',\n  ONLY_OFFICE_CALLBACK: 'callback',\n  ONLY_OFFICE_STATUS: 'status'\n} as const\n\nexport const API_FILES_OPERATION = `${FILES_ROUTE.BASE}/${FILES_ROUTE.OPERATION}`\nexport const API_FILES_OPERATION_THUMBNAIL = `${API_FILES_OPERATION}/${FILE_OPERATION.THUMBNAIL}`\nexport const API_FILES_OPERATION_MAKE = `${API_FILES_OPERATION}/${FILE_OPERATION.MAKE}`\nexport const API_FILES_OPERATION_UPLOAD = `${API_FILES_OPERATION}/${FILE_OPERATION.UPLOAD}`\nexport const API_FILES_TASK_OPERATION = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASK_OPERATION}`\nexport const API_FILES_TASK_OPERATION_DOWNLOAD = `${API_FILES_TASK_OPERATION}/${FILE_OPERATION.DOWNLOAD}`\nexport const API_FILES_TASK_OPERATION_COMPRESS = `${API_FILES_TASK_OPERATION}/${FILE_OPERATION.COMPRESS}`\nexport const API_FILES_TASK_OPERATION_DECOMPRESS = `${API_FILES_TASK_OPERATION}/${FILE_OPERATION.DECOMPRESS}`\nexport const API_FILES_TASKS = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASKS}`\nexport const API_FILES_TASKS_DOWNLOAD = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASKS}/${FILES_ROUTE.TASKS_DOWNLOAD}`\nexport const API_FILES_RECENTS = `${FILES_ROUTE.BASE}/${FILES_ROUTE.RECENTS}`\nexport const API_FILES_SEARCH = `${FILES_ROUTE.BASE}/${FILES_ROUTE.SEARCH}`\nexport const API_FILES_ONLY_OFFICE = `${FILES_ROUTE.BASE}/${FILES_ROUTE.ONLY_OFFICE}`\nexport const API_FILES_ONLY_OFFICE_SETTINGS = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_SETTINGS}`\nexport const API_FILES_ONLY_OFFICE_DOCUMENT = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_DOCUMENT}`\nexport const API_FILES_ONLY_OFFICE_CALLBACK = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_CALLBACK}`\nexport const API_FILES_ONLY_OFFICE_STATUS = `${API_FILES_ONLY_OFFICE}/${FILES_ROUTE.ONLY_OFFICE_STATUS}`\n"],"names":["API_FILES_ONLY_OFFICE","API_FILES_ONLY_OFFICE_CALLBACK","API_FILES_ONLY_OFFICE_DOCUMENT","API_FILES_ONLY_OFFICE_SETTINGS","API_FILES_ONLY_OFFICE_STATUS","API_FILES_OPERATION","API_FILES_OPERATION_MAKE","API_FILES_OPERATION_THUMBNAIL","API_FILES_OPERATION_UPLOAD","API_FILES_RECENTS","API_FILES_SEARCH","API_FILES_TASKS","API_FILES_TASKS_DOWNLOAD","API_FILES_TASK_OPERATION","API_FILES_TASK_OPERATION_COMPRESS","API_FILES_TASK_OPERATION_DECOMPRESS","API_FILES_TASK_OPERATION_DOWNLOAD","FILES_ROUTE","BASE","SPACES_ROUTE","OPERATION","TASK_OPERATION","TASKS","TASKS_DOWNLOAD","RECENTS","SEARCH","ONLY_OFFICE","ONLY_OFFICE_SETTINGS","ONLY_OFFICE_DOCUMENT","ONLY_OFFICE_CALLBACK","ONLY_OFFICE_STATUS","FILE_OPERATION","THUMBNAIL","MAKE","UPLOAD","DOWNLOAD","COMPRESS","DECOMPRESS"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAgCYA;eAAAA;;QAGAC;eAAAA;;QADAC;eAAAA;;QADAC;eAAAA;;QAGAC;eAAAA;;QAhBAC;eAAAA;;QAEAC;eAAAA;;QADAC;eAAAA;;QAEAC;eAAAA;;QAOAC;eAAAA;;QACAC;eAAAA;;QAHAC;eAAAA;;QACAC;eAAAA;;QALAC;eAAAA;;QAEAC;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QApBAC;eAAAA;;;wBAHgB;4BACE;AAExB,MAAMA,cAAc;IACzBC,MAAMC,oBAAY,CAACD,IAAI;IACvBE,WAAW;IACXC,gBAAgB;IAChBC,OAAO;IACPC,gBAAgB;IAChBC,SAAS;IACTC,QAAQ;IACRC,aAAa;IACbC,sBAAsB;IACtBC,sBAAsB;IACtBC,sBAAsB;IACtBC,oBAAoB;AACtB;AAEO,MAAMzB,sBAAsB,GAAGY,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYG,SAAS,EAAE;AAC1E,MAAMb,gCAAgC,GAAGF,oBAAoB,CAAC,EAAE0B,0BAAc,CAACC,SAAS,EAAE;AAC1F,MAAM1B,2BAA2B,GAAGD,oBAAoB,CAAC,EAAE0B,0BAAc,CAACE,IAAI,EAAE;AAChF,MAAMzB,6BAA6B,GAAGH,oBAAoB,CAAC,EAAE0B,0BAAc,CAACG,MAAM,EAAE;AACpF,MAAMrB,2BAA2B,GAAGI,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYI,cAAc,EAAE;AACpF,MAAML,oCAAoC,GAAGH,yBAAyB,CAAC,EAAEkB,0BAAc,CAACI,QAAQ,EAAE;AAClG,MAAMrB,oCAAoC,GAAGD,yBAAyB,CAAC,EAAEkB,0BAAc,CAACK,QAAQ,EAAE;AAClG,MAAMrB,sCAAsC,GAAGF,yBAAyB,CAAC,EAAEkB,0BAAc,CAACM,UAAU,EAAE;AACtG,MAAM1B,kBAAkB,GAAGM,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYK,KAAK,EAAE;AAClE,MAAMV,2BAA2B,GAAGK,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYK,KAAK,CAAC,CAAC,EAAEL,YAAYM,cAAc,EAAE;AACzG,MAAMd,oBAAoB,GAAGQ,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYO,OAAO,EAAE;AACtE,MAAMd,mBAAmB,GAAGO,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYQ,MAAM,EAAE;AACpE,MAAMzB,wBAAwB,GAAGiB,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYS,WAAW,EAAE;AAC9E,MAAMvB,iCAAiC,GAAGH,sBAAsB,CAAC,EAAEiB,YAAYU,oBAAoB,EAAE;AACrG,MAAMzB,iCAAiC,GAAGF,sBAAsB,CAAC,EAAEiB,YAAYW,oBAAoB,EAAE;AACrG,MAAM3B,iCAAiC,GAAGD,sBAAsB,CAAC,EAAEiB,YAAYY,oBAAoB,EAAE;AACrG,MAAMzB,+BAA+B,GAAGJ,sBAAsB,CAAC,EAAEiB,YAAYa,kBAAkB,EAAE"}
+{"version":3,"sources":["../../../../../backend/src/applications/files/constants/routes.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { SPACES_ROUTE } from '../../spaces/constants/routes'\nimport { FILE_OPERATION } from './operations'\n\nexport const FILES_ROUTE = {\n  BASE: SPACES_ROUTE.BASE,\n  OPERATION: 'operation',\n  TASK_OPERATION: 'task/operation',\n  TASKS: 'tasks',\n  TASKS_DOWNLOAD: 'download',\n  RECENTS: 'recents',\n  SEARCH: 'search'\n} as const\n\nexport const API_FILES_OPERATION = `${FILES_ROUTE.BASE}/${FILES_ROUTE.OPERATION}`\nexport const API_FILES_OPERATION_THUMBNAIL = `${API_FILES_OPERATION}/${FILE_OPERATION.THUMBNAIL}`\nexport const API_FILES_OPERATION_MAKE = `${API_FILES_OPERATION}/${FILE_OPERATION.MAKE}`\nexport const API_FILES_OPERATION_UPLOAD = `${API_FILES_OPERATION}/${FILE_OPERATION.UPLOAD}`\nexport const API_FILES_TASK_OPERATION = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASK_OPERATION}`\nexport const API_FILES_TASK_OPERATION_DOWNLOAD = `${API_FILES_TASK_OPERATION}/${FILE_OPERATION.DOWNLOAD}`\nexport const API_FILES_TASK_OPERATION_COMPRESS = `${API_FILES_TASK_OPERATION}/${FILE_OPERATION.COMPRESS}`\nexport const API_FILES_TASK_OPERATION_DECOMPRESS = `${API_FILES_TASK_OPERATION}/${FILE_OPERATION.DECOMPRESS}`\nexport const API_FILES_TASKS = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASKS}`\nexport const API_FILES_TASKS_DOWNLOAD = `${FILES_ROUTE.BASE}/${FILES_ROUTE.TASKS}/${FILES_ROUTE.TASKS_DOWNLOAD}`\nexport const API_FILES_RECENTS = `${FILES_ROUTE.BASE}/${FILES_ROUTE.RECENTS}`\nexport const API_FILES_SEARCH = `${FILES_ROUTE.BASE}/${FILES_ROUTE.SEARCH}`\n"],"names":["API_FILES_OPERATION","API_FILES_OPERATION_MAKE","API_FILES_OPERATION_THUMBNAIL","API_FILES_OPERATION_UPLOAD","API_FILES_RECENTS","API_FILES_SEARCH","API_FILES_TASKS","API_FILES_TASKS_DOWNLOAD","API_FILES_TASK_OPERATION","API_FILES_TASK_OPERATION_COMPRESS","API_FILES_TASK_OPERATION_DECOMPRESS","API_FILES_TASK_OPERATION_DOWNLOAD","FILES_ROUTE","BASE","SPACES_ROUTE","OPERATION","TASK_OPERATION","TASKS","TASKS_DOWNLOAD","RECENTS","SEARCH","FILE_OPERATION","THUMBNAIL","MAKE","UPLOAD","DOWNLOAD","COMPRESS","DECOMPRESS"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAeYA;eAAAA;;QAEAC;eAAAA;;QADAC;eAAAA;;QAEAC;eAAAA;;QAOAC;eAAAA;;QACAC;eAAAA;;QAHAC;eAAAA;;QACAC;eAAAA;;QALAC;eAAAA;;QAEAC;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QAfAC;eAAAA;;;wBAHgB;4BACE;AAExB,MAAMA,cAAc;IACzBC,MAAMC,oBAAY,CAACD,IAAI;IACvBE,WAAW;IACXC,gBAAgB;IAChBC,OAAO;IACPC,gBAAgB;IAChBC,SAAS;IACTC,QAAQ;AACV;AAEO,MAAMpB,sBAAsB,GAAGY,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYG,SAAS,EAAE;AAC1E,MAAMb,gCAAgC,GAAGF,oBAAoB,CAAC,EAAEqB,0BAAc,CAACC,SAAS,EAAE;AAC1F,MAAMrB,2BAA2B,GAAGD,oBAAoB,CAAC,EAAEqB,0BAAc,CAACE,IAAI,EAAE;AAChF,MAAMpB,6BAA6B,GAAGH,oBAAoB,CAAC,EAAEqB,0BAAc,CAACG,MAAM,EAAE;AACpF,MAAMhB,2BAA2B,GAAGI,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYI,cAAc,EAAE;AACpF,MAAML,oCAAoC,GAAGH,yBAAyB,CAAC,EAAEa,0BAAc,CAACI,QAAQ,EAAE;AAClG,MAAMhB,oCAAoC,GAAGD,yBAAyB,CAAC,EAAEa,0BAAc,CAACK,QAAQ,EAAE;AAClG,MAAMhB,sCAAsC,GAAGF,yBAAyB,CAAC,EAAEa,0BAAc,CAACM,UAAU,EAAE;AACtG,MAAMrB,kBAAkB,GAAGM,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYK,KAAK,EAAE;AAClE,MAAMV,2BAA2B,GAAGK,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYK,KAAK,CAAC,CAAC,EAAEL,YAAYM,cAAc,EAAE;AACzG,MAAMd,oBAAoB,GAAGQ,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYO,OAAO,EAAE;AACtE,MAAMd,mBAAmB,GAAGO,YAAYC,IAAI,CAAC,CAAC,EAAED,YAAYQ,MAAM,EAAE"}

package/server/applications/files/files.config.js

@@ -6,22 +6,16 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: Object.getOwnPropertyDescriptor(all, name).get
-    });
-}
-_export(exports, {
-    get FilesConfig () {
+Object.defineProperty(exports, "FilesConfig", {
+    enumerable: true,
+    get: function() {
         return FilesConfig;
-    },
-    get FilesOnlyOfficeConfig () {
-        return FilesOnlyOfficeConfig;
     }
 });
 const _classtransformer = require("class-transformer");
 const _classvalidator = require("class-validator");
+const _collaboraonlineconfig = require("./modules/collabora-online/collabora-online.config");
+const _onlyofficeconfig = require("./modules/only-office/only-office.config");
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -31,37 +25,13 @@ function _ts_decorate(decorators, target, key, desc) {
 function _ts_metadata(k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-let FilesOnlyOfficeConfig = class FilesOnlyOfficeConfig {
-    constructor(){
-        this.enabled = false;
-        this.externalServer = null;
-        this.verifySSL = false;
-    }
-};
-_ts_decorate([
-    (0, _classvalidator.IsBoolean)()
-], FilesOnlyOfficeConfig.prototype, "enabled", void 0);
-_ts_decorate([
-    (0, _classvalidator.IsOptional)(),
-    (0, _classvalidator.IsString)(),
-    _ts_metadata("design:type", String)
-], FilesOnlyOfficeConfig.prototype, "externalServer", void 0);
-_ts_decorate([
-    (0, _classvalidator.ValidateIf)((o)=>o.enabled),
-    (0, _classvalidator.IsString)(),
-    (0, _classvalidator.IsNotEmpty)(),
-    _ts_metadata("design:type", String)
-], FilesOnlyOfficeConfig.prototype, "secret", void 0);
-_ts_decorate([
-    (0, _classvalidator.IsBoolean)(),
-    _ts_metadata("design:type", Boolean)
-], FilesOnlyOfficeConfig.prototype, "verifySSL", void 0);
 let FilesConfig = class FilesConfig {
     constructor(){
         this.maxUploadSize = 5368709120; // 5 GB
         this.contentIndexing = true;
         this.showHiddenFiles = false;
-        this.onlyoffice = new FilesOnlyOfficeConfig();
+        this.onlyoffice = new _onlyofficeconfig.OnlyOfficeConfig();
+        this.collabora = new _collaboraonlineconfig.CollaboraOnlineConfig();
     }
 };
 _ts_decorate([
@@ -99,8 +69,14 @@ _ts_decorate([
 _ts_decorate([
     (0, _classvalidator.IsNotEmptyObject)(),
     (0, _classvalidator.ValidateNested)(),
-    (0, _classtransformer.Type)(()=>FilesOnlyOfficeConfig),
-    _ts_metadata("design:type", typeof FilesOnlyOfficeConfig === "undefined" ? Object : FilesOnlyOfficeConfig)
+    (0, _classtransformer.Type)(()=>_onlyofficeconfig.OnlyOfficeConfig),
+    _ts_metadata("design:type", typeof _onlyofficeconfig.OnlyOfficeConfig === "undefined" ? Object : _onlyofficeconfig.OnlyOfficeConfig)
 ], FilesConfig.prototype, "onlyoffice", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>_collaboraonlineconfig.CollaboraOnlineConfig),
+    _ts_metadata("design:type", typeof _collaboraonlineconfig.CollaboraOnlineConfig === "undefined" ? Object : _collaboraonlineconfig.CollaboraOnlineConfig)
+], FilesConfig.prototype, "collabora", void 0);
 
 //# sourceMappingURL=files.config.js.map

package/server/applications/files/files.config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/applications/files/files.config.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Type } from 'class-transformer'\nimport { IsBoolean, IsInt, IsNotEmpty, IsNotEmptyObject, IsOptional, IsString, ValidateIf, ValidateNested } from 'class-validator'\n\nexport class FilesOnlyOfficeConfig {\n  @IsBoolean()\n  enabled = false\n\n  @IsOptional()\n  @IsString()\n  externalServer: string = null\n\n  @ValidateIf((o: FilesOnlyOfficeConfig) => o.enabled)\n  @IsString()\n  @IsNotEmpty()\n  secret: string\n\n  @IsBoolean()\n  verifySSL: boolean = false\n}\n\nexport class FilesConfig {\n  @IsNotEmpty()\n  @IsString()\n  dataPath: string\n\n  @IsNotEmpty()\n  @IsString()\n  usersPath: string\n\n  @IsNotEmpty()\n  @IsString()\n  spacesPath: string\n\n  @IsNotEmpty()\n  @IsString()\n  tmpPath: string\n\n  @IsInt()\n  maxUploadSize: number = 5368709120 // 5 GB\n\n  @IsBoolean()\n  contentIndexing: boolean = true\n\n  @IsBoolean()\n  showHiddenFiles: boolean = false\n\n  @IsNotEmptyObject()\n  @ValidateNested()\n  @Type(() => FilesOnlyOfficeConfig)\n  onlyoffice: FilesOnlyOfficeConfig = new FilesOnlyOfficeConfig()\n}\n"],"names":["FilesConfig","FilesOnlyOfficeConfig","enabled","externalServer","verifySSL","o","maxUploadSize","contentIndexing","showHiddenFiles","onlyoffice"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAsBYA;eAAAA;;QAjBAC;eAAAA;;;kCAHQ;gCAC4F;;;;;;;;;;AAE1G,IAAA,AAAMA,wBAAN,MAAMA;;aAEXC,UAAU;aAIVC,iBAAyB;aAQzBC,YAAqB;;AACvB;;;;;;;;;;qCAPeC,IAA6BA,EAAEH,OAAO;;;;;;;;;AAS9C,IAAA,AAAMF,cAAN,MAAMA;;aAkBXM,gBAAwB,YAAW,OAAO;aAG1CC,kBAA2B;aAG3BC,kBAA2B;aAK3BC,aAAoC,IAAIR;;AAC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCAFcA"}
+{"version":3,"sources":["../../../../backend/src/applications/files/files.config.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Type } from 'class-transformer'\nimport { IsBoolean, IsInt, IsNotEmpty, IsNotEmptyObject, IsString, ValidateNested } from 'class-validator'\nimport { CollaboraOnlineConfig } from './modules/collabora-online/collabora-online.config'\nimport { OnlyOfficeConfig } from './modules/only-office/only-office.config'\n\nexport class FilesConfig {\n  @IsNotEmpty()\n  @IsString()\n  dataPath: string\n\n  @IsNotEmpty()\n  @IsString()\n  usersPath: string\n\n  @IsNotEmpty()\n  @IsString()\n  spacesPath: string\n\n  @IsNotEmpty()\n  @IsString()\n  tmpPath: string\n\n  @IsInt()\n  maxUploadSize: number = 5368709120 // 5 GB\n\n  @IsBoolean()\n  contentIndexing: boolean = true\n\n  @IsBoolean()\n  showHiddenFiles: boolean = false\n\n  @IsNotEmptyObject()\n  @ValidateNested()\n  @Type(() => OnlyOfficeConfig)\n  onlyoffice: OnlyOfficeConfig = new OnlyOfficeConfig()\n\n  @IsNotEmptyObject()\n  @ValidateNested()\n  @Type(() => CollaboraOnlineConfig)\n  collabora: CollaboraOnlineConfig = new CollaboraOnlineConfig()\n}\n"],"names":["FilesConfig","maxUploadSize","contentIndexing","showHiddenFiles","onlyoffice","OnlyOfficeConfig","collabora","CollaboraOnlineConfig"],"mappings":"AAAA;;;;CAIC;;;;+BAOYA;;;eAAAA;;;kCALQ;gCACoE;uCACnD;kCACL;;;;;;;;;;AAE1B,IAAA,AAAMA,cAAN,MAAMA;;aAkBXC,gBAAwB,YAAW,OAAO;aAG1CC,kBAA2B;aAG3BC,kBAA2B;aAK3BC,aAA+B,IAAIC,kCAAgB;aAKnDC,YAAmC,IAAIC,4CAAqB;;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCAPcF,kCAAgB;;;;;;oCAKhBE,4CAAqB"}

package/server/applications/files/files.controller.js

@@ -83,8 +83,8 @@ let FilesController = class FilesController {
     async lock(user, space) {
         return this.filesMethods.lock(user, space);
     }
-    async unlock(user, space, forceAsOwner) {
-        return this.filesMethods.unlock(user, space, forceAsOwner);
+    async unlock(user, space, forceAsFileOwner) {
+        return this.filesMethods.unlock(user, space, forceAsFileOwner);
     }
     async unlockRequest(user, space) {
         return this.filesMethods.unlockRequest(user, space);
@@ -98,7 +98,7 @@ let FilesController = class FilesController {
     }
     async compressAsTask(req, compressFileDto) {
         if (compressFileDto.compressInDirectory) {
-            _spaceguard.SpaceGuard.checkPermissions(req, this.logger);
+            await _spaceguard.SpaceGuard.checkPermissions(req, this.logger);
         }
         return this.filesTasksManager.createTask(_operations.FILE_OPERATION.COMPRESS, req.user, req.space, compressFileDto, this.filesMethods.compress.name);
     }
@@ -263,7 +263,7 @@ _ts_decorate([
     (0, _common.Unlock)(`${_routes.FILES_ROUTE.OPERATION}/*`),
     _ts_param(0, (0, _userdecorator.GetUser)()),
     _ts_param(1, (0, _spacedecorator.GetSpace)()),
-    _ts_param(2, (0, _common.Query)('forceAsOwner', new _common.ParseBoolPipe({
+    _ts_param(2, (0, _common.Query)(_operations.FORCE_AS_FILE_OWNER, new _common.ParseBoolPipe({
         optional: true
     }))),
     _ts_metadata("design:type", Function),