Direct download endpoint does not work with server side encryption & user key

[tobiasKaminsky]

Ref: nextcloud/android#3061 (comment)

• direct endpoint
• server side encryption with user key
• try to create a direct download

@rullzer

[rullzer]

If somebody want to dive into it.

1. check if server side encryption is enabled
2. if it is check if the user key is set
3. if that is the case encrypt with the system key so it works without the users password

Or alternatively

1. disable direct download when server side encryption with user key is enabled

[tobiasKaminsky]

On alternative, we then need a capability to inform clients that they cannot offer streaming here.

[tobiasKaminsky]

@DPTJKKVH this is totally fine, thanks.
However we cannot guarantee which idea we favor. It is possible that we for a first start disable direct downloading /streaming if SSE with user key is enabled.

[tobiasKaminsky]

@tobiasKaminsky hmm. So you say even if someone provided functional code that could be merged you still might decide to temporarily disable this feature? Or do you say that you might already have it disabled before someone handed in their finished code

I meant that we maybe disable it for now, until someone develop a correct working direct download endpoint for SSE with user keys. As the current situation is broken in this special case.

If I post a bounty I obviously want this feature to be implemented and would make this a condition for payout.

Of course this will be a requirement to pay out the bounty.

I don't want to waste my money or someone else's time so a short clarification would be much appreciated. Thanks!

If there is a valid enhancement/fix it will be merged and then the bounty can be paid.

So if you put a bounty to this issue, everything is fine as it clearly says that direct download endpoint does not work with SSE & user key.

Sorry for the confusion…