Feat/ocisdev 524/mode switch#13806
Merged
Merged
Conversation
c28b06c to
453f400
Compare
…context Appends vault:true to the oc:pattern search query when the current route scope is vault. The isVault flag is introduced in the useSearch composable and passed from the Search List component. SearchBar also checks the route scope independently, ensuring vault:true is included in both All files and Current folder search requests.
When the user has the `VaultMode.ReadWriteEnabled.own` permission, the mode switch will be shown in the topbar. Signed-off-by: Lukas Hirt <info@hirt.cz>
Displays a modal warning users before their MFA session expires, with options to extend the session via silent OIDC renewal or dismiss. Uses a web worker timer and BroadcastChannel to synchronize across
1257632 to
8b6dc25
Compare
Signed-off-by: Lukas Hirt <info@hirt.cz>
8b6dc25 to
f065999
Compare
2f755d1 to
d4c2b7e
Compare
The backend (oCIS proxy) refreshes the MFA session TTL on every authenticated request, but the frontend was computing expiry from auth_time which never changes after signinSilent. This caused the warning dialog to immediately reappear after extending or dismissing. Now tracks lastSuccessfulRequestTime in ClientService and uses that as the base for the expiry timer. Extending the session resets the timer to now + sessionDuration without calling signinSilent (which cannot obtain a new auth_time from Keycloak anyway).
3f2ecb7 to
05be282
Compare
|
2403905
approved these changes
May 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.


Introduces the vault mode switch feature. Users with the appropriate permission can switch between "Drive" (default) and "Vault" (MFA-protected) modes via a dropdown in the topbar. Switching to vault mode triggers MFA authentication, after which the user can access vault-protected spaces and personal files. The feature includes session expiry warnings, cross-tab synchronization, vault-aware breadcrumbs, search integration, and clipboard handling between modes.