View Issue Details

IDProjectCategoryView StatusLast Update
0005532SOGoBackend Calendarpublic2022-06-08 07:47
Reportermksogoadmin Assigned To 
PriorityurgentSeverityfeatureReproducibilityalways
Status newResolutionopen 
Platform[Server] LinuxOSUbuntuOS Version16.04 LTS
Product Version5.6.0 
Summary0005532: Shared calendar link with "secret keys" and not basic authentication
Description

Problem:

  • If you share a calendar, the calendar link is either public and easy to build for non-authorised users OR it is protected with http basic authentication
  • Basic Authentication is not support for most Calendar Clients .ics subscriptions.

Goal:

  • I want to have my SoGo calendar been subscribed in other (confidential) tools like Nextcloud Calendar - that way I can aggregate multiple calendar sources, and have proper Busy/Free time overviews for Private/Business etc.

  • SoGO should provide a generated cryptic link for accessing shared calendars instead of basic http authentication. Can be considered even for the public link to make it cryptic.

So from:
https://mail.hadomain.de/SOGo/dav/public/user@hadomain.de/Calendar/personal.ics
OR https://mail.hadomain.de/SOGo/dav/user@hadomain.de/Calendar/personal.ics

TO
https://mail.hadomain.de/SOGo/dav/public/user@hadomain.de/Calendar/personal.ics?secret=JKDjkld8792khsflnsc83jhskjfnckjsuu38
OR https://mail.hadomain.de/SOGo/dav/user@hadomain.de/Calendar/personal.ics?secret=JKDjkld8792khsflnsc83jhskjfnckjsuu38

Steps To Reproduce
  • Set up a calendar
  • Enable calendar sharing
  • Define "Freigaben"/Access rules
TagsNo tags attached.

Activities

mksogoadmin

mksogoadmin

2022-06-08 07:47

reporter   ~0016095

P.S. Passing username and password for HTTP Basic Authentication is no longer supported by any browser for security reasons. So https://username:password@mail.hadomain.... is not the solution.

Issue History

Date Modified Username Field Change
2022-06-08 07:20 mksogoadmin New Issue
2022-06-08 07:47 mksogoadmin Note Added: 0016095