View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0005532SOGoBackend Calendarpublic2022-06-08 07:202024-09-11 11:57
Reportermksogoadmin Assigned To 
PriorityurgentSeverityfeatureReproducibilityalways
Status newResolutionopen 
Platform[Server] LinuxOSUbuntuOS Version16.04 LTS
Product Version5.6.0 
Summary0005532: Shared calendar link with "secret keys" and not basic authentication
Description

Problem:

  • If you share a calendar, the calendar link is either public and easy to build for non-authorised users OR it is protected with http basic authentication
  • Basic Authentication is not support for most Calendar Clients .ics subscriptions.

Goal:

  • I want to have my SoGo calendar been subscribed in other (confidential) tools like Nextcloud Calendar - that way I can aggregate multiple calendar sources, and have proper Busy/Free time overviews for Private/Business etc.

  • SoGO should provide a generated cryptic link for accessing shared calendars instead of basic http authentication. Can be considered even for the public link to make it cryptic.

So from:
https://mail.hadomain.de/SOGo/dav/public/user@hadomain.de/Calendar/personal.ics
OR https://mail.hadomain.de/SOGo/dav/user@hadomain.de/Calendar/personal.ics

TO
https://mail.hadomain.de/SOGo/dav/public/user@hadomain.de/Calendar/personal.ics?secret=JKDjkld8792khsflnsc83jhskjfnckjsuu38
OR https://mail.hadomain.de/SOGo/dav/user@hadomain.de/Calendar/personal.ics?secret=JKDjkld8792khsflnsc83jhskjfnckjsuu38

Steps To Reproduce
  • Set up a calendar
  • Enable calendar sharing
  • Define "Freigaben"/Access rules
TagsNo tags attached.

Activities

mksogoadmin

mksogoadmin

2022-06-08 07:47

reporter   ~0016095

P.S. Passing username and password for HTTP Basic Authentication is no longer supported by any browser for security reasons. So https://username:password@mail.hadomain.... is not the solution.
maximemaxime

maximemaxime

2024-09-11 11:57

reporter   ~0017871

I would second this feature request.
It seems to have been asked in 2018 through the mailing list (without reply): https://www.mail-archive.com/users@sogo.nu/msg27715.html
We have users who have the same need: be able to share a calendar with a relative without making it public. Indeed a non-guessable link would be a good solution.

Issue History

Date Modified Username Field Change
2022-06-08 07:20 mksogoadmin New Issue
2022-06-08 07:47 mksogoadmin Note Added: 0016095
2024-09-11 11:57 maximemaxime Note Added: 0017871