Month: September 2021
-
CardDAV vs MacOS Contacts
In case you run Horde, NextCloud or other CalDAV/CardDAV server products, sooner or later you will encounter users who want to use the MacOS Addressbook application, “Contacts”, to access their server contacts. As of MacOS 11.5.2, the apple contacts app only supports one addressbook per principal. It will pick the first addressbook and use it…
-
Can Horde’s internal API use PSR-7 Messages?
Applications call into abstract services backed by other apps, with limited coupling. This may sound a little like micro services, but predates the concept by a decade. Horde’s registry routes the call to the implementing app if present. For example, both “sam” and “ingo” applications implement some spam filter related API calls. Registry setup decides…
-
Move config out of webroot for Horde 6
These items remain in the config/ dir: default registry.php file default prefs.php file routes.php file conf.xml definition file other defaults files like backends.php, nls.php a stub for hooks (maybe we can get away without it) These items reside outside the webroot: conf.php file registry.local.php routes.local.php (if any, I have never seen it used) horde.local.php other…
-
Horde Authentication: Revisited
Horde Authentication as it is today has been devised more than a decade ago and it is surprisingly complex. Use cases and requirements have evolved. In a previous article, I introduced basic authentication and authorization needs and how they can be overwhelmingly complex to get right. I will not go into details of how it…
-
Authentication & Authorization is complex
Could there be any more straight forward topic than authentication & authorization? The user provides user name and password and clicks “login”, the backend checks if credentials are valid. Invalid credentials are not authorized, valid credentials are authorized and identified (authenticated). End of story. Right? Well… in many cases, it’s not that trivial. As a…