collaboraonline/collabora-drupal

Collabora Online Drupal module

collabora-drupal's Issues

Handle modification date for PutFile

See

https://sdk.collaboraonline.com/docs/How_to_integrate.html#further-differences-to-wopi

We must handle the modification dates to avoid overriding.

Implement getDocumentType and canEdit

Implement getDocumentType and canEdit in CoolUtil

getDocumentType give a string for the type of document this is. It is checked against a static list.

canEdit indicate with can save as this format.

Add closebutton

In the fullscreen edit, add the closebutton and the postmessage code to handle it.

The close button presence should be a parameter.

Generate and verify the token

Currently the access token is not generated nor verified.

Implement Collabora specific permissions

Figure out how we can define permissions specific to Collabora for Drupal users.

Put the save reason

WOPI put file provide save reasons.

See https://sdk.collaboraonline.com/docs/advanced_integration.html#putfile-headers

Use File instead of Media for WOPI

WOPI should use File (and file ID) and not Media.

There is a 1:n relationship for File -> Media (File can be in several Media)

Preview seems to only work on files.

PutFile should also return `LastModifiedTime`

PutFile should also return LastModifiedTime

See https://sdk.collaboraonline.com/docs/advanced_integration.html#detecting-external-document-change

Add remote image insertion

Allow inserting remote images in a document from the media in Drupal.

Add customization options

Add options for customizing COOL, like CSS and other UI bits.

Add .csv to the list of accepted files

.csv is not allowed as a document. This is Drupal, but can we register it?

Write install documentation

Installation documentation:

• document dependencies
• document the process to add keys, and select the key

Handle the lack of COOL server

When trying to view a document if the COOL server isn't reachable for the discovery URL, then we should display a clear error message.

Security review

The security should be reviewed.

Notable areas:

• JWT token generation, can it be stolen / usurped
• access control on the files
• other vulnerabilities

Allow configuring token_ttl

The current ttl is set to 1hours in the token JWT payload.

• Add the option in the config form
• Use it in the JWT token generation
• Pass it to the query access_token_ttl

Implement WOPI Put file

WOPI Put file isn't implemented yet.

Have an edit route

Have an edit route that does like the view.

Make view read-only always.

Edit from the media tab

There should be an edit option for the media tab.

Embed inside the template / ui frame.

The editor should be embedded inside the template, to show the admin and other user logged in links.

Currently it's just bare.

Also we need a close box.

Remove the final `/` on wopi base

Remove the final / on wopi base

This should happen when saving the preferences to avoid the 302 requests.

2MB file limit

By default I can't upload documents bigger than 2MB. It seems to be a Drupal limitation / configuration

• Figure out how to change this
• Document it