nevermind the summary, I think this is good enough for now.

The OPTIONS test only tests if a 200 status is returned, so we essentially just test if GET works (because that's the fallaback AFAIR).

Fixed.

I was unable to reproduce the issue on Kolab's Cyrus DAV server, but I could when I used % character in an UID.

In D5334#68964, @machniak wrote:

I suppose handling of 'skin' option could be moved to applyConfiguration()

Seems middleware() is not removing group middleware, we need withoutMiddleware(). Test added.

• Fix middleware on some routes
• Merge branch 'master' into dev/routes-cleanup

I suppose handling of 'skin' option could be moved to applyConfiguration()

The chwala part doesn't currently work.

Cleanup

Cleanup

• Reset relation state in addCOntroller() and removeController()

Check via unauthenticated OPTIONS request

In D5322#68733, @machniak wrote:

Maybe we could just use DAV::options() when user/pass is not provided.

Maybe we could just use DAV::options() when user/pass is not provided.

• Include max_password_age setting too

• Fix getPolicySetting() default value

In D5310#68598, @machniak wrote:

That would mean that if connection to cockpit fails the plugin should throw a big error, otherwise use may get access to plugins he should not. ALso, plugin already have support for merge: prefix, so this should be remove:plugins.

However, because kolab is a plugin itself, it can add plugins, but it cannot remove already loaded ones.

That would mean that if connection to cockpit fails the plugin should throw a big error, otherwise use may get access to plugins he should not. ALso, plugin already have support for merge: prefix, so this should be remove:plugins.

Remove accidentally comitted line

no change