mirror of
https://github.com/nextcloud/richdocuments.git
synced 2025-12-18 05:20:43 +01:00
fc63ac25bc
the coolwsd frame_ancestor is obsolete, replaced by the CSP one. Signed-off-by: Maxime LE HERICY <87175513+maximelehericy@users.noreply.github.com>
49 lines
1.9 KiB
Markdown
49 lines
1.9 KiB
Markdown
<!--
|
|
- SPDX-FileCopyrightText: 2021 Nextcloud GmbH and Nextcloud contributors
|
|
- SPDX-License-Identifier: AGPL-3.0-or-later
|
|
-->
|
|
# Federated file editing
|
|
|
|
Collabra Online offers support for collaborative editing of files that are shared through federated
|
|
sharing. The file will always be opened on the file owners instance (Source) and other users will
|
|
connect to that through their Nextcloud instance (Initiator).
|
|
|
|
In a federated scenario both Nextcloud servers need to add each other as trusted servers or in a
|
|
global scale environment a list of nodes can be added through the `gs.trustedHosts` setting in the
|
|
config.php file:
|
|
|
|
```php
|
|
'gs.trustedHosts' => [
|
|
'gs1.example.com',
|
|
'gs2.example.com',
|
|
'collabora.example.com'
|
|
]
|
|
```
|
|
|
|
Using wildcards is also possible:
|
|
|
|
```php
|
|
'gs.trustedHosts' => [
|
|
'*.example.com'
|
|
]
|
|
```
|
|
|
|
When a Initiator opens a file that is located on an incoming federated share, a check will be
|
|
performed if the share owners instance supports federated editing. If that is the case a Initiator
|
|
token will be created, and the user will be redirected to the Source instance to open the file.
|
|
|
|
The source instance will then fetch the user and file details, create a WOPI token for the remote
|
|
user with those details and open the document with that.
|
|
|
|
## Allow remote access on Collabora
|
|
Collabora by default only allows embedding from the same remote that the initial frame is loaded. In order to enable embedding also in trusted remotes like a different GS node, the following setting will allow that:
|
|
|
|
Assuming gs1.example.com and gs2.example.com are Nextcloud servers:
|
|
|
|
coolconfig set net.content_security_policy "frame-ancestors *.example.com:*;"
|
|
|
|
## Trusted hosts
|
|
|
|
By default, trusted hosts of Nextcloud will not be allowed for federated editing. This can be enabled through the following app config value:
|
|
|
|
occ config:app:set richdocuments federation_use_trusted_domains --value="yes"
|