6 |
8 | );
9 | };
10 |
--------------------------------------------------------------------------------
/src/mail/bin/mjml-to-html:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 |
3 | # Run mjml command to convert all mjml templates to html files
4 | DIR_MAILS="../backend/core/templates/mail/html/"
5 |
6 | if [ ! -d "${DIR_MAILS}" ]; then
7 | mkdir -p "${DIR_MAILS}";
8 | fi
9 | mjml mjml/*.mjml -o "${DIR_MAILS}";
10 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/drivers/utils.tsx:
--------------------------------------------------------------------------------
1 | import { Item, ItemType } from "./types";
2 |
3 | export const itemIsWorkspace = (item: Item) => {
4 | if (item.main_workspace) {
5 | return false;
6 | }
7 | return item.type === ItemType.FOLDER && item.path.split(".").length === 1;
8 | };
9 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/utils/useQueries.ts:
--------------------------------------------------------------------------------
1 | import { UseQueryOptions } from "@tanstack/react-query";
2 |
3 |
4 | export type HookUseQueryOptions2 = {
5 | enabled?: boolean;
6 | }
7 |
8 |
9 |
10 |
11 | export type HookUseQueryOptionsGenerate item
8 | 13 | 14 | 15 | -------------------------------------------------------------------------------- /src/frontend/apps/sdk-consumer/.gitignore: -------------------------------------------------------------------------------- 1 | # Logs 2 | logs 3 | *.log 4 | npm-debug.log* 5 | yarn-debug.log* 6 | yarn-error.log* 7 | pnpm-debug.log* 8 | lerna-debug.log* 9 | 10 | node_modules 11 | dist 12 | dist-ssr 13 | *.local 14 | 15 | # Editor directories and files 16 | .vscode/* 17 | !.vscode/extensions.json 18 | .idea 19 | .DS_Store 20 | *.suo 21 | *.ntvs* 22 | *.njsproj 23 | *.sln 24 | *.sw? 25 | -------------------------------------------------------------------------------- /src/backend/core/migrations/0013_active_unnaccent_postgres_extension.py: -------------------------------------------------------------------------------- 1 | from django.db import migrations 2 | 3 | from django.contrib.postgres.operations import UnaccentExtension 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('core', '0012_item_malware_detection_info'), 10 | ] 11 | 12 | operations = [ 13 | UnaccentExtension(), 14 | ] 15 | -------------------------------------------------------------------------------- /src/frontend/packages/sdk/src/utils.ts: -------------------------------------------------------------------------------- 1 | export function randomToken(length: number = 32) { 2 | var result = ""; 3 | var characters = 4 | "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; 5 | var charactersLength = characters.length; 6 | for (var i = 0; i < length; i++) { 7 | result += characters.charAt(Math.floor(Math.random() * charactersLength)); 8 | } 9 | return result; 10 | } 11 | -------------------------------------------------------------------------------- /docs/architecture.md: -------------------------------------------------------------------------------- 1 | ## Architecture 2 | 3 | ### Global system architecture 4 | 5 | ```mermaid 6 | flowchart TD 7 | User -- HTTP --> Front("Frontend (NextJS SPA)") 8 | Front -- REST API --> Back("Backend (Django)") 9 | Front -- OIDC --> Back -- OIDC ---> OIDC("Keycloak / ProConnect") 10 | Back --> DB("Database (PostgreSQL)") 11 | Back <--> Celery --> DB 12 | Back ----> S3-Compatible 13 | ``` 14 | -------------------------------------------------------------------------------- /src/frontend/apps/drive/src/features/explorer/components/tree/ExploreDragOverlay.tsx: -------------------------------------------------------------------------------- 1 | type ExplorerDragOverlayProps = { 2 | count: number; 3 | }; 4 | 5 | export const ExplorerDragOverlay = ({ count }: ExplorerDragOverlayProps) => { 6 | const filesCount = count > 0 ? count : 1; 7 | return ( 8 |
9 | {filesCount} fichiers sélectionnés
10 |
11 | );
12 | };
13 |
--------------------------------------------------------------------------------
/src/frontend/packages/sdk/tsconfig.node.json:
--------------------------------------------------------------------------------
1 | {
2 | "compilerOptions": {
3 | "composite": true,
4 | "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
5 | "skipLibCheck": true,
6 | "module": "ESNext",
7 | "moduleResolution": "bundler",
8 | "allowSyntheticDefaultImports": true,
9 | "strict": true,
10 | "noEmit": true
11 | },
12 | "include": ["vite.config.ts"]
13 | }
14 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/ui/components/responsive/ResponsiveDivs.tsx:
--------------------------------------------------------------------------------
1 | export const ResponsiveDivs = () => {
2 | return (
3 | <>
4 |
5 |
6 | );
7 | };
8 |
9 | export const isTablet = () => {
10 | return (
11 | getComputedStyle(
12 | document.querySelector("#responsive-tablet")!
13 | ).getPropertyValue("display") === "block"
14 | );
15 | };
16 |
--------------------------------------------------------------------------------
/src/backend/core/migrations/00006_create_pg_trgm_extension.py:
--------------------------------------------------------------------------------
1 | from django.db import migrations
2 |
3 |
4 | class Migration(migrations.Migration):
5 | dependencies = [
6 | ("core", "0005_item_description"),
7 | ]
8 |
9 | operations = [
10 | migrations.RunSQL(
11 | "CREATE EXTENSION IF NOT EXISTS pg_trgm;",
12 | reverse_sql="DROP EXTENSION IF EXISTS pg_trgm;",
13 | ),
14 | ]
--------------------------------------------------------------------------------
/src/backend/manage.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python
2 | """
3 | drive's management script.
4 | """
5 |
6 | import os
7 | import sys
8 |
9 | if __name__ == "__main__":
10 | os.environ.setdefault("DJANGO_SETTINGS_MODULE", "drive.settings")
11 | os.environ.setdefault("DJANGO_CONFIGURATION", "Development")
12 |
13 | from configurations.management import execute_from_command_line
14 |
15 | execute_from_command_line(sys.argv)
16 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/explorer/hooks/useBreadcrumb.tsx:
--------------------------------------------------------------------------------
1 | import { getDriver } from "@/features/config/Config";
2 | import { useQuery } from "@tanstack/react-query";
3 |
4 | export const useBreadcrumbQuery = (id?: string | null) => {
5 | const driver = getDriver();
6 | return useQuery({
7 | queryKey: ["breadcrumb", id],
8 | queryFn: () => driver.getItemBreadcrumb(id!),
9 | enabled: !!id,
10 | });
11 | };
12 |
--------------------------------------------------------------------------------
/bin/scalingo_postfrontend:
--------------------------------------------------------------------------------
1 | #!/bin/bash
2 |
3 | set -o errexit # always exit on error
4 | set -o pipefail # don't ignore exit codes when piping output
5 |
6 | echo "-----> Running post-frontend script"
7 |
8 | # Move the frontend build to the nginx root and clean up
9 | mkdir -p build/
10 | mv src/frontend/apps/drive/out build/frontend-out
11 |
12 | mv src/backend/* ./
13 | mv src/nginx/* ./
14 |
15 | echo "3.13" > .python-version
16 |
--------------------------------------------------------------------------------
/docker/onlyoffice/log4js/production.json:
--------------------------------------------------------------------------------
1 | {
2 | "appenders": {
3 | "default": {
4 | "type": "console",
5 | "layout": {
6 | "type": "pattern",
7 | "pattern": "[%d] [%p] %c - %.10000m"
8 | }
9 | }
10 | },
11 | "categories": {
12 | "default": {
13 | "appenders": [
14 | "default"
15 | ],
16 | "level": "DEBUG"
17 | }
18 | }
19 | }
--------------------------------------------------------------------------------
/src/backend/core/entitlements/__init__.py:
--------------------------------------------------------------------------------
1 | """
2 | Entitlements backend utilities.
3 | """
4 |
5 | import functools
6 |
7 | from django.conf import settings
8 | from django.utils.module_loading import import_string
9 |
10 |
11 | @functools.cache
12 | def get_entitlements_backend():
13 | """
14 | Get the entitlements backend.
15 | """
16 | backend = import_string(settings.ENTITLEMENTS_BACKEND)()
17 | return backend
18 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/auth/components/LogoutButton.tsx:
--------------------------------------------------------------------------------
1 | import { Button } from "@openfun/cunningham-react";
2 | import { logout } from "../Auth";
3 | import { useTranslation } from "react-i18next";
4 |
5 | export const LogoutButton = () => {
6 | const { t } = useTranslation();
7 | return (
8 |
11 | );
12 | };
13 |
--------------------------------------------------------------------------------
/src/backend/core/storage/__init__.py:
--------------------------------------------------------------------------------
1 | """
2 | Storage compute backend utilities.
3 | """
4 |
5 | import functools
6 |
7 | from django.conf import settings
8 | from django.utils.module_loading import import_string
9 |
10 |
11 | @functools.cache
12 | def get_storage_compute_backend():
13 | """
14 | Get the storage compute backend.
15 | """
16 | backend = import_string(settings.STORAGE_COMPUTE_BACKEND)()
17 | return backend
18 |
--------------------------------------------------------------------------------
/docker/files/usr/local/etc/gunicorn/drive.py:
--------------------------------------------------------------------------------
1 | # Gunicorn-django settings
2 | bind = ["0.0.0.0:8000"]
3 | name = "drive"
4 | python_path = "/app"
5 |
6 | # Run
7 | graceful_timeout = 90
8 | timeout = 90
9 | workers = 3
10 |
11 | # Logging
12 | # Using '-' for the access log file makes gunicorn log accesses to stdout
13 | accesslog = "-"
14 | # Using '-' for the error log file makes gunicorn log errors to stderr
15 | errorlog = "-"
16 | loglevel = "info"
17 |
--------------------------------------------------------------------------------
/src/frontend/apps/sdk-consumer/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
11 | {i18n.t("explorer.trash.navigate.modal.description")}
12 |
13 | ),
14 | });
15 | };
16 |
--------------------------------------------------------------------------------
/src/frontend/apps/e2e/tsconfig.json:
--------------------------------------------------------------------------------
1 | {
2 | "compilerOptions": {
3 | "target": "es5",
4 | "lib": ["dom", "dom.iterable", "esnext"],
5 | "allowJs": true,
6 | "skipLibCheck": true,
7 | "strict": true,
8 | "noEmit": true,
9 | "esModuleInterop": true,
10 | "module": "esnext",
11 | "moduleResolution": "bundler",
12 | "resolveJsonModule": true,
13 | "isolatedModules": true,
14 | "jsx": "preserve",
15 | "incremental": true
16 | },
17 | "include": ["**/*.ts", "**/*.d.ts"],
18 | "exclude": ["node_modules"]
19 | }
20 |
--------------------------------------------------------------------------------
/bin/postgres_e2e:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 |
3 | # shellcheck source=bin/_config.sh
4 | source "$(dirname "${BASH_SOURCE[0]}")/_config.sh"
5 |
6 | # Get database credentials from environment file
7 | ENV_FILE="${REPO_DIR}/env.d/development/postgresql.e2e"
8 | POSTGRES_USER=$(grep POSTGRES_USER "$ENV_FILE" | cut -d'=' -f2)
9 | POSTGRES_DB=$(grep POSTGRES_DB "$ENV_FILE" | cut -d'=' -f2)
10 |
11 | # Execute PostgreSQL command (run as postgres user, not host user)
12 | _docker_compose exec -T postgresql psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -v ON_ERROR_STOP=1 "$@"
13 |
--------------------------------------------------------------------------------
/docs/examples/helm/keycloak.values.yaml:
--------------------------------------------------------------------------------
1 | keycloak:
2 | enabled: true
3 | image: quay.io/keycloak/keycloak:20.0.1
4 | name: keycloak
5 | #serviceNameOverride: keycloak
6 | hostname: drive-keycloak.127.0.0.1.nip.io
7 | username: admin
8 | password: pass
9 | tls:
10 | enabled: true
11 | secretName: drive-tls
12 | db:
13 | username: dinum
14 | password: pass
15 | database: keycloak
16 | size: 1Gi
17 | image: postgres:16-alpine
18 | realm:
19 | name: drive
20 | username: drive
21 | password: drive
22 | email: drive@example.com
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/pages/explorer/items/public.tsx:
--------------------------------------------------------------------------------
1 | import { getGlobalExplorerLayout } from "@/features/layouts/components/explorer/ExplorerLayout";
2 | import { WorkspaceType } from "@/features/drivers/types";
3 | import WorkspacesExplorer from "@/features/explorer/components/workspaces-explorer/WorkspacesExplorer";
4 | export default function PublicPage() {
5 | return (
6 |
11 |
20 | );
21 | };
22 |
--------------------------------------------------------------------------------
/src/backend/core/tests/utils/urls.py:
--------------------------------------------------------------------------------
1 | """Utils for testing URLs."""
2 |
3 | import importlib
4 |
5 | from django.urls import clear_url_caches
6 |
7 |
8 | def reload_urls():
9 | """
10 | Reload the URLs. Since the url are loaded based on a
11 | settings value, we need to reload the urls to make the
12 | URL settings based condition effective.
13 | """
14 | import core.urls # pylint:disable=import-outside-toplevel # noqa: PLC0415
15 |
16 | import drive.urls # pylint:disable=import-outside-toplevel # noqa: PLC0415
17 |
18 | importlib.reload(core.urls)
19 | importlib.reload(drive.urls)
20 | clear_url_caches()
21 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/users/hooks/useUserQueries.tsx:
--------------------------------------------------------------------------------
1 | import { getDriver } from "@/features/config/Config";
2 | import { UserFilters } from "@/features/drivers/Driver";
3 | import { useQuery } from "@tanstack/react-query";
4 | import { HookUseQueryOptions } from "@/utils/useQueries";
5 | import { User } from "@/features/drivers/types";
6 | export const useUsers = (
7 | filters?: UserFilters,
8 | options?: HookUseQueryOptions{label}
12 |
17 | {rightContent}
18 |
19 |
14 |
19 | );
20 | };
21 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/.gitignore:
--------------------------------------------------------------------------------
1 | # See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
2 |
3 | # dependencies
4 | /node_modules
5 | /.pnp
6 | .pnp.*
7 | .yarn/*
8 | !.yarn/patches
9 | !.yarn/plugins
10 | !.yarn/releases
11 | !.yarn/versions
12 |
13 | # testing
14 | /coverage
15 |
16 | # next.js
17 | /.next/
18 | /out/
19 |
20 | # production
21 | /build
22 |
23 | # misc
24 | .DS_Store
25 | *.pem
26 |
27 | # debug
28 | npm-debug.log*
29 | yarn-debug.log*
30 | yarn-error.log*
31 | .pnpm-debug.log*
32 |
33 | # local env files
34 | .env*.local
35 |
36 | # vercel
37 | .vercel
38 |
39 | # typescript
40 | *.tsbuildinfo
41 | next-env.d.ts
42 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/ui/components/generic-disclaimer/GenericDisclaimer.scss:
--------------------------------------------------------------------------------
1 | .drive__generic-disclaimer {
2 | display: flex;
3 | align-items: center;
4 | justify-content: center;
5 | height: calc(100vh - var(--header-height));
6 | padding: 0 0.5rem;
7 |
8 | &__content {
9 | display: flex;
10 | flex-direction: column;
11 | align-items: center;
12 | justify-content: center;
13 | gap: 1rem;
14 |
15 | &__image {
16 | max-width: 100%;
17 | }
18 |
19 | > p {
20 | margin: 0;
21 | color: var(--c--contextuals--content--semantic--neutral--primary);
22 | text-align: center;
23 | }
24 | }
25 | }
26 |
--------------------------------------------------------------------------------
/src/backend/core/migrations/0008_alter_item_options_and_more.py:
--------------------------------------------------------------------------------
1 | # Generated by Django 5.2.3 on 2025-06-23 09:22
2 |
3 | from django.db import migrations
4 |
5 |
6 | class Migration(migrations.Migration):
7 |
8 | dependencies = [
9 | ('core', '0007_item_hard_deleted_at'),
10 | ]
11 |
12 | operations = [
13 | migrations.AlterModelOptions(
14 | name='item',
15 | options={'ordering': ('created_at',), 'verbose_name': 'Item', 'verbose_name_plural': 'Items'},
16 | ),
17 | migrations.RemoveConstraint(
18 | model_name='item',
19 | name='check_filename_set_for_files',
20 | ),
21 | ]
22 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/analytics/AnalyticsProvider.tsx:
--------------------------------------------------------------------------------
1 | import { useConfig } from "../config/ConfigProvider";
2 | import { PostHogProvider } from "posthog-js/react";
3 |
4 | export const AnalyticsProvider = ({
5 | children,
6 | }: {
7 | children: React.ReactNode;
8 | }) => {
9 | const { config } = useConfig();
10 |
11 | if (!config?.POSTHOG_KEY) {
12 | return children;
13 | }
14 |
15 | return (
16 |
15 |
18 |
13 |
23 | );
24 | };
25 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/explorer/components/icons/ItemIcon.scss:
--------------------------------------------------------------------------------
1 | .workspace-icon-container {
2 | display: flex;
3 | align-items: center;
4 | justify-content: center;
5 | width: 24px;
6 | height: 24px;
7 | border-radius: 4px;
8 | background-color: var(--c--contextuals--background--palette--brand--primary);
9 | border: 1px solid rgba(255, 255, 255, 0.2);
10 | }
11 |
12 | .item-icon {
13 | &.small {
14 | width: 18px;
15 | height: 18px;
16 | }
17 |
18 | &.medium {
19 | width: 32px;
20 | height: 32px;
21 | }
22 |
23 | &.large {
24 | width: 48px;
25 | height: 48px;
26 | }
27 |
28 | &.xlarge {
29 | width: 64px;
30 | height: 64px;
31 | }
32 | }
33 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/explorer/components/toasts/addItemsMovedToast.tsx:
--------------------------------------------------------------------------------
1 | import { addToast } from "@/features/ui/components/toaster/Toaster";
2 | import { useTranslation } from "react-i18next";
3 | import { ToasterItem } from "@/features/ui/components/toaster/Toaster";
4 |
5 | export const addItemsMovedToast = (count: number) => {
6 | addToast(
14 | 
19 |
22 | {message}
20 | {children} 21 |
29 | {props.children}
30 |
31 | );
32 | };
33 |
--------------------------------------------------------------------------------
/src/backend/wopi/tests/services/test_lock.py:
--------------------------------------------------------------------------------
1 | """Test the LockService."""
2 |
3 | import pytest
4 |
5 | from core import factories
6 | from wopi.services.lock import LockService
7 |
8 | pytestmark = pytest.mark.django_db
9 |
10 |
11 | def test_lock_service():
12 | """Test the lock service."""
13 | item = factories.ItemFactory()
14 |
15 | lock_service = LockService(item)
16 | assert lock_service.is_locked() is False
17 |
18 | lock_service.lock("1234567890")
19 | assert lock_service.is_locked()
20 | assert lock_service.get_lock() == "1234567890"
21 | assert lock_service.is_lock_valid("1234567890") is True
22 | assert lock_service.is_lock_valid("1234567891") is False
23 |
24 | lock_service.refresh_lock()
25 |
26 | lock_service.unlock()
27 | assert lock_service.is_locked() is False
28 | assert lock_service.get_lock() is None
29 |
--------------------------------------------------------------------------------
/renovate.json:
--------------------------------------------------------------------------------
1 | {
2 | "extends": ["github>numerique-gouv/renovate-configuration"],
3 | "dependencyDashboard": true,
4 | "labels": ["dependencies", "noChangeLog"],
5 | "packageRules": [
6 | {
7 | "groupName": "allowed redis versions",
8 | "matchManagers": ["pep621"],
9 | "matchPackageNames": ["redis"],
10 | "allowedVersions": "<6.0.0"
11 | },
12 | {
13 | "groupName": "allowed pylint versions",
14 | "matchManagers": ["pep621"],
15 | "matchPackageNames": ["pylint"],
16 | "allowedVersions": "<4.0.0"
17 | },
18 | {
19 | "description": "Disable requires-python updates - managed manually",
20 | "matchManagers": ["pep621"],
21 | "matchPackageNames": ["python"],
22 | "enabled": false
23 | }
24 | ]
25 | }
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/assets/tree/folder.svg:
--------------------------------------------------------------------------------
1 |
4 |
--------------------------------------------------------------------------------
/src/frontend/apps/sdk-consumer/eslint.config.js:
--------------------------------------------------------------------------------
1 | import js from '@eslint/js'
2 | import globals from 'globals'
3 | import reactHooks from 'eslint-plugin-react-hooks'
4 | import reactRefresh from 'eslint-plugin-react-refresh'
5 | import tseslint from 'typescript-eslint'
6 |
7 | export default tseslint.config(
8 | { ignores: ['dist'] },
9 | {
10 | extends: [js.configs.recommended, ...tseslint.configs.recommended],
11 | files: ['**/*.{ts,tsx}'],
12 | languageOptions: {
13 | ecmaVersion: 2020,
14 | globals: globals.browser,
15 | },
16 | plugins: {
17 | 'react-hooks': reactHooks,
18 | 'react-refresh': reactRefresh,
19 | },
20 | rules: {
21 | ...reactHooks.configs.recommended.rules,
22 | 'react-refresh/only-export-components': [
23 | 'warn',
24 | { allowConstantExport: true },
25 | ],
26 | },
27 | },
28 | )
29 |
--------------------------------------------------------------------------------
/src/backend/core/migrations/0011_update_items_upload_state_value.py:
--------------------------------------------------------------------------------
1 | # Generated by Django 5.2.4 on 2025-07-22 15:12
2 |
3 | from django.db import migrations, models
4 |
5 | def update_items_upload_state_value(apps, schema_editor):
6 | Item = apps.get_model('core', 'Item')
7 | Item.objects.filter(upload_state='uploaded').update(upload_state='ready')
8 |
9 | def reverse_update_items_upload_state_value(apps, schema_editor):
10 | Item = apps.get_model('core', 'Item')
11 | Item.objects.filter(upload_state='ready').update(upload_state='uploaded')
12 |
13 |
14 | class Migration(migrations.Migration):
15 |
16 | dependencies = [
17 | ('core', '0010_alter_item_upload_state'),
18 | ]
19 |
20 | operations = [
21 | migrations.RunPython(
22 | update_items_upload_state_value, reverse_code=reverse_update_items_upload_state_value
23 | ),
24 | ]
25 |
--------------------------------------------------------------------------------
/bin/update_app_cacert.sh:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | set -o errexit
3 |
4 | # The script is pretty simple. It downloads the latest cacert.pem file from the certifi package and appends the root certificate from mkcert to it. Then it copies the updated cacert.pem file to the container.
5 | # The script is executed with the following command:
6 | # $ bin/update_app_cacert.sh docs-production-backend-1
7 |
8 | CONTAINER_NAME=${1:-"drive-production-backend-1"}
9 |
10 | echo "updating cacert.pem for certifi package in ${CONTAINER_NAME}"
11 |
12 |
13 | curl --create-dirs https://raw.githubusercontent.com/certifi/python-certifi/refs/heads/master/certifi/cacert.pem -o /tmp/certifi/cacert.pem
14 | cat "$(mkcert -CAROOT)/rootCA.pem" >> /tmp/certifi/cacert.pem
15 | docker cp /tmp/certifi/cacert.pem ${CONTAINER_NAME}:/usr/local/lib/python3.12/site-packages/certifi/cacert.pem
16 |
17 | echo "end patching cacert.pem in ${CONTAINER_NAME}"
18 |
--------------------------------------------------------------------------------
/docs/theming.md:
--------------------------------------------------------------------------------
1 | # Theming 📝
2 |
3 | ## **Footer Theming**
4 |
5 | The footer is configurable from the theme customization file.
6 |
7 | ### Settings 🔧
8 |
9 | ```shellscript
10 | THEME_CUSTOMIZATION_FILE_PATH=
19 |
26 | );
27 | };
28 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/explorer/hooks/useInfiniteItems.ts:
--------------------------------------------------------------------------------
1 | import { useInfiniteQuery } from "@tanstack/react-query";
2 | import { getDriver } from "@/features/config/Config";
3 | import { ItemFilters } from "@/features/drivers/Driver";
4 |
5 | export const useInfiniteItems = (
6 | filters: ItemFilters = {},
7 | enabled: boolean = true
8 | ) => {
9 | return useInfiniteQuery({
10 | queryKey: [
11 | "items",
12 | "infinite",
13 | ...(Object.keys(filters).length ? [JSON.stringify(filters)] : []),
14 | ],
15 | queryFn: ({ pageParam = 1 }) => {
16 | return getDriver().getItems({
17 | page: pageParam,
18 | ...filters,
19 | });
20 | },
21 | getNextPageParam: (lastPage) => {
22 | return lastPage.pagination.hasMore
23 | ? lastPage.pagination.currentPage + 1
24 | : undefined;
25 | },
26 | initialPageParam: 1,
27 | enabled: enabled,
28 | });
29 | };
30 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/ui/components/gaufre/Gaufre.tsx:
--------------------------------------------------------------------------------
1 | import { LaGaufreV2 } from "@gouvfr-lasuite/ui-kit";
2 | import {
3 | removeQuotes,
4 | useCunninghamTheme,
5 | } from "../../cunningham/useCunninghamTheme";
6 | import { useConfig } from "@/features/config/ConfigProvider";
7 | import { useAppContext } from "@/pages/_app";
8 |
9 | export const Gaufre = () => {
10 | const { config } = useConfig();
11 | const { theme: themeName } = useAppContext();
12 | const hideGaufre = config?.FRONTEND_HIDE_GAUFRE;
13 | const theme = useCunninghamTheme();
14 | const widgetPath = removeQuotes(theme.components.gaufre.widgetPath);
15 | const apiUrl = removeQuotes(theme.components.gaufre.apiUrl);
16 |
17 | if (hideGaufre) {
18 | return null;
19 | }
20 |
21 | return (
22 |
21 | {navItems.map((item) => (
22 |
25 |
19 |
20 | {timeAgo(new Date(item.updated_at))}
21 |
22 |
23 |
19 |
20 |
30 |
31 | );
32 | };
33 |
--------------------------------------------------------------------------------
/src/backend/core/tests/swagger/test_openapi_schema.py:
--------------------------------------------------------------------------------
1 | """
2 | Test suite for generated openapi schema.
3 | """
4 |
5 | import json
6 | from io import StringIO
7 |
8 | from django.core.management import call_command
9 | from django.test import Client
10 |
11 | import pytest
12 |
13 | pytestmark = pytest.mark.django_db
14 |
15 |
16 | def test_openapi_client_schema():
17 | """
18 | Generated and served OpenAPI client schema should be correct.
19 | """
20 | # Start by generating the swagger.json file
21 | output = StringIO()
22 | call_command(
23 | "spectacular",
24 | "--api-version",
25 | "v1.0",
26 | "--urlconf",
27 | "core.urls",
28 | "--format",
29 | "openapi-json",
30 | "--file",
31 | "core/tests/swagger/swagger.json",
32 | stdout=output,
33 | )
34 | assert output.getvalue() == ""
35 |
36 | response = Client().get("/api/v1.0/swagger.json")
37 |
38 | assert response.status_code == 200
39 | with open(
40 | "core/tests/swagger/swagger.json", "r", encoding="utf-8"
41 | ) as expected_schema:
42 | assert response.json() == json.load(expected_schema)
43 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/assets/files/icons/mime-folder-mini.svg:
--------------------------------------------------------------------------------
1 |
6 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/assets/icons/cancel_blue.svg:
--------------------------------------------------------------------------------
1 |
4 |
--------------------------------------------------------------------------------
/src/frontend/apps/e2e/__tests__/app-drive/utils-item.ts:
--------------------------------------------------------------------------------
1 | import { expect, Page } from "@playwright/test";
2 | import { getItemTree, openTreeNode } from "./utils-tree";
3 |
4 | export const createWorkspace = async (page: Page, workspaceName: string) => {
5 | await page.getByRole("button", { name: "add Create" }).click();
6 | await page.getByRole("menuitem", { name: "New workspace" }).click();
7 | await page.getByRole("textbox", { name: "Workspace name" }).click();
8 | await page
9 | .getByRole("textbox", { name: "Workspace name" })
10 | .fill(workspaceName);
11 | await page.getByRole("button", { name: "Create" }).click();
12 | await openTreeNode(page, "Shared Space");
13 | const newWorkspaceItem = await getItemTree(page, workspaceName);
14 | await expect(newWorkspaceItem).toBeVisible();
15 | };
16 |
17 | export const createFolder = async (page: Page, folderName: string) => {
18 | await page.getByRole("button", { name: "Create Folder" }).click();
19 | await page.getByRole("textbox", { name: "Folder name" }).click();
20 | await page.getByRole("textbox", { name: "Folder name" }).fill(folderName);
21 | await page.getByRole("button", { name: "Create" }).click();
22 | };
23 |
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | MIT License
2 |
3 | Copyright (c) 2025 Direction Interministérielle du Numérique - Gouvernement Français
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
--------------------------------------------------------------------------------
/src/frontend/apps/e2e/__tests__/app-drive/utils-explorer.ts:
--------------------------------------------------------------------------------
1 | import { expect, Page } from "@playwright/test";
2 | import { expectTreeItemIsSelected } from "./utils-tree";
3 |
4 | export const expectExplorerBreadcrumbs = async (
5 | page: Page,
6 | expected: string[],
7 | hidden: string[] = []
8 | ) => {
9 | const breadcrumbs = page.getByTestId("explorer-breadcrumbs");
10 | await expect(breadcrumbs).toBeVisible();
11 |
12 | // Check the order of breadcrumbs
13 | if (expected.length >= 1) {
14 | const breadcrumbButtons = breadcrumbs.getByTestId("breadcrumb-button");
15 |
16 | // Check each breadcrumb appears in the correct order
17 | for (let i = 0; i < expected.length; i++) {
18 | const button = breadcrumbButtons.nth(i);
19 | await expect(button).toBeVisible();
20 | await expect(button).toContainText(expected[i]);
21 | }
22 | }
23 | };
24 |
25 | export const expectCurrentFolder = async (
26 | page: Page,
27 | expected: string[],
28 | isSelected: boolean = false
29 | ) => {
30 | await expectTreeItemIsSelected(
31 | page,
32 | expected[expected.length - 1],
33 | isSelected
34 | );
35 | await expectExplorerBreadcrumbs(page, expected);
36 | };
37 |
--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | # Byte-compiled / optimized / DLL files
2 | __pycache__/
3 | *.py[cod]
4 | *$py.class
5 |
6 | # C extensions
7 | *.so
8 |
9 | # Distribution / packaging
10 | .Python
11 | build/
12 | develop-eggs/
13 | dist/
14 | downloads/
15 | eggs/
16 | .eggs/
17 | lib/
18 | lib64/
19 | parts/
20 | sdist/
21 | var/
22 | wheels/
23 | pip-wheel-metadata/
24 | share/python-wheels/
25 | *.egg-info/
26 | .installed.cfg
27 | *.egg
28 | MANIFEST
29 | .DS_Store
30 | .next/
31 |
32 | # Translations # Translations
33 | *.mo
34 | *.pot
35 |
36 | # Environments
37 | .venv
38 | env/
39 | venv/
40 | ENV/
41 | env.bak/
42 | venv.bak/
43 | env.d/development/*.local
44 | env.d/terraform
45 |
46 | # Docker
47 | compose.override.yml
48 | docker/auth/*.local
49 |
50 | # npm
51 | node_modules
52 |
53 | # Mails
54 | src/backend/core/templates/mail/
55 |
56 | # Swagger
57 | **/swagger.json
58 |
59 | # Logs
60 | *.log
61 |
62 | # Terraform
63 | .terraform
64 | *.tfstate
65 | *.tfstate.backup
66 |
67 | # Test & lint
68 | .coverage
69 | .pylint.d
70 | .pytest_cache
71 | db.sqlite3
72 | .mypy_cache
73 |
74 | # Site media
75 | /data/
76 |
77 | # IDEs
78 | .idea/
79 | .vscode/
80 | *.iml
81 | .devcontainer
82 |
83 | # Various
84 | .turbo
85 |
--------------------------------------------------------------------------------
/src/frontend/apps/e2e/__tests__/app-drive/utils-embedded-grid.ts:
--------------------------------------------------------------------------------
1 | import { expect, Page } from "@playwright/test";
2 |
3 | export const getRowItem = async (page: Page, itemName: string) => {
4 | const row = page
5 | .getByRole("row", { name: itemName })
6 | .filter({ hasText: itemName })
7 | .first();
8 |
9 | await expect(row).toBeVisible();
10 | return row;
11 | };
12 |
13 | export const getRowItemActions = async (page: Page, itemName: string) => {
14 | const row = await getRowItem(page, itemName);
15 | const actions = row
16 | .getByRole("button", {
17 | name: `More actions for ${itemName}`,
18 | exact: true,
19 | })
20 | .nth(1);
21 | await expect(actions).toBeVisible();
22 | return actions;
23 | };
24 |
25 | export const clickOnRowItemActions = async (
26 | page: Page,
27 | itemName: string,
28 | actionName: string
29 | ) => {
30 | const actions = await getRowItemActions(page, itemName);
31 | await actions.click({ force: true }); // Because dnd-kit add an aria-disabled attribute on parent and playwright don't interact with it
32 | const action = page.getByRole("menuitem", { name: "Info" });
33 | await expect(action).toBeVisible();
34 | await action.click();
35 | };
36 |
--------------------------------------------------------------------------------
/SECURITY.md:
--------------------------------------------------------------------------------
1 | # Security Policy
2 |
3 | ## Reporting a Vulnerability
4 |
5 | Security is very important to us.
6 |
7 | If you have any issue regarding security, please disclose the information responsibly submitting [this form](https://vdp.numerique.gouv.fr/p/Send-a-report?lang=en) and not by creating an issue on the repository. You can also email us at drive@numerique.gouv.fr
8 |
9 | We appreciate your effort to make Drive more secure.
10 |
11 | ## Vulnerability disclosure policy
12 |
13 | Working with security issues in an open source project can be challenging, as we are required to disclose potential problems that could be exploited by attackers. With this in mind, our security fix policy is as follows:
14 |
15 | 1. The Maintainers team will handle the fix as usual (Pull Request,
16 | release).
17 | 2. In the release notes, we will include the identification numbers from the
18 | GitHub Advisory Database (GHSA) and, if applicable, the Common Vulnerabilities
19 | and Exposures (CVE) identifier for the vulnerability.
20 | 3. Once this grace period has passed, we will publish the vulnerability.
21 |
22 | By adhering to this security policy, we aim to address security concerns
23 | effectively and responsibly in our open source software project.
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/explorer/hooks/useDeleteItem.tsx:
--------------------------------------------------------------------------------
1 | import {
2 | addToast,
3 | ToasterItem,
4 | } from "@/features/ui/components/toaster/Toaster";
5 | import { useMutationDeleteItems } from "./useMutations";
6 | import { useTranslation } from "react-i18next";
7 |
8 | export const useDeleteItem = () => {
9 | const { t } = useTranslation();
10 | const deleteItemsMutation = useMutationDeleteItems();
11 | const deleteItems = async (itemIds: string[]) => {
12 | try {
13 | await deleteItemsMutation.mutateAsync(itemIds);
14 | addToast(
15 |
33 |
36 | );
37 | };
38 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/explorer/components/embedded-explorer/EmbeddedExplorerGridMobileCell.tsx:
--------------------------------------------------------------------------------
1 | import { CellContext } from "@tanstack/react-table";
2 | import { Item } from "@/features/drivers/types";
3 | import { ItemIcon } from "@/features/explorer/components/icons/ItemIcon";
4 | import { timeAgo } from "@/features/explorer/utils/utils";
5 | import { removeFileExtension } from "../../utils/mimeTypes";
6 | type EmbeddedExplorerGridMobileCellProps = CellContext{icon}
34 | {label}
35 |
15 |
27 | );
28 | };
29 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/explorer/components/Droppable.tsx:
--------------------------------------------------------------------------------
1 | import { Item } from "@/features/drivers/types";
2 | import { useDroppable } from "@dnd-kit/core";
3 | import {
4 | NodeRendererProps,
5 | TreeDataItem,
6 | TreeViewDataType,
7 | } from "@gouvfr-lasuite/ui-kit";
8 | import { useEffect } from "react";
9 |
10 | type DroppableProps = {
11 | id: string;
12 | disabled?: boolean;
13 | item: Item;
14 | nodeTree?: NodeRendererProps
17 |
26 |
18 |
19 | {removeFileExtension(item.title)}
20 |
21 |
22 |
23 | {timeAgo(new Date(item.updated_at))}
24 |
25 |
38 | {props.children}
39 |
40 | );
41 | };
42 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/ui/components/toaster/index.scss:
--------------------------------------------------------------------------------
1 | @mixin toaster-theme($color) {
2 | background-color: var(
3 | --c--contextuals--background--semantic--#{$color}--tertiary
4 | );
5 | border: 1px solid var(--c--contextuals--border--semantic--#{$color}--tertiary);
6 | color: var(--c--contextuals--content--semantic--#{$color}--primary);
7 | --toastify-color-progress-light: var(
8 | --c--contextuals--content--semantic--#{$color}--tertiary
9 | );
10 | }
11 |
12 | .suite__toaster {
13 | &__wrapper {
14 | width: auto;
15 | min-height: 0;
16 | padding: 0;
17 | }
18 |
19 | &__item {
20 | padding: 12px;
21 | border-radius: 4px;
22 | min-width: 400px;
23 | display: flex;
24 | justify-content: space-between;
25 | align-items: center;
26 | box-shadow: 0px 6px 18px 0px #0000910d;
27 | font-size: 14px;
28 | font-weight: 500;
29 | font-family: var(--c--globals--font--families--base);
30 |
31 | &__content {
32 | display: flex;
33 | gap: 8px;
34 | align-items: center;
35 | flex-grow: 1;
36 | }
37 |
38 | &--info {
39 | @include toaster-theme("brand");
40 | }
41 |
42 | &--error {
43 | @include toaster-theme("info");
44 | }
45 | }
46 | }
47 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/ui/components/icon/Icon.tsx:
--------------------------------------------------------------------------------
1 | export const CheckIcon = () => {
2 | return (
3 |
25 | );
26 | };
27 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/features/ui/preview/components/duration-bar/DurationBar.tsx:
--------------------------------------------------------------------------------
1 | const formatTime = (time: number): string => {
2 | const minutes = Math.floor(time / 60);
3 | const seconds = Math.floor(time % 60);
4 | return `${minutes}:${seconds.toString().padStart(2, "0")}`;
5 | };
6 |
7 | type DurationBarProps = {
8 | duration: number;
9 | currentTime: number;
10 | handleSeek: (e: React.ChangeEvent
22 |
39 | );
40 | };
41 |
--------------------------------------------------------------------------------
/src/frontend/apps/drive/src/pages/sdk/index.tsx:
--------------------------------------------------------------------------------
1 | import { Spinner } from "@gouvfr-lasuite/ui-kit";
2 | import { useEffect } from "react";
3 | import { login, useAuth } from "@/features/auth/Auth";
4 | import { GlobalLayout } from "@/features/layouts/components/global/GlobalLayout";
5 | import { useSearchParams } from "next/navigation";
6 |
7 | export default function SDKPage() {
8 | const { user } = useAuth();
9 | const searchParams = useSearchParams();
10 | const mode = searchParams.get("mode");
11 | const token = searchParams.get("token");
12 |
13 | const redirect = async () => {
14 | let url = `/sdk/explorer`;
15 | if (mode) {
16 | url += `?mode=${mode}`;
17 | }
18 | window.location.href = url;
19 | };
20 |
21 | useEffect(() => {
22 | if (!token) {
23 | throw new Error("Token is required");
24 | }
25 |
26 | sessionStorage.setItem("sdk_token", token);
27 |
28 | if (user) {
29 | redirect();
30 | } else {
31 | const returnTo = window.location.href;
32 | login(returnTo);
33 | }
34 | }, [user]);
35 |
36 | return (
37 | {formatTime(currentTime)}
23 |
37 | {formatTime(duration)}
38 |
38 |
40 | );
41 | }
42 |
43 | SDKPage.getLayout = function getLayout(page: React.ReactElement) {
44 | return
36 |
38 | );
39 | }
40 |
41 | return (
42 |