Storage
OCIS wraps reva and adds an opinionated configuration to provide two core services for the oCIS platform:
- A Spaces Registry that acts as a dictionary for storage Spaces and their metadata
- A Spaces Provider that organizes Resources in storage Spaces and persists them in an underlying Storage System
Clients will use the Spaces Registry to poll or get notified about changes in all Spaces a user has access to. Every Space has a dedicated /dav/spaces/<spaceid> WebDAV endpoint that is served by a Spaces Provider which uses a specific reva storage driver to wrap an underlying Storage System.
The dashed lines in the diagram indicate requests that are made to authenticate requests or lookup the storage provider:
- After authenticating a request, the proxy may either use the CS3
userprovideror the accounts service to fetch the user information that will be minted into thex-access-token. - The gateway will verify the JWT signature of the
x-access-tokenor try to authenticate the request itself, e.g. using a public link token.
The bottom part is lighter because we will deprecate it in favor of using only the CS3 user and group providers after moving some account functionality into reva and glauth. The metadata storage is not registered in the reva gateway to separate metadata necessary for running the service from data that is being served directly.
In order to reason about the request flow, two aspects in the architecture need to be understood well:
- What kind of namespaces are presented at the different WebDAV and CS3 endpoints?
- What kind of resource references are exposed or required: path or id based?
