in this topic I asked the very same question and found the answer at /hosting/capabilities as a JSON data point productVersion.
This is now gone with the latest update.
The software I use to retrieve version info is capable of basic auth and header token based access.
After some time spent looking, I’m unable to find documentation of the API or any other endpoints that would help me.
Any help is appreciated.
Thank you
Hi, there was a recent change: Tweak capabilities JSON · CollaboraOnline/online@bf48b41 · GitHub
Please check coolwsd.xml: security.server_signature
I suppose I should have been more specific… /capabilities still returns a response but the specific data point I want productVersion is missing. From the Tweak capabilities JSON issue listed by szyklos it looks like something was changed that I don’t yet understand to make that go away.
I don’t currently have a volume bound for collabora where I might find coolwsd.xml. What path would I set for the collabora side to have this easily accessible to me?
FYI I’m running collabora as a docker container.
so I figured out that I could make it an “extra param”
adding --o:security.server_signature=On to the extra params in the docker compose I could turn this on.
now, that being said, it’s unfortunate that to have a convenient way to monitor versions I have to expose information I’d rather not expose publicly.
Is there no private (behind basic auth or header token) api endpoint I could get to securely to retrieve such information?
No, there is currently no dedicated private API endpoint (behind basic auth or token) that exposes the product version separately.
i think It was removed mainly for security reasons.
IF we do Exposing productVersion publicly allowed:
Since the version is not required for WOPI functionality, it was considered unnecessary metadata and removed to reduce information leakage and attack surface.
