Merge pull request #13296 from owncloud/feat/share-links-and-passswords

feat: share links and passwords in embed mode

Author: LukasHirt

changelog/unreleased/enhancement-embed-share-links-with-password.md

@@ -0,0 +1,9 @@
+Enhancement: Embed mode share links with password
+
+In embed mode, the "Copy link and password" button text has been changed to "Share link(s) and password(s)".
+When sharing links in embed mode, a new event `owncloud-embed:share-links` is now emitted that contains an array of objects with the link URL and optionally the password (when the "Share link(s) and password(s)" button is clicked).
+This allows parent applications to handle both the link and password programmatically.
+
+DEPRECATION NOTICE: This deprecates the `owncloud-embed:share` event. The existing event continues to be emitted for backward compatibility.
+
+https://github.com/owncloud/web/pull/13296

docs/embed-mode/_index.md

@@ -35,11 +35,14 @@ To maintain uniformity and ease of handling, each event encapsulates the same st
 | Name | Data | Description |
 | --- | --- | --- |
 | **owncloud-embed:select** | Resource[] | Gets emitted when user selects resources or location via the select action |
-| **owncloud-embed:share** | string[] | Gets emitted when user selects resources and shares them via the "Share links" action |
+| **owncloud-embed:share** | string[] | **DEPRECATED**: Gets emitted when user selects resources and shares them via the "Share links" action. Use `owncloud-embed:share-links` instead. |
+| **owncloud-embed:share-links** | Array<{ url: string; password?: string }> | Gets emitted when user selects resources and shares them via the "Share link(s)" or "Share link(s) and password(s)" action. Each object contains the link URL and optionally the password (when shared with password). |
 | **owncloud-embed:cancel** | null | Gets emitted when user attempts to close the embedded instance via "Cancel" action |
 
 ### Example
 
+#### Selecting resources
+
 ```html
 <iframe src="https://my-owncloud-web-instance?embed=true"></iframe>
 
@@ -58,6 +61,28 @@ To maintain uniformity and ease of handling, each event encapsulates the same st
 </script>
 ```
 
+#### Sharing links with password
+
+```html
+<iframe src="https://my-owncloud-web-instance?embed=true"></iframe>
+
+<script>
+  function shareLinksEventHandler(event) {
+    if (event.data?.name !== 'owncloud-embed:share-links') {
+      return
+    }
+
+    const links = event.data.data // Array<{ url: string; password?: string }>
+
+    links.forEach(link => console.log("Link", link.url, "Password", link.password))
+
+    doSomethingWithSharedLinks(links)
+  }
+
+  window.addEventListener('message', shareLinksEventHandler)
+</script>
+```
+
 ## Location picker
 
 By default, the Embed mode allows users to select resources. In certain cases (e.g. uploading a file), this needs to be changed to allow selecting a location. This can be achieved by running the embed mode with additional parameter `embed-target=location`. With this parameter, resource selection is disabled and the selected resources array always includes the current folder as the only item.

docs/releasing/deprecations.md

@@ -18,6 +18,7 @@ The following features are deprecated and **will be removed** in the next major
 
 | Component/Feature | Deprecated | Migration | Reference | Reasoning |
 |---|---|---|---|---|---|
+| `owncloud-embed:share` event | November 12, 2025 | Use `owncloud-embed:share-links` event instead | [PR #13296](https://github.com/owncloud/web/pull/13296) | New event provides structured data with both URL and optional password |
 
 ## Migration History
 

packages/web-pkg/src/components/CreateLinkModal.vue

@@ -71,7 +71,7 @@
               class="oc-modal-body-actions-confirm-password action-menu-item"
               appearance="raw"
               @click="$emit('confirm', { copyPassword: true })"
-              >{{ $gettext('Copy link and password') }}
+              >{{ confirmPasswordButtonText }}
             </oc-button>
           </li>
         </oc-list>
@@ -145,6 +145,14 @@ const confirmButtonText = computed(() => {
   return $gettext('Copy link')
 })
 
+const confirmPasswordButtonText = computed(() => {
+  if (unref(isEmbedEnabled)) {
+    return $gettext('Share link(s) and password(s)')
+  }
+
+  return $gettext('Copy link and password')
+})
+
 const passwordInputKey = ref(uuidV4())
 const roleRefs = ref<Record<string, RoleRef>>({})
 
@@ -211,10 +219,20 @@ const onConfirm = async (options: { copyPassword?: boolean } = {}) => {
     const failed = result.filter(({ status }) => status === 'rejected') as PromiseRejectedResult[]
 
     if (succeeded.length && unref(isEmbedEnabled)) {
+      // **DEPRECATED**: Always emit the share url for backwards compatibility
       postMessage<string[]>(
         'owncloud-embed:share',
         succeeded.map(({ value }) => value.webUrl)
       )
+
+      // Always emit new event with objects, include password only when copyPassword is enabled
+      postMessage<Array<{ url: string; password?: string }>>(
+        'owncloud-embed:share-links',
+        succeeded.map(({ value }) => ({
+          url: value.webUrl,
+          ...(options.copyPassword && { password: password.value })
+        }))
+      )
     }
 
     const userFacingErrors: Error[] = []