.. _webdavindex: ========== Basic APIs ========== This document provides a quick overview of the WebDAV operations supported in Nextcloud, to keep things readable it won't go into many details for each operation, further information for each operation can be found in the corresponding RFC where applicable. WebDAV basics ------------- The base url for all WebDAV operations for a Nextcloud instance is :code:`/remote.php/dav`. All requests need to provide authentication information, either as a basic auth header or by passing a set of valid session cookies. If your Nextcloud installation uses an external auth provider (such as an OIDC server) you may have to create an app password. To do that, go to your personal security settings and create one. It will provide a username and password which you can use within the Basic Auth header. Testing requests ---------------- With curl ^^^^^^^^^ All WebDAV requests can be easily tested out using :code:`curl` by specifying the request method (:code:`GET`, :code:`PROPFIND`, :code:`PUT`, ...) and providing a request body where needed. For example: you can perform a :code:`PROPFIND` request to find files in a folder using: .. code-block:: bash curl 'https://cloud.example.com/remote.php/dav/files/username/folder' \ --user username:password \ --request PROPFIND \ --data ' ' Making requests in JavaScript ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Here is a JavaScript code sample to get you started: .. code-block:: javascript import { createClient } from 'webdav' import { generateRemoteUrl } from '@nextcloud/router' import { getCurrentUser } from '@nextcloud/auth' const client = createClient(generateRemoteUrl('dav')) const response = await client.getDirectoryContents(`/files/${getCurrentUser()?.uid}/folder`, { details: true, data: ` `, }) Requesting properties --------------------- By default, a :code:`PROPFIND` request will only return a small number of properties for each file: last modified date, file size, whether it's a folder, etag and mime type. You can request additional properties by sending a request body with the :code:`PROPFIND` request that lists all requested properties. .. code-block:: xml A note about namespaces URI ^^^^^^^^^^^^^^^^^^^^^^^^^^^ When building the body of your DAV request, you will request properties that are available under specific namespace URI. It is usual to declare prefixes for those namespace in the ``d:propfind`` element of the body. Here is the list of available namespace: ========================================= ====== URI Prefix ========================================= ====== DAV: d http://owncloud.org/ns oc http://nextcloud.org/ns nc http://open-collaboration-services.org/ns ocs http://open-cloud-mesh.org/ns ocm ========================================= ====== And here is how it should look in your DAV request: .. code-block:: xml xmlns:ocm="http://open-cloud-mesh.org/ns"> ... Supported properties ^^^^^^^^^^^^^^^^^^^^ +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | Property | Description | Example | +===============================+=================================================+======================================================================================+ | | The creation date of the node. | ``1970-01-01T00:00:00+00:00`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The latest modification time. | ``Wed, 20 Jul 2022 05:12:23 GMT`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The file's etag. | ``"6436d084d4805"`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The mime type of the file. | ``image/jpeg`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Specifies the nature of the resource. | ```` for a folder | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The size if it is a file in bytes. | ``3030237`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The language of the content. | ``en`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | A name suitable for presentation. | ``File name`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | Dummy endpoint for class 2 WebDAV support. | ```` | | | | Should return the list of lock, but | | | | | always return an empty response. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Amount of available bytes in the folder. | | ``3950773`` | | | | | ``-1`` Uncomputed free space. | | | | | ``-2`` Unknown free space. | | | | | ``-3`` Unlimited free space. | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Amount of bytes used in the folder. | ``3950773`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | Dummy endpoint for class 2 WebDAV support. | | ```` | | | | Always provide the same lock capabilities. | | ```` | | | | | | ```` | | | | | | ```` | | | | | | ```` | | | | | | ```` | | | | | | ```` | | | | | | ```` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | The fileid namespaced by the instance id. | ``00000007oc9l3j5ur4db`` | | | | Globally unique. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The unique id for the file within the instance. | ``7`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | A URL to directly download the file from a | | | | | storage. No storage implements that yet. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | The permissions that the user has over the | | ``S``: Shared | | | | file. The value is a string containing | | ``R``: Shareable | | | | letters for all available permissions. | | ``M``: Mounted | | | | | ``G``: Readable | | | | | ``D``: Deletable | | | | | ``NV``: Updateable, Renameable, Moveable | | | | | ``W``: Updateable (file) | | | | | ``CK``: Creatable | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Same as ``creationdate``, but as a timestamp. | ``1675789581`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The type of mount. | | ``''`` = local | | | | | ``'shared'`` = received share | | | | | ``'group'`` = group folder | | | | | ``'external'`` = external storage | | | | | ``'external-session'`` = external storage | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Whether the folder is end-to-end encrypted. | | ``0`` for ``false`` | | | | | ``1`` for ``true`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | This is a special property which is used to | ``true`` or ``false`` | | | | determine if a node is a mount root or not, | | | | | e.g. a shared folder. If so, then the node | | | | | can only be unshared and not deleted. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | List of user specified tags. | ``test`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The favorite state. | | ``0`` for not favourited | | | | | ``1`` for favourited | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The DAV endpoint to fetch the comments. | ``/remote.php/dav/comments/files/{fileId}`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The number of comments. | ``2`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The number of unread comments. | ``0`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The user id of the owner of a shared file. | ``alice`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The display name of the owner of a shared file. | ``Alice`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | XML array of share types. | | ``{shareTypeId}`` | | | | | ``0`` = User | | | | | ``1`` = Group | | | | | ``3`` = Public link | | | | | ``4`` = Email | | | | | ``6`` = Federated cloud share | | | | | ``7`` = Circle | | | | | ``8`` = Guest | | | | | ``9`` = Remote group | | | | | ``10`` = Talk conversation | | | | | ``12`` = Deck | | | | | ``15`` = Science mesh | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | The permissions that the | | ``1`` = Read | | | | user has over the share. | | ``2`` = Update | | | | | ``4`` = Create | | | | | ``8`` = Delete | | | | | ``16`` = Share | | | | | ``31`` = All | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | The permissions that the user has | ``["share", "read", "write"]`` | | | | over the share as a JSON array. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | User set attributes as a JSON array. | ``[{ "scope" => , "key" => , "enabled" => }]`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The list of share recipient. | | ```` | | | | | ``alice`` | | | | | ``Alice`` | | | | | ``0`` | | | | | ```` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | An array of checksums. | ``md5:04c36b75222cd9fd47f2607333029106`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Whether a preview of the file is available. | ``true`` or ``false`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | Defines if a file should be hidden | ``true`` or ``false`` | | | | Currently only used for live photos | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | Unlike ``getcontentlength``, this property | ``127815235`` | | | | also works for folders, reporting the size of | | | | | everything in the folder. Size is in bytes. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The id of the workspace file. | `3456` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The content of the workspace file. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Date this file was uploaded. | ``1675789581`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Share note. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | The number of folders directly contained | | | | | in the folder (not recursively). | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | The number of files directly contained | | | | | in the folder (not recursively). | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | Used by the clients to find out | | | | | if a backup has been restored. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Whether ACL is enabled for this group folder. | ``1`` or ``0`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Wether the current user can manager ACL. | ``1`` or ``0`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Array of ACL rules. | | ```` | | | | | ``group`` | | | | | ``admin`` | | | | | ``admin`` | | | | | ``20`` | | | | | ``15`` | | | | | ```` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Array of ACL rules from the parents folders | See | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Numerical id of that group folder. | ``1`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Wether the file is locked. | ``1`` or ``0`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Type of the owner of the lock. | ``0`` = User | | | | ``1`` = Office or Text | | | | ``2`` = WebDAV | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | User id of the owner of the lock. | ``alice`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Display name of the owner of the lock. | ``Alice`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | App id of an app owned lock. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | Date when the lock was created as a timestamp. | ``1675789581`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | TTL of the lock in seconds staring from the | ``0`` = No timeout | | | creation time. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The token of the lock. | ``files_lock/0e53dfb6-61b4-46f0-b38e-d9a428292998`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | | The due date of the reminder | ``1970-01-01T00:00:00+00:00`` | | | | as an ISO 8601 formatted string. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The user-set label for a file. | | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ | | The author's id of a specified file verson. | ``admin``, ``jane``, ``thisAuthorsID`` | +-------------------------------+-------------------------------------------------+--------------------------------------------------------------------------------------+ Listing folders (rfc4918_) -------------------------- The contents of a folder can be listed by sending a :code:`PROPFIND` request to the folder. .. code:: PROPFIND remote.php/dav/files/user/path/to/folder Getting properties for just the folder ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ You can request properties of a folder without also getting the folder contents by adding a :code:`Depth: 0` header to the request. Downloading files ----------------- A file can be downloaded by sending a :code:`GET` request to the WebDAV url of the file. .. code:: GET remote.php/dav/files/user/path/to/file Uploading files --------------- A file can be uploaded by sending a :code:`PUT` request to the file and sending the raw file contents as the request body. .. code:: PUT remote.php/dav/files/user/path/to/file Any existing file will be overwritten by the request. Creating folders (rfc4918_) --------------------------- A folder can be created by sending a :code:`MKCOL` request to the folder. .. code:: MKCOL remote.php/dav/files/user/path/to/new/folder Deleting files and folders (rfc4918_) ------------------------------------- A file or folder can be deleted by sending a :code:`DELETE` request to the file or folder. .. code:: DELETE remote.php/dav/files/user/path/to/file When deleting a folder, its contents will be deleted recursively. Moving files and folders (rfc4918_) ----------------------------------- A file or folder can be moved by sending a :code:`MOVE` request to the file or folder and specifying the destination in the :code:`Destination` header as full url. .. code:: MOVE remote.php/dav/files/user/path/to/file Destination: https://cloud.example/remote.php/dav/files/user/new/location The overwrite behavior of the move can be controlled by setting the :code:`Overwrite` head to :code:`T` or :code:`F` to enable or disable overwriting respectively. Copying files and folders (rfc4918_) ------------------------------------ A file or folder can be copied by sending a :code:`COPY` request to the file or folder and specifying the destination in the :code:`Destination` header as full url. .. code:: COPY remote.php/dav/files/user/path/to/file Destination: https://cloud.example/remote.php/dav/files/user/new/location The overwrite behavior of the copy can be controlled by setting the :code:`Overwrite` head to :code:`T` or :code:`F` to enable or disable overwriting respectively. Settings favorites ------------------ A file or folder can be marked as favorite by sending a :code:`PROPPATCH` request to the file or folder and setting the :code:`oc-favorite` property .. code-block:: xml PROPPATCH remote.php/dav/files/user/path/to/file 1 Setting the :code:`oc:favorite` property to ``1`` marks a file as favorite, setting it to ``0`` un-marks it as favorite. Listing favorites ----------------- Favorites for a user can be retrieved by sending a :code:`REPORT` request and specifying :code:`oc:favorite` as a filter .. code-block:: xml REPORT remote.php/dav/files/user/path/to/folder 1 File properties can be requested by adding a :code:`` element to the request listing the requested properties in the same way as it would be done for a :code:`PROPFIND` request. When listing favorites, the request will find all favorites in the folder recursively, all favorites for a user can be found by sending the request to :code:`remote.php/dav/files/user` .. _rfc4918: https://tools.ietf.org/html/rfc4918 Special Headers --------------- Request Headers ^^^^^^^^^^^^^^^ You can set some special headers that Nextcloud will interpret. +-----------------+-----------------------------------------------------------------+------------------------------------------+ | Header | Description | Example | +=================+=================================================================+==========================================+ | X-OC-MTime | | Allow to specify a modification time. | ``1675789581`` | | | | The response will contain the header ``X-OC-MTime: accepted`` | | | | | if the mtime was accepted. | | +-----------------+-----------------------------------------------------------------+------------------------------------------+ | X-OC-CTime | | Allow to specify a creation time. | ``1675789581`` | | | | The response will contain the header ``X-OC-CTime: accepted`` | | | | | if the mtime was accepted. | | +-----------------+-----------------------------------------------------------------+------------------------------------------+ | OC-Checksum | | A checksum that will be stored in the DB. | ``md5:04c36b75222cd9fd47f2607333029106`` | | | | The server will not do any sort of validation. | | +-----------------+-----------------------------------------------------------------+------------------------------------------+ | X-Hash | | Allow to request the file's hash from the server. | ``md5``, ``sha1``, or ``sha256`` | | | | The server will return the hash in a header named either: | | | | | ``X-Hash-MD5``, ``X-Hash-SHA1``, or ``X-Hash-SHA256``. | | +-----------------+-----------------------------------------------------------------+------------------------------------------+ | OC-Total-Length | | Contains the total size of the file during a chunk upload. | ``4052412`` | | | | This allow the server to abort faster if the remaining | | | | | user's quota is not enough. | | +-----------------+-----------------------------------------------------------------+------------------------------------------+ | OC-Chunked | | Used for legacy chunk upload to differentiate a regular | Deprecated ⚠️ | | | | upload from a chunked upload. It allowed checking for quota | | | (deprecated) | | and various other things. Nowadays, you need to provide the | You do not have to provide this anymore | | | | ``OC-Total-Length`` header on the ``PUT`` requests instead. | | +-----------------+-----------------------------------------------------------------+------------------------------------------+ Response Headers ---------------- +-----------+------------------------------------------------+-----------------------------------------+ | Header | Description | Example | +===========+================================================+=========================================+ | OC-Etag | | On creation, move and copy, | ``"50ef2eba7b74aa84feff013efee2a5ef"`` | | | | the response contain the etag of the file. | | +-----------+------------------------------------------------+-----------------------------------------+ | OC-FileId | | On creation, move and copy, | | Format: ````. | | | | the response contain the fileid of the file. | | Example: ``00000259oczn5x60nrdu`` | +-----------+------------------------------------------------+-----------------------------------------+