version 0.10.4

Cargo.lock

@@ -2974,7 +2974,7 @@ dependencies = [
 
 [[package]]
 name = "rustical"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "anyhow",
  "argon2",
@@ -3017,7 +3017,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_caldav"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "async-std",
  "async-trait",
@@ -3057,7 +3057,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_carddav"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "async-trait",
  "axum",
@@ -3089,7 +3089,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_dav"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "async-trait",
  "axum",
@@ -3114,7 +3114,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_dav_push"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "async-trait",
  "axum",
@@ -3139,7 +3139,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_frontend"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "askama",
  "askama_web",
@@ -3175,7 +3175,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_ical"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "axum",
  "chrono",
@@ -3192,7 +3192,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_oidc"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "async-trait",
  "axum",
@@ -3208,7 +3208,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_store"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -3241,7 +3241,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_store_sqlite"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "async-trait",
  "chrono",
@@ -3262,7 +3262,7 @@ dependencies = [
 
 [[package]]
 name = "rustical_xml"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "quick-xml",
  "thiserror 2.0.17",
@@ -5013,7 +5013,7 @@ checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
 
 [[package]]
 name = "xml_derive"
-version = "0.10.3"
+version = "0.10.4"
 dependencies = [
  "darling",
  "heck",

Cargo.toml

@@ -2,7 +2,7 @@
 members = ["crates/*"]
 
 [workspace.package]
-version = "0.10.3"
+version = "0.10.4"
 rust-version = "1.91"
 edition = "2024"
 description = "A CalDAV server"

crates/caldav/src/calendar/methods/report/calendar_multiget.rs

@@ -26,16 +26,18 @@ pub async fn get_objects_calendar_multiget<C: CalendarStore>(
     let mut not_found = vec![];
 
     for href in &cal_query.href {
-        if let Some(filename) = href.strip_prefix(path) {
+        if let Ok(href) = percent_encoding::percent_decode_str(href).decode_utf8()
+            && let Some(filename) = href.strip_prefix(path)
+        {
             let filename = filename.trim_start_matches('/');
             if let Some(object_id) = filename.strip_suffix(".ics") {
                 match store.get_object(principal, cal_id, object_id, false).await {
                     Ok(object) => result.push(object),
-                    Err(rustical_store::Error::NotFound) => not_found.push(href.to_owned()),
+                    Err(rustical_store::Error::NotFound) => not_found.push(href.to_string()),
                     Err(err) => return Err(err.into()),
                 }
             } else {
-                not_found.push(href.to_owned());
+                not_found.push(href.to_string());
             }
         } else {
             not_found.push(href.to_owned());

crates/carddav/src/addressbook/methods/report/addressbook_multiget.rs

@@ -34,7 +34,9 @@ pub async fn get_objects_addressbook_multiget<AS: AddressbookStore>(
     let mut not_found = vec![];
 
     for href in &addressbook_multiget.href {
-        if let Some(filename) = href.strip_prefix(path) {
+        if let Ok(href) = percent_encoding::percent_decode_str(href).decode_utf8()
+            && let Some(filename) = href.strip_prefix(path)
+        {
             let filename = filename.trim_start_matches('/');
             if let Some(object_id) = filename.strip_suffix(".vcf") {
                 match store
@@ -42,11 +44,11 @@ pub async fn get_objects_addressbook_multiget<AS: AddressbookStore>(
                     .await
                 {
                     Ok(object) => result.push(object),
-                    Err(rustical_store::Error::NotFound) => not_found.push(href.to_owned()),
+                    Err(rustical_store::Error::NotFound) => not_found.push(href.to_string()),
                     Err(err) => return Err(err.into()),
                 }
             } else {
-                not_found.push(href.to_owned());
+                not_found.push(href.to_string());
             }
         } else {
             not_found.push(href.to_owned());

crates/store_sqlite/src/calendar_store.rs

@@ -795,6 +795,7 @@ impl CalendarStore for SqliteCalendarStore {
 }
 
 // Logs an operation to the events
+// TODO: Log multiple updates
 async fn log_object_operation(
     tx: &mut Transaction<'_, Sqlite>,
     principal: &str,