nextcloud-server

Commit Graph

Author	SHA1	Message	Date
skjnldsv	b15fdfd40e	chore(profile): move profile app from core to apps Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	1 year ago
Ferdinand Thiessen	c84c256261	fix: Adjust preview for view-only shares Previously there was a different behavior for public shares (link-shares) and internal shares, if the user disabled the view permission. The legacy UI for public shares simply "disabled" the context menu and hided all download actions. With Nextcloud 31 all share types use the consistent permissions attributes, which simplifies code, but caused a regression: Images can no longer been viewed. Because on 30 and before the attribute was not set, previews for view-only files were still allowed. Now with 31 we need a new way to allow "viewing" shares. So this is allowing previews for those files, but only for internal usage. This is done by settin a special header, which only works with custom requests, and not by opening the URL directly. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Julius Knorr	606241caeb	chore(legacy): Introduce public version ct plass and drop version methods from OC_Util Signed-off-by: Julius Knorr <jus@bitgrid.net>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Christoph Wurst	49dd79eabb	refactor: Add void return type to PHPUnit test methods Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Julius Härtl	6c1e896a03	fix: Ignore preview requests for invalid file ids Signed-off-by: Julius Härtl <jus@bitgrid.net>	1 year ago
Benjamin Gaussorgues	e5275dbada	feat: don't count failed CSRF as failed login attempt Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Daniel Kesselberg	98eb190e04	test: add tests for ProfilePageController Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
skjnldsv	8bed23288b	fix(files_sharing): dark avatar support Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	2 years ago
Andy Scherzinger	1f7e2ba599	chore: Add SPDX header Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Christoph Wurst	22dc27810e	fix(auth): Keep redirect URL during 2FA setup and challenge Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	2 years ago
Ferdinand Thiessen	3fede00732	feat(login): Clear login form (password) after IDLE timeout For security reasons it is recommended to stop the login process at a defined time, this could prevent password leaks by e.g. user forgetting that they entered their password on public devices. Enforced e.g. by the BSI ORP.4.A13 rule. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Eduardo Morales	685145714a	chore: update logincontroller tests Signed-off-by: Eduardo Morales <emoral435@gmail.com>	2 years ago
provokateurin	6243a9471d	feat(core): Add OCS endpoint for confirming the user password Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
John Molakvoæ	4a509dfe8e	fix: phpunit Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>	2 years ago
Joas Schilling	2ee5c7a8f9	fix(tests): Fix remaining tests Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Louis Chemineau	db11313152	Fix tests after slow logout fix Signed-off-by: Louis Chemineau <louis@chmn.me>	2 years ago
Gaspard d'Hautefeuille	85911cbab2	Cancel PR #37405 , remove regression code Signed-off-by: Gaspard d'Hautefeuille <github@dhautefeuille.eu>	2 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Côme Chilliet	ee39a47e84	Fix Dynamic property timeFactory in ClientFlowLoginControllerTest Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Julien Veyssier	807f173dec	make oauth2 authorization code expire after 10 minutes Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Joas Schilling	25309bcb45	techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25 Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Git'Fellow	066f6ef16c	Stop sending deprecated Pragma header Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	2 years ago
John Molakvoæ	266fb31180	fix(tests): preview phpunit Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>	2 years ago
jld3103	1be836273d	core: Add OpenAPI spec Signed-off-by: jld3103 <jld3103yt@gmail.com>	2 years ago
Joas Schilling	33385d7ecb	fix(tests): Adjust unit tests Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Joshua Trees	a4032a3800	Add some tests for input trimming in LostController.php Signed-off-by: Joshua Trees <me@jtrees.io>	3 years ago
Git'Fellow	346054f854	Fix tests Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	3 years ago
Joas Schilling	875e6cf7e6	fix(CI): Adjust expected result Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Christoph Wurst	88d116ba84	fix(client-login-flow): Handle missing stateToken gracefully Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Côme Chilliet	003cc2b45a	Fix tests failures (number of calls differed with last rebase) Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Carl Schwan	a23cd7b961	Fix a bunch of deprecation in the phpunit for core Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Christoph Wurst	20fcfb5739	feat(app framework)!: Inject services into controller methods Usually Nextcloud DI goes through constructor injection. This has the implication that each instance of a class builds the full DI tree. That is the injected services, their services, etc. Occasionally there is a service that is only needed for one controller method. Then the DI tree is build regardless if used or not. If services are injected into the method, we only build the DI tree if that method gets executed. This is also how Laravel allows injection. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	f22101d421	Fix login loop if login CSRF fails and user is not logged in If CSRF fails but the user is logged in that they probably logged in in another tab. This is fine. We can just redirect. If CSRF fails and the user is also not logged in then something is fishy. E.g. because Nextcloud contantly regenrates the session and the CSRF token and the user is stuck in an endless login loop. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	138deec333	chore: Make the LoginController strict Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Julius Härtl	8629d8e44f	Check share attributes on preview endpoints Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Côme Chilliet	1cb0c2ac52	Fix LostController test Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Joas Schilling	67ecd72972	Fix unit tests Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Arthur Schiwon	b3b6f2d581	fix Controller tests - added pageTitle in code was missing in expectations - fixed warnings of superflouos parameter - fixed wrong type of mock Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
Thomas Citharel	abe5ff3654	Make LostController use IInitialState and LoggerInterface Signed-off-by: Thomas Citharel <tcit@tcit.fr>	4 years ago
Thomas Citharel	6283d14fa6	Modernize the LostControllerTest test Remove some depreciated at() calls Signed-off-by: Thomas Citharel <tcit@tcit.fr>	4 years ago
Thomas Citharel	44e13848a1	Add password reset typed events These hooks are only used in the Encryption app from what I can see. Signed-off-by: Thomas Citharel <tcit@tcit.fr>	4 years ago
Carl Schwan	b70c6a128f	Update core to PHP 7.4 standard - Typed properties - Port to LoggerInterface Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Joas Schilling	40b9769d4d	Extend tests Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Thomas Citharel	232322fe06	Modernize contacts menu Signed-off-by: Thomas Citharel <tcit@tcit.fr>	4 years ago
John Molakvoæ	3c6253f965	Remove old legacy SvgController and IconsCacher Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>	4 years ago
Louis Chemineau	8a2cf5bb68	Do not dispatch postSetPassword when setPassword fails Also Improve error message when setPassword fails Signed-off-by: Louis Chemineau <louis@chmn.me>	4 years ago
Joas Schilling	6e4d721278	Expose shareWithDisplayNameUnique also on autocomplete endpoint Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago

1 2 3 4 5 ...

298 Commits (appStoreDisabledOcc)