54 Commits (stable33)

Author	SHA1	Message	Date
provokateurin	0c3a872908	feat(CertificateManager): Add option to specify the default certificates bundle path ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 months ago
Marcel Müller	b91034b3cf	chore: Add server version to default crawler user agent ... Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>	3 months ago
ernolf	b6ea2bc0f5	refactor(http-client): use direct HTTP/2 cURL hint and align tests ... Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com>	4 months ago
ernolf	812f12ecc4	perf(client): enable HTTP/2 and brotli support in internal HTTP client ... - Prefer HTTP/2 by setting RequestOptions::VERSION => "2.0" so clients that respect PSR-7 request version will prefer HTTP/2. - Add a curl hint (CURLOPT_HTTP_VERSION) to prefer HTTP/2 via ALPN (CURL_HTTP_VERSION_2TLS or CURL_HTTP_VERSION_2_0 fallback) while allowing automatic fallback to HTTP/1.1. - Advertise Brotli ("br") in Accept-Encoding when the php-brotli extension is available (detected via function_exists('brotli_uncompress')), otherwise fall back to gzip. Notes: - The PSR-7 request version is used as a hint for HTTP client libraries; setting the version to "2.0" signals a preference for HTTP/2 at the request abstraction level. - The curl option is defensive: it prefers HTTP/2 where libcurl supports it (via ALPN), but will not break on older libcurl/builds (uses defined()). Compatibility: - Fully backwards compatible: if the php-brotli extension is not present, no Brotli usage will occur and behaviour remains equivalent to previous (gzip). Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com>	4 months ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	8 months ago
Thomas Citharel	dcd27fd986	feat(http-client): expose default request timeout constant to be used instead of magic number 30 ... Will be used to set default where we are able to override the default timeout. See https://github.com/nextcloud/server/pull/48418 Signed-off-by: Thomas Citharel <tcit@tcit.fr>	1 year ago
Daniel Kesselberg	6be00432b7	chore: always execute parse_url in preventLocalAddress ... This change should make it easier to spot wrong uses of the HTTP client on development setups where allow_local_remote_servers is usually true. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Côme Chilliet	82fbab4632	fix: Swap method and uri parameter in request to match upstream order ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Ferdinand Thiessen	01d5af66be	feat(IClient): Add `request` function to do arbitrary HTTP requests ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Joas Schilling	ecb111cec7	fix(federation): Allow cloud federation providers to handle unsuccessful return codes ... Otherwise they are put to retry and will immediately trigger bruteforce protection infinitely Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Robin Kluth	d70cd5add2	Log Host/IP in `LocalServerException` for `Host violates local access rules` ... Signed-off-by: Robin Kluth <Commifreak@users.noreply.github.com>	2 years ago
jithin-space	7c11414c9b	added patch method ... Signed-off-by: jithin-space <jithin.thankachan@gpsrenewables.com>	2 years ago
Joas Schilling	ec6728d710	feat(HTTPClient): Provide wrapped access to Guzzle's asyncRequest() ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Côme Chilliet	426c0341ff	Use typed version of IConfig::getSystemValue as much as possible ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Christoph Wurst	8aea25b5b9	Add remote host validation API ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	d4b9b010b0	Rename LocalAddressChecker methods to lower case ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
luz paz	368f83095d	Fix typos in lib/private subdirectory ... Found via `codespell -q 3 -S l10n -L jus ./lib/private` Signed-off-by: luz paz <luzpaz@github.com>	4 years ago
Côme Chilliet	6be7aa112f	Migrate from ILogger to LoggerInterface in lib/private ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Vincent Petry	9b6a1cc8ae	Send images to imaginary docker to generate previews ... Signed-off-by: Carl Schwan <carl@carlschwan.eu> Co-Authored-by: Vincent Petry <vincent@nextcloud.com>	4 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Lukas Reschke	5f3abffe6f	Improve networking checks ... Whilst we currently state that SSRF is generally outside of our threat model, this is something where we should invest to improve this. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	5 years ago
Roeland Jago Douma	41c80d6c19	Fix option in the client code itself as well ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Carlos Ferreira	a42eb05a35	Simple typo in comments	5 years ago
Roeland Jago Douma	54b9f639a6	Always return the default path if we can ... Just check in the certifcate manager. So every part of the system that request the certificatebundle gets the defaullt one (the 99% case) if we can. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	2a054e6c04	Update the license headers for Nextcloud 20 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Joas Schilling	9127731c52	parse_url returns null in case a parameter is not found ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Morris Jobke	18b0d753f2	Do not read certificate bundle from data dir by default ... Before the resources/config/ca-bundle.crt was only used when the list of custom certificates was empty and the instance was not installed. But it should also be used when the list is empty and the instance is installed. This is inverting the logic to stop if the instance is not installed to use the default bundle. And it also does this when the list is empty. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 years ago
Morris Jobke	8bcd1c31da	Allow gzip encoded requests by default ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Joas Schilling	5e402f8aae	Check all remotes for local access ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function ... To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1a9330cd69	Update the license headers for Nextcloud 19 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Mohammed Abdellatif	98d6415264	Add support for GuzzleHTTP 'no' proxy ... The custom config allows to setup a proxy URI that is passed to GuzzleHTTP client as request options. Guzzle has the option to receive an array of proxies for each URI scheme as well as 'no' key value pair to provide a list of host names that should not be proxied to. Guzzle would automatically populate these options with HTTPS_PROXY and NO_PROXY environment variables. However, when providing a 'proxy' request option, default values will be overriden and it is required to explicitly provide the 'no' value if needed. More info: http://docs.guzzlephp.org/en/stable/request-options.html#proxy This commit will add support for a new config 'proxyexclude', which takes a list of host names to be excluded. It will also provide 'proxy' request option as an array instead of a string to Guzzle, and populate 'http' and 'https' URI schemes with proxy URI, and 'no' with 'proxyexclude' list. Also, if no 'proxy' is configured, it will leave out 'proxy' request option, so it won't override Guzzle default values. Sample config file includes a hint on how to explicitly sync 'proxyexclude' with NO_PROXY, and a note about default values. Signed-off-by: Mohammed Abdellatif <m.latief@gmail.com>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	ca2623e6ad	Set a default request timeout ... This to avoid endless running processes. A default timeout of 30 seconds should cover the 99% case. If a job need specific longer time it should set that. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Scott Shambarger	edf946dfc7	Correctly handle emtpy string in proxyuserpwd config ... As documented, the default value for config value proxyuserpwd is ''. However, that value results in the error: "cURL error 5: Unsupported proxy syntax in '@'". This patch handles the values of '' and null (the default in the code) the same for config values proxyuserpwd and proxy. Signed-off-by: Scott Shambarger <devel@shambarger.net>	7 years ago
Daniel Kesselberg	fd1d85365c	Refactor getProxyUri ... Get proxyuserpwd only if proxy not empty. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	2708d26407	Set User-Agent as header without middleware ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Calviño Sánchez	00c3a7eb4c	Fix HTTP client given options being overriden by default options ... According to the array_merge documentation, "If the input arrays have the same string keys, then the later value for that key will overwrite the previous one." Thus, the default options must be the first parameter passed to array_merge. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	8 years ago
Robin Appelman	fe23bb5916	adjust post body for new guzzle ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Robin Appelman	9b25ff9fcb	adjust httpclient to guzzle6 ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Roeland Jago Douma	a345605ec1	Make OCP\Http strict ... * Handle private files * Add return types * Add scalar typehints * Made strict * Fixed requiring proper guzzle message interface that is passed around Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Lukas Reschke	5679f04cb1	Rebrand to "Nextcloud" and add 100% coverage ... Noticed while debugging https://github.com/nextcloud/server/issues/2910 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago