297 Commits (1fedde9eb9012e4f0be21dc9e7e71dbcc41fe5eb)

Author	SHA1	Message	Date
Rayn0r	85eb43baff	added possibility to disable autocomplete in login form ... Signed-off-by: Rayn0r <Andre.Weidemann@web.de>	7 years ago
Julius Härtl	d21ded67a7	Keep list of icons in a separate file for use in the accessibility app ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Thomas Citharel	d63de5471b	Don't require Same Site Cookies on assets ... Which can be used for public iframe embeeding See https://github.com/nextcloud/calendar/issues/169 Signed-off-by: Thomas Citharel <tcit@tcit.fr>	7 years ago
Patrick Conrad	1806baaeaf	Remove cookies from Clear-Site-Data Header ... In 2f87fb6b45 this header was introduced. The referenced documentation says: > When delivered with a response from https://example.com/clear, the following header will cause cookies associated with the origin https://example.com to be cleared, as well as cookies on any origin in the same registered domain (e.g. https://www.example.com/ and https://more.subdomains.example.com/). This also applies if `https://nextcloud.example.com/` sends the `Clear-Site-Data: "cookies"` header. This is not the behavior we want at this point! So I removed the deletion of cookies from the header. This has no effect on the logout process as this header is supported only recently and the logout works in old browsers as well. Signed-off-by: Patrick Conrad <conrad@iza.org>	7 years ago
Roeland Jago Douma	78273cb1e6	Add an endppoint for clients to request an app password ... Now that we allow enforcing 2 factor auth it make sense if we also allow and endpoint where the clients can in the background fetch an apppassword if they were configured before the login flow was present. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	d9febae5b2	Update all the publickey tokens if needed on web login ... * On weblogin check if we have invalid public key tokens * If so update them all with the new token This ensures that your marked as invalid tokens work again if you once login on the web. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Michael Weimann	a45ec3d324	Refactors the scss svg functions ... Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Michael Weimann	d855c38e07	Moves the logo files to logo ... Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Roeland Jago Douma	be2d8cc4e9	Do not invalidate main token on OAuth ... Fixes #10584 We deleted the main token when using the login flow else mutliple tokens would show up for a single user. However in the case of OAuth this is perfectly fine as the authentication happens really in your browser: 1. You are already logged in, no need to log you out 2. You are not logged in yet, but since you log in into the exact same browser the expected behavior is to stay logged in. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	cf3f4888cc	Change password expiration time from 12h to 7d ... We use the same logic for creating accounts without a password and there the 12h is a bit short. Users don't expect that the signup link needs to be clicked within 12h - 7d should be a more expected behavior. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Daniel Kesselberg	031fdfb1fc	Enable password reset for user with same email address when only one is active ... When two or more user share the same email address its not possible to reset password by email. Even when only one account is active. This pr reduce list of users returned by getByEmail by disabled users. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Bjoern Schiessle	dfec66ca02	only warn about data lose on password reset if per-user keys are used ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Christoph Wurst	42300d19e9	Fix max length requirements for the throttler metadata ... If a failed login is logged, we save the username as metadata in the bruteforce throttler. To prevent database error due to very long strings, this truncates the username at 64 bytes in the assumption that no real username is longer than that.long strings, Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Christoph Wurst	d8197f2b97	Rename providerset method to get primary providers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Christoph Wurst	c6e47e8a51	Fix login redirection if only one 2FA provider is active ... Fixes https://github.com/nextcloud/server/issues/10500. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Joas Schilling	decd196162	Make the info available if the avatar was uploaded or generated ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Julius Härtl	4c773891d7	Fix app navigation controller to return an array ... This is required to not break compatibility with existing consumers of that endpoint like the apps management or the client Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Joas Schilling	12efde520d	Allow to access SVGs as guest ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Michael Weimann	c92d7429d7	Implements handling for deactivated users ... Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	8 years ago
John Molakvoæ (skjnldsv)	37a4d2bbbc	Php code bump ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Julius Härtl	bfc6fc8e50	Fix settings icon fetching ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
John Molakvoæ (skjnldsv)	61946819ba	Fixed svg generator regex && added missing icons ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	9e5885963c	Fixed icons detection and caching ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	8977c71f88	Mixin scss icon api ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	ccd70a4099	use built in response cacheFor function ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	29ff7efe9a	Svg icon api sass function and upgrade of all styles ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	98a0113d40	Svg from app ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	84e90e26c0	Svg color api ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Arthur Schiwon	ca6094f390	wire the frontend ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	772bbd99be	Backend work to provide NC whats New info to users ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Robin Appelman	8ed50d4b63	prefill userid for login after password reset ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Christoph Wurst	13d93f5b25	Make 2FA providers stateful ... This adds persistence to the Nextcloud server 2FA logic so that the server knows which 2FA providers are enabled for a specific user at any time, even when the provider is not available. The `IStatefulProvider` interface was added as tagging interface for providers that are compatible with this new API. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
John Molakvoæ (skjnldsv)	543188d0cb	Removed debug stack ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	156da29cea	Avatar imagick bump ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	eea6f74ca4	Controller tests fixes ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	adf3856d35	Return Svg avatars ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Roeland Jago Douma	e5cc8be9d5	Fix usage ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	5a97148863	Don't use special chars to avoid confusion ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Rémy Jacquin	04e1cab5ee	Fix translation bug on lost password page ... Fix nextcloud/password_policy#26 Signed-off-by: Rémy Jacquin <remy@remyj.fr>	8 years ago
Arthur Schiwon	38a90130ce	move log constants to ILogger ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Roeland Jago Douma	a07f6d46e3	Use proper types ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	fd3c97b93b	Avoid to leak a user ID that is not a string to reach a user backend ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Roeland Jago Douma	177c8972cc	Improve login flow ... * Add page explaining you are about to grant access * Show grant access page after login Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	33b93db953	Remove unused parameter ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	2b7d4d5069	Fix tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	caee215120	Always remember me ... Fixes #8004 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Joas Schilling	dabd7291c3	Make the new autocomplete endpoint OCS ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Roeland Jago Douma	796b4f19f8	Add Cache-control: immutable ... Cache generated CSS forever! Also cache combined JS forever Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	7674e591bd	Move search to proper Controller ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Christoph Wurst	b9720703e8	Add CSRF token controller to retrieve the current CSRF token ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago