66 Commits (231ec6717cf77ebce4e55a2abd12e40ab9995430)

Author	SHA1	Message	Date
Micke Nordin	dae8a36460	fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin ... RFC 7517 §4.5 leaves the keyid structure unspecified, so the receiver must not parse it. The signer origin now comes from the trusted OCM share/sender identity; the JWK Set is resolved against that origin and the keyid is matched opaquely to the JWKS kid. Aligns with the OCM verification procedure and fixes the origin-mismatch / flaky-kid failures in the two-port integration rig. Reverts the per-request host-based kid back to a stable persisted kid, drops keyid->host parsing, threads a sender-origin parameter through verification, and resolves that origin in every OCM inbound entry point (notifications, shares, token exchange, OCM requests) and the federation rate limiter. Cavage is unchanged. Assisted-by: ClaudeCode:glm-5.2 Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Carl Schwan	779b45f57f	feat: Add setting to bypass password confirmation on a selected ip ranges ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	2 weeks ago
Joas Schilling	7d51b70b18	fix: Mark some parameters as sensitive ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 month ago
provokateurin	b721633055	chore(ISecureRandom): Deprecate generate() in favor of Randomizer::getBytesFromString() ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 months ago
Côme Chilliet	1ab09ec753	chore: Apply new coding standard to all files ... The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines To see only the changes not related to blank lines. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 months ago
Ferdinand Thiessen	81752fc9ed	chore(ocp): add `Override` attribute to all OCP classes ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 months ago
Maxence Lange	327d691c23	feat(signed-request): moving out of unstable ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	7 months ago
Côme Chilliet	eccc727f4e	fix: Remove more unused deprecated getters from IServerContainer ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Ferdinand Thiessen	74bded74a3	refactor: migrate from OC to OCP in public interfaces ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
dependabot[bot]	bb598c8451	chore(deps): Bump nextcloud/coding-standard in /vendor-bin/cs-fixer ... Bumps [nextcloud/coding-standard](https://github.com/nextcloud/coding-standard) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/nextcloud/coding-standard/releases) - [Changelog](https://github.com/nextcloud/coding-standard/blob/master/CHANGELOG.md) - [Commits](https://github.com/nextcloud/coding-standard/compare/v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: nextcloud/coding-standard dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Ferdinand Thiessen	127cacdd19	feat(Security): Allow setting password context for validation and generation ... Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
Benjamin Gaussorgues	f1d97a3188	feat(Security): add Factory for IP addresses and ranges ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Joas Schilling	047479ccf9	feat(security): Add public API to allow validating IP Ranges and checking for "in range" ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Christopher Ng	d9bf6c432e	feat: Add method to validate an IHasher hash ... Signed-off-by: Christopher Ng <chrng8@gmail.com>	2 years ago
John Molakvoæ	928f22052f	chore: remove unnecessary php import during refactor ... Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Andrew Summers	f9ce6bfdff	Refactor `OC\Server::getHasher` ... Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>	2 years ago
Joas Schilling	42be7a5d74	fix(OCP): Add since tag for all constants ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	3 years ago
Christoph Wurst	e477bb7eaf	feat(appframework): Expose programmatic rate limiter ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Andrew Summers	1395a53602	Refactor `OC\Server::getSecureRandom` ... Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>	3 years ago
Joas Schilling	124588d4a6	fix: Make bypass function public API ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Joas Schilling	a95800c647	feat(security): Add a bruteforce protection backend base on memcache ... Similar to the ratelimit backend Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Christoph Wurst	8aea25b5b9	Add remote host validation API ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Joas Schilling	c0f47af2d0	Add a public interface for the bruteforce throttler and register for injection ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Joas Schilling	c42f5bc5f6	Add an OCP for trusted domain helper ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Arthur Schiwon	0dee717c94	Confirm mails only per POST ... - this is to avoid automatic confirmation by certain softwares that open links Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
Arthur Schiwon	a20de15b43	add a job to clean up expired verification tokens ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
Arthur Schiwon	19cc757531	move verification token logic out of lost password controller ... - to make it reusable - needed for local email verification Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
J0WI	3b656446af	Introduce ISecureRandom::CHAR_ALPHANUMERIC ... Signed-off-by: J0WI <J0WI@users.noreply.github.com>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
J0WI	ca7b37ce5a	Make Security module strict ... Signed-off-by: J0WI <J0WI@users.noreply.github.com>	5 years ago
Julius Härtl	45a474071e	Remove @package annotations from public namespace ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	6 years ago
Christoph Wurst	2a054e6c04	Update the license headers for Nextcloud 20 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Joas Schilling	35a8519591	Fix CS ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Joas Schilling	e66bc4a8a7	Send "429 Too Many Requests" in case of brute force protection ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Morris Jobke	782a2df392	Add PHP doc for events ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	6 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Arthur Schiwon	5437844b7e	fix credentialsManager documentation and ensure userId to be used as string ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	6 years ago
Christoph Wurst	28f8eb5dba	Add visibility to all constants ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function ... To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	a8a06a82d2	Remove trailing whitespaces from comments ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	41b5e5923a	Use exactly one empty line after the namespace declaration ... For PSR2 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Christoph Wurst	1a886b1472	Add typed events for password_policy ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Christoph Wurst	a1ef939c06	Use Symfony's new contract Event class instead of the deprecated one ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Roeland Jago Douma	b8c5008acf	Add feature policy header ... This adds the events and the classes to modify the feature policy. It also adds a default restricted feature policy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	5ac857bcdc	Add an event to edit the CSP ... This introduces and event that can be listend to when we actually use the CSP. This means that apps no longer have to always inject their CSP but only do so when it is required. Yay for being lazy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago