5316 Commits (2364fc84d78df931c5fc020f7fd052d980f8a7bb)

Author	SHA1	Message	Date
Arthur Schiwon	1cc6f34d88	adapt file hooks test to eventdispatcher utilization ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	6 years ago
Robin Appelman	8ef5a366ec	add MAX and MIN to functionbuilder ... Signed-off-by: Robin Appelman <robin@icewind.nl>	6 years ago
Roeland Jago Douma	0ff08810d9	Log/FileTest does not require the DB ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Daniel Kesselberg	773778dd8c	Add default timeout to expected request options ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Greta Doci	1993984769	Adjust acceptance tests to changes in link share menu behaviour ... Now the link share menu is not automatically opened after a link share is created, so waiting until it was opened failed in iShareTheLinkFor. Note that the steps that interact with the link share menu take care themselves of showing the menu if needed, so there is no need to explicitly show it despite the change. Also, the waiting in iShareTheLinkFor was introduced when the link share menu was changed to automatically open after creating a link share, as that caused some issues with the steps that opened the menu by themselves (fec8d12fc5). Due to all this, now that the link share menu is again not automatically opened the wait can be simply removed. Signed-off-by: Greta Doci <gretadoci@gmail.com>	6 years ago
Roeland Jago Douma	3f12ec95f0	SessionMiddleware: declare session property ... * Remove request since we don't useit * Update tests as well Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Joas Schilling	23a0cbe6ef	Only run integration tests when PHP was modified ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Julius Härtl	52dc36fb88	Mock client URL in new user mail tests ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	6 years ago
Arthur Schiwon	4bd83c9a28	adjust tests ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	6 years ago
Joas Schilling	db968cb1d4	Cleanup the Settings class ... Signed-off-by: Joas Schilling <coding@schilljs.com>	6 years ago
Roeland Jago Douma	7927aebdeb	Fix report of phpstan in Limiter ... * unneeded arguments to constructor * added return types * let automatic DI do its work Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Daniel Kesselberg	9c4c5ee818	Add test case for existing user with token null ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Daniel Kesselberg	7f7c6e49b6	Return the disabled user mock instead of the existing ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Daniel Calviño Sánchez	e5a305b9d8	Allow Context subclasses in acceptance tests to access parent actor ... Although uncommon, in some cases a Context may need to be extended (for example, to override a step defined in the server with a specific behaviour in the acceptance tests of an app); in those cases the subclass should be able to access the actor attribute defined in the Context it is extending. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	6 years ago
Scott Shambarger	edf946dfc7	Correctly handle emtpy string in proxyuserpwd config ... As documented, the default value for config value proxyuserpwd is ''. However, that value results in the error: "cURL error 5: Unsupported proxy syntax in '@'". This patch handles the values of '' and null (the default in the code) the same for config values proxyuserpwd and proxy. Signed-off-by: Scott Shambarger <devel@shambarger.net>	6 years ago
Roeland Jago Douma	6dc179ee12	Fix login flow form actions ... So fun fact. Chrome considers a redirect after submitting a form part of the form actions. Since we redirect to a new protocol (nc://login/). Causing the form submission to work but the redirect failing hard. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	f81817b47d	Add tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	b8c5008acf	Add feature policy header ... This adds the events and the classes to modify the feature policy. It also adds a default restricted feature policy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	cf647451e5	Update CSP test cases to handle the new form-action ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Julius Härtl	22b81ac1e4	Fix permission check on incoming federated shares ... Since federated shares have their permissions set on the node, we do not need to check for parent share permissions. Otherwise reshares of incoming federated have no permission variable defined and creating them will fail Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Julius Härtl	3b0d13944a	Move actual password reset to vue ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Roeland Jago Douma	0ea7fbae54	Update tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	98237d2a00	Remove unused OC\Share\Share::checkPasswordProtectedShare ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Roeland Jago Douma	b6dd2ebd39	Use proper exception in lostController ... There is no need to log the expcetion of most of the stuff here. We should properly log them but an exception is excessive. This moves it to a proper exception which we can catch and then log. The other exceptions will still be fully logged. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	37a4282c7a	Split up security middleware ... With upcoming work for the feature policy header. Splitting this in smaller classes that just do 1 thing makes sense. I rather have a few small classes that are tiny and do 1 thing right (and we all understand what is going on) than have big ones. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Arthur Schiwon	78201bcb72	treat sensitive config keys by pattern ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Roeland Jago Douma	0487144b26	Remove deprecated searchByTag ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Arthur Schiwon	898430b6b1	supresses disclosing the userid for LDAP users in the welcome mail ... The userid is not relevant here, and by default cannot be used to login with. Typically, there is a common type of login names in organizations (LDAP username or email most often) that does not need to be disclosed. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Julius Härtl	3674f6fa2d	Check the if we can actually access the storage cache for recent files ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Daniel Kesselberg	8bed3021bd	Exclude .rnd files from integrity check ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Sam Bull	ea935f65fd	Add support for CSP_NONCE server variable ... Allow passing a nonce from the web server, allowing the possibility to enforce a strict CSP from the web server. Signed-off-by: Sam Bull <git@sambull.org> Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	99f2c82222	Properly inject the logger ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Joas Schilling	565838da9c	Update unit tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	55f5bc79a1	Keep the old method as a fallback and adjust the tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Roeland Jago Douma	f8aeef7ae9	Lock SCSS so we only run 1 job at a time ... This is bit hacky but a start to lock the SCSS compiler properly Retry during 10s then give up Properly get error message Do not clear locks and properly debug scss caching Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Joas Schilling	092d34d9df	Add a unit test for guests as well ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Daniel Kesselberg	d57540ac84	Return first value from $users ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	6235a66aac	Don't send executionContexts for Clear-Site-Data ... There are plans to remove executionContexts from the spec: https://github.com/w3c/webappsec-clear-site-data/issues/59 Firefox already removed it https://bugzilla.mozilla.org/show_bug.cgi?id=1548034 Chromium implementation is not finish: https://bugs.chromium.org/p/chromium/issues/detail?id=898503&q=clear-site-data&sort=-modified&colspec=ID%20Pri%20M%20Stars%20ReleaseBlock%20Component%20Status%20Owner%20Summary%20OS%20Modified Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Christoph Wurst	d058ef2b6c	Make it possible to wipe all tokens/devices of a user ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Christoph Wurst	1c261675ad	Refactor: move remote wipe token logic to RW service ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Roeland Jago Douma	5ac857bcdc	Add an event to edit the CSP ... This introduces and event that can be listend to when we actually use the CSP. This means that apps no longer have to always inject their CSP but only do so when it is required. Yay for being lazy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	53d2d95478	Remove one time repair steps that have already run when updating to 17 ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Xheni Myrtaj	9211e34aec	Added Tests for modified mimetypelist ... Signed-off-by: Xheni Myrtaj <myrtajxheni@gmail.com>	7 years ago
Julius Härtl	857fae288c	Always set the display name for user shares ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Joas Schilling	85a80b05ac	Unify the permission checking in one place only ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	e4addbae3e	Better check reshare permissions when creating a share ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Christoph Wurst	c50fe2a9c9	Send emails when remote wipe starts/finishes ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Julius Härtl	5db328cc15	Remove fs package ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Greta Doci	5898e87e0f	Remove deleted groups from app restrictions fixes #15823 ... Signed-off-by: Greta Doci <gretadoci@gmail.com>	7 years ago
Christoph Wurst	aa6622ccef	Decouple remote wipe notifcation channels with events ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago