nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	6 months ago
Côme Chilliet	de77415c70	fix(user_ldap): Do not map groups we do not know if they match filter When nesting is enabled, filterValidGroups is supposed to check for each groups if it actually exist, because it may not be visible to Nextcloud. So in this codepath we disable automapping of groups. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	11 months ago
provokateurin	77114fb327	fix(OpenAPI): Adjust array syntax to avoid ambiguities Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
provokateurin	381077028a	refactor(apps): Use constructor property promotion when possible Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Andy Scherzinger	8d8891c5bc	chore: Add SPDX header Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Côme Chilliet	0f348516d2	fix: Remove obsolete resource typing In PHP>=8.1, LDAP and FTP resources are always typed objects Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Arthur Schiwon	ee096f8629	fix(LDAP): ensure stored groups are formatted as simple list With array_unique it is possible that the keys are not in sequential order but have gaps. json_encode then would store them as associative array, which later on json_decode would result in a stdClass by default. This is unexpected and would also contradict the return type hint. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	d6b356c63b	enh(LDAP): implement IIsAdmin interface - add configuration to specify one LDAP group acting as admin group (CLI) - implement `isAdmin()` method, basically relying on inGroup against the configured group Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Arthur Schiwon	d978050666	fix(LDAP): prevent incomplete displaynames… … when reading users from primary groups or gidNumber-based groups Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Côme Chilliet	05efbf11d9	Fix LDAP LoginListener by adding new group relationships to caches before firing the event Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Arthur Schiwon	cce8d0a7a5	fix(LDAP): solve race condition reading groups of disappeared LDAP user Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	c1480aade4	refactor(LDAP): pass IConfig via constructor to Group_LDAP Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	cb3faad5b5	fix(ldap): store last known user groups - for LDAP user life cycle management Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Carl Schwan	3270b7f12e	Add batch methods in user backends This allows for faster group search with significantly less DB traffic Signed-off-by: Carl Schwan <carl@carlschwan.eu>	2 years ago
Côme Chilliet	f9ed48eab9	Add check-group command Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	b6c17c6ce7	Clear up return types usersInGroup index by int for BC, searchInGroup index by uid (string). Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	6385a5af36	Let OC\Group\Group handle the fallback and remove default implementation from ABackend Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Carl Schwan	35dc223500	Optimize retrieving display name when searching for users in a group This is recurrent scenario that we are searching for users and then for each users we fetch the displayName. This is inefficient, so instead try to do one query to fetch everything (e.g. Database backend) or use the already existing DisplayNameCache helper. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Côme Chilliet	1d00290621	Cache display name even if it was not filled Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Carl Schwan	99a752922f	Fix psalm Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	60ec5e655c	Check if cache is present with isset Otherwise we get false for empty array Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Côme Chilliet	1a6a6c985a	Bring back small fixes by Carl Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	746a5fb7e0	Fix LDAP recursive nested group support Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Carl Schwan	be5338e572	Revert Carl changes on apps/user_ldap/lib/Group_LDAP.php Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	1b12a08ec2	Fix user_ldap tests Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	e0fbd39840	Add back runtime cache for intermediate ldap read results This is a small optimization that save a few LDAP queries Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	33be3f754a	Only cache base inGroup search And not intermediate search for nested groups, this is causing issues othewise with nested groups Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Côme Chilliet	604b5ace12	Add missing copyright author in Group_LDAP Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	69f9e9f387	Removed unused use declaration Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	150e6adbc5	Fix types in docblocks Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	6ed0d0b8b1	Refactor group membership listing for nested groups Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	8b19cfcd88	Small optimisation of _groupMembers This will not change the result as users are check to be existing afterwards but avoids this check when we know it’s a group. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	d07f43dc12	Refactor _groupMembers to correctly use cache on intermediate results Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Carl Schwan	6522f8a6d9	Fix merging list with null This fixes some cases observed with the debugger where we end up merging a non empty list with null. The result is then null and the looping over the items would then end. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	49aa352069	Unify a bit the types of the fetcher Now it will only accept a string as parameter instead of either a string (DN) or a array (complete record). Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	0fd7a51e3c	Add more type hinting Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Arthur Schiwon	5647093319	Cache intermediates Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de> Co-authored-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Arthur Schiwon	ad2fdbe377	Refactor code to split common loop Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
Arthur Schiwon	1e4ac22c94	Make it possible to return nested records whem walking over groups Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	3 years ago
luz paz	9d26671f05	Fix typos in apps/ subdirectory Found via `codespell -q 3 -S l10n,./apps/files_external/3rdparty -L adn,ba,boxs,keypair,jus,optionel,ressource,tabel ./apps/` Signed-off-by: luz paz <luzpaz@github.com> Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>	3 years ago
Carl Schwan	d5c23dbb9f	Move CappedMemoryCache to OCP This is an helpful helper that should be used in more place than just server and this is already the case with groupfodlers, deck, user_oidc and more using it, so let's make it public Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Carl Schwan	ec6b83cc18	Add stricter psalm type for CappedMemoryCache Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Côme Chilliet	77bdad84c2	Add ldap:reset-group command to unmap groups from LDAP Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	dab5ea958a	Fix unit tests Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	e80eb79a1e	Remove redundant is_array check Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Côme Chilliet	f3dcbfe146	Fix PHP 8.1 support for user_ldap application Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Arthur Schiwon	8266f88755	fix potential unwarranted memberships in nested groups from LDAP - the issue was present only when using PHP based resolving of nested group members. Normally nested members are common in AD (and Samba4) and are resolved per LDAP_MATCHING_RULE_IN_CHAIN by default - resolving nested members is recursive - when the cache entry was created it happend for intermediate groups, too, containing members from the parent group - the check was added to only cache the root group with its members - a runtime cache stores intermediate ldap read results Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago

1 2 3

125 Commits (2bc77a3c5aff352cdc19aa683bbb36da2ff20b01)