164 Commits (2bc77a3c5aff352cdc19aa683bbb36da2ff20b01)

Author	SHA1	Message	Date
Carl Schwan	9b2fff5931	refactor(querybuilder): Port away from qb::execute() in tests/ ... Replace by either executeStatement or executeQuery Signed-off-by: Carl Schwan <carl.schwan@nextclound.com>	4 months ago
Carl Schwan	c4e6fbdae7	fix(query-builder): Don't catch UniqueConstraintViolationException ... UniqueConstraintViolationException is no longer throw directly but instead is now wrapped inside a \OCP\DB\Exception. So check the exception reason. Signed-off-by: Carl Schwan <carl.schwan@nextclound.com>	4 months ago
Julien Veyssier	4a35837741	feat(auth): adjust PublicKeyTokenProviderTest ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	4 months ago
Ferdinand Thiessen	ac545cc478	fix(SetUserTimezoneCommand): only write user login timezone if not yet set ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 months ago
Robin Appelman	aa15f9d16d	chore: run rector ... Signed-off-by: Robin Appelman <robin@icewind.nl>	6 months ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	6 months ago
Robin Appelman	3561937816	chore: run rector on tests with new rule ... Signed-off-by: Robin Appelman <robin@icewind.nl>	7 months ago
Robin Appelman	29e39c0a2e	chore: run rector on tests ... Signed-off-by: Robin Appelman <robin@icewind.nl>	7 months ago
Joas Schilling	5f9117b939	test: Fix coding standards ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 months ago
Joas Schilling	53b116b8a5	test: Remove more withConsecutive ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 months ago
Julius Knorr	777cd941dc	fix: Do not build encrypted password if there is none ... Signed-off-by: Julius Knorr <jus@bitgrid.net>	10 months ago
Ferdinand Thiessen	3c4feff028	fix: Move login via email logic to local backend ... Backends can decide which names they accept for login, e.g. with user_ldap you can configure arbitrary login fields. This was a hacky approach to allow login via email, so instead this is now only handled by the local user backend. This also fixes some other related problems: Other logic relys on `backend::get()` which was not handling email, so e.g. password policy could not block users logged in via email if they use out-dated passwords. Similar for other integrations, as the user backend was not consistent with what is a login name and what not. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	10 months ago
Daniel Calviño Sánchez	5ea5b2de84	fix: Handle exception when clearing previously removed two factor tokens ... If a token was already removed from the database but not from the configuration clearing the tokens will try to remove it again from the database, which caused a DoesNotExistException to be thrown. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	1 year ago
Daniel Calviño Sánchez	381a2aa627	fix: Clear pending two factor tokens also from configuration ... Otherwise as the tokens were removed from the database but not from the configuration the next time that the tokens were cleared the previous tokens were still got from the configuration, and trying to remove them again from the database ended in a DoesNotExistException being thrown. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	1 year ago
yemkareems	a74ef8237d	fix: crypto type made not nullable and tests run using ICrypto ... Signed-off-by: yemkareems <yemkareems@gmail.com>	1 year ago
yemkareems	505dfd65fd	fix: encrypt and store password, decrypt and retrieve the same ... Signed-off-by: yemkareems <yemkareems@gmail.com>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Christoph Wurst	49dd79eabb	refactor: Add void return type to PHPUnit test methods ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Christoph Wurst	5100e3152d	feat(auth): Clean-up unused auth tokens and wipe tokens ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	1 year ago
Arthur Schiwon	f6d6efef3a	refactor(Token): introduce scope constants ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Andy Scherzinger	1f7e2ba599	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Andrew Summers	f9ce6bfdff	Refactor `OC\Server::getHasher` ... Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>	2 years ago
Benjamin Gaussorgues	d1189f923c	feat(perf): add cache for authtoken lookup ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Alexander Piskun	26d343d33a	AppAPI: allowed to bypass Two-Factor ... Signed-off-by: Alexander Piskun <bigcat88@icloud.com>	2 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Lucas Azevedo	771a7b92cc	Add tests for occ user:auth-tokens:delete ... Signed-off-by: Lucas Azevedo <lhs_azevedo@hotmail.com>	2 years ago
Côme Chilliet	f57c12b14e	Fix various deprecation warnings in tests on PHP 8.3 ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Joas Schilling	dac31ad101	fix!: Remove legacy event dispatching Symfony's GenericEvent from 2FA Manager ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Joas Schilling	05aa39d777	Fix event names of 2FA related typed events ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Côme Chilliet	8d5165e8dc	Adapt tests to config value typing ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Artur Neumann	37cfccabc1	unit tests for Manager::invalidateTokensOfUser ... Signed-off-by: Artur Neumann <artur@jankaritech.com>	3 years ago
Joas Schilling	a81d8ecef5	Fix unit tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Marcel Klehr	adfe367106	PublickKeyTokenProvider: Fix password update routine with password hash ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	3 years ago
Christoph Wurst	9d0e79f10d	Fix PublicKeyTokenProviderTest import and mock ... * IDBConnection import missing * Atomic doesn't need a mock Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Julius Härtl	2a684f6741	Fix some phpunit test warnings ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	298d2b9b58	Skip general login with email for non-valid addresses and LDAP ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Christoph Wurst	c5922e67d3	Run session token renewals in a database transaction ... The session token renewal does 1) Read the old token 2) Write a new token 3) Delete the old token If two processes succeed to read the old token there can be two new tokens because the queries were not run in a transaction. This is particularly problematic on clustered DBs where 1) would go to a read node and 2) and 3) go to a write node. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Carl Schwan	702445ba3b	Handle one time password better ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	1c23c029af	Handler large passwords ... For passwords bigger than 250 characters, use a bigger key since the performance impact is minor (around one second to encrypt the password). For passwords bigger than 470 characters, give up earlier and throw exeception recommanding admin to either enable the previously enabled configuration or use smaller passwords. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Carl Schwan	cdf3b60555	Handle one time passwords ... This adds an option to disable storing passwords in the database. This might be desirable when using single use token as passwords or very large passwords. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Joas Schilling	7b3e2217de	Fix user agent trimming on installation ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Joas Schilling	d683e0d3d1	Automatically cut the token name on the first level ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Joas Schilling	343476f54f	Fix unit tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Carl Schwan	01e2a26749	Fix unit tests ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Joas Schilling	3e20cffc86	More test fixing ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Joas Schilling	c6ae53096c	More test fixing ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Joas Schilling	9f00179037	More unit test adjustments ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Côme Chilliet	bc3acfc957	Fix test class names ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago