68 Commits (311531ecce497663960877fc536ba94deff27bc0)

Author	SHA1	Message	Date
Robin Appelman	b56f2c9ed0	basic lockdown logic ... Signed-off-by: Robin Appelman <icewind@owncloud.com>	9 years ago
Vincent Petry	17ea1bfb75	Remove unused $view from FilesPlugin (#26549) ... The Sabre FilesPlugin never uses the view so remove it.	9 years ago
Robin Appelman	d1291f7aee	remove unneeded getDirectoryContent when getting share types for a folder ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Thomas Müller	c778b1bade	Update sabre dav to 3.2 (#26115) ... * Update sabre/dav to 3.2.0 * Adjust code to work with sabre/dav 3.2.0 and it's dependencies * Adding own CalDAV plugin to fix calendar home property * Test if there is a user logged in when listing files home * Update sabre version used by integration tests * Disable unauthenticated DAV access This is needed to make Sabre 3.2 behave like we did before. Eventually we should integrate better with the ACL plugin which itself should implement an auth failure when appropriate. ===== * Fixed so cherry-pick was succesfull Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Vincent Petry	6a4ea2c15a	Upload autorename on client side ... Removes the need for POST to collection which would hit against upload limits. The client tries to auto rename the file by adding a suffix "(2)". It tries to use the file list on the client side to guess a suitable name. In case a file still cannot be uploaded and creates a conflict, which can happen when the file was concurrently uploaded, the logic will continue increasing the suffix.	9 years ago
Roeland Jago Douma	fc4d0a86ef	Fix merging backend results ... * Merge share types correctly * Filter share types * Order share types Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Robin Appelman	3692769b0a	Add getShareTypesInFolder to optimize folder listening ... Signed-off-by: Robin Appelman <icewind@owncloud.com>	9 years ago
Thomas Müller	1c39b30d50	Require to use at least desktop client 2.0 by default	9 years ago
Vincent Petry	c68e273664	Goodbye Iframe transport ! ... Not needed any more in IE >= 11 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Vincent Petry	59c5be1cc5	Use Webdav PUT for uploads in the web browser ... - uses PUT method with jquery.fileupload for regular and public file lists - for IE and browsers that don't support it, use POST with iframe transport - implemented Sabre plugin to handle iframe transport and redirect the embedded PUT request to the proper handler - added RFC5995 POST to file collection with "add-member" property to make it possible to auto-rename conflicting file names - remove obsolete ajax/upload.php and obsolete ajax routes Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Vincent Petry	44cf67accd	Storage 503 message improvements ... "Storage not available" is now "Storage temporarily not available". Exceptions are now logged in DEBUG level, not FATAL.	9 years ago
Vincent Petry	73e216e0a7	Add more files plugins to new DAV endpoint (#26186) ... * Add more files plugins to new DAV endpoint Also fix report plugin to properly retrieve the path from the prolongated URL * In case the report is not for this plugin -> simply return to allow other plugins to get executed * Adjust onReport tests to match new behavior	9 years ago
Semih Serhat Karakaya	33cee3502a	Update file.php put function posthook calls ... Logicaly, postHooks should emit after touch. For chunking file it is already emitting after touch. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Joas Schilling	246bb9f33d	Move OC\Files\Storage\Shared to the right namespace	9 years ago
Thomas Müller	08d6884107	Sanitize length headers when validating quota	9 years ago
Vincent Petry	361f008c70	Make it possible to filter by tags with REPORT method ... Enhanced the REPORT method on the Webdav endpoint and added a "oc:favorite" filter rule. When set, it will return a flat list of results filtered with only favorite files. The web UI was also adjusted to use this REPORT method instead of the private API endpoint. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Joas Schilling	05223a39f9	Make sure we only use numbers as length ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Thomas Citharel	3b055b160e	fix typo ... Signed-off-by: Thomas Citharel <tcit@tcit.fr>	9 years ago
Thomas Müller	bd96c6aa38	Return ETag and OC-ETag in case of a move (#25683) ... Downstreaming of https://github.com/owncloud/core/pull/25683 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Thomas Citharel	3921385ed3	fix things (indentation, tests, comments, backend custom implementation	9 years ago
Thomas Citharel	8da2100e7d	Start work on returning CalDAV published calendars	9 years ago
Vincent Petry	b17e836e45	FilesHome now also returns DAV properties ... The files home node must also return DAV properties like etag, permissions, etc for the clients to work like they did with the old endpoint. This fix makes FilesHome extend the Sabre Directory class, this makes the FilesPlugin and other plugins recognize it as a directory and will retrieve the matching properties when applicable. Downstream of https://github.com/owncloud/core/pull/26066 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	cf69a2b7eb	UPDATE permissions qualify for renaming a node	9 years ago
Joas Schilling	4c0665b6ec	Only require CREATE permissions when the file does not exist yet	9 years ago
Markus Goetz	0cb34c2fa5	[master] DAV: Return data-fingerprint always when asked (#25482) ... For owncloud/client#5056 Users can configure arbitrary subfolders for syncing, therefore we should always return it when asked for. The sync client makes sure to not always ask for it to save bandwidth.	9 years ago
Robin Appelman	7c4d9add0d	reuse the userfolder's fileinfo when possible during dav setup	10 years ago
Christoph Wurst	6af2efb679	prevent infinite redirect loops if the there is no 2fa provider to pass ... This fixes infinite loops that are caused whenever a user is about to solve a 2FA challenge, but the provider app is disabled at the same time. Since the session value usually indicates that the challenge needs to be solved before we grant access we have to remove that value instead in this special case.	10 years ago
Robin Appelman	1fef5d3d06	add dav property to check if a file has a preview available	10 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	813f0a0f40	Fix apps/	10 years ago
Lukas Reschke	ba4f12baa0	Implement brute force protection ... Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login)	10 years ago
Vincent Petry	e5c4f53eea	Cast share id to string (#25402)	10 years ago
Aaron Wood	7c0de08cc4	Escape special characters (#25429) ... * Escape LIKE parameter * Escape LIKE parameter * Escape LIKE parameter * Escape LIKE parameter * Escape LIKE parameter * Use correct method in the AbstractMapping class * Change the getNamesBySearch method so that input can be properly escaped while still supporting matches * Don't escape hardcoded wildcard	10 years ago
Joas Schilling	2c988ecbf4	Use the themed Defaults everywhere	10 years ago
Roeland Jago Douma	059b7435ab	PasswordLoginForbidden is not a FATAL exception ... It is just a 'Sabre\DAV\Exception\NotAuthenticated' exception with some special meaning. So just log it as DEBUG and not as FATAL.	10 years ago
Bjoern Schiessle	26e14529be	fix error message	10 years ago
Lukas Reschke	c771368c4e	Add proper throws PHP docs	10 years ago
Lukas Reschke	1e7f0f7341	Add required $message parameter	10 years ago
Bjoern Schiessle	3571207bd9	add some additonal permission checks to the webdav backend	10 years ago
Vincent Petry	2340660a5b	PasswordLoginForbidden must extend NotAuthenticated ... The auth code from Sabre will forward NotAuthenticated exceptions but in the case of a generic exception, it is packaged as "service not available".	10 years ago
Christoph Wurst	5a8cfab68f	throw PasswordLoginForbidden on DAV	10 years ago
Christoph Wurst	82b50d126c	add PasswordLoginForbiddenException	10 years ago
Christoph Wurst	331d88bcab	create session token on all APIs	10 years ago
blizzz	51fd2602a7	Revert "Downstream 2016-06-08"	10 years ago
Vincent Petry	1399e87d57	DAV now returns file name with Content-Disposition header ... Fixes issue where Chrome would append ".txt" to XML files when downloaded in the web UI	10 years ago
Robin Appelman	9b5fd515ef	Better handling of forbidden files in dav	10 years ago
Thomas Müller	c4b80b86db	Fix checkMove() implementation for dav v2 - fixes #24776 (#24971)	10 years ago
Thomas Müller	cf06b17df1	Use the correct realm for basic authentication - fixes #23427	10 years ago
Thomas Müller	f20c617154	Allow login by email address via webdav as well - fixes #24791	10 years ago
Robin Appelman	f119769c26	Better handling of forbidden files in dav	10 years ago