945 Commits (311531ecce497663960877fc536ba94deff27bc0)

Author	SHA1	Message	Date
Christoph Wurst	d907666232	bring back remember-me ... * try to reuse the old session token for remember me login * decrypt/encrypt token password and set the session id accordingly * create remember-me cookies only if checkbox is checked and 2fa solved * adjust db token cleanup to store remembered tokens longer * adjust unit tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	9 years ago
Joas Schilling	9b66e8f7d9	Throw an exception when a shipped app was not replaced before the update ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Thomas Müller	748f18f34e	Remove all unneeded set_include_path()	9 years ago
Morris Jobke	f920153f16	Throw exception because the logger causes session issues anyway that early in the request cycle ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Jörn Friedrich Dreyer	2e0e68b57f	log error when setting timezone to UTC fails (#26354) ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Vincent Petry	9e9fef46d9	Get rid of very old oc:// stream wrapper (#26381)	9 years ago
Lukas Reschke	9a2511fe9b	Don't check for Same-Site cookie on Chrome Android ... Chrome on Android has a bug that it doesn't sent cookies with the same-site attribute for the download manager. To work around that all same-site cookies get deleted and recreated directly. Awesome! FIXME: Remove once Chrome 54 is deployed to end-users @see https://github.com/nextcloud/server/pull/1454	9 years ago
Lukas Reschke	6ac890812f	Add exemptions for incompatible UAs ... Some user agents are notorious and don't really properly follow HTTP specifications. For those, have an automated opt-out. Since the protection for remote.php is applied in base.php as starting point we need to opt out here.	9 years ago
Joas Schilling	7bfc698ae4	Allow to call status.php before the instance is installed	9 years ago
Robin Appelman	acffaa55a1	Short circuit processing of the heartbeat request	9 years ago
Juan Pablo Villafáñez	b50a03141b	Fix redirection taking care of protocol and port	9 years ago
Arthur Schiwon	208e551216	check registered sections and settings after an app got updated to garbage collect orphaned classes	10 years ago
Arthur Schiwon	9edca39b49	attempt to remove section and settings entries when an app got disabled	10 years ago
Jan-Christoph Borchardt	835dc59d6a	reduce info on update screens, introduce button to refresh	10 years ago
Damjan Georgievski	982bdb1823	introduce NEXTCLOUD_CONFIG_DIR env variable (see #300) ... nextcloud by default uses the `/config/` directory in the source/application tree for its config file(s). with this commit that directory can be overridden by the `NEXTCLOUD_CONFIG_DIR` environment variable. in uwsgi, you would use the option `--env "NEXTCLOUD_CONFIG_DIR=/tmp/nx-config/"` in apache `SetENV …` and the cli command can be run with: `NEXTCLOUD_CONFIG_DIR=/tmp/nx-config ./occ` (or just use `export` once in the shell). NEXTCLOUD_CONFIG_DIR can be supplied with or without the trailing slash (`/`), but in all cases `$configDir` will have it automatically added if needed. The other changes are several occurrences of `OC::$SERVERROOT . '/config'` to `OC::$configDir`.	10 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Lukas Reschke	ba4f12baa0	Implement brute force protection ... Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login)	10 years ago
Lukas Reschke	a299fa38a9	[master] Port Same-Site Cookies to master ... Fixes https://github.com/nextcloud/server/issues/50	10 years ago
Roeland Jago Douma	1caceea6c0	Make the OCS endpoint handle the new OCS AppFramework routes	10 years ago
Joas Schilling	2c988ecbf4	Use the themed Defaults everywhere	10 years ago
Morris Jobke	2791b8f00d	Revert "occ web executor (#24957)" ... This reverts commit 854352d9a0.	10 years ago
Morris Jobke	e3b509220b	Revert "Bypass upgrade page when occ controller is requested" ... This reverts commit 89e581acf8.	10 years ago
Victor Dubiniuk	e38bbdc9fe	Bypass upgrade page when occ controller is requested	10 years ago
Thomas Pulzer	90b7f74da7	Changed name of default logfile from owncloud.log to nextcloud.log.	10 years ago
VicDeo	854352d9a0	occ web executor (#24957) ... * Initial web executor * Fix PHPDoc Fix broken integration test OccControllerTests do not require database access - moch them all! Kill unused sprintf	10 years ago
Joachim Sokolowski	fa19e4c2eb	some text-changes to nextcloud	10 years ago
Arthur Schiwon	39aeebfac5	Print error message again, when 3rdparty submodule is not initialized ... - old code used Response which attempted to use OC::$server which is not and cannot be intialised at this part of the code.	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Joas Schilling	6222d42462	Fix class name in hook registration	10 years ago
Roeland Jago Douma	c9ad60defc	Only allow loading of legacy (lib/private/legacy) by default	10 years ago
Roeland Jago Douma	d666725fa7	Move \OCP to PSR-4	10 years ago
Roeland Douma	5c9103287f	Group fixup (#24621) ... * Move used OC_Group_xx to \OC\Group * Add (deprecated) legacy wrapper in legacy, OC_Group_xx * Replace deprecated use of OC_Group_xx with \OC\Group\xx	10 years ago
Christoph Wurst	8b6bb0a426	Log user out correctly if max session lifetime is reached (#24552)	10 years ago
Christoph Wurst	3a1882b143	run upgrades in incognito mode	10 years ago
Christoph Wurst	168ccf90a6	try apache auth too	10 years ago
Christoph Wurst	d8cde414bd	token based auth ... * Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token	10 years ago
Roeland Jago Douma	9e1d9871a8	Move OC_User_Database to \OC\User\Database	10 years ago
Joas Schilling	8668560352	Keep the composer instance so we can add psr4 paths later	10 years ago
Thomas Müller	f56be022a3	Disable web updater if ldap or shibboleth are installed - refs https://github.com/owncloud/core/issues/23913#issuecomment-213432232	10 years ago
Roeland Jago Douma	1d33a5ef13	Move \OC\AppFramework to PSR-4 ... * Also moved the autoloader setup a bit up since we need it in initpaths	10 years ago
Thomas Müller	c609abf075	In case of fatal php errors and other unhandled exceptions no html error page is expected to be displayed in the console	10 years ago
Lukas Reschke	8222ad5157	Move logout to controller ... Testable code. Yay.	10 years ago
Thomas Müller	739dfb5c66	Suggest cli based updater in case the instance is bigger - #23913	10 years ago
Lukas Reschke	17dfffefb3	Keep used username in URL ... This is required until the new controller can also handle POST requests	10 years ago
Lukas Reschke	331e4efacb	Move login form into controller ... First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.	10 years ago
Thomas Müller	dc061bae42	Kill movable 3rdparty	10 years ago
Roeland Jago Douma	6144ced7a0	Move post_removeFromGroup to shareManager ... The last sharing hook to be moved over. * Added unit tests * Removed old tests that relied on old behaviour * Removed old hooks.php	10 years ago
Roeland Douma	495a964ca2	Migrate post_groupDelete hook to share manager (#23841) ... The hook now calls the share manager that will call the responsible shareProvider to do the proper cleanup. * Unit tests added Again nothing should change it is just to cleanup old code	10 years ago
Roeland Jago Douma	3fae4c82d2	Remove pre/post_addToGroup hooks for shares ... There is no need to perform the checks for unique targets on add to group as we have to do this all when mounting the shares anyway.	10 years ago