186 Commits (4608d3def7e8619fe2a151aa7d2180dc465f8155)

Author	SHA1	Message	Date
Lukas Reschke	8ebe667202	Remove unneeded argument	10 years ago
Lukas Reschke	55fd0082aa	Serve all files with a Content-Disposition of 'attachment' via WebDAV ... As an additional security hardening it's sensible to serve these files with a Content-Disposition of 'attachment'. Currently they are served 'inline' and get a "secure mimetype" assigned in case of potential dangerous files. To test this change ensure that: - [ ] Syncing with the Desktop client still works - [ ] Syncing with the Android client still works - [ ] Syncing with the iOS client still works I verified that the 1.8 OS X and iOS client still work with this change.	10 years ago
Vincent Petry	a84ade5f32	Revert "adding OC-ETag header" ... This reverts commit 30ee8b6f99.	10 years ago
Vincent Petry	daceb1a9ac	Revert "adding unit tests" ... This reverts commit 8d327c94a8.	10 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	10 years ago
Thomas Müller	8d327c94a8	adding unit tests	10 years ago
Vincent Petry	72c1c89bcd	Log forbidden in debug level	10 years ago
Thomas Müller	30ee8b6f99	adding OC-ETag header	10 years ago
jknockaert	a1b68b5a48	Remove range header exception for encryption ... revert #10422	10 years ago
Vincent Petry	eb894e6625	Soft fail in CustomPropertiesBackend whenever storage not available ... When a storage is not available, it will not fail the whole call any more but still return a usable file list.	10 years ago
Vincent Petry	5ba508b346	Fix permission checks in Sabre connector ... This fixes moving files in and out of shared folders with some exotic permission combinations.	10 years ago
Vincent Petry	50194c31b4	Soft fail in custom properties backend ... This makes it possible for clients to still receive a file list (minus the broken files) instead of getting no list at all	10 years ago
Vincent Petry	5ea8ab3bb0	Fix Principal connector override	10 years ago
Thomas Müller	0f3e36fdfd	Adding a more meaningful message for sabre dav exception - fixes #14516	10 years ago
Thomas Müller	49e1a81eba	fixing namespaces and PHPDoc	10 years ago
Thomas Müller	4bac595068	adding storage specific filename verification - refs #13640	10 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	10 years ago
Vincent Petry	ae2f37ac06	Removed unused $node variable	10 years ago
Vincent Petry	f39fcbc250	Fixes WebDAV copy ... - added existence check for source argument - removed extra logic for folders, as $view->copy() already supports that internally	10 years ago
Thomas Müller	e9d25e4fdb	using Doctrine\DBAL\Connection::executeUpdate()	10 years ago
Thomas Müller	b3de86d851	Remove locks plugin. ... Reasoning: - a WebDAV server is not required to implement locking support - WebDAV Locking is know to break the sync algorithm - the current lock implementation is known to be broken (locks are not moved if a file is moved, locks on shared files don't work)	10 years ago
Lukas Reschke	432d7be8cc	Show a empty response for GET on non-files instead of the Browser Plugin	10 years ago
Vincent Petry	9f6dcb9d3e	Sabre Update to 2.1 ... - VObject fixes for Sabre\VObject 3.3 - Remove VObject property workarounds - Added prefetching for tags in sabre tags plugin - Moved oc_properties logic to separate PropertyStorage backend (WIP) - Fixed Sabre connector namespaces - Improved files plugin to handle props on-demand - Moved allowed props from server class to files plugin - Fixed tags caching for files that are known to have no tags (less queries) - Added/fixed unit tests for Sabre FilesPlugin, TagsPlugin - Replace OC\Connector\Sabre\Request with direct call to httpRequest->setUrl() - Fix exception detection in DAV client when using Sabre\DAV\Client - Added setETag() on Node instead of using the static FileSystem - Also preload tags/props when depth is infinity	10 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	10 years ago
Christian Seiler	535757bc42	DAV authentication: also use Owncloud's internal user for short-circuit ... It still works otherwise, but without this, the performance optimization of #13416 is defeated in these situations.	10 years ago
Christian Seiler	1377ebc7e9	DAV authentication: use Owncloud's internal user instead of HTTP-supplied one ... Fixes: #14048, #14104, calendar#712	10 years ago
Lukas Reschke	886bda5f81	Refactor OC_Request into TrustedDomainHelper and IRequest ... This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed. This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions. Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though. Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969	10 years ago
Robin Appelman	9abaa0cc61	pass fileinfo to getStorageInfo	10 years ago
Robin Appelman	fb2a3284df	Cache quota info for directories	10 years ago
Vincent Petry	8210200770	Revert "adding OC-ETag header" ... This reverts commit 96a931929e.	10 years ago
Robin Appelman	05035ef4af	Fix webdav put for single file webdav shares	10 years ago
Thomas Müller	b7cf4d551e	let init() take an INode - fixes PHP message	10 years ago
Lukas Reschke	476579b9c6	Fix WebDAV auth for session authentication only ... \Sabre\DAV\Auth\Backend\AbstractBasic::authenticate was only calling \OC_Connector_Sabre_Auth::validateUserPass when the response of \Sabre\HTTP\BasicAuth::getUserPass was not null. However, there is a case where the value can be null and the user could be authenticated anyways: The authentication via ownCloud web-interface and then accessing WebDAV resources. This was not possible anymore with this patch because it never reached the code path in this scenario. This patchs allows authenticating with a session without isDavAuthenticated value stored (this is for ugly WebDAV clients that send the cookie in any case) and thus the functionality should work again. To test this go to the admin settings and test if the WebDAV check works fine. Furthermore all the usual stuff (WebDAV / Shibboleth / etc...) needs testing as well.	10 years ago
Lukas Reschke	730460c9fa	Close session properly	10 years ago
Lukas Reschke	dfbc405a45	Prioritise Basic Auth header over Cookie ... There are a lot of clients that support multiple WebDAV accounts in the same application. However, they resent all the cookies they received from one of the accounts also to the other one. In the case of ownCloud this means that we will always show the user from the session and not the user that is specified in the basic authentication header. This patch adds a workaround the following way: 1. If the user authenticates via the Sabre Auth Connector add a hint to the session that this was authorized via Basic Auth (this is to prevent logout CSRF) 2. If the request contains this hint and the username specified in the basic auth header differs from the one in the session relogin the user using basic auth Fixes https://github.com/owncloud/core/issues/11400 and https://github.com/owncloud/core/issues/13245 and probably some other issues as well. This requires proper testing also considering LDAP / Shibboleth and whatever instances.	10 years ago
Thomas Müller	5f171618fd	remove unused variable and fix undefined variable	10 years ago
Vincent Petry	2e57fe93e4	Disable part files for OC ext storage backend + s2s backend ... When uploading files to an OC ext storage backend or when using server to server sharing storage, part files aren't needed because the backend already has its own part files and takes care of the final atomic rename operation. This also fixes issues when using two encrypted ownCloud instances where one mounts the other either as external storage (ownCloud backend) or through server to server sharing.	10 years ago
Chris Wilson	402a3ed146	Improve debugging for ServiceUnavailable exceptions ... I was getting a lot of these in my logs for no apparent reason, and file uploads were failing: {"app":"webdav","message":"Sabre\\DAV\\Exception\\ServiceUnavailable: ","level":4,"time":"2015-01-06T15:33:39+00:00"} In order to debug it, I had to add unique messages to all the places where this exception was thrown, to identify which one it was, and that made the logs much more useful: {"app":"webdav","message":"Sabre\\DAV\\Exception\\ServiceUnavailable: Encryption is disabled","level":4,"time":"2015-01-06T15:36:47+00:00"}	10 years ago
Lukas Reschke	0ed00bca43	Use namespace	10 years ago
Lukas Reschke	556c9b6f46	Write unit-tests and use DI	10 years ago
Lukas Reschke	f2ddd565e8	Fix code-style	10 years ago
derkostka	deedfad050	fix "app":"PHP","message":"Undefined variable: user at/principal.php#66" ... changed variable #user to #name	10 years ago
Thomas Müller	81243b0f5d	adding getDirectDownload() to Wrapper	10 years ago
Thomas Müller	5b00bc1d6e	Adding basement for the direct download url	10 years ago
Vincent Petry	6224e29f25	Fix code style issues for tags plugin	10 years ago
Vincent Petry	3c67900421	Remove obsolete method	10 years ago
Vincent Petry	0b3f0716fc	Returns and update tags through WebDAV PROPFIND and PROPPATCH ... Added oc:tags and oc:favorites in PROPFIND response. It is possible to update them with PROPPATCH. These properties are optional which means they need to be requested explicitly	10 years ago
Robin Appelman	fd85424742	Add getMountPoint to FileInfo	10 years ago
Joas Schilling	78a307995c	Fix namespace of Files_Encryption outside of the app	10 years ago
Robin Appelman	0b630a37ab	Fix type hinting for app manager	11 years ago