761 Commits (49cf5ba318add68160aede0e2ad624800983d183)

Author	SHA1	Message	Date
skjnldsv	0179cb4d8d	feat(core): add setup cypress tests ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	10 months ago
skjnldsv	cc12719df5	feat(core): migrate setup to vue ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	10 months ago
Côme Chilliet	71dc34c03c	fix: Deprecate OC_Template, add proper template manager instead ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	10 months ago
Louis Chemineau	c6293204a2	feat: Close sessions created for login flow v2 ... Sessions created during the login flow v2 should be short lived to not leave an unexpected opened session in the browser. This commit add a property to the session object to track its origin, and will close it as soon as possible, i.e., on the first non public page request. Signed-off-by: Louis Chemineau <louis@chmn.me>	10 months ago
Côme Chilliet	e757b649b7	fix: Fix psalm taint false-positives by small refactorings ... Mostly make it clear that we trust admin input or that we correctly escape strings. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	10 months ago
skjnldsv	2c13259093	feat(files): add mime icon endpoint ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	11 months ago
SebastianKrupinski	332fa63850	feat: Two Factor API ... Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>	12 months ago
Julien Veyssier	24332e2a06	fix(taskprocessing): /tasktypes endpoint was broken by #49015 ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	12 months ago
Côme Chilliet	f52b4c5eb2	fix: Remove skip of grant page, only skip first step ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	12 months ago
Côme Chilliet	e7be008dc1	feat(oauth2): Skip page before login as well for authorized applications ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	12 months ago
Côme Chilliet	9b366c65d4	feat(oauth): Allow to skip the grant step for selected applications ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	12 months ago
provokateurin	085d4c9364	refactor(OpenAPI): Adjust scopes to match previous behavior ... Signed-off-by: provokateurin <kate@provokateurin.de>	12 months ago
Jonas	dd5f560246	fix(ReferenceApiController): Bump rate limit for public resolve endpoint ... E.g. text documents might contain hundreds of links whose previews need to get loaded. Fixes: nextcloud/collectives#1607 Signed-off-by: Jonas <jonas@freesources.org>	1 year ago
Benjamin Gaussorgues	22051a73c1	feat(login): add origin check at login ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Maxence Lange	4591430c9c	feat(ocm): signing ocm requests ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	1 year ago
Marcel Klehr	3ac14af26b	fix(TaskProcessing): Set up fs in getFileContentsInternal ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
skjnldsv	b15fdfd40e	chore(profile): move profile app from core to apps ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	1 year ago
provokateurin	77114fb327	fix(OpenAPI): Adjust array syntax to avoid ambiguities ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Ferdinand Thiessen	c84c256261	fix: Adjust preview for view-only shares ... Previously there was a different behavior for public shares (link-shares) and internal shares, if the user disabled the view permission. The legacy UI for public shares simply "disabled" the context menu and hided all download actions. With Nextcloud 31 all share types use the consistent permissions attributes, which simplifies code, but caused a regression: Images can no longer been viewed. Because on 30 and before the attribute was not set, previews for view-only files were still allowed. Now with 31 we need a new way to allow "viewing" shares. So this is allowing previews for those files, but only for internal usage. This is done by settin a special header, which only works with custom requests, and not by opening the URL directly. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
dependabot[bot]	bb598c8451	chore(deps): Bump nextcloud/coding-standard in /vendor-bin/cs-fixer ... Bumps [nextcloud/coding-standard](https://github.com/nextcloud/coding-standard) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/nextcloud/coding-standard/releases) - [Changelog](https://github.com/nextcloud/coding-standard/blob/master/CHANGELOG.md) - [Commits](https://github.com/nextcloud/coding-standard/compare/v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: nextcloud/coding-standard dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Julius Knorr	606241caeb	chore(legacy): Introduce public version ct plass and drop version methods from OC_Util ... Signed-off-by: Julius Knorr <jus@bitgrid.net>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Anna Larch	8af7ecb257	chore: adjust code to adhere to coding standard ... Signed-off-by: Anna Larch <anna@nextcloud.com>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
provokateurin	e77d6c913d	fix(core): Limit valid avatar sizes ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Julius Härtl	1aa29441e3	fix: Add direct parameter to flow auth v2 ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	1 year ago
Julius Härtl	a6d421e767	chore: Remove deprecated legacy search backend ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	1 year ago
provokateurin	bc5c0262af	refactor(core): Make all attribute arguments named ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
provokateurin	c57c3c1573	refactor(core): Replace security annotations with respective attributes ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
provokateurin	90e108e548	fix(core): Document CSRF token endpoint ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Julien Veyssier	060fb26686	fix(taskprocessing): run cs:fix ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	1 year ago
Marcel Klehr	799ee8fd51	feat(TaskProcessing): Implement enums and default values ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
Julius Härtl	6c1e896a03	fix: Ignore preview requests for invalid file ids ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	1 year ago
Julien Veyssier	fffc784769	feat(taskprocessing): add support for webhooks (http or AppAPI) in the task processing API ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	1 year ago
Ferdinand Thiessen	9716b0d735	refactor: Migrate some legacy and core functions to `IFilenameValidator` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Jonas	9fe4edca2c	fix(ReferenceApiController): Remove accidently added AnonRateLimit ... Signed-off-by: Jonas <jonas@freesources.org>	1 year ago
Marcel Klehr	0d07ad98b0	fix(TaskProcessing): Update openapi specs ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
Marcel Klehr	eb0b5f29fb	fix(TaskProcessingApiController): Address review comments ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
Marcel Klehr	4ac1ac673e	fix: psalm errors ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
Marcel Klehr	4ac7f8275b	feat(TaskProcessing): Allow setting task results for file slots ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
Jonas	1671bf3ef2	feat(Reference): Add public API endpoints to get references ... Calling the public API endpoints will check for matching registered reference providers that implement `IPublicReferenceProvider` and call their respective functions. If no matching provider is found, the default `LinkReferenceProvider` will be used to provide open graph data. The frontend reference widget components will call these endpoints from unauthorized sessions, e.g. in public shares. If present, the sharing token of the origin URL is passed to `resolveReferencePublic()` as additional information for the reference provider to determine the access scope. This allows the respective reference providers to determine whether the origin share has access to the linked resource. `getCacheKeyPublic` also gets the sharing token so it can scope the cached entry to it. Contributes to #45978 Signed-off-by: Jonas <jonas@freesources.org>	1 year ago
Julien CHATY-CAPELLE	2d84d0f5bf	fix(core): use OC namespace for core ReponseDefinitions instead of OCA ... Signed-off-by: Julien CHATY-CAPELLE <julien@chaty-capelle.fr>	1 year ago
Ferdinand Thiessen	a229723b8c	feat: Add new forbidden filename options to Capabilities ... Allow clients to access the new filename validation options and make frontend name validation possible. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Benjamin Gaussorgues	e5275dbada	feat: don't count failed CSRF as failed login attempt ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Marcel Klehr	224779c33f	fix(TaskProcessingApiController): Don't use + to merge non-assoc. arrays ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	2 years ago
provokateurin	f5ff8136ac	feat(TaskProcessingApi): Add endpoint for getting the next task ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Daniel Kesselberg	98eb190e04	test: add tests for ProfilePageController ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
provokateurin	c8e767878d	fix(core): Return X-NC-IsCustomAvatar for guest avatars too ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
skjnldsv	8bed23288b	fix(files_sharing): dark avatar support ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	2 years ago
skjnldsv	fb11672df6	fix(core): allow guest avatar fallback ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	2 years ago