235 Commits (4f31b7b9cc2dac060194de2c769b149a2ac861ba)

Author	SHA1	Message	Date
Julius Härtl	299759b836	Handle throwables in the http dispatcher ... Co-authored-by: Arthur Schiwon <blizzz@arthur-schiwon.de> Signed-off-by: Julius Härtl <jus@bitgrid.net>	6 years ago
Roeland Jago Douma	3f12ec95f0	SessionMiddleware: declare session property ... * Remove request since we don't useit * Update tests as well Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	b8c5008acf	Add feature policy header ... This adds the events and the classes to modify the feature policy. It also adds a default restricted feature policy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	5d94590cee	Have the OCSBaseResponse call the parent constructor ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	37a4282c7a	Split up security middleware ... With upcoming work for the feature policy header. Splitting this in smaller classes that just do 1 thing makes sense. I rather have a few small classes that are tiny and do 1 thing right (and we all understand what is going on) than have big ones. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	357263a70b	Do not try to autoload built in types ... This avoids calls to the autoloader (or chain of autoloaders) to see if for example 'principalPrefix' class can be found. While we already know it is a string. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	b0c030cbb5	Check the actual status code for 204 and 304 ... The header is the full http header like: HTTP/1.1 304 Not Modified So comparing this to an int always yields false This also makes the 304 RFC compliant as the resulting content length should otherwise be the length of the message and not 0. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Christoph Wurst	22ae682823	Make it possible to show admin settings for sub admins ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Joas Schilling	471827cb31	Make sure all middlewares are only registered once ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	a3c9e5b11b	Add a message about disabled global routes ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	4e8b033281	Make sure urlParams are correctly injected in global routes ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	702dcfb728	Make names mandatory ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Roeland Jago Douma	60e5a5eca4	Do not do redirect handling when loggin out ... Fixes #12568 Since the clearing of the execution context causes another reload. We should not do the redirect_uri handling as this results in redirecting back to the logout page on login. This adds a simple middleware that will just check if the ClearExecutionContext session variable is set. If that is the case it will just redirect back to the login page. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	b68567e9ba	Add StandaloneTemplateResponse ... This can be used by pages that do not have the full Nextcloud UI. So notifications etc do not load there. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	d88604015a	No need to emit additonalscript event on public pages ... There already is a separate event for this. This will make it possible to only inject code with the logged in one on default rendered pages. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	d182037bce	Emit to load additionalscripts ... Fixes #13662 This will fire of an event after a Template Response has been returned. There is an event for the generic loading and one when logged in. So apps can chose to load only on loged in pages. This is a more generic approach than the files app event. As some things we might want to load on other pages as well besides the files app. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Joas Schilling	92edd40e51	Make RouteConfig strict ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	f8b74cf0a5	Allow resources via OCS as well ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
b108@volgograd	bf167ad3ac	Remove duplicate functionality ... This functionality implemented in the next line: $requestUri = preg_replace('%/{2,}%', '/', $requestUri);	7 years ago
Roeland Jago Douma	54ff913de6	Cleanup middleware registering ... Fixes #12224 Since we only use the middleware at 1 location it makes no sense to register them in each and every container. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	514426e27d	Only trust the X-FORWARDED-HOST header for trusted proxies ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	2452a3ec73	Properly query the methodreflector ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	0e5147f001	Fix tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	bfb5ef4b29	The identityproof manager should be in Server ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	8f833a309a	No need to register it also in the DI Container ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	fbd0d0bdcf	The Encryption manager belongs in Server.php ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	9c28d2d7c4	SearchResult should be difined in Server as it is a core component ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	964ebed86c	The UserSession is constructed in the server ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	b2501dbf9a	TimeFactory is already regsitsered in the Server Container ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	61adb513fe	Request is already regsitered in the Server container ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	421a40e7db	Was already registered in Server ... The DIContainaer will query server anyways if it can't find it Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	603b672a11	Update password confirmation middleware ... If the userbackend doesn't allow validating the password for a given uid then there is no need to perform this check. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Oliver Wegner	401ca28f07	Adding handling of CIDR notation to trusted_proxies for IPv4 ... Signed-off-by: Oliver Wegner <void1976@gmail.com>	7 years ago
Bjoern Schiessle	85d9f06cb8	add global site selector as user back-end which doesn't support password confirmation ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Daniel Kesselberg	986f4df2a5	Add REMOTE_ADDR to getHeader ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Joas Schilling	840dd4b39c	Allow to inject/mock `new \DateTime()` similar to time() ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Robin Appelman	dccbdc8c01	only catch QueryException when trying to build class ... Signed-off-by: Robin Appelman <robin@icewind.nl>	7 years ago
Roeland Jago Douma	9319d557a4	Add wrapper Logger in DIContainer ... This makes sure that for example app for the context is always set. We can in the future extend this to include more info. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Robin Appelman	c0a283fefb	ensure we always return an array from `Request::getParams` ... Signed-off-by: Robin Appelman <robin@icewind.nl>	7 years ago
Roeland Jago Douma	8c1e75e052	Do not use file as template parameter ... Using file will overwrite the $file parameter in the template base. Leading to trying to include a file that is the exception message. Which will of course fail. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	e7338173e8	Add PublicShareMiddlewareTest ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	20e514690c	Don't allow public share pages if link sharing is disabled ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	366981fba6	Move public preview endpoint over ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	f36ef8ca80	Add the new PublicShareController and PublicShareMiddleware ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Joas Schilling	b4bacf46f3	Do not send a body for "No content", "Not modified" and others ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Joas Schilling	f5b143e318	Allow to inject ISearchResult ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Arthur Schiwon	38a90130ce	move log constants to ILogger ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Roeland Jago Douma	129a608ebe	OCP\AppFramework\App strict ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	3ad7daeda5	Add tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	340e8ef16c	Make SecurityMiddleware strict ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago