189 Commits (5084b58fd29dfd65372e8efdd22a7df615682d5a)

Author	SHA1	Message	Date
Joas Schilling	cd12e73710	fix: Handle 2fa enforcement earlier ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 weeks ago
Micke Nordin	db96073459	fix(auth): confine OCM access token to the masked share endpoint ... Gate the temporary-token bearer auth behind an allowOcmAccessToken flag that only the public, share-masked webdav endpoints set, and drop the BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now honored only on /public.php/webdav, where per-share masking applies. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se>	2 months ago
Enrique Pérez Arnaud	ac2f9816a6	feat(auth): support permanent OCM refresh tokens and bearer login ... Co-authored-by: Micke Nordin <kano@sunet.se> Signed-off-by: Micke Nordin <kano@sunet.se> Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>	2 months ago
Côme Chilliet	f7f9a47ceb	fix: Do not set last-password-confirm for apptoken sessions ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 months ago
Côme Chilliet	802bce0a77	fix: Use token expiration for ephemeral sessions ... This simplifies the code a lot. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 months ago
Côme Chilliet	1ab09ec753	chore: Apply new coding standard to all files ... The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines To see only the changes not related to blank lines. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 months ago
Ferdinand Thiessen	e0ba4d71b6	chore: add missing `Override` attribute to `OC` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 months ago
Carl Schwan	bb4c55c125	refactor: Move copy skeleton step to a file listener ... Instead of having all user providers call OC_Util::copySkeleton Signed-off-by: Carl Schwan <carlschwan@kde.org>	4 months ago
Côme Chilliet	725f5bea3f	fix: Reduce the mixups between apptokens and session ids ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 months ago
Git'Fellow	237f847a4d	fix(session): Update last seen when user session is validated ... Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	5 months ago
Carl Schwan	7b6078875b	refactor: Run rector on lib/private ... Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	7 months ago
Joas Schilling	8b4491ae1c	fix: Add translation for temporary app password names ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 months ago
Joas Schilling	f4acd8a7ab	fix: Adjust and add new tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 months ago
Joas Schilling	927bea2b4d	fix(psalm): Satisfy psalm ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 months ago
Joas Schilling	6b121c37da	feat: Allow to create one-time app passwords that only allow loading an app-password ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 months ago
Daniel Calviño Sánchez	4fcadd630b	fix: Throw specific LoginException when the user is disabled ... Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>	1 year ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	1 year ago
Samuel Bizien Filippi	a14cade3ac	feat(core): add cookie_domain config option ... Signed-off-by: Samuel Bizien Filippi <samuel.bizien-filippi@finances.gouv.fr>	1 year ago
Christoph Wurst	5003467f98	fix(session): Only mark sessions of permanent tokens as app passwords ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	1 year ago
Cleopatra Enjeck M.	32e46a8b3a	fix: use mb_strtolower to convert login name ... Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>	1 year ago
Cleopatra Enjeck M.	a6d6a1fa9e	fix: Improve string comparison ... Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>	1 year ago
Cleopatra Enjeck M.	6690a28cc0	fix: Use case insensitive check when validating login name ... Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>	1 year ago
dependabot[bot]	bb598c8451	chore(deps): Bump nextcloud/coding-standard in /vendor-bin/cs-fixer ... Bumps [nextcloud/coding-standard](https://github.com/nextcloud/coding-standard) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/nextcloud/coding-standard/releases) - [Changelog](https://github.com/nextcloud/coding-standard/blob/master/CHANGELOG.md) - [Commits](https://github.com/nextcloud/coding-standard/compare/v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: nextcloud/coding-standard dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Fabian Dreßler	1d6cce8a25	fix: update last_login timestamp for token based-logins ... fixes #31075 and maybe #32953 Signed-off-by: Fabian Dreßler <nudelsalat@clouz.de>	2 years ago
Arthur Schiwon	6a783d9b08	fix(Session): avoid race conditions on clustered setups ... - re-stablishes old behaviour with cache to return null instead of throwing an InvalidTokenException when the token is cached as non-existing - token invalidation and re-generation are bundled in a DB transaction now Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Christoph Wurst	bcc02a3c71	fix(auth): Update authtoken activity selectively ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	2 years ago
Christoph Wurst	21ee7f59bd	fix(session): Do not update authtoken last_check for passwordless ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	2 years ago
Côme Chilliet	ec5133b739	fix: Apply new coding standard to all files ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Julius Härtl	e330efe5a0	fix: Implement option to temporarily set the user session ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	2 years ago
Andrew Summers	0047789580	Refactor `OC\Server::getTwoFactorAuthManager` ... Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>	2 years ago
Vincent Petry	839ddaa354	feat: rename users to account or person ... Replace translated text in most locations Signed-off-by: Vincent Petry <vincent@nextcloud.com>	3 years ago
Côme Chilliet	b2e9e0fa0d	chore: Replace OC::$server->getL10N by OCP\Util::getL10N in lib and some apps ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Christoph Wurst	7f2fdd8843	fix(auth): Fix logging in with email, password and login name mismatch ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Git'Fellow	72e0618f20	fix(session): Avoid two useless authtoken DB queries for every anonymous request ... Co-Authored-By: Christoph Wurst <christoph@winzerhof-wurst.at> Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Côme Chilliet	eee9f1eec4	Always catch OCP versions of authentication exceptions ... And always throw OC versions for BC Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Julius Härtl	a3a343ce41	perf: Use more performant way to obtain and check the email as a login name with token login ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	3 years ago
Patrick Fischer	b2103556b5	Lower log level about invalid session token	3 years ago
Christoph Wurst	4f183bb604	fix(session): Log why session renewal failed ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	f398d0b5a3	fix: Log critical session renewal and logout paths ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	83a30dfbdf	fix(user): Log affected user of app token login name mismatch ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Andrew Summers	1470a7294b	Refactor `OC\Server::getCsrfTokenManager` ... Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>	3 years ago
Joas Schilling	25309bcb45	techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25 ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Joas Schilling	3962cd0aa8	fix!: Move getEventDispatcher usage to IEventDispatcher ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Faraz Samapoor	e7cc7653b8	Refactors "strpos" calls in lib/private to improve code readability. ... Signed-off-by: Faraz Samapoor <fsamapoor@gmail.com>	3 years ago
Joas Schilling	b91957e3df	fix(dav): Abort requests with 429 instead of waiting ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Côme Chilliet	426c0341ff	Use typed version of IConfig::getSystemValue as much as possible ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Daniel Kesselberg	f751d2d891	chore: use local variable for remote address ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	3 years ago
Roeland Jago Douma	77df92cabf	feat: add event for failed logins ... Apps might also like to know about failed logins. This adds that event. The private interface changes are backwards compatible so all should be fine. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	4 years ago