nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Robin Appelman	55e1270b94	refactor: use Share for most SharingManager parameters instead of just the id Signed-off-by: Robin Appelman <robin@icewind.nl> # Conflicts: # tests/lib/Sharing/AbstractSharingManagerTests.php # Conflicts: # apps/sharing/tests/Controller/ApiV1ControllerTest.php # tests/lib/Sharing/AbstractSharingManagerTests.php	1 week ago
Carl Schwan	79207f76cc	refactor(commands): Remove IQuestionHelper Instead use ask methods from IInput Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	f05bea3324	feat(console): Expose more methods from SymfonyStyle Allow to ask questions and display a progress bar. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	4f0094b66c	feat(console): Add support for optional options Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	e1aaf93e78	feat(commands): Provide way to handle signals Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	3b290997a2	feat(console): Expose output format Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	8b29e32924	feat(console): Add Verbosity enum Allow to change output depending on the verbosity set by the user. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	cca2ebeaed	feat(api): Extend a bit IInput and IOutput Make sure it is somewhat feature complete with the API used in Base. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	8425628979	feat(console): Provide a modern API in OCP for commands The API is inspired by modern command registration in Symfony/Console. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Côme Chilliet	376a64c4ae	fix: PHP_INT_SIZE is 8 on 64bits, not 4 The ternary was reversed because of this typo. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 week ago
Côme Chilliet	3728c88521	fix(32bits): Store timestamp in ms in a string to avoid int overflow Same strategy as for snowflake ids. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 week ago
Carl Schwan	95b69fd11b	refactor(schema): Reduce the API surface Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	81639134cb	feat: Remove IColumn::getOptions Prefer the fully typed methods instead and there is always the __call magic method as fallback for apps. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	37b79ccacb	fix: Mark interfaces as Consumable Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	9dad62c6eb	fix(db): Adapt migrations to new OCP\DB\Schema Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Carl Schwan	a2b8ec1a4c	feat(api): Add public OCP api for DB schema management Same as the DBAL one aside that Column::getType returns a string instead of a DBAL Type. Column::setType support both a DBAL Type and a string. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	1 week ago
Côme Chilliet	e9866ef5e7	chore: Suppress psalm false-positives Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Côme Chilliet	66fed88006	fix: Revert using setValueBool in User class Too many code relies on the value being stored as a true/false string. setValueBool currently stores 1/0 and breaks things. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Côme Chilliet	7f4e722c6b	feat: Use a class to materialize user config entries Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Côme Chilliet	2f94bc4d9d	chore: Use IUserConfig in User class Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Côme Chilliet	4e34261967	chore: merge valueDetails into fastCache and lazyCache to avoid out-of-sync issues It feels like a UserConfigEntry class would make sense instead of the currently used array to represent an entry. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Côme Chilliet	4967f7bf48	fix: Use a CappedMemoryCache for UserConfig to avoid memory exhaustion When moving user preferences from AllConfig to UserConfig, the CappedMemoryCache became an array, which means memory can be filled with user preferences if you loop on all users and check a preference on them. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Nextcloud bot	5ef39f854a	fix(l10n): Update translations from Transifex Signed-off-by: Nextcloud bot <bot@nextcloud.com>	2 weeks ago
Michel Le Bihan	25afab8968	feat(webauthn): Skip 2FA for user verified logins A WebAuthn login with user verification is already a second factor, so do not ask for an additional 2FA challenge Signed-off-by: Michel Le Bihan <michel@lebihan.pl>	2 weeks ago
nextcloud-command	641c4b8c0d	refactor: Apply rector changes Signed-off-by: GitHub <noreply@github.com>	2 weeks ago
Micke Nordin	41cc0a4ed6	chore(http-sig): Simplify implementation Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	f0edd14c3a	chore(cloud_federation_api): move jwks Move from .well-known/jwks.json to the TokenController Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	dae8a36460	fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin RFC 7517 §4.5 leaves the keyid structure unspecified, so the receiver must not parse it. The signer origin now comes from the trusted OCM share/sender identity; the JWK Set is resolved against that origin and the keyid is matched opaquely to the JWKS kid. Aligns with the OCM verification procedure and fixes the origin-mismatch / flaky-kid failures in the two-port integration rig. Reverts the per-request host-based kid back to a stable persisted kid, drops keyid->host parsing, threads a sender-origin parameter through verification, and resolves that origin in every OCM inbound entry point (notifications, shares, token exchange, OCM requests) and the federation rate limiter. Cavage is unchanged. Assisted-by: ClaudeCode:glm-5.2 Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	2abd52caaa	fix(ocm): derive JWKS signing keyId per request, not from a frozen host The JWKS signing keyId was persisted as a full URL, frozen at whichever host provisioned the key first. An instance addressed by more than one host (the two-port integration rig, or a port change behind a proxy) then signed with a keyId whose host no longer matched its federated share identity, so receivers rejected the request with an origin mismatch. Persist only a stable opaque key id (ecdsa-p256-sha256-<n>) and rebuild the full keyId per request from the current URL, in both the signing signatory and the published JWK Set. The signature keyid and the JWKS kid still match, since both are built from the same opaque id and the current request host. Rotation still works: slots differ by the counter, and the host is just fresh context. Drops the resolveKidBase/canonicalKid hostname machinery and the ocm_jwks_kid_base appconfig, which are no longer needed. Assisted-by: ClaudeCode:glm-5.2 Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	f602a7aff8	fix(ocm): allow plain-http jwksUri for http-only peers The spec mandates https for jwksUri but allows an HTTP fallback in testing setups. Advertise the scheme the instance actually serves, and accept an http jwksUri only from a peer whose own endpoint is http: integration tests and http intranets work without configuration, while an https peer advertising an http jwksUri is still rejected, since that downgrade would let a path attacker swap the key material. An https jwksUri is always accepted, also from http-only peers, and it may live on a different host than the peer. Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	5c0c6fd643	fix(ocm): correct confirmRequestOrigin @since to 35.0.0 The annotation was added as 34.0.0 in #60136, but stable34 branched before the PR merged, so the API first ships in 35. Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	410d8c144b	feat(ocm): align RFC 9421 http-sig with updated OCM spec Implements the changes from cs3org/OCM-API#391 and closes the remaining gaps with the HTTP Message Signatures section: - discover peer JWK Sets via the new `jwksUri` discovery field instead of the fixed /.well-known/jwks.json path; advertise our own jwksUri and require it (https) from peers advertising the `http-sig` capability - stop covering the Date header; freshness is anchored on the `created` signature parameter - mark and select the OCM signature by its integrity-protected tag="ocm" parameter instead of the dictionary label - require the JWK `alg` parameter and derive the signature algorithm from it, accepting fully-specified RFC 9864 names - reject signed requests whose verification key cannot be resolved instead of treating them as unsigned - derive the signer origin from the spec-canonical fqdn#id keyid form Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Robin Appelman	4b8139a71c	fix: use an event to handle sharing backends setting default values on existing shares Signed-off-by: Robin Appelman <robin@icewind.nl>	2 weeks ago
Robin Appelman	03c110c772	feat: keep a classname mapping instead of always storing the full name Signed-off-by: Robin Appelman <robin@icewind.nl> # Conflicts: # lib/private/Sharing/SharingBackend.php # lib/private/Sharing/SharingManager.php	2 weeks ago
Maxence Lange	8ef3951fa9	fix(lookup-server): accept self-signed lus on globalscale Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 weeks ago
Robin Appelman	8b274e5b63	chore: cleanup getting time for formatting logs Signed-off-by: Robin Appelman <robin@icewind.nl>	2 weeks ago
Robin Appelman	5964aa55f7	refactor: use DateTimeImmutable in unified sharing api instead of timestamp Signed-off-by: Robin Appelman <robin@icewind.nl> # Conflicts: # apps/files/tests/Sharing/Source/NodeShareSourceTypeTest.php	2 weeks ago
Robin Appelman	6be6d9e695	perf: fetch share source metadata in bulk Signed-off-by: Robin Appelman <robin@icewind.nl>	2 weeks ago
Robin Appelman	995ac974dc	fix: improve type hinting for unified share listing methods Signed-off-by: Robin Appelman <robin@icewind.nl>	2 weeks ago
Robin Appelman	426142d427	refactor: use IUser for IShareSourceType::getSourceInteractionResource instead of user id string Signed-off-by: Robin Appelman <robin@icewind.nl>	2 weeks ago
David Dreschner	f1838ab811	fix(CalDAV): Check for user status before serving public calendars Signed-off-by: David Dreschner <david.dreschner@nextcloud.com>	2 weeks ago
Côme Chilliet	7d5011c272	chore: Apply rector strict config again Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 weeks ago
Joas Schilling	cd12e73710	fix: Handle 2fa enforcement earlier Signed-off-by: Joas Schilling <coding@schilljs.com>	2 weeks ago
Nextcloud bot	6666934177	fix(l10n): Update translations from Transifex Signed-off-by: Nextcloud bot <bot@nextcloud.com>	2 weeks ago
Robin Appelman	04bd425859	refactor: introduce a separate class for holding share source metadata Signed-off-by: Robin Appelman <robin@icewind.nl>	2 weeks ago
Carl Schwan	e26ef4bd7c	chore: Bump symfony/console Signed-off-by: Carl Schwan <carl@carlschwan.eu>	2 weeks ago
Misha M.-Kupriyanov	0cd4ece504	fix(console): write app command loading errors to stderr When an app fails to load its commands from info.xml, the error was written to stdout, while every other diagnostic in loadCommands() uses $output->getErrorOutput(). The command itself then runs normally and exits 0, so the message silently corrupts machine-readable output: $ ./occ app:list --output=json Connection refused {"enabled":{...},"disabled":{...}} $ echo $? 0 Anything piping `occ <cmd> --output=json` into a JSON parser breaks, with no non-zero exit code to detect it by. Observed with notify_push on a setup that has the phpredis extension loaded but no Redis configured: RedisFactory::isAvailable() only checks whether the extension is loaded, so constructing the app's console commands ends up calling pconnect() and throws RedisException. --no-warnings is not a workaround for this, as it sets VERBOSITY_QUIET and suppresses the payload too. Route the message to the error output instead. It is still reported via logger->error() exactly as before. Assisted-by: ClaudeCode:claude-opus-5 Signed-off-by: Misha M.-Kupriyanov <kupriyanov@strato.de>	2 weeks ago
Kent Delante	f16976d2b7	fix(trashbin): properly show deleted by for federated shares Signed-off-by: Kent Delante <kent@delante.me> Assisted-by: ClaudeCode:claude-sonnet-5 When a remote user deletes a file in a federated share, the deleted by column in trashbin shows "Unknown" instead of the remote user. This fixes it so that it properly shows the remote user under the deleted by column.	2 weeks ago
Ferdinand Thiessen	38c4b384ce	fix(setup): de-duplicate host parsing allowing IPv6 connections The de-duplicates the connection params parsing, previously it used `explode` to get host + port but this fails for IPv6 like `[::1]:80`. But a proper parsing is already available in the `ConnectionFactory`, so adjusted the code to reuse that. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 weeks ago
Kent Delante	a596910505	feat(files_sharing): fetch remote avatars for external shares Signed-off-by: Kent Delante <kent@delante.me> Assisted-by: ClaudeCode:claude-sonnet-5	2 weeks ago

1 2 3 4 5 ...

27797 Commits (55e1270b94aa0f4ea003e2cbc87a8ea56bcae96d)