nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Micke Nordin	41cc0a4ed6	chore(http-sig): Simplify implementation Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Micke Nordin	dae8a36460	fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin RFC 7517 §4.5 leaves the keyid structure unspecified, so the receiver must not parse it. The signer origin now comes from the trusted OCM share/sender identity; the JWK Set is resolved against that origin and the keyid is matched opaquely to the JWKS kid. Aligns with the OCM verification procedure and fixes the origin-mismatch / flaky-kid failures in the two-port integration rig. Reverts the per-request host-based kid back to a stable persisted kid, drops keyid->host parsing, threads a sender-origin parameter through verification, and resolves that origin in every OCM inbound entry point (notifications, shares, token exchange, OCM requests) and the federation rate limiter. Cavage is unchanged. Assisted-by: ClaudeCode:glm-5.2 Signed-off-by: Micke Nordin <kano@sunet.se>	2 weeks ago
Marcel Müller	291bb5376a	fix: Use PHP_AUTH_PW for strict password confirmation Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>	3 weeks ago
provokateurin	a3c39360b8	feat(Dispatcher): Warn about open transaction after controller method was executed Signed-off-by: provokateurin <kate@provokateurin.de>	1 month ago
Robin Appelman	a97fe9d2ae	feat: add rate limiting for creating federated shares for non-trusted servers Signed-off-by: Robin Appelman <robin@icewind.nl>	1 month ago
Josh	e42fb08c6c	docs(Request): add/update/cleanup internal implementation docs Signed-off-by: Josh <josh.t.richards@gmail.com>	2 months ago
Josh	0071a97f89	chore(RequestId): drop duplicate getId docblock from implementation Signed-off-by: Josh <josh.t.richards@gmail.com>	2 months ago
Josh	6bcc618a1e	docs(Request): update implementation docblock properties Signed-off-by: Josh <josh.t.richards@gmail.com>	2 months ago
Josh	f0f432c526	refactor(Request): drop docblocks already in IRequest Oh and slighly refactor getHeader() since this was tied to some other work that lead to this cleanup. Signed-off-by: Josh <josh.t.richards@gmail.com>	2 months ago
Côme Chilliet	1ab09ec753	chore: Apply new coding standard to all files The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines To see only the changes not related to blank lines. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 months ago
Ferdinand Thiessen	e0ba4d71b6	chore: add missing `Override` attribute to `OC` Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 months ago
Joas Schilling	7ed9191493	fix(controller): Add default range to $limit parameter Signed-off-by: Joas Schilling <coding@schilljs.com>	4 months ago
Philip Renich	7f3b9356ca	fix: treat all WebKit iOS browseres the same Signed-off-by: Philip Renich <hello@philiprenich.com>	5 months ago
Joas Schilling	5f80f26799	chore: Fix SPDX header Signed-off-by: Joas Schilling <coding@schilljs.com>	5 months ago
Anna Larch	cbe8e4d90f	fix: add fallback to raw path info Follow up to https://github.com/nextcloud/server/pull/56843 The raw path info method has no fallback for an empty array parameter Signed-off-by: Anna Larch <anna@nextcloud.com>	5 months ago
Carl Schwan	7b6078875b	refactor: Run rector on lib/private Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	7 months ago
Carl Schwan	f81475445d	refactor: Move hasAnnotationOrAttribute to MiddlewareUtils Signed-off-by: Carl Schwan <carlschwan@kde.org>	7 months ago
Carl Schwan	6408ed0b51	feat(AppFramework): Add missing NoSameSiteCookieRequired attribute Allow to replace the old annotation. Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	7 months ago
Carl Schwan	b040fb1c73	feat(AppFramework): Add missing NoTwoFactorRequired attribute It's in our documentation but was never implemented. Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	7 months ago
Côme Chilliet	cb80ec7ebb	feat(log): Add script name and occ command to log details This will help when troubleshooting issues. For web request we have method and url, but for cron and occ currently we have no way to know if it’s one or the other and which command. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	9 months ago
provokateurin	f720925b06	fix(AppFramework): Check for responder existence Signed-off-by: provokateurin <kate@provokateurin.de>	9 months ago
Carl Schwan	336cc3fa35	feat(Db): Use SnowflakeId for previews Allow to get an id for the storing the preview on disk before inserting the preview on the DB. Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>	10 months ago
Thomas Citharel	7bf8e9699c	fix(http): handle getHttpProtocol being unset in $_SERVER['SERVER_PROTOCOL'] if called from occ Due to the profiler app loading HttpDataCollector when running occ. Signed-off-by: Thomas Citharel <tcit@tcit.fr>	11 months ago
provokateurin	9473f47c0d	fix(Dispatcher): Catch TypeErrors and turn them into bad request responses Signed-off-by: provokateurin <kate@provokateurin.de>	12 months ago
provokateurin	aab11d35d3	fix(OCS): Add IRequest::getFormat to determine the response Content-Type the same way everywhere Signed-off-by: provokateurin <kate@provokateurin.de>	12 months ago
John Molakvoæ	4829ac57c1	fix: use `OCP\Server` Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>	1 year ago
Josh	14b4d0327e	fix(AppFramework): Log malformed protocol values and unify fallback behavior Signed-off-by: Josh <josh.t.richards@gmail.com>	1 year ago
Côme Chilliet	9913bdda90	chore: Cleanup DIContainer class Also removed deprecated tag from the class as this class will not be removed, only the interface IAppContainer and associated methods should be removed. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	79f4e0de76	fix: Only attempt to decode JSON input if it is not an empty string Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	e8bc35ec0a	fix(ocs): Return a proper error on JSON decoding failures Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	87f98c88ab	chore: Rename property and type it to match its current use in Request Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Josh	6951053c90	docs(dispatcher): Correct described return values Signed-off-by: Josh <josh.t.richards@gmail.com>	1 year ago
Joas Schilling	1909b981a4	fix(controller): Fix false booleans in multipart/form-data Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
provokateurin	dd0ed02b91	feat(Dispatcher): Add debug log for controller methods returning raw data not wrapped in Response Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
Ferdinand Thiessen	c82b17d0a3	fix: Support Safari mobile Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
provokateurin	9d1705259c	fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checks Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Côme Chilliet	672923f0a6	fix: Fix newly spotted psalm issues, add exhaustive typed magic properties for LDAP classes Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	ec5133b739	fix: Apply new coding standard to all files Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Julius Härtl	b8c5bff673	fix: Adjust user agent pattern for Edge Signed-off-by: Julius Härtl <jus@bitgrid.net>	2 years ago
Joas Schilling	696ed4a125	fix(CS): Fix coding style Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Joas Schilling	c4684089a8	fix(request): Fix regex handling and coding-style Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Mikael Peigney	ffcadf25d4	fix(request): Handle reverse proxy setting a port in Forwarded-For Signed-off-by: Mikael Peigney <Mika56@users.noreply.github.com>	3 years ago
Côme Chilliet	f73f966c98	chore: Add missing ArrayAccess template parameters Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Pavel Kryl	30ad530814	code style: ommited space, reverted [code review]	3 years ago
Pavel Kryl	446ecbc454	fixing bug #6914 : Config Param 'overwritecondaddr' not working - just ignoring/removing extra parameter 'protocol' as suggested by blizzz Signed-off-by: Pavel Kryl <pavel@kryl.eu>	3 years ago
Ferdinand Thiessen	7620d230df	fix(Request): Catch exceptions in `isTrustedProxy` The function fails if the configured trusted proxies contain invalid characters and the underlying IpUtils will throw. But as it is used by `getRemoteAddress` which is used by logging / templating, thrown errors are not reported but silently fail with error 500. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	3 years ago
Joas Schilling	f6b6776c93	fix(API): Use a distinct exception so apps can react to it and customize the return Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago

1 2 3 4

160 Commits (55e1270b94aa0f4ea003e2cbc87a8ea56bcae96d)