64 Commits (5cd1880daa048a685da689c7f41a2e50486494de)

Author	SHA1	Message	Date
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Lukas Reschke	ba4f12baa0	Implement brute force protection ... Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login)	10 years ago
Joas Schilling	2c988ecbf4	Use the themed Defaults everywhere	10 years ago
Morris Jobke	2791b8f00d	Revert "occ web executor (#24957)" ... This reverts commit 854352d9a0.	10 years ago
VicDeo	854352d9a0	occ web executor (#24957) ... * Initial web executor * Fix PHPDoc Fix broken integration test OccControllerTests do not require database access - moch them all! Kill unused sprintf	10 years ago
blizzz	51fd2602a7	Revert "Downstream 2016-06-08"	10 years ago
Christoph Wurst	60e15e934c	do not generate device token if 2FA is enable for user	10 years ago
Christoph Wurst	8f7a4aaa4d	do not generate device token if 2FA is enable for user	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Christoph Wurst	dfb4d426c2	Add two factor auth to core	10 years ago
Christoph Wurst	53636c73d6	Add controller to generate client tokens	10 years ago
Christoph Wurst	d8cde414bd	token based auth ... * Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token	10 years ago
Lukas Reschke	8222ad5157	Move logout to controller ... Testable code. Yay.	10 years ago
Lukas Reschke	331e4efacb	Move login form into controller ... First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.	10 years ago
Lukas Reschke	433c0160b6	Move OC\Core and OC\Settings to composer autoloader	10 years ago
Morris Jobke	d6a63016ae	move lost controller to core/controller ... * lostpassword.css is unneeded since #11696 is merged - 1b50d4f7ce * js is already in core/js * css is moved to core/css/lostpassword * template is moved to core/templates/lostpassword	10 years ago
Morris Jobke	c2a1a02fe4	move user controller to core/controller	10 years ago
Morris Jobke	b97fe97875	move avatar controller to core/controller	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Lukas Reschke	abdbf10ebc	Do not print exception message ... In case of an error the error message often contains sensitive data such as the full path which potentially leads to a full path disclosure. Thus the error message should not directly get displayed to the user and instead be logged.	10 years ago
Lukas Reschke	db4cb1dd4d	Expire token after 12h and if user logged-in again ... As an hardening measure we should expire password reset tokens after 12h and if the user has logged-in again successfully after the token was requested.	11 years ago
Roeland Jago Douma	65cf4028cc	Move avatarcontroller towards Node Api	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Thomas Müller	00338f9dca	Removing files_encryption left overs	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Lukas Reschke	283476a2f7	Use new IMailer and add unit-tests for lostcontroller	11 years ago
Roeland Jago Douma	1a0f9c375b	Avatar controller moved to AppFrameWork ... * Original avatarcontroller migrated to the appframework * Added DataDisplayResponse that show data inline in the browser (used to retrun the image) * Removed some unneeded code * Added unit tests for the avatarcontroller	11 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	11 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	11 years ago
Lukas Reschke	1b50d4f7ce	Warn for password reset when files_encryption is enabled ... This patch wil warn the user of the consequences when resetting the password and requires checking a checkbox (as we had in the past) to reset a password. Furthermore I updated the code to use our new classes and added some unit tests for it 👯 Fixes https://github.com/owncloud/core/issues/11438	11 years ago
Lukas Reschke	f33312f767	Use AppFramework instead of custom controller	12 years ago
Bernhard Posselt	a6e45a8d0e	use more stuff from core :)	12 years ago
Victor Dubiniuk	4b359ad20c	Change routes. Update templates	12 years ago
Victor Dubiniuk	218d0add36	Changes according to review	12 years ago