nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Joas Schilling	eecd9323c5	Also check the access to collections on preparing Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	59c92a7513	Further work on the access cache Searching for all is still a problem Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	dee6f7f61f	Fix doc blocks Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Julius Härtl	e404ce7096	Implement search and rename in backend Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Julius Härtl	53ac9bdda1	Implement frontend for search/rename Signed-off-by: Julius Härtl <jus@bitgrid.net> Move to vuex Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Julius Härtl	88aa3de784	Add iconClass to resources Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Julius Härtl	555afff015	Make sure we query the node before fetching the name Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Julius Härtl	a72a6d73a3	Adjust parameter names on createCollectionOnResource Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Joas Schilling	702dcfb728	Make names mandatory Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	5dfc56e925	Allow to create collections Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	136d2c39ac	Provider functionality Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	65a9ab47ea	Add a controller with the most important methods Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Joas Schilling	55f627d20b	Add an event to the Autocomplete Controller to allow to filter the results Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Morris Jobke	5cbe6532a0	Fix typo in info log for autoconfig Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Roeland Jago Douma	e819e97829	Login flow V2 This adds the new login flow. The desktop client will open up a browser and poll a returned endpoint at regular intervals to check if the flow is done. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Daniel Kesselberg	c583c5e7e2	Emit event if app password created Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	149a98edf6	Publish activity for app token created by client login flow Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	2ade2bef8c	Publish activity for app token created by ocs api Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Michael Weimann	bf1253cb49	Implement guest avatar endpoint Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Roeland Jago Douma	60e5a5eca4	Do not do redirect handling when loggin out Fixes #12568 Since the clearing of the execution context causes another reload. We should not do the redirect_uri handling as this results in redirecting back to the logout page on login. This adds a simple middleware that will just check if the ClearExecutionContext session variable is set. If that is the case it will just redirect back to the login page. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	b68567e9ba	Add StandaloneTemplateResponse This can be used by pages that do not have the full Nextcloud UI. So notifications etc do not load there. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	ac8a6e2244	Clean pending 2FA authentication on password reset When a password is reste we should make sure that all users are properly logged in. Pending states should be cleared. For example a session where the 2FA code is not entered yet should be cleared. The token is now removed so the session will be killed the next time this is checked (within 5 minutes). Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Michael Weimann	e083e8abc6	Clears the local storage after logout Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Roeland Jago Douma	e6333c8fe3	Honor remember_login_cookie_lifetime If the remember_login_cookie_lifetime is set to 0 this means we do not want to use remember me at all. In that case we should also not creatae a remember me cookie and should create a proper temp token. Further this specifies that is not 0 the remember me time should always be larger than the session timeout. Because else the behavior is not really defined. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	66367797df	Fix template paramter Else we get shown an error page instead of the correct 403. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	d0397f9b53	Generic message on password reset There is no need to inform the user if the account existed or not. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Christoph Wurst	208788173d	Npmize (vendor) scripts Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Roeland Jago Douma	e6ac233947	Fix loginflow with apptoken enter on iOS It seems iOS doesn't like us to change the location. So now we submit it to the server that geneartes the redirect. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	763b52d402	Fix SAML Client login flow on Apple devices Because the redirect from the SAML/SSO endpoint is a POST the lax/strict cookies are not properly send. Note that it is not strictly requried on this endpoint as we do not need the remember me data. Only the real session info is enough. The endpoint is also already protected by a state token. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
John Molakvoæ (skjnldsv)	5e4990fadd	Remove redirect page Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	7 years ago
Roeland Jago Douma	43d6ae7476	Respect the disabled setting for lost_password_link Fixes #11146 As documented when it is set to disabled the user can't request a lost password. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	92582a350d	Use the proper server for the apptoken flow login If a user can't authenticate normally (because they have 2FA that is not available on their devices for example). The redirect that is generated should be of the proper format. This means 1. Include the protocol 2. Include the possible subfolder Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Rayn0r	85eb43baff	added possibility to disable autocomplete in login form Signed-off-by: Rayn0r <Andre.Weidemann@web.de>	7 years ago
Julius Härtl	d21ded67a7	Keep list of icons in a separate file for use in the accessibility app Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Thomas Citharel	d63de5471b	Don't require Same Site Cookies on assets Which can be used for public iframe embeeding See https://github.com/nextcloud/calendar/issues/169 Signed-off-by: Thomas Citharel <tcit@tcit.fr>	7 years ago
Patrick Conrad	1806baaeaf	Remove cookies from Clear-Site-Data Header In `2f87fb6b45` this header was introduced. The referenced documentation says: > When delivered with a response from https://example.com/clear, the following header will cause cookies associated with the origin https://example.com to be cleared, as well as cookies on any origin in the same registered domain (e.g. https://www.example.com/ and https://more.subdomains.example.com/). This also applies if `https://nextcloud.example.com/` sends the `Clear-Site-Data: "cookies"` header. This is not the behavior we want at this point! So I removed the deletion of cookies from the header. This has no effect on the logout process as this header is supported only recently and the logout works in old browsers as well. Signed-off-by: Patrick Conrad <conrad@iza.org>	7 years ago
Roeland Jago Douma	78273cb1e6	Add an endppoint for clients to request an app password Now that we allow enforcing 2 factor auth it make sense if we also allow and endpoint where the clients can in the background fetch an apppassword if they were configured before the login flow was present. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	d9febae5b2	Update all the publickey tokens if needed on web login * On weblogin check if we have invalid public key tokens * If so update them all with the new token This ensures that your marked as invalid tokens work again if you once login on the web. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Michael Weimann	a45ec3d324	Refactors the scss svg functions Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Michael Weimann	d855c38e07	Moves the logo files to logo Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Roeland Jago Douma	be2d8cc4e9	Do not invalidate main token on OAuth Fixes #10584 We deleted the main token when using the login flow else mutliple tokens would show up for a single user. However in the case of OAuth this is perfectly fine as the authentication happens really in your browser: 1. You are already logged in, no need to log you out 2. You are not logged in yet, but since you log in into the exact same browser the expected behavior is to stay logged in. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	cf3f4888cc	Change password expiration time from 12h to 7d We use the same logic for creating accounts without a password and there the 12h is a bit short. Users don't expect that the signup link needs to be clicked within 12h - 7d should be a more expected behavior. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Daniel Kesselberg	031fdfb1fc	Enable password reset for user with same email address when only one is active When two or more user share the same email address its not possible to reset password by email. Even when only one account is active. This pr reduce list of users returned by getByEmail by disabled users. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Bjoern Schiessle	dfec66ca02	only warn about data lose on password reset if per-user keys are used Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Christoph Wurst	42300d19e9	Fix max length requirements for the throttler metadata If a failed login is logged, we save the username as metadata in the bruteforce throttler. To prevent database error due to very long strings, this truncates the username at 64 bytes in the assumption that no real username is longer than that.long strings, Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Christoph Wurst	d8197f2b97	Rename providerset method to get primary providers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Christoph Wurst	c6e47e8a51	Fix login redirection if only one 2FA provider is active Fixes https://github.com/nextcloud/server/issues/10500. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Joas Schilling	decd196162	Make the info available if the avatar was uploaded or generated Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Julius Härtl	4c773891d7	Fix app navigation controller to return an array This is required to not break compatibility with existing consumers of that endpoint like the apps management or the client Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Joas Schilling	12efde520d	Allow to access SVGs as guest Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago

1 2 3 4 5 ...

331 Commits (5eae69bd2d73bc3ec6b60e2c1eaecb70faa019cc)