nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Julius Härtl	d21ded67a7	Keep list of icons in a separate file for use in the accessibility app Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Patrick Conrad	1806baaeaf	Remove cookies from Clear-Site-Data Header In `2f87fb6b45` this header was introduced. The referenced documentation says: > When delivered with a response from https://example.com/clear, the following header will cause cookies associated with the origin https://example.com to be cleared, as well as cookies on any origin in the same registered domain (e.g. https://www.example.com/ and https://more.subdomains.example.com/). This also applies if `https://nextcloud.example.com/` sends the `Clear-Site-Data: "cookies"` header. This is not the behavior we want at this point! So I removed the deletion of cookies from the header. This has no effect on the logout process as this header is supported only recently and the logout works in old browsers as well. Signed-off-by: Patrick Conrad <conrad@iza.org>	7 years ago
Roeland Jago Douma	78273cb1e6	Add an endppoint for clients to request an app password Now that we allow enforcing 2 factor auth it make sense if we also allow and endpoint where the clients can in the background fetch an apppassword if they were configured before the login flow was present. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Michael Weimann	a45ec3d324	Refactors the scss svg functions Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Morris Jobke	cf3f4888cc	Change password expiration time from 12h to 7d We use the same logic for creating accounts without a password and there the 12h is a bit short. Users don't expect that the signup link needs to be clicked within 12h - 7d should be a more expected behavior. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Daniel Kesselberg	031fdfb1fc	Enable password reset for user with same email address when only one is active When two or more user share the same email address its not possible to reset password by email. Even when only one account is active. This pr reduce list of users returned by getByEmail by disabled users. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Bjoern Schiessle	3c5fb2b52b	update unit tests Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Christoph Wurst	c6e47e8a51	Fix login redirection if only one 2FA provider is active Fixes https://github.com/nextcloud/server/issues/10500. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Joas Schilling	38fffffe18	Fix unit test Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Julius Härtl	4c773891d7	Fix app navigation controller to return an array This is required to not break compatibility with existing consumers of that endpoint like the apps management or the client Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Michael Weimann	de7606dc68	Adds disabled user unit tests Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	8 years ago
Robin Appelman	8ed50d4b63	prefill userid for login after password reset Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Christoph Wurst	13d93f5b25	Make 2FA providers stateful This adds persistence to the Nextcloud server 2FA logic so that the server knows which 2FA providers are enabled for a specific user at any time, even when the provider is not available. The `IStatefulProvider` interface was added as tagging interface for providers that are compatible with this new API. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
John Molakvoæ (skjnldsv)	156da29cea	Avatar imagick bump Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
John Molakvoæ (skjnldsv)	eea6f74ca4	Controller tests fixes Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Roeland Jago Douma	362e6b2903	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	2b7d4d5069	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	796b4f19f8	Add Cache-control: immutable Cache generated CSS forever! Also cache combined JS forever Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Christoph Wurst	b9720703e8	Add CSRF token controller to retrieve the current CSRF token Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Julius Härtl	16ac8eaac9	Fix tests Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	11b6cc3f68	Replace logout href to avoid new etag on every request Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	723b8764d1	Add ETag to NavigationController Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Morris Jobke	bcf1668cc8	Remove config from AutoCompleteController Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Julius Härtl	5a23b35ddb	Also rewrite icon url Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	922cf44c81	Move to OCS endpoint Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	8ecac56543	Allow requesting absolute URLs They might be useful when requesting the navigation from the clients Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	6211d18dc1	Add tests for NavigationController Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Morris Jobke	4ef302c0be	Request->getHeader() should always return a string PHPDoc (of the public API) says that this method returns string but it also returns null, which is not allowed in some method calls. This fixes that behaviour and returns an empty string and fixes all code paths that explicitly checked for null to be still compliant. Found while enabling the strict_typing for lib/private for the PHP7+ migration. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Roeland Jago Douma	b1d8084700	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Joas Schilling	7789fbdea6	Add unit test Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Roeland Jago Douma	8d1dd1945f	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Julius Härtl	f5f6ed664d	Hide stay logged in checkbox when flow authentication is used Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Bjoern Schiessle	555fe7047f	fix tests Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	8 years ago
Roeland Jago Douma	8e8fe6b8eb	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Arthur Schiwon	96bc03a03a	don't create sorter instances when none was requested Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Mario Danic	c2cd5fc5d3	Fix flow Signed-off-by: Mario Danic <mario@lovelyhq.com>	8 years ago
Julius Härtl	cd1bfea8c4	Theming: theme flow redirection page Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Arthur Schiwon	25aad121e6	meanwhile we can have exact matches. also show those. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	fa2f03979b	add search parameter to autocomplete controller Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Morris Jobke	43e498844e	Use ::class in test mocks Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Arthur Schiwon	fd6daf8d19	AutoCompletion backend * introduce a Controller for requests * introduce result sorting mechanism * extend Comments to retrieve commentors (actors) in a tree * add commenters sorter * add share recipients sorter Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Joas Schilling	3119fd41ce	Set the data from the template Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Morris Jobke	444779ce96	Fix tests Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0326c2c54f	Fix broken tests Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Joas Schilling	0aff1c9268	Return the user id in case of an error Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Joas Schilling	d5c6d56170	No password reset for disabled users Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Lukas Reschke	a04feff9a7	Properly allow \OCP\Authentication\IApacheBackend to specify logout URL Any `\OCP\Authentication\IApacheBackend` previously had to implement `getLogoutAttribute` which returns a string. This string is directly injected into the logout `<a>` tag, so returning something like `href="foo"` would result in `<a href="foo">`. This is rather error prone and also in Nextcloud 12 broken as the logout entry has been moved with `054e161eb5` inside the navigation manager where one cannot simply inject attributes. Thus this feature is broken in Nextcloud 12 which effectively leads to the bug described at nextcloud/user_saml#112, people cannot logout anymore when using SAML using SLO. Basically in case of SAML you have a SLO url which redirects you to the IdP and properly logs you out there as well. Instead of monkey patching the Navigation manager I decided to instead change `\OCP\Authentication\IApacheBackend` to use `\OCP\Authentication\IApacheBackend::getLogoutUrl` instead where it can return a string with the appropriate logout URL. Since this functionality is only prominently used in the SAML plugin. Any custom app would need a small change but I'm not aware of any and there's simply no way to fix this properly otherwise. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	8 years ago
Roeland Jago Douma	ba7cf03daf	Fix LostControllerTest Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Roeland Jago Douma	3bd104ef7c	Fix LoginController Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Roeland Jago Douma	2fae696d35	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago

1 2 3 4

155 Commits (674930da7ff0a9bc82425caaf877efe6bae3bbde)