90 Commits (a2572ffec79f7bd2fa7aa29ed48d9b011836759d)

Author	SHA1	Message	Date
Lukas Reschke	14f932f3c7	Add DAV authenticated also to other scopes ... Fixes https://github.com/owncloud/core/issues/22893	10 years ago
Lukas Reschke	c353d51810	Remove Scrutinizer Auto Fixer	10 years ago
Lukas Reschke	933f60e314	Update author information ... Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	10 years ago
Scrutinizer Auto-Fixer	08f0dc9067	Scrutinizer Auto-Fixes ... This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com	10 years ago
Lukas Reschke	12b22c2759	Regenerate CSRF token upon login ... Otherwise somebody else might be able to note down the CSRF token before login on a shared computer.	10 years ago
Lukas Reschke	a977465af5	Add new CSRF manager for unit testing purposes ... This adds a new CSRF manager for unit testing purposes, it's interface is based upon https://github.com/symfony/security-csrf. Due to some of our required custom changes it is however not possible to use the Symfony component directly.	10 years ago
Jörn Friedrich Dreyer	64043e9bcc	move methods to correct interface, deprecate private interface	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Roeland Jago Douma	876fb83ddc	getMediumStrengthGenerator is deprecated and does not do anything anymore	10 years ago
Lukas Reschke	fec41e7539	Move regeneration of session ID into session classes ... There were code paths that nowadays call ISession::login directly thus bypassing the desired regeneration of the session ID. This moves the session regeneration deeper into the session handling and thus ensures that it is always called. Furthermore, I also added the session regeneration to the remember me cookie plus added some test case expectations for this.	10 years ago
Roeland Jago Douma	6fb60815c5	Use SystemConfig internally	10 years ago
Roeland Jago Douma	82bf99c0cf	Get rid of legacy OC_Config ... We were still using the lecagy class OC_Config all over the place. Which was a wrapper around the new class OC\Config	10 years ago
Roeland Jago Douma	1f715289bf	Removed deprecated function OC_User::deleteUser ... Replaced with proper OCP calls	10 years ago
Roeland Jago Douma	9201b9713e	Removed unused deprecated methods	10 years ago
Roeland Jago Douma	835911bce5	Removed deprecated private OC_User::createUser ... All function calls are replaced with the recommended (which was already the body of the function).	10 years ago
Roeland Jago Douma	7e44ea5da0	Remove deprecated function OC_User::getManager ... Private deprecated function => removed Replaced all instances with suggested replacement	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Lukas Reschke	f6e055b2fd	Add remark that $run is not supported anymore ... Fixes https://github.com/owncloud/core/issues/16908	10 years ago
Lukas Reschke	36ce254ffd	Move dummy backend to Tests namespace	10 years ago
Thomas Müller	0f2865abb2	Repeated calls to loginWithApache() should not not try to set user information in the session again	10 years ago
Morris Jobke	5a5c59639b	Escape ampersand in logout URL ... * fixes #17757	11 years ago
Thomas Müller	d3ac73c0c9	Remove OC_Log	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Lukas Reschke	694d639f94	Fix PHPDoc 🙈 ... *sigh*	11 years ago
Robin Appelman	077d41a9ce	wait with copying the skeleton untill login and setupfs are done	11 years ago
Joas Schilling	71de1d58cd	Fix namespace duplication and other issues in repairlegacystorages	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	11 years ago
Thomas Müller	1fd1b355e4	Fix namespace of OC_Setup -> \OC\Setup	11 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	11 years ago
Robin Appelman	434835b326	also set user in UserSession when doing OC_User::setUserId	11 years ago
Lukas Reschke	025110821f	URLEncode logout attribute ... Otherwise logout can fail if the requesttoken contains a +	11 years ago
Lukas Reschke	476579b9c6	Fix WebDAV auth for session authentication only ... \Sabre\DAV\Auth\Backend\AbstractBasic::authenticate was only calling \OC_Connector_Sabre_Auth::validateUserPass when the response of \Sabre\HTTP\BasicAuth::getUserPass was not null. However, there is a case where the value can be null and the user could be authenticated anyways: The authentication via ownCloud web-interface and then accessing WebDAV resources. This was not possible anymore with this patch because it never reached the code path in this scenario. This patchs allows authenticating with a session without isDavAuthenticated value stored (this is for ugly WebDAV clients that send the cookie in any case) and thus the functionality should work again. To test this go to the admin settings and test if the WebDAV check works fine. Furthermore all the usual stuff (WebDAV / Shibboleth / etc...) needs testing as well.	11 years ago
Lukas Reschke	e3230b5bc2	Add ultra-slim hack for incognito mode ... As discussed at https://github.com/owncloud/core/pull/12912#issuecomment-67391155	11 years ago
Lukas Reschke	b91a435ed4	Move basic auth login out of `isLoggedIn` ... Potentially fixes https://github.com/owncloud/core/issues/12915 and opens the door for potential other bugs... Please test very carefully, this includes: - Testing from OCS via cURL (as in #12915) - Testing from OCS via browser (Open the "Von Dir geteilt" shares overview) - WebDAV - CalDAV - CardDAV	11 years ago
Lukas Reschke	f6820406b6	Move the Null-Byte LDAP check to the user manager ... The existing method is deprecated and just a wrapper around the manager method. Since in the future other code paths might call this function instead we need to perform that check here. Related to http://owncloud.org/security/advisory/?id=oc-sa-2014-020	11 years ago
Lukas Reschke	5dc6406b70	Add filter for 'backend' to user REST route ... This adds a "backend" type filter to the index REST route which is a pre-requisite for https://github.com/owncloud/core/issues/12620 For example when calling `index.php/settings/users/users?offset=0&limit=10&gid=&pattern=&backend=OC_User_Database` only users within the backend `OC_User_Database` would be shown. (requires sending a CSRF token as well) Depends upon https://github.com/owncloud/core/pull/12711	11 years ago
Lukas Reschke	fe7d9a7ca0	Add REST route for user & group management ... First step of a somewhat testable user management. - I know, the JSON returns are in an ugly format but the JS expects it that way. So let's keep it that way until we have time to fix the JS in the future.	11 years ago
Craig Morrissey	541344d880	logging changes	11 years ago
Robin Appelman	1eefc21329	Remove confusingly names \OC\User\Manager::delete and fix the automatic cache cleanup instead	11 years ago
Arthur Schiwon	993376fb6f	better variable name	11 years ago
Arthur Schiwon	e0342db47c	set up FS by username, not login name\!	11 years ago
Lukas Reschke	d0d3b7457b	Move BasicAuth check to "isLoggedIn()" ... Ensures that Basic Auth works properly for APIs and removes the need for some even uglier lines of code.	11 years ago
Lukas Reschke	63a90a129b	Use proper RNG generator ... OC_Util::generateRandomBytes() only returns lowercase alphanumeric values. We should use the new RNG which has a broader characterset.	11 years ago
Robin Appelman	a9a37b5363	Don't automatically setup the filesystem the moment we load OC\Files\FileSystem	11 years ago
Jörn Friedrich Dreyer	f551917a3c	kill OC::$session ... maintain deprecated \OC::$session when getting or setting the session via the server container or UserSession restore order os OC::$session and OC::$CLI remove unneded initialization of dummy session write back session when $useCustomSession is true log warning when deprecated app is used	12 years ago
Jörn Friedrich Dreyer	fd798fd982	update deprecation docs	12 years ago
Joas Schilling	4865c52aa6	Fix isLoggedIn() check for user '0' ... Fix #9972	12 years ago
Arthur Schiwon	2c89962919	clean up tryRememberLogin and save the timestamp of users last login	12 years ago
Morris Jobke	dc36d30953	Remove all occurences of @brief and @returns from PHPDoc ... * test case added to avoid adding them later	12 years ago