nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Arthur Schiwon	12d39e818d	fix(Auth): ignore missing token when trying to set password-unconfirmable Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	1 year ago
Ferdinand Thiessen	a8f46af20f	chore: Add proper deprecation dates where missing Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Arthur Schiwon	895ed634af	fix(Token): add FILESYSTEM scope with SCOPE_SKIP_PASSWORD_VALIDATION The scope design requires scopes to be either not specified, or specified explicitely. Therefore, when setting the skip-password-validation scope for user authentication from mechanisms like SAML, we also have to set the filesystem scope, otherwise they will lack access to the filesystem. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	f6d6efef3a	refactor(Token): introduce scope constants Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	340939e688	fix(Session): avoid password confirmation on SSO SSO backends like SAML and OIDC tried a trick to suppress password confirmations as they are not possible by design. At least for SAML it was not reliable when existing user backends where used as user repositories. Now we are setting a special scope with the token, and also make sure that the scope is taken over when tokens are regenerated. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Côme Chilliet	ec5133b739	fix: Apply new coding standard to all files Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Joas Schilling	497528e45e	fix(logging): Restore the option to log with debug level Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Julius Härtl	e330efe5a0	fix: Implement option to temporarily set the user session Signed-off-by: Julius Härtl <jus@bitgrid.net>	2 years ago
Arthur Schiwon	c98b0462e3	fix(admin role): fix old and wrong way to determine whether user is admin - fixes Settings knowing who is an admin of non-local group backend groups - obsoletes and removes a little old, deprecated code - double checks proper parameter type on Group\Manager::isAdmin - also fixes legacy OC_User code to check whether user is an admin Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Vincent Petry	839ddaa354	feat: rename users to account or person Replace translated text in most locations Signed-off-by: Vincent Petry <vincent@nextcloud.com>	2 years ago
Christoph Wurst	ea8f9a7e84	refactor: Repalce array_search with in_array in lib/ Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	2 years ago
Côme Chilliet	f68d4f7300	Remove deprecated methods Util::writeLog and DIContainer::log Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Maxence Lange	980e8e24f0	dispatch BeforeUserLoggedInEvent Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
MichaIng	21b3e87c77	Allow SSO authentication to provide a user secret Implementing PR #24837 from immerda Signed-off-by: MichaIng <micha@dietpi.com>	4 years ago
Arthur Schiwon	a4a9e7601a	allow use of rememberme cookies for IApacheAuth backends - e.g. enables it for SAML backend Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Robin Appelman	0217949715	only setup part of the filesystem for appdata requests Signed-off-by: Robin Appelman <robin@icewind.nl>	4 years ago
Julien Veyssier	0d2c2ab629	allow null password in UserLoggedInEvent Signed-off-by: Julien Veyssier <eneiluj@posteo.net>	4 years ago
Julien Veyssier	de5fea4a00	fix login_credentials->password in session when loging in with apache Signed-off-by: Julien Veyssier <eneiluj@posteo.net>	4 years ago
Joas Schilling	57a816a1a6	Don't further setup disabled users when logging in with apache Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Morris Jobke	095418493e	Use proper methods for display name retrieval Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Arthur Schiwon	6ac4eafcf9	emit UserLoggedInEvent on apache auth - post_login OC_Hook is barely used or listened to Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Roeland Jago Douma	e0cc95f3aa	Allow user backends to specify a custom logout url * Allows SSO backends to do a global logout Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	36b3bc8148	Use php keywords in lowercase Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1e086064f5	Move legacy classes from PSR0 to PSR4 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1a9330cd69	Update the license headers for Nextcloud 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	b80ebc9674	Use the short array syntax, everywhere Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	7d1fc2b8e8	Fix missing login hook wih Apache/SAML Without this patch the hook does not transport the information whether the login is done with an app password or not. The suspicious login app requires the parameter to function correctly, hence adding it will make suspicious login detection also possible with SAML users. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Morris Jobke	f095bd1642	Use non-absolute logout URL to fix wrong URL in reverse proxy scenario Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Roeland Jago Douma	e3de4edc51	Urlencode the requesttoken Followup of #13757 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	ebd9f30d85	Request plain logout url By requesting the plain logout url we allow it to be properly cached by the caching router. We just add the requesttoken manually. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Bjoern Schiessle	bb86a8ca36	add back-end as parameter to the pre-login hook This is needed for the Global Scale setup to allow the master node to perform different operations during login, depending on the user management. Because in case of SAML, the authentication at the idp happens at the master node. Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Arthur Schiwon	38a90130ce	move log constants to ILogger Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Roeland Jago Douma	7ebd96416c	Remove deprecated OCP\User::getDisplayname Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	6c8caa1641	Remove deprecated \OCP\User::getUsers Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	55532f19d9	Cleanup OC_User and OCP\User * mainly removes deprecated methods and old static code Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	31c5c2a592	Change @georgehrke's email Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0eebff152a	Update license headers Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Lukas Reschke	2e4cd44556	Inject \OCP\IURLGenerator to make tests work Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	a04feff9a7	Properly allow \OCP\Authentication\IApacheBackend to specify logout URL Any `\OCP\Authentication\IApacheBackend` previously had to implement `getLogoutAttribute` which returns a string. This string is directly injected into the logout `<a>` tag, so returning something like `href="foo"` would result in `<a href="foo">`. This is rather error prone and also in Nextcloud 12 broken as the logout entry has been moved with `054e161eb5` inside the navigation manager where one cannot simply inject attributes. Thus this feature is broken in Nextcloud 12 which effectively leads to the bug described at nextcloud/user_saml#112, people cannot logout anymore when using SAML using SLO. Basically in case of SAML you have a SLO url which redirects you to the IdP and properly logs you out there as well. Instead of monkey patching the Navigation manager I decided to instead change `\OCP\Authentication\IApacheBackend` to use `\OCP\Authentication\IApacheBackend::getLogoutUrl` instead where it can return a string with the appropriate logout URL. Since this functionality is only prominently used in the SAML plugin. Any custom app would need a small change but I'm not aware of any and there's simply no way to fix this properly otherwise. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	dfd8125aeb	Replace wrong PHPDocs Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	bef4f015ee	Remove setUidAsDisplayName This code is a leftover from the old Shibboleth implementation from ownCloud days, nowadays it causes more issues than it does good (such as https://github.com/nextcloud/user_saml/pull/137). Let's remove it for the future thus. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Roeland Jago Douma	b930f32e89	Remove legacy OC_User_Backend and OC_User_Interface Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Morris Jobke	188b87e03b	Cleanup legacy user class from unused methods Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago

30 Commits (b0197c5dfcb0dac94de43bfbfa89a2889fc1e30b)