550 Commits (b129cea7da5cbcfc0ca5c2e2d3ca22a2d589e00a)

Author	SHA1	Message	Date
Git'Fellow	cfd7a57184	Send header to all browsers under HTTPS ... Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com> Don't send Clear-Site-Data to Safari Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com> Fix lint Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	3 years ago
jld3103	79507435fa	Fix controller class import for autocomplete ... Signed-off-by: jld3103 <jld3103yt@gmail.com>	3 years ago
Julius Härtl	a0ecc37d03	fix(translation): Allow regular users to use translation api endpoints ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	3e63298381	feat(translations): Add translation provider API ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julien Veyssier	01cefbd6d6	[reference preview] fix getting null mimetype if the cached reference lacks an image content type ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Christoph Wurst	024adc14b1	fix(client-login-flow): Use correct response for missing state token ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	88d116ba84	fix(client-login-flow): Handle missing stateToken gracefully ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Joas Schilling	704eb3aa6c	Add bruteforce protection to password reset page ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Simon L	6496748971	fix the login log entry ... Signed-off-by: Simon L <szaimen@e.mail.de>	3 years ago
Julien Veyssier	8766e4f242	handle and return touchProvider errors ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Julien Veyssier	946a1af9fd	add 'last used timestamp' management for reference providers ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Julien Veyssier	6431c5a559	extend the reference API for the new link picker ... - add 2 interfaces for discoverable and searchable reference providers - new OCS route to get info on discoverable/searchable reference providers - new abstract ADiscoverableReferenceProvider that only implements jsonSerialize - listen to RenderReferenceEvent to inject provider list with initial state Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Christoph Wurst	20e00cdf17	feat(app-framework): Add UseSession attribute to replace annotation ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Christoph Wurst	20fcfb5739	feat(app framework)!: Inject services into controller methods ... Usually Nextcloud DI goes through constructor injection. This has the implication that each instance of a class builds the full DI tree. That is the injected services, their services, etc. Occasionally there is a service that is only needed for one controller method. Then the DI tree is build regardless if used or not. If services are injected into the method, we only build the DI tree if that method gets executed. This is also how Laravel allows injection. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Christoph Wurst	f22101d421	Fix login loop if login CSRF fails and user is not logged in ... If CSRF fails but the user is logged in that they probably logged in in another tab. This is fine. We can just redirect. If CSRF fails and the user is also not logged in then something is fishy. E.g. because Nextcloud contantly regenrates the session and the CSRF token and the user is stuck in an endless login loop. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Alex Harpin	644df591b1	Rename canInstallExists method and add new method for removal ... Rename canInstallExists to shouldRemoveCanInstallFile to cover removal of this file for non-git channels and logging any failure to remove it. Add new method to detect if this file exists during web based installation. Signed-off-by: Alex Harpin <development@landsofshadow.co.uk>	3 years ago
Alex Harpin	72af140723	Move CAN_INSTALL check to method and remove unlink from SetupController ... Move the check for the CAN_INSTALL file in the config directory to a method in the Setup class and remove the call to unlink from the SetupController as this in now handled in the Setup class. Signed-off-by: Alex Harpin <development@landsofshadow.co.uk>	3 years ago
Joas Schilling	b4a29644cc	Add a const for the max user password length ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Joas Schilling	9cfaf27142	Also limit the password length on reset ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Christoph Wurst	138deec333	chore: Make the LoginController strict ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Daniel Kesselberg	b5f6ecfb00	Fix GH-33187 ... $this->userId is null when loggedin via app password. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	3 years ago
Richard Steinmetz	fc4dd3041c	Fix default redirect on successful WebAuthn login ... Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	3 years ago
Carl Schwan	6c76443e89	Revert unrelated change from #34940 ... Probably a left over from an experience that I added by mistake in the change Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Varun Patil	136b2c5949	Fix type of PreviewController::$userId ... Can be null if not logged in; currently crashes Signed-off-by: Varun Patil <varunpatil@ucla.edu>	3 years ago
Carl Schwan	86d9626901	Add mastodon personal info field ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Julius Härtl	8629d8e44f	Check share attributes on preview endpoints ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	11bedf1c3b	Use proper error pages instead of always redirecting ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
John Molakvoæ (skjnldsv)	bd303388e3	Cleanup ie and old edge properties ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	3 years ago
Côme Chilliet	71ee292650	Add rate limiting on lost password emails ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Julien Veyssier	6e03d99ab8	fix reference preview endpoint when no server-side cache configured ... Signed-off-by: Julien Veyssier <eneiluj@posteo.net>	3 years ago
Joas Schilling	0642d17e4f	Fix URLs on reference resolving ... The vue-richtext app currently sends leading spaces if they are in the text. Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Julius Härtl	f4a2ab137b	Add cache header for image endpoint if link previews ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	5fa7563bf9	Add endpoint to fetch a cachable reference data ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Carl Schwan	66a7a89898	Add api to load additional section in profile page ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	bc9a488046	Update avatars on update ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	76d0165330	Dark theme for guest avatar ... And better caching policy Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Carl Schwan	f98ae2b5b0	Avatar new style ... Signed-off-by: Carl Schwan <carl@carlschwan.eu>	3 years ago
Christopher Ng	f44d2586b1	Remake profile picture saving with Vue ... Signed-off-by: Christopher Ng <chrng8@gmail.com>	3 years ago
Julius Härtl	1ab66988bc	Inject all dependnencies and increase cache timeout ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	80f6a5834a	Refactor cache handling ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	a392235e23	Cleanup ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	0ce0d37ac1	Implement image caching ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Julius Härtl	de3e541fde	API for fetching reference metadata ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	3 years ago
Joas Schilling	85eb3b2920	Fix wording of undeliverable push notifications ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Christopher Ng	9ba11ecefd	Improve handling of profile page ... Signed-off-by: Christopher Ng <chrng8@gmail.com>	3 years ago
NoSleep82	b03aedf128	Update core/Controller/LostController.php ... Co-authored-by: John Molakvoæ <skjnldsv@users.noreply.github.com> Signed-off-by: NoSleep82 <52562874+NoSleep82@users.noreply.github.com>	3 years ago
NoSleep82	61548c520b	Update LostController.php ... i would be useful to know who is trying to reset the password (misspelled username or email, ex user or some sort of attack) Signed-off-by: NoSleep82 <52562874+NoSleep82@users.noreply.github.com>	3 years ago
Carl Schwan	253118298d	Redesign guest pages for better accessibility ... - Use white box and put content on it - Improve focus indicator Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Christopher Ng	92500e810f	Identify the login page explicitly by the page title ... Signed-off-by: Christopher Ng <chrng8@gmail.com>	4 years ago