779 Commits (b9ab00a59e2d906fdb43eaaea37eb7a4a9cc8a13)

Author	SHA1	Message	Date
Marcel Klehr	e2449bca6f	fix(TaskProcessingApiController): Improve error handling ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	7 months ago
John Molakvoæ	2b50d9b2c5	Revert "perf(base): Stop setting up the FS for every basic auth request"	8 months ago
provokateurin	24f7a2e680	fix(core): Stop abusing the cache for avatar upload ... Signed-off-by: provokateurin <kate@provokateurin.de>	8 months ago
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	8 months ago
skjnldsv	9806a9830c	feat(files_sharing): allow viewing files with download disabled ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	8 months ago
Richard Steinmetz	c690c6fbd2	fix: update request token on two-factor pages ... Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	8 months ago
Richard Steinmetz	fa15cb8b87	fix: generate csrf tokens if two factor challenge is ongoing ... Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	8 months ago
Ferdinand Thiessen	495c364268	chore: use consistent casing for header names (required by openAPI) ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	9 months ago
Ferdinand Thiessen	fa7310add9	fix: handle IDLE timeout ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	9 months ago
Oleksander Piskun	90e8fa25a6	fix(TaskProcessingApiController): use StreamResponse to return the task file content ... Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>	9 months ago
Anna Larch	08f869dda9	fix: broken password reset form ... Signed-off-by: Anna Larch <anna@nextcloud.com>	9 months ago
provokateurin	82fb8f8508	refactor: Extend rector to core/ ... Signed-off-by: provokateurin <kate@provokateurin.de>	10 months ago
Marcel Müller	1addd35b78	fix: Remove unneccesary etag check ... Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>	10 months ago
Joas Schilling	9ed33cf6aa	feat(profile): Add an API to get the profile field data ... Signed-off-by: Joas Schilling <coding@schilljs.com>	10 months ago
Misha M.-Kupriyanov	d1a94f3c9c	feat(login-flow-v2): Restrict allowed apps by user agent check ... Enable via: ./occ config:system:set core.login_flow_v2.allowed_user_agents 0 --value '/Custom Foo Client/i' ./occ config:system:set core.login_flow_v2.allowed_user_agents 1 --value '/Custom Bar Client/i' if user agent string is unknown the template with "Access forbidden"-"Please use original client" will be displayed Signed-off-by: Misha M.-Kupriyanov <kupriyanov@strato.de>	10 months ago
Richard Steinmetz	246da73a36	fix(oauth2): retain support for legacy ownCloud clients ... Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	11 months ago
skjnldsv	0179cb4d8d	feat(core): add setup cypress tests ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	12 months ago
skjnldsv	cc12719df5	feat(core): migrate setup to vue ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	12 months ago
Côme Chilliet	71dc34c03c	fix: Deprecate OC_Template, add proper template manager instead ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	12 months ago
Louis Chemineau	c6293204a2	feat: Close sessions created for login flow v2 ... Sessions created during the login flow v2 should be short lived to not leave an unexpected opened session in the browser. This commit add a property to the session object to track its origin, and will close it as soon as possible, i.e., on the first non public page request. Signed-off-by: Louis Chemineau <louis@chmn.me>	1 year ago
Côme Chilliet	e757b649b7	fix: Fix psalm taint false-positives by small refactorings ... Mostly make it clear that we trust admin input or that we correctly escape strings. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
skjnldsv	2c13259093	feat(files): add mime icon endpoint ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	1 year ago
SebastianKrupinski	332fa63850	feat: Two Factor API ... Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>	1 year ago
Julien Veyssier	24332e2a06	fix(taskprocessing): /tasktypes endpoint was broken by #49015 ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	1 year ago
Côme Chilliet	f52b4c5eb2	fix: Remove skip of grant page, only skip first step ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	e7be008dc1	feat(oauth2): Skip page before login as well for authorized applications ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	9b366c65d4	feat(oauth): Allow to skip the grant step for selected applications ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
provokateurin	085d4c9364	refactor(OpenAPI): Adjust scopes to match previous behavior ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Jonas	dd5f560246	fix(ReferenceApiController): Bump rate limit for public resolve endpoint ... E.g. text documents might contain hundreds of links whose previews need to get loaded. Fixes: nextcloud/collectives#1607 Signed-off-by: Jonas <jonas@freesources.org>	1 year ago
Benjamin Gaussorgues	22051a73c1	feat(login): add origin check at login ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Maxence Lange	4591430c9c	feat(ocm): signing ocm requests ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	1 year ago
Marcel Klehr	3ac14af26b	fix(TaskProcessing): Set up fs in getFileContentsInternal ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	1 year ago
skjnldsv	b15fdfd40e	chore(profile): move profile app from core to apps ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	1 year ago
provokateurin	77114fb327	fix(OpenAPI): Adjust array syntax to avoid ambiguities ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Ferdinand Thiessen	c84c256261	fix: Adjust preview for view-only shares ... Previously there was a different behavior for public shares (link-shares) and internal shares, if the user disabled the view permission. The legacy UI for public shares simply "disabled" the context menu and hided all download actions. With Nextcloud 31 all share types use the consistent permissions attributes, which simplifies code, but caused a regression: Images can no longer been viewed. Because on 30 and before the attribute was not set, previews for view-only files were still allowed. Now with 31 we need a new way to allow "viewing" shares. So this is allowing previews for those files, but only for internal usage. This is done by settin a special header, which only works with custom requests, and not by opening the URL directly. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
dependabot[bot]	bb598c8451	chore(deps): Bump nextcloud/coding-standard in /vendor-bin/cs-fixer ... Bumps [nextcloud/coding-standard](https://github.com/nextcloud/coding-standard) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/nextcloud/coding-standard/releases) - [Changelog](https://github.com/nextcloud/coding-standard/blob/master/CHANGELOG.md) - [Commits](https://github.com/nextcloud/coding-standard/compare/v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: nextcloud/coding-standard dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Julius Knorr	606241caeb	chore(legacy): Introduce public version ct plass and drop version methods from OC_Util ... Signed-off-by: Julius Knorr <jus@bitgrid.net>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Anna Larch	8af7ecb257	chore: adjust code to adhere to coding standard ... Signed-off-by: Anna Larch <anna@nextcloud.com>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	2 years ago
provokateurin	e77d6c913d	fix(core): Limit valid avatar sizes ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Julius Härtl	1aa29441e3	fix: Add direct parameter to flow auth v2 ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	2 years ago
Julius Härtl	a6d421e767	chore: Remove deprecated legacy search backend ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	2 years ago
provokateurin	bc5c0262af	refactor(core): Make all attribute arguments named ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
provokateurin	c57c3c1573	refactor(core): Replace security annotations with respective attributes ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
provokateurin	90e108e548	fix(core): Document CSRF token endpoint ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Julien Veyssier	060fb26686	fix(taskprocessing): run cs:fix ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Marcel Klehr	799ee8fd51	feat(TaskProcessing): Implement enums and default values ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	2 years ago
Julius Härtl	6c1e896a03	fix: Ignore preview requests for invalid file ids ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	2 years ago
Julien Veyssier	fffc784769	feat(taskprocessing): add support for webhooks (http or AppAPI) in the task processing API ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago