nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Arthur Schiwon	c98b0462e3	fix(admin role): fix old and wrong way to determine whether user is admin - fixes Settings knowing who is an admin of non-local group backend groups - obsoletes and removes a little old, deprecated code - double checks proper parameter type on Group\Manager::isAdmin - also fixes legacy OC_User code to check whether user is an admin Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Vincent Petry	839ddaa354	feat: rename users to account or person Replace translated text in most locations Signed-off-by: Vincent Petry <vincent@nextcloud.com>	2 years ago
Christoph Wurst	ea8f9a7e84	refactor: Repalce array_search with in_array in lib/ Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	3 years ago
Côme Chilliet	f68d4f7300	Remove deprecated methods Util::writeLog and DIContainer::log Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Maxence Lange	980e8e24f0	dispatch BeforeUserLoggedInEvent Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	3 years ago
Côme Chilliet	f5c361cf44	composer run cs:fix Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
MichaIng	21b3e87c77	Allow SSO authentication to provide a user secret Implementing PR #24837 from immerda Signed-off-by: MichaIng <micha@dietpi.com>	4 years ago
Arthur Schiwon	a4a9e7601a	allow use of rememberme cookies for IApacheAuth backends - e.g. enables it for SAML backend Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Robin Appelman	0217949715	only setup part of the filesystem for appdata requests Signed-off-by: Robin Appelman <robin@icewind.nl>	4 years ago
Julien Veyssier	0d2c2ab629	allow null password in UserLoggedInEvent Signed-off-by: Julien Veyssier <eneiluj@posteo.net>	5 years ago
Julien Veyssier	de5fea4a00	fix login_credentials->password in session when loging in with apache Signed-off-by: Julien Veyssier <eneiluj@posteo.net>	5 years ago
Joas Schilling	57a816a1a6	Don't further setup disabled users when logging in with apache Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Morris Jobke	095418493e	Use proper methods for display name retrieval Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Arthur Schiwon	6ac4eafcf9	emit UserLoggedInEvent on apache auth - post_login OC_Hook is barely used or listened to Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	5 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	e0cc95f3aa	Allow user backends to specify a custom logout url * Allows SSO backends to do a global logout Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	36b3bc8148	Use php keywords in lowercase Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1e086064f5	Move legacy classes from PSR0 to PSR4 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1a9330cd69	Update the license headers for Nextcloud 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	b80ebc9674	Use the short array syntax, everywhere Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Christoph Wurst	7d1fc2b8e8	Fix missing login hook wih Apache/SAML Without this patch the hook does not transport the information whether the login is done with an app password or not. The suspicious login app requires the parameter to function correctly, hence adding it will make suspicious login detection also possible with SAML users. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	7 years ago
Morris Jobke	f095bd1642	Use non-absolute logout URL to fix wrong URL in reverse proxy scenario Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Roeland Jago Douma	e3de4edc51	Urlencode the requesttoken Followup of #13757 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	ebd9f30d85	Request plain logout url By requesting the plain logout url we allow it to be properly cached by the caching router. We just add the requesttoken manually. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Bjoern Schiessle	bb86a8ca36	add back-end as parameter to the pre-login hook This is needed for the Global Scale setup to allow the master node to perform different operations during login, depending on the user management. Because in case of SAML, the authentication at the idp happens at the master node. Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	8 years ago
Arthur Schiwon	38a90130ce	move log constants to ILogger Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Roeland Jago Douma	7ebd96416c	Remove deprecated OCP\User::getDisplayname Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	6c8caa1641	Remove deprecated \OCP\User::getUsers Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	55532f19d9	Cleanup OC_User and OCP\User * mainly removes deprecated methods and old static code Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	31c5c2a592	Change @georgehrke's email Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	0eebff152a	Update license headers Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Lukas Reschke	2e4cd44556	Inject \OCP\IURLGenerator to make tests work Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	a04feff9a7	Properly allow \OCP\Authentication\IApacheBackend to specify logout URL Any `\OCP\Authentication\IApacheBackend` previously had to implement `getLogoutAttribute` which returns a string. This string is directly injected into the logout `<a>` tag, so returning something like `href="foo"` would result in `<a href="foo">`. This is rather error prone and also in Nextcloud 12 broken as the logout entry has been moved with `054e161eb5` inside the navigation manager where one cannot simply inject attributes. Thus this feature is broken in Nextcloud 12 which effectively leads to the bug described at nextcloud/user_saml#112, people cannot logout anymore when using SAML using SLO. Basically in case of SAML you have a SLO url which redirects you to the IdP and properly logs you out there as well. Instead of monkey patching the Navigation manager I decided to instead change `\OCP\Authentication\IApacheBackend` to use `\OCP\Authentication\IApacheBackend::getLogoutUrl` instead where it can return a string with the appropriate logout URL. Since this functionality is only prominently used in the SAML plugin. Any custom app would need a small change but I'm not aware of any and there's simply no way to fix this properly otherwise. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	dfd8125aeb	Replace wrong PHPDocs Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	bef4f015ee	Remove setUidAsDisplayName This code is a leftover from the old Shibboleth implementation from ownCloud days, nowadays it causes more issues than it does good (such as https://github.com/nextcloud/user_saml/pull/137). Let's remove it for the future thus. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Roeland Jago Douma	b930f32e89	Remove legacy OC_User_Backend and OC_User_Interface Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Morris Jobke	188b87e03b	Cleanup legacy user class from unused methods Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	7790017a14	Cleanup code of personal page to use public interfaces * public interfaces instead of static code calls * drop static private namespace methods Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Jörn Friedrich Dreyer	fff6d6e3e8	Refactor auth methods Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	a5ba1f7803	Remove legacy class OC_Group and OC_User * basically a straight replacement of the wrapped code at the calling code parts Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Lukas Reschke	92c74d2f9a	Don't force displayname if backend already provides one `\OC_User::loginWithApache` is used in combination with backend mechanisms like our SSO / SAML integration. Those can optionally already provide a displayname using other means. For example by mapping SAML attributes. The current approach makes it however impossible for backends using `\OCP\Authentication\IApacheBackend` to set a displayname on their own. Because the display name will simply be overwritten with the loginname. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Vincent Petry	b32e252fb0	Testing md5home (#26854 ) * Allow clearing default user backends in config.php When specifying "user_backends" in config.php, a new option "default" when set to false will prevent the default user backend to be registered. The default one is the database backend. This makes it possible to select exclusive user backends from apps. * Testing app provides test user backend for alternative homes The backend provide md5 result to getHome() * Only md5 the user home when it's not the admin Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	10 years ago
Christoph Wurst	d907666232	bring back remember-me * try to reuse the old session token for remember me login * decrypt/encrypt token password and set the session id accordingly * create remember-me cookies only if checkbox is checked and 2fa solved * adjust db token cleanup to store remembered tokens longer * adjust unit tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	10 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Christoph Wurst	c58d8159d7	Create session tokens for apache auth users	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago

20 Commits (ba94de2510b3858f10d60f0230a58b1252346372)