87 Commits (bf7dc2f2e7a4ef82db38d10deebfdfaebdac4b13)

Author	SHA1	Message	Date
Côme Chilliet	75f8bb51ed	fix: Rename config option to skipAuthPickerApplications to match what it does ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	e7be008dc1	feat(oauth2): Skip page before login as well for authorized applications ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
provokateurin	085d4c9364	refactor(OpenAPI): Adjust scopes to match previous behavior ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
provokateurin	381077028a	refactor(apps): Use constructor property promotion when possible ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Git'Fellow	a1681b0756	chore(db): Apply query prepared statements ... Fix: psalm fix: bad file fix: bug chore: add batch chore: add batch chore: add batch fix: psalm	1 year ago
Ferdinand Thiessen	0e54c2bd43	fix: Adjust Entity types ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
provokateurin	54ec472d9a	fix(BackgroundJobs): Adjust intervals and time sensitivities ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Côme Chilliet	1a4978c4ea	chore: Apply rector configuration to apps folder ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Julien Veyssier	120e7e838c	fix(oauth2): fix tests ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	1 year ago
Julien Veyssier	034917b790	fix(oauth2): store hashed secret instead of encrypted ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	1 year ago
Artur Neumann	cc44ec54ad	invalidate oauth2 tokens only for seen users ... Signed-off-by: Artur Neumann <artur@jankaritech.com>	1 year ago
provokateurin	d8adbce1be	refactor(oauth2): Replace security annotations with respective attributes ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Andy Scherzinger	cc1686dba9	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Côme Chilliet	eee9f1eec4	Always catch OCP versions of authentication exceptions ... And always throw OC versions for BC Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Julien Veyssier	d56950a6c9	adjust phpdoc types in OauthApiController ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	d2bc483adf	adjust oauth app ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	32f984c520	adjust oauth tests ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	c6da99474e	rename oauth2_access_token's created_at to code_created_at ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	e944980eb6	add db index on oauth2_access_tokens's (token_count, created_at) ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	779e1d51ac	delete oauth access token when receiving a code that has expired ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	1ab45bad5d	refuse oauth authorization code if a token has already been delivered (active token) ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	7bba410997	cleanup access tokens that are still in authorization state and that have expired ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	2995b0948f	add tests for oauth2 authorization code expiration ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Julien Veyssier	807f173dec	make oauth2 authorization code expire after 10 minutes ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	2 years ago
Joas Schilling	25309bcb45	techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25 ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
jld3103	1c19c567fe	oauth2: Add OpenAPI spec ... Signed-off-by: jld3103 <jld3103yt@gmail.com>	3 years ago
Julien Veyssier	629adc318f	add bruteforce protection in OauthApiController ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Julien Veyssier	578bf8cc0b	add extra migration that sets the secret column length in case the previous step has run when it was setting it to 256 ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Julien Veyssier	24e517c5b3	make oauth2 client secret column larger ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Julien Veyssier	18c742a901	encrypt oauth2 client secrets ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	3 years ago
Artur Neumann	f634badf12	public interface to invalidate tokens of user ... Signed-off-by: Artur Neumann <artur@jankaritech.com>	3 years ago
Artur Neumann	21be557e2a	invalidate existing tokens when deleting an oauth client ... Signed-off-by: Artur Neumann <artur@jankaritech.com>	3 years ago
luz paz	9d26671f05	Fix typos in apps/ subdirectory ... Found via `codespell -q 3 -S l10n,./apps/files_external/3rdparty -L adn,ba,boxs,keypair,jus,optionel,ressource,tabel ./apps/` Signed-off-by: luz paz <luzpaz@github.com> Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>	3 years ago
Carl Schwan	53db418ee9	Cleanup oauth2 admin settings ... - Use more vue components - Add link to doc Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Daniel Kesselberg	11cacb52d4	Use property name for addType ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	4 years ago
Louis Chemineau	c5722869be	Add oauth2_clients migration for Owncloud ... Signed-off-by: Louis Chemineau <louis@chmn.me>	4 years ago
Joas Schilling	c6ae53096c	More test fixing ... Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
J0WI	3b656446af	Introduce ISecureRandom::CHAR_ALPHANUMERIC ... Signed-off-by: J0WI <J0WI@users.noreply.github.com>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Christoph Wurst	99f2fa73d1	Fix usage of rename executeUpdate ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Roeland Jago Douma	c2f7c417b2	Add psalm annotation to the DB handlers of OAuth2 ... * Psalm annotations * To new executeUpdate Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	28f8eb5dba	Add visibility to all constants ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function ... To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	44577e4345	Remove trailing and in between spaces ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	1a9330cd69	Update the license headers for Nextcloud 19 ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Daniel Kesselberg	509af24bc9	Fix invalid instantiation of TemplateResponse if client not found ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago