566 Commits (bf7dc2f2e7a4ef82db38d10deebfdfaebdac4b13)

Author	SHA1	Message	Date
Joas Schilling	c1655bcde7	fix(ratelimit): Allow to bypass rate-limit from bruteforce allowlist ... Signed-off-by: Joas Schilling <coding@schilljs.com>	11 months ago
Elizabeth Danzberger	fdfeb7f265	feat(api): File conversion API ... Signed-off-by: Elizabeth Danzberger <lizzy7128@tutanota.de>	12 months ago
Maxence Lange	bd4a154d64	feat(lexicon): configurable default value ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	12 months ago
provokateurin	7db694f534	fix(Http): Only allow valid HTTP status code values via template ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Maxence Lange	96586ba709	feat(config): implementation of lexicon ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	1 year ago
Joas Schilling	1909b981a4	fix(controller): Fix false booleans in multipart/form-data ... Signed-off-by: Joas Schilling <coding@schilljs.com>	1 year ago
Louis Chemineau	a2f2f7ce93	feat: Use inline password confirmation in external storage settings ... Signed-off-by: Louis Chemineau <louis@chmn.me>	1 year ago
provokateurin	dd0ed02b91	feat(Dispatcher): Add debug log for controller methods returning raw data not wrapped in Response ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
skjnldsv	b15fdfd40e	chore(profile): move profile app from core to apps ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	1 year ago
Arthur Schiwon	fdd24090ff	fix(Middleware): log deprecation when annotation was actually used ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	1 year ago
Ferdinand Thiessen	a8f46af20f	chore: Add proper deprecation dates where missing ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Ferdinand Thiessen	fe05882628	chore!: Remove `OC\AppFramework\Logger` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
provokateurin	3d9b49815b	fix(BaseResponse): Cast XML element values to string ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Côme Chilliet	4c9104ef08	fix: Move ApiHelper to \OC\OCS next to related classes ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	37569466de	fix: A bit of code cleanup in OC\AppFramework\OCS\ApiHelper ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Côme Chilliet	ea32d17d88	fix: Move OC_API into \OC\ApiHelper in standard namespace ... It’s only used by ocs/v1.php Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	1 year ago
Ferdinand Thiessen	deeccd12a3	chore: fix typo in `SameSiteCookieMiddleware` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Ferdinand Thiessen	92f3f7e2d2	chore: Remove unused `CsrfTokenManager` from `CSPMiddleware` ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
Robin Appelman	8b60df1600	perf: delay getting (sub)admin status for user in the security middleware untill we need it ... Signed-off-by: Robin Appelman <robin@icewind.nl>	1 year ago
Ferdinand Thiessen	c82b17d0a3	fix: Support Safari mobile ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	1 year ago
Holger Hees	73397cd759	fix: Use `CSP_NONCE` env variable in ContentSecurity Header ... We should use 'cspNonceManager' for requesting the NONCE value, because it is doing the same as before, except that it honors a CPS_NONCE environment variable if available. Signed-off-by: Holger Hees <holger.hees@gmail.com>	1 year ago
skjnldsv	db28aa8cd1	fix(files_sharing): show proper share not found error message ... Signed-off-by: skjnldsv <skjnldsv@protonmail.com>	1 year ago
provokateurin	9d1705259c	fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checks ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
SebastianKrupinski	fc0b694d37	feat: mail provider backend ... Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>	1 year ago
Joas Schilling	047479ccf9	feat(security): Add public API to allow validating IP Ranges and checking for "in range" ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Benjamin Gaussorgues	202e5b1e95	feat(security): restrict admin actions to IP ranges ... Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	1 year ago
Andrey Borysenko	40f820470a	chore: use "app_api" session key, "app_api_system" is deprecated ... Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>	1 year ago
Alexander Piskun	b7af6ec200	feat: allow for ExApps to call Admin endpoints marked with specific attr ... Signed-off-by: Alexander Piskun <bigcat88@icloud.com>	1 year ago
provokateurin	e5dcdfb9e0	feat(Security): Warn about using annotations instead of attributes ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Ferdinand Thiessen	a229723b8c	feat: Add new forbidden filename options to Capabilities ... Allow clients to access the new filename validation options and make frontend name validation possible. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	2 years ago
provokateurin	5aefdc399e	feat(AppFramework): Add ExAppRequired attribute ... Signed-off-by: provokateurin <kate@provokateurin.de>	2 years ago
Côme Chilliet	c3d4d2aad1	Revert "feat: Add support for webhook listeners" ... This reverts commit 3b790df0127b2bf95e8fe3a8460aa3813e58bef8. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	8d18607f80	feat: Add support for webhook listeners ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Joas Schilling	0d383f1f66	fix(logger): Fix scoped PSR logger when running psalm:ci ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2 years ago
Arthur Schiwon	f6d6efef3a	refactor(Token): introduce scope constants ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	340939e688	fix(Session): avoid password confirmation on SSO ... SSO backends like SAML and OIDC tried a trick to suppress password confirmations as they are not possible by design. At least for SAML it was not reliable when existing user backends where used as user repositories. Now we are setting a special scope with the token, and also make sure that the scope is taken over when tokens are regenerated. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Marcel Klehr	ec27c538b5	fix: address review comments ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	2 years ago
Marcel Klehr	00894e2420	feat: first pass at TaskProcessing API ... Signed-off-by: Marcel Klehr <mklehr@gmx.net>	2 years ago
Côme Chilliet	672923f0a6	fix: Fix newly spotted psalm issues, add exhaustive typed magic properties for LDAP classes ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	644036ab4e	fix: Migrate away from OC_App toward the IAppManager ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Côme Chilliet	ab6afe0111	fix: Fix new psalm errors from update ... Not sure about the SimpleContainer modification, let’s see what CI says about that. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Maxence Lange	97e59b12a1	fix(appconfig): only convert single entry on searchValues() ... Signed-off-by: Maxence Lange <maxence@artificial-owl.com>	2 years ago
Côme Chilliet	ec5133b739	fix: Apply new coding standard to all files ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	2 years ago
Florian Klinger	f3a4abd98c	fix: add check for app_api_system session flag to bypass rate limit ... Signed-off-by: Florian Klinger <florian.klinger@nextcloud.com> Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>	2 years ago
Andrey Borysenko	865fd3ba08	fix: add missing copyrights and strict types ... Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>	2 years ago
jld3103	4ac2375ca2	feat: Add declarative settings ... Signed-off-by: jld3103 <jld3103yt@gmail.com> Signed-off-by: Julien Veyssier <julien-nc@posteo.net> Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>	2 years ago
Julius Härtl	b8c5bff673	fix: Adjust user agent pattern for Edge ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	2 years ago