nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Carl Schwan	36721a8d0d	Fix caching of the user avatar Now on firefox/safari it is only refetched once a day. On Chrom{e,ium} we keep the previous behavior of maybe refetching it more often. This also notify the user about this behavior when they upload an avatar picture. Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Carl Schwan	7dddbd0c35	Improve caching policy * Cache css with version in url. This makes most js and css requests to be cached by the browser * Force caching previews, the etag is in the url so that if the propfind gives a new etag, we will refresh it otherwise it's no use to try to fetch the new etag and do tons of DB queries Tested with firefox and 'debug' => false (important so that the js/css urls are generated with ?v= parameter) Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Joas Schilling	6dd60b6d30	Only allow avatars in 64 and 512 pixel size Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Christopher Ng	22768769c3	Improve installation pages Signed-off-by: Christopher Ng <chrng8@gmail.com>	4 years ago
John Molakvoæ (skjnldsv)	b664aad7ab	Move bundles to /dist Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	4 years ago
Julius Härtl	e00173a71b	Also pass user on flow v2 landing Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Julius Härtl	61dd1d3d97	Pass username prefill through unauthenticated request redirects Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Julius Härtl	aa3f4bdf63	Allow using an app token to login with v2 flow auth Signed-off-by: Julius Härtl <jus@bitgrid.net>	4 years ago
Christopher Ng	be5b9e36cd	Hide user status from public Signed-off-by: Christopher Ng <chrng8@gmail.com>	4 years ago
Côme Chilliet	5a20e20e9e	Fix errors in AvatarController when data() returns null Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	4 years ago
Christoph Wurst	c8caba265f	Explicitly allow some routes without 2FA Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	4 years ago
Joas Schilling	fa036b2001	Move common logic to share manager Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Christopher Ng	f4307ef4b1	Respect user enumeration settings on profile Signed-off-by: Christopher Ng <chrng8@gmail.com>	4 years ago
Vitor Mattos	d613b32045	add check isFairUseOfFreePushService on login Signed-off-by: Vitor Mattos <vitor@php.rio>	4 years ago
Joas Schilling	3ce3c0f117	Add an OCS endpoint for the hovercard contact actions Signed-off-by: Joas Schilling <coding@schilljs.com>	4 years ago
Christopher Ng	309354852f	Profile backend Signed-off-by: Christopher Ng <chrng8@gmail.com>	4 years ago
Arthur Schiwon	a843d3c5db	allow using of disabled password reset mechanism for special cases - LostController has three endpoints - door opener email() still rejects - resetform(), reachable from mail, checks the token first and may report that password reset is disabled - setPassword() got its check removed as it is behind CSFR anyway and still requires a valid token - this allows special cases like activating a freshly created guest account Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Arthur Schiwon	6857136f06	fixes missing prefix to validate password reset token - also fixes the test which missed asserting the presence of it Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Arthur Schiwon	a20de15b43	add a job to clean up expired verification tokens Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Arthur Schiwon	19cc757531	move verification token logic out of lost password controller - to make it reusable - needed for local email verification Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Lukas Reschke	2994dbe215	Fix codestyle Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	4 years ago
Lukas Reschke	dd054b2ee8	Check if SVG path is valid Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	4 years ago
Jonas Meurer	7c76e85dde	Use IURLGenerator function to get value of `\OC::$WEBROOT` global Signed-off-by: Jonas Meurer <jonas@freesources.org>	4 years ago
Jonas Meurer	5f5bacde8f	UnifiedSearchController: strip webroot from URL before finding a route This should fix route matching in UnifiedSearchController on setups with Nextcloud in a subfolder (webroot). Fixes: #24144 Signed-off-by: Jonas Meurer <jonas@freesources.org>	4 years ago
Daniel Rudolf	4d7430949a	Remove usage of \OC_Util::getDefaultPageUrl() and \OC_Util::redirectToDefaultPage() Signed-off-by: Daniel Rudolf <github.com@daniel-rudolf.de>	4 years ago
Daniel Rudolf	e478db9161	Deprecate RedirectToDefaultAppResponse Signed-off-by: Daniel Rudolf <github.com@daniel-rudolf.de>	5 years ago
Gary Kim	b78f3a57d1	Migrate HintException to OCP Signed-off-by: Gary Kim <gary@garykim.dev>	5 years ago
Daniel Rudolf	12059eb65b	Add IUrlGenerator::linkToDefaultPageUrl() Replaces the deprecated \OC_Util::getDefaultPageUrl() and makes this API public. Signed-off-by: Daniel Rudolf <github.com@daniel-rudolf.de>	5 years ago
pjft	b1086e25bb	Add logging to 2FA failure For security reasons, we may want to monitor failures of 2FA challenges in order to ban attackers who might try to access compromised accounts but are stopped by the 2FA challenge. Right now, the only hindrance is rate-limiting, but it's probably not enough. Added dependency injection. Signed-off-by: pjft <paulo.j.tavares@gmail.com>	5 years ago
Julius Härtl	c0474ba364	Use product name in places where it is appropriate rather than the instance name Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Richard de Boer	f23d057ad9	Fix functions taking optional parameters before required ones PHP 8 shows deprecation warnings about this, see #25806 Removes the "default" values, as they actually are required parameters anyway. Signed-off-by: Richard de Boer <git@tubul.net>	5 years ago
Joas Schilling	69290781ff	Handle device login like an alternative login Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Robin Appelman	c232a40bdf	remove leftover debug @NoCSRFRequired introduced with #26198 Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Julien Veyssier	7b69897474	show informative errors in log and UI on avatar upload error in user settings Signed-off-by: Julien Veyssier <eneiluj@posteo.net>	5 years ago
Robin Appelman	b38618c813	use node search api for legacy file search endpoint Signed-off-by: Robin Appelman <robin@icewind.nl>	5 years ago
Roeland Jago Douma	4076dfb019	Allow admins to disable the login form In case they want to not allow this because they use SSO (and do not want the users to enter their credentials there by accident). ?direct=1 still works. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
dependabot-preview[bot]	eb502c02ff	Bump nextcloud/coding-standard from 0.3.0 to 0.5.0 Bumps [nextcloud/coding-standard](https://github.com/nextcloud/coding-standard) from 0.3.0 to 0.5.0. - [Release notes](https://github.com/nextcloud/coding-standard/releases) - [Changelog](https://github.com/nextcloud/coding-standard/blob/master/CHANGELOG.md) - [Commits](https://github.com/nextcloud/coding-standard/compare/v0.3.0...v0.5.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Joas Schilling	6ed4aaeeea	Send emails on password reset to the displayname Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Joas Schilling	83755b7b02	Make new result parts optional Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Christoph Wurst	f8808e260d	Move app_password_created to a typed event Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Julius Härtl	d7a80293ab	Keep direct login active when redirecting Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
Roeland Jago Douma	f57b93098b	Do not redirect to logout after login This can happen when the session was killed due to a timeout. Then logout was triggered. Nobody wants to login only to be logged out again. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	9ce3ea3368	Update license headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Christoph Wurst	d89a75be0b	Update all license headers for Nextcloud 21 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Christoph Wurst	6995223b1e	Add well known handlers API Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Julius Härtl	df769c025a	Do not load nonexisting setup.js Signed-off-by: Julius Härtl <jus@bitgrid.net>	5 years ago
John Molakvoæ (skjnldsv)	e7f5516b4d	Init vue comments tab Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Christoph Wurst	d9015a8c94	Format code to a single space around binary operators Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Joas Schilling	a8d9b22beb	Add an ETag for the search providers Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago

1 2 3 4 5 ...

480 Commits (d9c079937726bfa37a48ef8a2f206741f3fa12e3)