7753 Commits (ea3ac4e656408cd564a91ae6916bd7d65c19e922)

Author	SHA1	Message	Date
Arthur Schiwon	ea3ac4e656	Splits off the logic from sharees endpoint thus making it available from ... within Nc/via PHP. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
John Molakvoæ (skjnldsv)	dec713fc92	Do not stop on scss compilation failure ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Morris Jobke	11c31e94fe	Improve exception handling ... If there is an exception in the template handling then a white page is shown. This improves the handling of this and shows text only about the internal error. To test this just setup redis as cache and then disable the php-redis module. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Stephan Müller	86265320b8	do not show hyphen after instance name in emails if slogan does not exist ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	c257cd57d4	Handle SameSiteCookie check for index.php in AppFramework Middleware ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
John Molakvoæ (skjnldsv)	4a5eeb2ce7	Fixed webroot detection ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Roeland Jago Douma	2207fdcd8c	Remove private legacy OC_OCS_Response ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	87e10f9e6a	OC_OCS_Response is deprecated ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
John Molakvoæ (skjnldsv)	0e17b65bcf	Avoid error undefined index classes in log ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Christoph Wurst	38bb6e1477	Fix duplicate session token after remembered login ... On a remembered login session, we create a new session token in the database with the values of the old one. As we actually don't need the old session token anymore, we can delete it right away. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Robin Appelman	5430d73a0e	Fix "webroot not found" when installed to the root of the webserver ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Roeland Jago Douma	6d7ca1092d	Read appinfo from a local cache ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Robin Appelman	d526969a68	fix path style ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Robin Appelman	d70607104e	reuse object read/write/delete logic in s3 implementations ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Robin Appelman	dad18baec8	update aws sdk and move it to 3rdparty ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Arthur Schiwon	0837745477	don't pass User object when uid string is expected ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Roeland Jago Douma	ae1fdf73c2	Improve sharing pagination ... Basically we did in almost all cases did a query to much. This resulted in an extra query for each share type. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Lukas Reschke	705432ca6f	Add filter for `shareapi_allow_share_dialog_user_enumeration` ... This adjusts the contacts menu to also support searching by email address which is relevant in scenarios where no UID is known such as LDAP, etc. Furthermore, if `shareapi_allow_share_dialog_user_enumeration` is disabled only results are shown that match the full user ID or email address. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	8 years ago
Thomas Citharel	ecf347bd1a	Add CSP frame-ancestors support ... Didn't set the @since annotation yet. Signed-off-by: Thomas Citharel <tcit@tcit.fr>	8 years ago
Tobia De Koninck	5896176d69	Fix issue when disabling the shareapi_only_share_with_group_members option + fix findOne ... Signed-off-by: Tobia De Koninck <tobia@ledfan.be>	8 years ago
Tobia De Koninck	7dfa527da2	Improve code style ... Signed-off-by: Tobia De Koninck <tobia@ledfan.be>	8 years ago
Tobia De Koninck	f0370c0244	Some code improvements ... Signed-off-by: Tobia De Koninck <tobia@ledfan.be>	8 years ago
Tobia De Koninck	fa402c74d2	Add tests ... Signed-off-by: Tobia De Koninck <tobia@ledfan.be>	8 years ago
Tobia De Koninck	473a1ecad1	Fix tests ... Signed-off-by: Tobia De Koninck <tobia@ledfan.be>	8 years ago
Tobia De Koninck	92c238e0f0	Privacy enhancements for contacts menu ... - Groups, which are excluded from sharing should not see local users at all - If sharing is restricted to users own groups, he should only see contacts from his groups: Signed-off-by: Tobia De Koninck <tobia@ledfan.be>	8 years ago
John Molakvoæ (skjnldsv)	1a0ac912b2	Fix webroot throw ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	8 years ago
Roeland Jago Douma	9163cf9241	Fix AppPassword 2FA auth ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Axel Helmert	01d4967130	Fix undefined variable $tmpRoot ... Refactoring of webroot detection left an unused variable. Fixes: #6415 Signed-off-by: Axel Helmert <info@luka.de>	8 years ago
Joas Schilling	c4b3198ac2	Rethrow the correct exception when there was an error in an app container ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Julius Härtl	8391ca8792	Use IAppManager instead of private API ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Julius Härtl	b49ab065b7	Move theming related imagePath logic to ThemingDefaults ... Signed-off-by: Julius Haertl <jus@bitgrid.net>	8 years ago
William Pain	9a63ded43b	Fix uninitialized variable $this->params ... Signed-off-by: William Pain <pain.william@gmail.com>	8 years ago
Joas Schilling	29e1aa57e1	Ask the schema whether the table and column exist ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Joas Schilling	7e625a8d22	Use the language of the recipient for the share notification ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
tux-rampage	7a33b9273e	Refactor webroot detection in resource locator ... The current implementation breaks installations with symlinks to directories inside the webroot (i.E. apps). With this change both variants, directory and symlinks, will be detected correctly. Fixes: #6028 Signed-off-by: Axel Helmert <axel.helmert@luka.de>	8 years ago
Joas Schilling	b68609d0cf	Don't log LDAP password when server is not available ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Robin Appelman	2c0efae30f	cleanup oci setup code ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Roeland Jago Douma	b96485b6bd	Fix login with basic auth ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Christoph Wurst	87aeae21e3	Fix failing csp/nonce check due to timed out session ... The CSP nonce is based on the CSRF token. This token does not change, unless you log in (or out). In case of the session data being lost, e.g. because php gets rid of old sessions, a new CSRF token is gen- erated. While this is fine in theory, it actually caused some annoying problems where the browser restored a tab and Nextcloud js was blocked due to an outdated nonce. The main problem here is that, while processing the request, we write out security headers relatively early. At that point the CSRF token is known/generated and transformed into a CSP nonce. During this request, however, we also log the user in because the session information was lost. At that point we also refresh the CSRF token, which eventually causes the browser to block any scripts as the nonce in the header does not match the one which is used to include scripts. This patch adds a flag to indicate whether the CSRF token should be refreshed or not. It is assumed that refreshing is only necessary if we want to re-generate the session id too. To my knowledge, this case only happens on fresh logins, not when we recover from a deleted session file. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	8 years ago
Joas Schilling	6dbb64c4a2	Merge setMetaData into constructor ... This ensures that the meta data is set in the beginning Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Morris Jobke	1ebf91ec16	Add proper EOL ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Julius Härtl	b09ce70117	Rebuild SCSS files if frontend controller value changes ... fixes #6271	8 years ago
Bjoern Schiessle	e039a4c191	move repair step to stable12 ... because we decided to backport it the repair step needs to be executed already on stable12 Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	8 years ago
Roeland Jago Douma	ffe1429c4f	Pass new value to triggerChange ... it is not used. but pass in the empty string (on delete) and the new file (on create) Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Thomas Ebert	93d539b0cf	Add mimetype support for .URL (Windows) and .webloc (macOS) files. Update places/link svg. Add filetype/link icon. Add repair step for mime types. ... Signed-off-by: Thomas Ebert <thomas.ebert@te-online.net>	8 years ago
Roeland Jago Douma	84b7022118	Improve 2FA ... * Store the auth state in the session so we don't have to query it every time. * Added some tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	3cfe91bf0f	Add shareWith to email template metadata ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	be23f7e1de	Allow the expiration date to be set to null ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Robin Appelman	804d97d6ff	unlock file when an exception occurs during scanning ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Robin Appelman	18908af87b	Dont swallow exception when inserting mimetypes if we're inside a transaction ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago