11 Commits (eb1d5fdaf8b077809100b1db48688301be2c19fb)

Author	SHA1	Message	Date
Roeland Jago Douma	eb1d5fdaf8	Use correct typehint	10 years ago
Robin Appelman	e51467689d	mount custom cache folder using mount providers	10 years ago
Thomas Müller	55735e1450	Translate contacts birthday - fixes #23982	10 years ago
Roeland Jago Douma	5cd8382d39	Add lazyRootFolder	10 years ago
Robin Appelman	cdedda99e4	Make lock ttl configurable	10 years ago
Bjoern Schiessle	93ed965cbb	fix creation of versions of encrypted files on external storages ... in order to create a 1:1 copy of a file if a version gets created we need to store this information on copyBetweenStorage(). This allows us to by-pass the encryption wrapper if we read the source file.	10 years ago
Morris Jobke	76455204c0	Inject server root - allows proper testing and separation of concerns	10 years ago
Lukas Reschke	5278bfe0e4	Add support for custom values in integrity checker	10 years ago
Robin Appelman	54e750ba78	dont die when we cant save the resized avatar, log instead	10 years ago
Roeland Jago Douma	d16b371e38	POC for PSR-4 autoloader server.php => Server.php	10 years ago
Lukas Reschke	933f60e314	Update author information ... Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	10 years ago
Roeland Jago Douma	b539bb15e1	Make scrutinizer happy	10 years ago
Roeland Jago Douma	7abb8693a1	getRootFolder should not setup the FS for any user ... Fixes #22467 This can go wrong when an app (take the ldap app) DIs something that needs the rootFolder. This break if we use cookie auth since then we know the user at that point and thus try to setup the fs for that user. However if there are then incomming shares from an ldap user they will fails since the user manager can't find them yet. Now getRootFolder does not setup the fs for any user.	10 years ago
Morris Jobke	de58364eb8	Handles null as return code and uses proper UserFolder in trashbin	10 years ago
Arthur Schiwon	03d0fb4e3f	revolutionar: change updates might even sent the new value (optional)	10 years ago
Arthur Schiwon	3a796d1e15	Consolidate getQuota and setQuota methods in User instance	10 years ago
Arthur Schiwon	cd00751de5	Send events when enabling and disabling of apps	10 years ago
Roeland Jago Douma	fc215d0980	Make the share object lazy ... Share providers can now just pass in a fileId. And the node will only be created once needed.	10 years ago
Roeland Jago Douma	96662c4d0d	[Share 2.0] Fix shareManager	10 years ago
Lukas Reschke	809ff5ac95	Add public API to give developers the possibility to adjust the global CSP defaults ... Allows to inject something into the default content policy. This is for example useful when you're injecting Javascript code into a view belonging to another controller and cannot modify its Content-Security-Policy itself. Note that the adjustment is only applied to applications that use AppFramework controllers. To use this from your `app.php` use `\OC::$server->getContentSecurityPolicyManager()->addDefaultPolicy($policy)`, $policy has to be of type `\OCP\AppFramework\Http\ContentSecurityPolicy`. To test this add something like the following into an `app.php` of any enabled app: ``` $manager = \OC::$server->getContentSecurityPolicyManager(); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFrameDomain('asdf'); $policy->addAllowedScriptDomain('yolo.com'); $policy->allowInlineScript(false); $manager->addDefaultPolicy($policy); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFontDomain('yolo.com'); $manager->addDefaultPolicy($policy); $policy = new \OCP\AppFramework\Http\ContentSecurityPolicy(false); $policy->addAllowedFrameDomain('banana.com'); $manager->addDefaultPolicy($policy); ``` If you now open the files app the policy should be: ``` Content-Security-Policy:default-src 'none';script-src yolo.com 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src yolo.com 'self';connect-src 'self';media-src 'self';frame-src asdf banana.com 'self' ```	10 years ago
Roeland Jago Douma	f2e70441e4	[Share 2.0] Add getShareManager to OCP\IServerContainer	10 years ago
Lukas Reschke	cb1a64b949	Check whether ownCloud is installed ... ownCloud might not yet be setup. This causes an issue as the user config requires a setup ownCloud. Thus this needs a block whether ownCloud is installed or not. Fixes https://github.com/owncloud/core/issues/21955	10 years ago
Joas Schilling	043625ee52	Move findLanguage() and setLanguageFromRequest() to factory	10 years ago
Lukas Reschke	a977465af5	Add new CSRF manager for unit testing purposes ... This adds a new CSRF manager for unit testing purposes, it's interface is based upon https://github.com/symfony/security-csrf. Due to some of our required custom changes it is however not possible to use the Symfony component directly.	10 years ago
Morris Jobke	287e6d36bf	remove unused variable	10 years ago
Joas Schilling	ee02165005	Move the notification API to public namespace	10 years ago
Vincent Petry	899f9bd113	Allow custom implementation of system tag managers ... Added config.php option to replace the default implementation of system tag manager and system tag object mapper. Also adjusted the comments manager factory to inject the server container	10 years ago
Robin Appelman	be380accb9	clear mount cache when deleting user	10 years ago
Robin Appelman	8940429976	log duplicates	10 years ago
Robin Appelman	cf6ee1c866	cache mountpoints in the db	10 years ago
Thomas Müller	aeb89947a2	Introduce IUser::setEMailAddress and add hook mechanism	10 years ago
Roeland Jago Douma	7a946a05f5	Properly DI the servercontainer	10 years ago
Robin McCorkell	da4127d23b	Introduce CredentialsManager for storage of credentials in DB ... CredentialsManager performs a simple role, of storing and retrieving encrypted credentials from the database. Credentials are stored by user ID (which may be null) and credentials identifier. Credentials themselves may be of any type that can be JSON encoded. The rationale behind this is to avoid further (mis)use of oc_preferences, which was being used for all manner of data not related to user preferences.	10 years ago
Roeland Jago Douma	67b7ebccd1	[Share 2.0] Add share provider factory ... * Add providers * Add share manager to server container * Use share manager from server container * Properly get the share manager	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Robin Appelman	c15cab7ed6	Allow admins to add system wide root certificates	10 years ago
Roeland Jago Douma	77c611d339	Just query the securerandom from the container	10 years ago
Morris Jobke	190cc2bb67	Remove OC_DB::getConnection	10 years ago
Joas Schilling	412e4ed3f6	Register app containers in the OC container	10 years ago
Roeland Jago Douma	0a09004d39	Inject Config into SystemConfig	10 years ago
Arthur Schiwon	e3dbc3d40c	different strategy in cleaning up after user was deleted ... we do not listen to deletion hooks anymore, because there is no guarantee that they will be heard - requires that something fetches the CommentsManager first. Instead, in the user deletion routine the clean up method will be called directly. Same way as it happens for files, group memberships, config values.	10 years ago
Arthur Schiwon	2ce2de0ae5	add icommentsmanger and icomment implementation ... register CommentsManager service, allow override, document in config.sample.php don't insert autoincrement ids in tests, because of dislikes from oracle and pgsql specify timezone in null date only accepts strings for ID parameter that can be converted to int replace forgotten hardcoded IDs in tests react on deleted users react on file deletion Postgresql compatibility lastInsertId needs *PREFIX* with the table name do not listen for file deletion, because it is not reliable (trashbin, external storages) add runtime cache for comments	10 years ago
Roeland Jago Douma	b00db2c933	DI in avatar code ... * DI in avatar code * Use the node API * More unit tests * Unit tests no longer require DB	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF\nBQAwIzEhMB8GA1UECgwYb3duQ2xvdWQgQ29kZSBTaWduaW5nIENBMB4XDTE1MTAx\nNDEzMTcxMFoXDTE2MTAxNDEzMTcxMFowEzERMA8GA1UEAwwIY29udGFjdHMwgZ8w\nDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANoQesGdCW0L2L+a2xITYipixkScrIpB\nkX5Snu3fs45MscDb61xByjBSlFgR4QI6McoCipPw4SUr28EaExVvgPSvqUjYLGps\nfiv0Cvgquzbx/X3mUcdk9LcFo1uWGtrTfkuXSKX41PnJGTr6RQWGIBd1V52q1qbC\nJKkfzyeMeuQfAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAvF/KIhRMQ3tYTmgHWsiM\nwDMgIDb7iaHF0fS+/Nvo4PzoTO/trev6tMyjLbJ7hgdCpz/1sNzE11Cibf6V6dsz\njCE9invP368Xv0bTRObRqeSNsGogGl5ceAvR0c9BG+NRIKHcly3At3gLkS2791bC\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Vincent Petry	b666367a79	Added system tags data structure and PHP side managers ... Added SystemTagManager and SystemTagObjectMapper	10 years ago
Robin Appelman	b05c8faba8	Dont die when we're missing a route	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Lukas Reschke	8133d46620	Remove dependency on ICrypto + use XOR	10 years ago
Morris Jobke	8366ce2767	deduplicate @xenopathic	10 years ago
Morris Jobke	b945d71384	update licence headers via script	10 years ago