52 Commits (f4f7c757d45cdcb8d9dc170249a09bc22cd2a994)

Author	SHA1	Message	Date
Andy Scherzinger	1f7e2ba599	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Joas Schilling	33385d7ecb	fix(tests): Adjust unit tests ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Joshua Trees	a4032a3800	Add some tests for input trimming in LostController.php ... Signed-off-by: Joshua Trees <me@jtrees.io>	3 years ago
Joas Schilling	875e6cf7e6	fix(CI): Adjust expected result ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
Côme Chilliet	1cb0c2ac52	Fix LostController test ... Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Thomas Citharel	abe5ff3654	Make LostController use IInitialState and LoggerInterface ... Signed-off-by: Thomas Citharel <tcit@tcit.fr>	4 years ago
Thomas Citharel	6283d14fa6	Modernize the LostControllerTest test ... Remove some depreciated at() calls Signed-off-by: Thomas Citharel <tcit@tcit.fr>	4 years ago
Thomas Citharel	44e13848a1	Add password reset typed events ... These hooks are only used in the Encryption app from what I can see. Signed-off-by: Thomas Citharel <tcit@tcit.fr>	4 years ago
Carl Schwan	b70c6a128f	Update core to PHP 7.4 standard ... - Typed properties - Port to LoggerInterface Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
Arthur Schiwon	6857136f06	fixes missing prefix to validate password reset token ... - also fixes the test which missed asserting the presence of it Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Arthur Schiwon	19cc757531	move verification token logic out of lost password controller ... - to make it reusable - needed for local email verification Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	4 years ago
Joas Schilling	6ed4aaeeea	Send emails on password reset to the displayname ... Signed-off-by: Joas Schilling <coding@schilljs.com>	5 years ago
Morris Jobke	234b510652	Change PHPDoc type hint from PHPUnit_Framework_MockObject_MockObject to \PHPUnit\Framework\MockObject\MockObject ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	5 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function ... To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	afbd9c4e6e	Unify function spacing to PSR2 recommendation ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	2fbad1ed72	Fix (array) indent style to always use one tab ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	b80ebc9674	Use the short array syntax, everywhere ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	2ee65f177e	Use the shorter phpunit syntax for mocked return values ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	c007ca624f	Make phpunit8 compatible ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Daniel Kesselberg	9c4c5ee818	Add test case for existing user with token null ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Daniel Kesselberg	7f7c6e49b6	Return the disabled user mock instead of the existing ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Julius Härtl	3b0d13944a	Move actual password reset to vue ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Roeland Jago Douma	b6dd2ebd39	Use proper exception in lostController ... There is no need to log the expcetion of most of the stuff here. We should properly log them but an exception is excessive. This moves it to a proper exception which we can catch and then log. The other exceptions will still be fully logged. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Daniel Kesselberg	d57540ac84	Return first value from $users ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Roeland Jago Douma	ac8a6e2244	Clean pending 2FA authentication on password reset ... When a password is reste we should make sure that all users are properly logged in. Pending states should be cleared. For example a session where the 2FA code is not entered yet should be cleared. The token is now removed so the session will be killed the next time this is checked (within 5 minutes). Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	f42115d6bb	Fix tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	cf3f4888cc	Change password expiration time from 12h to 7d ... We use the same logic for creating accounts without a password and there the 12h is a bit short. Users don't expect that the signup link needs to be clicked within 12h - 7d should be a more expected behavior. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Daniel Kesselberg	031fdfb1fc	Enable password reset for user with same email address when only one is active ... When two or more user share the same email address its not possible to reset password by email. Even when only one account is active. This pr reduce list of users returned by getByEmail by disabled users. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Bjoern Schiessle	3c5fb2b52b	update unit tests ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Robin Appelman	8ed50d4b63	prefill userid for login after password reset ... Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Roeland Jago Douma	8d1dd1945f	Fix tests ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	43e498844e	Use ::class in test mocks ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Joas Schilling	3119fd41ce	Set the data from the template ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Joas Schilling	d5c6d56170	No password reset for disabled users ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Roeland Jago Douma	ba7cf03daf	Fix LostControllerTest ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Joas Schilling	0828df5ed4	Disable the API endpoints as well ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Morris Jobke	16c4755e03	Rename renderHTML to renderHtml ... * fixes #4383 * improves consistency Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Lukas Reschke	727688ebd9	Adjust existing bruteforce protection code ... - Moves code to annotation - Adds the `throttle()` call on the responses on existing annotations Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Morris Jobke	1f962f9115	Update email template for lost password email ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	5b4adf66e5	Move OC_Defaults to OCP\Defaults ... * currently there are two ways to access default values: OCP\Defaults or OC_Defaults (which is extended by OCA\Theming\ThemingDefaults) * our code used a mixture of both of them, which made it hard to work on theme values * this extended the public interface with the missing methods and uses them everywhere to only rely on the public interface Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Joas Schilling	4bae7ef96d	Allow to reset the password with the email as an input ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Bjoern Schiessle	fcda3a20f4	create new encryption keys on password reset and backup the old one ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	9 years ago
Bjoern Schiessle	16bbd3fd7c	fix password reset if encryption is enabled ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	9 years ago
Roeland Jago Douma	dca9184a12	Fix tests ... * Tests fixed and controller coverage to 100% Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Lukas Reschke	6d686c213b	[WIP] Use mail for encrypting the password reset token as well	9 years ago
Joas Schilling	ed30b1f645	Use our base class everywhere ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Joas Schilling	877cb06bfe	Use magic DI for core controllers ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Joas Schilling	736e884e9a	Move the reset token to core app	10 years ago
Julius Haertl	d065980814	Add more tests for OC\Core\Controller\LostController ... - remove testResetFormUnsuccessful as it is now splitted up in different test cases - add testResetFormInvalidToken to check if timestamp and token are present - add testResetFormInvalidTokenMatch to check if the saved token matches the provided - add testResetFormExpiredToken to check if expiration detection works - add testResetFormValidToken to check if detection of valid tokens works	10 years ago
Joas Schilling	392bc0c6b9	Move tests/core/ to PSR-4	10 years ago