18 Commits (ffbbdb2d04c900bcc4ed6bbcf97d4e5fc30dfad9)

Author	SHA1	Message	Date
Ferdinand Thiessen	5981b7eb51	chore: apply new CSFixer rules ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> # Conflicts: # apps/settings/lib/SetupChecks/PhpOpcacheSetup.php	6 months ago
Robin Appelman	8b0a3a774d	fix: throw a better error if we don't get an authorization header for secutity confirmation ... Signed-off-by: Robin Appelman <robin@icewind.nl>	6 months ago
Louis Chemineau	3bff9ee3e1	fix: Use login name to check the password ... Signed-off-by: Louis Chemineau <louis@chmn.me>	9 months ago
Louis Chemineau	a2f2f7ce93	feat: Use inline password confirmation in external storage settings ... Signed-off-by: Louis Chemineau <louis@chmn.me>	1 year ago
provokateurin	9836e9b164	chore(deps): Update nextcloud/coding-standard to v1.3.1 ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Daniel Kesselberg	af6de04e9e	style: update codestyle for coding-standard 1.2.3 ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	1 year ago
provokateurin	e5dcdfb9e0	feat(Security): Warn about using annotations instead of attributes ... Signed-off-by: provokateurin <kate@provokateurin.de>	1 year ago
Arthur Schiwon	f6d6efef3a	refactor(Token): introduce scope constants ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Arthur Schiwon	340939e688	fix(Session): avoid password confirmation on SSO ... SSO backends like SAML and OIDC tried a trick to suppress password confirmations as they are not possible by design. At least for SAML it was not reliable when existing user backends where used as user repositories. Now we are setting a special scope with the token, and also make sure that the scope is taken over when tokens are regenerated. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	2 years ago
Andy Scherzinger	dae7c159f7	chore: Add SPDX header ... Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>	2 years ago
Joas Schilling	aa5f037af7	chore: apply changes from Nextcloud coding standards 1.1.1 ... Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>	2 years ago
Joas Schilling	ecb8b55c5c	feat(security): Add PHP \Attribute for remaining security annotations ... Signed-off-by: Joas Schilling <coding@schilljs.com>	3 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
Christoph Wurst	5bf3d1bb38	Update license headers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	68748d4f85	Some php-cs fixes ... * Order the imports * No leading slash on imports * Empty line before namespace * One line per import * Empty after imports * Emmpty line at bottom of file Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Roeland Jago Douma	603b672a11	Update password confirmation middleware ... If the userbackend doesn't allow validating the password for a given uid then there is no need to perform this check. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Bjoern Schiessle	85d9f06cb8	add global site selector as user back-end which doesn't support password confirmation ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Roeland Jago Douma	57050146f6	Move passwordconfirmation to its own midleware ... Add tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago