You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Micke Nordin dae8a36460 fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin ... RFC 7517 §4.5 leaves the keyid structure unspecified, so the receiver must not parse it. The signer origin now comes from the trusted OCM share/sender identity; the JWK Set is resolved against that origin and the keyid is matched opaquely to the JWKS kid. Aligns with the OCM verification procedure and fixes the origin-mismatch / flaky-kid failures in the two-port integration rig. Reverts the per-request host-based kid back to a stable persisted kid, drops keyid->host parsing, threads a sender-origin parameter through verification, and resolves that origin in every OCM inbound entry point (notifications, shares, token exchange, OCM requests) and the federation rate limiter. Cavage is unchanged. Assisted-by: ClaudeCode:glm-5.2 Signed-off-by: Micke Nordin <kano@sunet.se>		2 weeks ago
..
Bruteforce	chore: Apply new coding standard to all files	3 months ago
CSP	chore: Apply new coding standard to all files	3 months ago
Events	fix: Mark some parameters as sensitive	1 month ago
FeaturePolicy	chore: Apply new coding standard to all files	3 months ago
Ip	feat: Add setting to bypass password confirmation on a selected ip ranges	2 weeks ago
RateLimiting	chore(deps): Bump nextcloud/coding-standard in /vendor-bin/cs-fixer	2 years ago
Signature	fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin	2 weeks ago
VerificationToken	fix: Mark some parameters as sensitive	1 month ago
IContentSecurityPolicyManager.php	chore: Apply new coding standard to all files	3 months ago
ICredentialsManager.php	fix: Mark some parameters as sensitive	1 month ago
ICrypto.php	fix: Mark some parameters as sensitive	1 month ago
IHasher.php	chore: Apply new coding standard to all files	3 months ago
IRemoteHostValidator.php	chore: Apply new coding standard to all files	3 months ago
ISecureRandom.php	chore(ISecureRandom): Deprecate generate() in favor of Randomizer::getBytesFromString()	2 months ago
ITrustedDomainHelper.php	chore: Apply new coding standard to all files	3 months ago
PasswordContext.php	chore: Apply new coding standard to all files	3 months ago