Commit graph

6930 commits

Author SHA1 Message Date
Robin Appelman
0ab1cc5f17 refactor: make share manager buildable
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-06-13 18:34:51 +02:00
Daniel Kesselberg
01a6c9119e test: add tests for ProfilePageController
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2024-06-12 19:35:45 +02:00
John Molakvoæ
b9857b9a7f
Merge pull request #45817 from nextcloud/backport/45698/stable28 2024-06-12 16:30:45 +02:00
Arthur Schiwon
b54668be35
Merge pull request #45704 from nextcloud/backport/43942/stable28
[stable28] fix(Session): avoid password confirmation on SSO
2024-06-12 14:31:37 +02:00
skjnldsv
f1f2f5ca98 fix(files_sharing): dark avatar support
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-06-12 13:30:16 +02:00
Arthur Schiwon
4ec174197f
fix(Token): make new scope future compatible
- "password-unconfirmable" is the effective name for 30, but a draft
  name was backported.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-12 11:25:35 +02:00
Arthur Schiwon
86a496d589
fix(Session): avoid password confirmation on SSO
SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-12 11:14:25 +02:00
Ferdinand Thiessen
95cd3d59bd fix(Mailer): Allow to enforce strict email format
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-06-11 18:38:00 +02:00
John Molakvoæ
4c7285623c
Merge pull request #45294 from nextcloud/backport/44791/stable28 2024-06-07 12:18:35 +02:00
Benjamin Gaussorgues
ca5cfdf88a fix(groups): allows to save group names with more than 64 characters
Mimic behaviour from LDAP users and add a hard limit to 255 characters

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-05-31 10:54:53 +02:00
Christoph Wurst
3534f3dd7a fix(session): Do not update authtoken last_check for passwordless
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-05-29 13:23:05 +02:00
Joas Schilling
5b07cfa5db
fix: Extend SVG reference check
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-05-16 10:03:54 +02:00
Robin Appelman
d1d6e79375
test: adjust test to new permissions check logic
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-05-13 16:41:56 +02:00
Florian Klinger
ca655ba100 fix: add check for app_api_system session flag to bypass rate limit
Signed-off-by: Florian Klinger <florian.klinger@nextcloud.com>
Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
2024-04-17 11:22:05 +02:00
Benjamin Gaussorgues
2981694fc9
Merge pull request #44446 from nextcloud/backport/43057/stable28 2024-04-17 10:06:14 +02:00
Robin Appelman
da114d5c7d test: add test for jail watcher
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-04-10 01:21:01 +02:00
Christopher Ng
eb063928f1 test: Update tests
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-04-08 17:09:26 -07:00
Côme Chilliet
d6066bf73d fix(tests): Fix tests when daytime saving time change happened recently
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-04-02 11:16:10 +00:00
Benjamin Gaussorgues
db00cd54ba feat(perf): add cache for authtoken lookup
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-03-25 08:37:00 +00:00
Christoph Wurst
3eb8082f0c fix(config): Make sure user keys are strings
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-03-19 17:30:47 +00:00
Klaus
354387b135 fix xml ocs response for serializable objects
Signed-off-by: sualko <klaus@jsxc.org>
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-03-18 01:13:19 +00:00
Eduardo Morales
3d9ed5e469 chore: update logincontroller tests
Signed-off-by: Eduardo Morales <emoral435@gmail.com>
2024-03-11 10:30:20 -05:00
Ferdinand Thiessen
d0d9b39843 fix(JSResourceLocator): Consider configured app roots for files
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-07 08:03:09 +00:00
Julius Härtl
a258abfe59 fix: Fetch custom app store url without internet connection
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-03-04 20:17:01 +00:00
John Molakvoæ
f318c296ee
Merge pull request #43833 from nextcloud/backport/43428/stable28 2024-02-29 11:33:03 +01:00
Benjamin Gaussorgues
a4a7d82a0c feat(share): save date and time for expiration
Because of timezones, not saving time can lead to unexpected behaviour
when sharing an item sooner than timezone offset
Example: sharing a file before 9am when in UTC+9

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-02-26 09:12:03 +00:00
FedericoHeichou
354f895fa5 Add "-i" to MailTest's pipe
Signed-off-by: FedericoHeichou <federicoheichou@gmail.com>
2024-02-23 15:15:59 +00:00
Joas Schilling
3decdd9b19 fix(tests): Fix remaining tests
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-02-22 08:41:26 +01:00
Louis Chemineau
c1ef86cbdd Fix tests after slow logout fix
Signed-off-by: Louis Chemineau <louis@chmn.me>
2024-02-22 08:41:26 +01:00
Gaspard d'Hautefeuille
7418c3e1f4 Cancel PR #37405, remove regression code
Signed-off-by: Gaspard d'Hautefeuille <github@dhautefeuille.eu>
2024-02-22 08:41:26 +01:00
Ferdinand Thiessen
933ad5e4d2
Merge pull request #43181 from nextcloud/backport/42930/stable28
[stable28] Fix: config param 'overwritecondaddr' not working
2024-02-03 12:16:56 +01:00
Ferdinand Thiessen
257ea23245
Merge pull request #43133 from nextcloud/backport/43099/stable28
[stable28] fix(tests): Make PostgreSQL unit tests less flacky by ordering
2024-02-01 19:20:26 +01:00
Joas Schilling
f1af8ea48d fix(tests): Make PostgreSQL unit tests less flacky by ordering
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-02-01 12:19:08 +01:00
Robin Appelman
404b340dda add test for updating etag with unchanged mtime in child folder
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-01-31 18:27:29 +00:00
Robin Appelman
f56a8e7e9e add test for updating etag with unchanged mtime
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-01-31 18:27:29 +00:00
Arthur Schiwon
d7b8f586d4 test(unit): fix RequestTest
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-01-29 09:58:56 +00:00
Git'Fellow
980b14f629 fix(session): Avoid two useless authtoken DB queries for every anonymous request
Co-Authored-By: Christoph Wurst <christoph@winzerhof-wurst.at>
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-01-17 09:16:22 +00:00
Joas Schilling
1c38f8952f
fix(appstore): Only send subscription keys to valid appstores
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-01-16 10:16:57 +01:00
Julius Härtl
1712df7881 perf: Use more performant way to obtain and check the email as a login name with token login
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-01-09 15:02:38 +01:00
Robin Appelman
f516e9599b
Merge pull request #42450 from nextcloud/backport/37469/stable28
[stable28] restore shared lock ttl to previous value when releasing
2024-01-02 14:50:14 +01:00
Alexander Piskun
1d0b10b12c AppAPI: allowed to bypass Two-Factor
Signed-off-by: Alexander Piskun <bigcat88@icloud.com>
2023-12-29 08:44:13 +00:00
Robin Appelman
2078ad79bd adjust redis compareSetTTL to use a lua script
Signed-off-by: Robin Appelman <robin@icewind.nl>
2023-12-22 09:54:13 +00:00
Robin Appelman
6ba6c95bab restore shared lock ttl when releasing
Signed-off-by: Robin Appelman <robin@icewind.nl>
2023-12-22 09:54:13 +00:00
Joas Schilling
704751f868 fix(security): Handle idn_to_utf8 returning false
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-12-04 11:18:51 +00:00
Anna Larch
e8481e428a [stable28] enh(userstatus): add OOO automation and remove calendar automation
Signed-off-by: Anna Larch <anna@nextcloud.com>
2023-11-28 15:44:23 +01:00
Richard Steinmetz
d593206a30
feat(dav): dispatch out-of-office started and ended events
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2023-11-23 17:54:10 +01:00
Joas Schilling
aa5f037af7
chore: apply changes from Nextcloud coding standards 1.1.1
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2023-11-23 10:36:13 +01:00
Ferdinand Thiessen
9c3321c524
Merge pull request #41565 from nextcloud/fix/object-storage-inconsitent-behavior
fix(ObjectStore): Make copying behavior consistent with local storage
2023-11-22 13:54:01 +01:00
Joas Schilling
572ea18ac7
fix: Fix linkToOCSRouteAbsolute() without index.php and subfolder
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-11-20 11:18:47 +01:00
Ferdinand Thiessen
ecf9f0a872
fix(CSP): Only add strict-dynamic when using nonces
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2023-11-17 22:01:02 +01:00