Commit graph

58911 commits

Author SHA1 Message Date
Joas Schilling
159676f044
Merge pull request #38280 from nextcloud/backport/38274/stable21
[stable21] fix(middleware): Also abort the request when reaching max delay in af…
2023-05-16 11:34:22 +02:00
Joas Schilling
9de7429958
Merge pull request #38273 from nextcloud/backport/38267/stable21
[stable21] fix(lostpassword): Also rate limit the setPassword endpoint
2023-05-16 10:27:32 +02:00
Joas Schilling
4318969883
fix(tests): Fix more tests in backport
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-16 06:39:31 +02:00
Robin Appelman
1a5cd605ff
Merge pull request #38286 from nextcloud/session-auth-check-username-21
[21] check the username when doing external storage session auth
2023-05-15 23:50:33 +02:00
Robin Appelman
9163d21e54
check the username when doing external storage session auth
Signed-off-by: Robin Appelman <robin@icewind.nl>
2023-05-15 17:08:14 +02:00
Joas Schilling
6ae4876fe9
fix(middleware): Also abort the request when reaching max delay in afterController
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-15 16:30:52 +02:00
Joas Schilling
33f5016998
fix(tests): Adjust unit tests
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-15 16:12:54 +02:00
Joas Schilling
8bf2d4ac52
fix(lostpassword): Also rate limit the setPassword endpoint
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-15 16:06:50 +02:00
Arthur Schiwon
c724d1835e
Merge pull request #38000 from nextcloud/backport/37909/stable21
[stable21]Update crl after revoke shifts.csr
2023-05-04 11:11:34 +02:00
Vitor Mattos
128086cd79 Update crl after revoke shifts.csr
Signed-off-by: Vitor Mattos <vitor@php.rio>
2023-05-01 07:49:24 -03:00
Joas Schilling
7bd32d4557
Merge pull request #37840 from nextcloud/bump/guzzle-psr7/stable21
[stable21] sec(deps): Update guzzlehttp/psr7
2023-04-27 09:37:38 +02:00
Joas Schilling
4c0f12fc86
sec(deps): Update guzzlehttp/psr7
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-26 15:54:20 +02:00
Joas Schilling
d0a9cc8442
Merge pull request #37259 from nextcloud/backport/37252/stable21
[stable21] fix(workflow): Check tag attribute
2023-03-16 15:07:36 +01:00
Joas Schilling
d11127faa4
fix(workflow): Check tag attribute
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-03-16 08:58:25 +01:00
John Molakvoæ
fdc1cfecb9
Merge pull request #36819 from nextcloud/backport/36814/stable21
[stable21] Validate the scope when validating operations
2023-02-23 07:52:26 +01:00
Joas Schilling
f76d04cff6
Also check the scope when reading operations from the database
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-02-23 06:23:53 +01:00
Joas Schilling
440fbe5205
Validate the scope when validating operations
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-02-23 06:23:53 +01:00
blizzz
80a1e24ea1
Merge pull request #36706 from nextcloud/backport/36700/stable21
[stable21] Also copy meta data when converting DataResponse to JSONRe…
2023-02-14 22:08:07 +01:00
Joas Schilling
890aa3277a
Also copy bruteforce meta data when converting DataResponse to JSONResponse
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-02-14 19:47:36 +01:00
Joas Schilling
10f5f1dcb9
Merge pull request #36405 from nextcloud/bump-guzzlehttp-stable21
[stable21] Bump guzzlehttp/guzzle and guzzlehttp/psr7
2023-02-07 19:45:52 +01:00
Joas Schilling
6a93773f2a
Bump guzzlehttp/guzzle and guzzlehttp/psr7
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-02-07 16:09:46 +01:00
Joas Schilling
2de572a557
Merge pull request #36577 from nextcloud/backport/36489/stable21
[stable21] Add bruteforce protection to password reset page
2023-02-07 10:46:16 +01:00
Joas Schilling
69c5dc2927
fix(CI): Adjust expected result
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-02-07 07:59:18 +01:00
Joas Schilling
50ce5e1c17
Add bruteforce protection to password reset page
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-02-07 07:53:26 +01:00
Vincent Petry
c08becb293
Merge pull request #36023 from nextcloud/backport/35975/stable21
[stable21] Update crl after revoke files_bpm.csr
2023-01-05 17:31:12 +01:00
Vitor Mattos
7b1fec1e9a Update crl after revoke files_bpm.csr
Signed-off-by: Vitor Mattos <vitor@php.rio>
2023-01-05 12:58:24 -03:00
Vincent Petry
6799be991b
Merge pull request #35680 from nextcloud/backport/35391/stable21
[stable21] Make sure that path is normalized and then checked and not the other way around
2022-12-16 16:27:29 +01:00
Côme Chilliet
88e1d6bbb7 Make sure that path is normalized and then checked,
and not the other way around

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-12-08 11:14:09 +00:00
blizzz
6cd6608524
Merge pull request #32966 from nextcloud/backport/32816/stable21
[stable21] handle stream wrappers in SeekableHttpStream
2022-11-03 13:30:45 +01:00
blizzz
a42c7f0c9d
Merge pull request #33679 from nextcloud/backport/33624/stable21
[stable21] Update CRL
2022-08-25 13:11:12 +02:00
Arthur Schiwon
a116dc9537
Update CRL
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2022-08-24 17:36:51 +02:00
Robin Appelman
ce5f0cacd1 handle stream wrappers in SeekableHttpStream
Signed-off-by: Robin Appelman <robin@icewind.nl>
2022-06-21 15:08:22 +00:00
blizzz
180cd9b41a
Merge pull request #31979 from nextcloud/backport/31826/stable21
[stable21] Log why the login token can't be used for credentials
2022-05-19 15:51:49 +02:00
Christoph Wurst
440b2fef63 Log why the login token can't be used for credentials
And always pass the exception object to the logger.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2022-05-19 13:03:07 +00:00
blizzz
f138ab8c61
Merge pull request #32477 from nextcloud/backport/32428/stable21
[stable21] Add Email validation
2022-05-19 12:14:29 +02:00
Anna Larch
ae3f3e517c Add email validation
Signed-off-by: Anna Larch <anna@nextcloud.com>
2022-05-18 09:53:11 +00:00
blizzz
9c609c434b
Merge pull request #32434 from nextcloud/backport/32305/stable21
[stable21] Fix user agent trimming on installation
2022-05-17 18:44:57 +02:00
Joas Schilling
17f4160f05 Fix user agent trimming on installation
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-05-16 13:13:36 +00:00
John Molakvoæ
6f9a3a4202
Merge pull request #31680 from nextcloud/backport/31658/stable21 2022-05-14 11:26:51 +02:00
John Molakvoæ
84b05047e9
Autoloader update
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
2022-05-14 10:51:25 +02:00
Joas Schilling
924eb1ea84 Fix unit tests
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-05-13 18:34:19 +00:00
Joas Schilling
efbbdb79df Limit the length of app password names
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-05-13 18:34:18 +00:00
Nextcloud bot
1ff0ad1203
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-05-02 02:29:53 +00:00
Nextcloud bot
7efc716885
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-04-30 02:27:58 +00:00
Nextcloud bot
eb724ea9cd
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-04-29 02:29:03 +00:00
Nextcloud bot
a9cb866419
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-04-28 02:29:14 +00:00
Nextcloud bot
079c323d89
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-04-27 02:32:05 +00:00
Nextcloud bot
c621d21ab3
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-04-26 02:28:58 +00:00
Nextcloud bot
bd26664329
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-04-25 02:28:21 +00:00
Nextcloud bot
359e17cf1d
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2022-04-24 02:29:02 +00:00