Commit graph

5442 commits

Author SHA1 Message Date
Arthur Schiwon
15f160f8b9
Revert "Revert "[stable28] Apply group limit on remove from group"" 2024-08-19 16:11:38 +02:00
Arthur Schiwon
f2559e4480
Revert "[stable28] Apply group limit on remove from group" 2024-08-19 15:27:34 +02:00
Côme Chilliet
c999fea57c fix: Remove call to non-existing method in 28 and add missing use in test
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-08-19 10:33:11 +02:00
Côme Chilliet
1cf8815237 fix(tests): Fix PHP 8.0 compatibility
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-08-19 10:33:11 +02:00
Côme Chilliet
716ecf4e37 fix(tests): Adapt tests to change of DefaultShareProvider constructor
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-08-19 10:33:11 +02:00
Ferdinand Thiessen
e102c752f9 fix: OCP\Files\Node\Folder::search was not setting the owner
The owner was not set on the file info causing e.g. webdav searches to never return the known owner.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-07-30 11:05:22 +00:00
Joas Schilling
b087e140e6
fix(mail): Fix big logos in mail templates for Outlook
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-07-19 10:11:43 +02:00
Daniel Kesselberg
ee65749138
test: run tests in child process
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2024-07-11 00:25:32 +02:00
Andy Scherzinger
e319057a93
Merge pull request #45955 from nextcloud/backport/45228/stable28
[stable28] fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root
2024-07-10 22:29:01 +02:00
Andy Scherzinger
e57dd34846
Merge pull request #45920 from nextcloud/backport/45582/stable28
[stable28] delete background jobs by id when cleaning up
2024-07-10 22:26:43 +02:00
Côme Chilliet
82f9c66dfc fix(tests): Strong type property $router in RouterTest
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
2024-07-10 14:38:34 +02:00
Steve Mokris
1226e79cf1 fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root
Signed-off-by: Steve Mokris <steve@kosada.com>
2024-07-10 14:38:34 +02:00
Robin Appelman
5a9e8e7d3f feat: add setup check for needed mimetype migrations
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-06-21 11:37:13 +02:00
Robin Appelman
1b346aa9a4 test: update DummyJobList
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-06-17 13:25:03 +02:00
Robin Appelman
0ab1cc5f17 refactor: make share manager buildable
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-06-13 18:34:51 +02:00
Arthur Schiwon
b54668be35
Merge pull request #45704 from nextcloud/backport/43942/stable28
[stable28] fix(Session): avoid password confirmation on SSO
2024-06-12 14:31:37 +02:00
Arthur Schiwon
4ec174197f
fix(Token): make new scope future compatible
- "password-unconfirmable" is the effective name for 30, but a draft
  name was backported.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-12 11:25:35 +02:00
Arthur Schiwon
86a496d589
fix(Session): avoid password confirmation on SSO
SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-12 11:14:25 +02:00
Ferdinand Thiessen
95cd3d59bd fix(Mailer): Allow to enforce strict email format
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-06-11 18:38:00 +02:00
John Molakvoæ
4c7285623c
Merge pull request #45294 from nextcloud/backport/44791/stable28 2024-06-07 12:18:35 +02:00
Benjamin Gaussorgues
ca5cfdf88a fix(groups): allows to save group names with more than 64 characters
Mimic behaviour from LDAP users and add a hard limit to 255 characters

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-05-31 10:54:53 +02:00
Christoph Wurst
3534f3dd7a fix(session): Do not update authtoken last_check for passwordless
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-05-29 13:23:05 +02:00
Joas Schilling
5b07cfa5db
fix: Extend SVG reference check
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-05-16 10:03:54 +02:00
Robin Appelman
d1d6e79375
test: adjust test to new permissions check logic
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-05-13 16:41:56 +02:00
Florian Klinger
ca655ba100 fix: add check for app_api_system session flag to bypass rate limit
Signed-off-by: Florian Klinger <florian.klinger@nextcloud.com>
Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
2024-04-17 11:22:05 +02:00
Benjamin Gaussorgues
2981694fc9
Merge pull request #44446 from nextcloud/backport/43057/stable28 2024-04-17 10:06:14 +02:00
Robin Appelman
da114d5c7d test: add test for jail watcher
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-04-10 01:21:01 +02:00
Christopher Ng
eb063928f1 test: Update tests
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2024-04-08 17:09:26 -07:00
Côme Chilliet
d6066bf73d fix(tests): Fix tests when daytime saving time change happened recently
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2024-04-02 11:16:10 +00:00
Benjamin Gaussorgues
db00cd54ba feat(perf): add cache for authtoken lookup
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-03-25 08:37:00 +00:00
Christoph Wurst
3eb8082f0c fix(config): Make sure user keys are strings
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-03-19 17:30:47 +00:00
Klaus
354387b135 fix xml ocs response for serializable objects
Signed-off-by: sualko <klaus@jsxc.org>
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-03-18 01:13:19 +00:00
Ferdinand Thiessen
d0d9b39843 fix(JSResourceLocator): Consider configured app roots for files
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-03-07 08:03:09 +00:00
Julius Härtl
a258abfe59 fix: Fetch custom app store url without internet connection
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-03-04 20:17:01 +00:00
John Molakvoæ
f318c296ee
Merge pull request #43833 from nextcloud/backport/43428/stable28 2024-02-29 11:33:03 +01:00
Benjamin Gaussorgues
a4a7d82a0c feat(share): save date and time for expiration
Because of timezones, not saving time can lead to unexpected behaviour
when sharing an item sooner than timezone offset
Example: sharing a file before 9am when in UTC+9

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-02-26 09:12:03 +00:00
FedericoHeichou
354f895fa5 Add "-i" to MailTest's pipe
Signed-off-by: FedericoHeichou <federicoheichou@gmail.com>
2024-02-23 15:15:59 +00:00
Ferdinand Thiessen
933ad5e4d2
Merge pull request #43181 from nextcloud/backport/42930/stable28
[stable28] Fix: config param 'overwritecondaddr' not working
2024-02-03 12:16:56 +01:00
Ferdinand Thiessen
257ea23245
Merge pull request #43133 from nextcloud/backport/43099/stable28
[stable28] fix(tests): Make PostgreSQL unit tests less flacky by ordering
2024-02-01 19:20:26 +01:00
Joas Schilling
f1af8ea48d fix(tests): Make PostgreSQL unit tests less flacky by ordering
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-02-01 12:19:08 +01:00
Robin Appelman
404b340dda add test for updating etag with unchanged mtime in child folder
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-01-31 18:27:29 +00:00
Robin Appelman
f56a8e7e9e add test for updating etag with unchanged mtime
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-01-31 18:27:29 +00:00
Arthur Schiwon
d7b8f586d4 test(unit): fix RequestTest
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-01-29 09:58:56 +00:00
Git'Fellow
980b14f629 fix(session): Avoid two useless authtoken DB queries for every anonymous request
Co-Authored-By: Christoph Wurst <christoph@winzerhof-wurst.at>
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2024-01-17 09:16:22 +00:00
Joas Schilling
1c38f8952f
fix(appstore): Only send subscription keys to valid appstores
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-01-16 10:16:57 +01:00
Julius Härtl
1712df7881 perf: Use more performant way to obtain and check the email as a login name with token login
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-01-09 15:02:38 +01:00
Robin Appelman
f516e9599b
Merge pull request #42450 from nextcloud/backport/37469/stable28
[stable28] restore shared lock ttl to previous value when releasing
2024-01-02 14:50:14 +01:00
Alexander Piskun
1d0b10b12c AppAPI: allowed to bypass Two-Factor
Signed-off-by: Alexander Piskun <bigcat88@icloud.com>
2023-12-29 08:44:13 +00:00
Robin Appelman
2078ad79bd adjust redis compareSetTTL to use a lua script
Signed-off-by: Robin Appelman <robin@icewind.nl>
2023-12-22 09:54:13 +00:00
Robin Appelman
6ba6c95bab restore shared lock ttl when releasing
Signed-off-by: Robin Appelman <robin@icewind.nl>
2023-12-22 09:54:13 +00:00