Commit graph

23482 commits

Author SHA1 Message Date
Joas Schilling
0aa91164b5 fix(2fa): Fix 2FA session setup when ephemeral session is used
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-08-26 13:46:11 +00:00
Maxence Lange
a8280bcada fix(federation): allows equal signs in federation id
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2025-06-01 14:06:35 +02:00
Andy Scherzinger
53f71da473
Merge pull request #52044 from nextcloud/backport/52013/stable28
[stable28] fix: Handle missing share providers when promoting reshares
2025-04-16 09:53:03 +02:00
Christoph Wurst
829ca3df55
fix(session): Only mark sessions of permanent tokens as app passwords
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2025-04-09 07:48:30 +02:00
Daniel Calviño Sánchez
03f39ee8da fix: Handle missing share providers when promoting reshares
The provider for mail shares is not available when the "sharebymail" app
is disabled, and in that case a "ProviderException" is thrown when
trying to get it.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2025-04-08 13:35:15 +00:00
Andy Scherzinger
7848ef4983
Merge pull request #51329 from nextcloud/backport/51130/stable28
[stable28] fix: Do not build encrypted password if there is none
2025-03-28 15:17:33 +01:00
Joas Schilling
0414f45a06 fix(auth): Allow 2FA challenges for Ephemeral sessions
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-03-18 09:16:22 +00:00
Joas Schilling
e9974dd884
Merge pull request #51368 from nextcloud/backport/51361/stable28
[stable28] fix(base.php): Correct order for booting \OC\Server
2025-03-18 08:30:14 +01:00
Ferdinand Thiessen
d3802120ca
fix(lookup-server): disable lookup server for non-global scale setups
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-12 11:48:08 +01:00
Ferdinand Thiessen
e7793a3ea9 fix(lookup-server): do not query data by default
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-12 10:01:52 +00:00
Joas Schilling
8269001b6e fix(base.php): Correct order for booting \OC\Server
A recent change had broken authentication with an older
FastCGI Apache2 module, because the IRequest object got
initialised before the fix from self::handleAuthHeaders()
copied the authentication headers into the correct $_SERVER
variables.
Since this part is completely independent from any Nextcloud
code it is now done as a first thing within the init() call.

Additionally similar issues could happen when another class
would boot too early and read other global PHP settings like
ini values and default timezone, so those are now also moved
to the beginning.

Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-03-10 11:31:04 +00:00
Julius Knorr
55846e332a fix: Do not build encrypted password if there is none
Signed-off-by: Julius Knorr <jus@bitgrid.net>
2025-03-07 15:53:07 +00:00
Louis Chemineau
862265f1cc fix(login): Properly target public page with attribute
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-05 16:58:41 +00:00
Andy Scherzinger
3de33eab54
Merge pull request #51254 from nextcloud/backport/50989/stable28
[stable28] fix: Use case insensitive check when validating login name
2025-03-05 17:47:09 +01:00
Andy Scherzinger
923750b026
Merge pull request #51059 from nextcloud/backport/51050/stable28
[stable28] fix: Report duplicated extra files in integrity check
2025-03-05 17:40:31 +01:00
Marcel Müller
056d1fa0b5
fix: No IFactory in constructor
Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>
2025-03-05 12:48:51 +01:00
Joas Schilling
ccae0e3070 fix(files): Don't do session related work in the constructor of the View
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-03-05 11:44:34 +00:00
Cleopatra Enjeck M.
935fa11e1e fix: use mb_strtolower to convert login name
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 06:21:24 +00:00
Cleopatra Enjeck M.
de9e9ab1c2 fix: Improve string comparison
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 06:21:24 +00:00
Cleopatra Enjeck M.
32b181de51 fix: Use case insensitive check when validating login name
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 06:21:24 +00:00
provokateurin
62fb78acc9
refactor(TempManager): Simplify and unify implementations and remove legacy behavior
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-04 07:51:30 +01:00
Louis Chemineau
f284df08cd
fix(login): Support subfolder install for ephemeral sessions
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-03 14:40:29 +01:00
Louis Chemineau
c392c2ba04
fix(login): Also check legacy annotation for ephemeral sessions
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-03 11:42:41 +01:00
Louis Chemineau
716b08101d
feat: Close sessions created for login flow v2
Sessions created during the login flow v2 should be short lived to not leave an unexpected opened session in the browser.

This commit add a property to the session object to track its origin, and will close it as soon as possible, i.e., on the first non public page request.

Signed-off-by: Louis Chemineau <louis@chmn.me>

[skip ci]

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-03 11:38:06 +01:00
Louis Chemineau
3e95b60b58 fix: Report duplicated extra files in integrity check
The `array_diff` is not comparing the array keys. This means that an extra key with an expected hash will not be reported. Using `array_diff_assoc` will report such files.

For example, copying `status.php` to `status 2.php`, will only be reported with the new version.

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-02-26 13:23:02 +00:00
Robin Appelman
83986127f5
fix: make locked exception path relative to the view
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-02-13 11:21:40 +01:00
provokateurin
9dc6af6f23 fix(Http): Only allow valid HTTP status code values via template
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-02-12 14:18:56 +01:00
SebastianKrupinski
74f1f2a9cd fix: replace null character when serializing
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
2025-02-05 18:49:52 +01:00
Robin Appelman
0549f57f88
fix: explicitly ignore nested mounts when transfering ownership
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-02-05 15:07:25 +01:00
Robin Appelman
421ea50434
fix: translate mount move error messages
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-02-05 15:07:25 +01:00
Robin Appelman
f344c69b82
fix: improve checks for moving shares/storages into other mounts
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-02-05 15:07:22 +01:00
Ferdinand Thiessen
043841a54d
fix(sharing): Move permission validation to share manager
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-31 19:14:45 +01:00
Nextcloud bot
e6259f89a8
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-23 00:22:10 +00:00
Nextcloud bot
a3e5437da3
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-22 00:22:06 +00:00
Nextcloud bot
144f45c694
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-21 00:21:31 +00:00
Nextcloud bot
8bc04680cc
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-20 00:21:24 +00:00
Nextcloud bot
93b6f26f27
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-17 00:21:50 +00:00
Nextcloud bot
cf1e536525
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-14 07:59:10 +00:00
Nextcloud bot
6c9bb46aea
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-13 00:21:37 +00:00
Nextcloud bot
843849cb91
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-11 00:21:31 +00:00
Nextcloud bot
5f11024f27
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-10 00:21:43 +00:00
Nextcloud bot
62ebeb236c
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-08 00:21:37 +00:00
provokateurin
e99cce6c2e
fix(HTTP): Adjust JSONResponse data type
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-01-07 08:11:42 +01:00
Luka Trovic
7cc76d83b1
Merge pull request #49931 from nextcloud/backport/49927/stable28
[stable28] fix: promote re-shares when deleting the parent share
2025-01-06 01:11:33 -08:00
Nextcloud bot
571f1088bb
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-06 00:30:52 +00:00
Nextcloud bot
854eab0290
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-01-03 00:21:55 +00:00
Nextcloud bot
4f6c4bd162
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-12-28 00:21:52 +00:00
Nextcloud bot
12fc8e2af8
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-12-26 00:22:01 +00:00
Nextcloud bot
33aebce3b3
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-12-25 00:22:26 +00:00
Nextcloud bot
e7ec2d4f50
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2024-12-24 00:21:51 +00:00