upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-02-28 12:30:40 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
83004 commits 699 branches 1186 tags 7 GiB
Commit graph

383 commits

Author SHA1 Message Date
Joas Schilling
e37dbc1487
chore: Bump app versions and requirements 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2025-09-04 09:11:05 +02:00
Christoph Wurst
ffd2b3bde0
fix(dav): Mark removal of dav object properties as expensive 
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
 2025-09-02 10:49:13 +02:00
Richard Steinmetz
e8986db7a4
perf(caldav): preload publish statuses for a whole calendar home at once 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2025-08-28 14:00:18 +02:00
Richard Steinmetz
b7dc720848
feat: calendar federation 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2025-08-27 17:14:15 +02:00
SebastianKrupinski
46e624a089 feat: Calendar Import 
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
 2025-08-27 08:30:33 -04:00
Richard Steinmetz
7c0ffc0759
perf: delete commonly used custom properties instead of setting the default value 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2025-08-13 20:07:43 +02:00
Hamza Mahjoubi
36d9fcbb4d feat(cardav): support result truncation for addressbook federation 
Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com>
 2025-08-06 14:04:55 +02:00
Christoph Wurst
ee00d166cd feat(dav): add occ commands to get and set absences 
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
 2025-07-30 22:22:22 +02:00
John Molakvoæ
2b50d9b2c5
Revert "perf(base): Stop setting up the FS for every basic auth request" 2025-07-11 17:07:44 +02:00
provokateurin
689a853dc6
fix(dav): Initialize the FS for the user right after authenticating 
Signed-off-by: provokateurin <kate@provokateurin.de>
 2025-07-08 11:38:58 +02:00
Ferdinand Thiessen
5981b7eb51
chore: apply new CSFixer rules 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

# Conflicts:
#	apps/settings/lib/SetupChecks/PhpOpcacheSetup.php
 2025-07-01 16:26:50 +02:00
Richard Steinmetz
960b3ec0eb refactor(dav): move shared logic to a dedicated example contact service 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2025-06-19 23:46:00 +02:00
Richard Steinmetz
b640c161ae
fix: harmonize design of default content settings section 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2025-06-16 11:59:34 +02:00
Louis
a48bc55e2a
Merge pull request #52810 from nextcloud/artonge/feat/do_not_require_samesite_strict_cookie_on_public.php 2025-05-22 10:30:16 +02:00
Louis Chemineau
009d0c550c
fix: Move CSRF check from base to PublicAuth for public.php 
This currently prevent directly accessing a ressource when clicking on a link on a third party site. Example, clicking on `https://example.com/public.php/dav/files/pqLWcA269zfzXez/?accept=zip` in a GitHub comment.

Skipping the check is an issue with password protected shares, as it allows third party sites to request the ressource when the user already entered the password, aka CSRF.  So after removing the check from `base.php`, we need to add the it again in the `PublicAuth` plugin.

We also add a redirect to be helpful to the user.

**Warning**: this adds the limitation that clicking on a direct download link for password protected shares will redirect you to the password form, and then to the main share view.

Fix #52482

Signed-off-by: Louis Chemineau <louis@chmn.me>
 2025-05-21 16:01:36 +02:00
Christoph Wurst
80b21cdc6e
Merge pull request #52879 from nextcloud/bug/noid/clear-dav-photo-cache 
Add command to clear dav's photo cache
 2025-05-19 18:10:07 +02:00
Ferdinand Thiessen
3d113ab6cc
refactor(dav): use Node API instead of private files view for filedrop plugin 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2025-05-16 14:37:30 +02:00
Richard Steinmetz
3699eed678
Merge pull request #52708 from nextcloud/fix/dav/update-rooms-resources-background-job 
fix(dav): add repair step to queue job to update rooms and resources
 2025-05-16 12:39:51 +02:00
Daniel Kesselberg
3d1de793b1
refactor(dav): replace IAppData with IAppDataFactory for PhotoCache 
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
 2025-05-15 18:28:45 +02:00
Daniel Kesselberg
8a1ae0934e
feat: add command to clear contacts photo cache 
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
 2025-05-15 17:20:57 +02:00
Daniel Kesselberg
c05d3fdb2e
fix(caldav): prevent unshare entry creation for owner unsharing 
- Introduces a `unshare` method in `CalDavBackend` to handle user unshares.
- Implements check to determine if unshare entry is needed based on group/circle membership.
- Ensures `updateShares` is only used when the calendar owner manages shares.
- Resolves issue where unsharing a calendar as owner created an unshare entry in `oc_dav_shares`.

Related PRs:
- https://github.com/nextcloud/server/pull/43117
- https://github.com/nextcloud/server/pull/47737

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
 2025-05-14 09:03:32 +02:00
Richard Steinmetz
cef60f9fd1
fix(dav): add repair step to queue job to update rooms and resources 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2025-05-09 17:19:43 +02:00
John Molakvoæ
24c6a1ff0b
Merge pull request #52182 from nextcloud/feat/dav/public-share-chunked-upload 2025-05-06 14:25:28 +02:00
SebastianKrupinski
a2d4f8d3f1
feat: Calendar Export 
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
 2025-05-06 11:09:33 +02:00
provokateurin
46f5b07322
feat(dav): Enable chunked upload for public shares 
Signed-off-by: provokateurin <kate@provokateurin.de>
 2025-05-05 13:23:11 +02:00
provokateurin
7f0953d520
refactor(dav): Replace baseuri manipulation with RootCollection for public shares 
Signed-off-by: provokateurin <kate@provokateurin.de>
 2025-05-05 13:23:11 +02:00
Kate
a42563f9ed
Merge pull request #51715 from nextcloud/allowUnderCustLink 
fix(dav): Allow underscores on custom links
 2025-04-07 09:48:15 +02:00
Richard Steinmetz
246da73a36
fix(oauth2): retain support for legacy ownCloud clients 
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2025-04-01 11:25:52 +02:00
Hamza Mahjoubi
099d9fb9be feat: add example contact on first login 
Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com>
 2025-03-26 10:57:39 +01:00
Git'Fellow
5dcec08e98
fix(shares): Allow underscores on custom links 
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
 2025-03-26 08:14:52 +01:00
Daniel
a91cd621b7
Merge pull request #51136 from nextcloud/feat/noid/occ-list-delete-calendar-subscription 
feat: command to list and delete calendar subscriptions
 2025-03-11 14:30:46 +01:00
provokateurin
81acb210ce
fix(dav): Fix share token pattern for base uri extraction 
Signed-off-by: provokateurin <kate@provokateurin.de>
 2025-03-10 10:10:46 +01:00
Daniel Kesselberg
c410e08fec feat: command to list and delete calendar subscriptions 
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
 2025-03-09 16:08:38 +01:00
Christoph Wurst
ec664b0aea fix(dav): Create SAB at installation 
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
 2025-03-06 18:40:30 +01:00
Côme Chilliet
64863c9d46
chore: Apply new rector configuration to apps folder 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2025-02-13 11:46:42 +01:00
Joas Schilling
4ad215de99
chore: Bump app versions and requirements 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2025-01-23 08:56:06 +01:00
Benjamin Gaussorgues
1c29257149 feat(dav): introduce paginate with custom headers 
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
 2024-12-20 09:16:18 +01:00
Côme Chilliet
1580c8612b
chore(apps): Apply new rector configuration to autouse classes 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2024-10-15 10:40:25 +02:00
John Molakvoæ (skjnldsv)
abd0cddd38 feat: make systemtags public visible 
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
 2024-10-11 16:06:44 +02:00
Ferdinand Thiessen
bbc5d32c8e
fix(dav): Public WebDAV endpoint should allow GET requests 
`GET` should be allowed even without Ajax header to allow downloading files,
or show files in the viewer. All other requests could be guarded, but this should not.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2024-10-09 17:10:52 +02:00
Anna Larch
6468ec5716 feat(carddav): add command to list address books 
Signed-off-by: Anna Larch <anna@nextcloud.com>
 2024-09-30 11:53:02 +02:00
Anna Larch
1f00cef13a feat(caldav): create subscriptions via occ 
Signed-off-by: Anna Larch <anna@nextcloud.com>
 2024-09-15 19:11:26 +02:00
Joas Schilling
eb365438d6
feat(branchoff): Bump versions and requirements in apps 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2024-08-14 10:03:30 +02:00
Christoph Wurst
370a9d77ea
feat(dav): Add an API for upcoming events 
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
 2024-08-13 20:03:31 +02:00
Ferdinand Thiessen
cb1b366baf
fix(dav): Ensure share properties are also set on public remote endpoint 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2024-08-12 11:28:03 +02:00
Richard Steinmetz
cbea787233
fix(caldav): stricter default calendar checks 
Reject calendars that
- are subscriptions
- are not writable
- are shared with a user
- are deleted
- don't support VEVENTs

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
 2024-07-22 15:24:39 +02:00
skjnldsv
f28d933acc feat(files_sharing): add public name prompt for files requests 
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
 2024-07-18 20:15:39 +02:00
SebastianKrupinski
247fbb5538 fix(caldav): limit vevent size 
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
 2024-07-04 18:56:27 -04:00
Richard Steinmetz
a8e581ca94
Merge pull request #46193 from nextcloud/fix/limit-vcard-size 
fix(carddav): limit vcard size
 2024-07-05 00:08:14 +02:00
SebastianKrupinski
cb6c091e08 fix(carddav): limit vcard size 
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
 2024-07-04 16:42:09 -04:00