Hamza
fe12ff27b0
fix: add ACLs for calender delegation
...
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
2026-04-28 16:27:49 +02:00
Stephan Orbaugh
a7b3e4cfc2
Merge pull request #59864 from nextcloud/backport/59780/stable29
...
[stable29] fix(dav): do not list intermediate files
2026-04-28 16:02:38 +02:00
Julien Veyssier
7967f21405
fix(oauth): align stable29 oauth tests with rotateToken backport
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:43:38 +02:00
Julien Veyssier
6d025a1c31
fix(oauth): rotate the auth token only if the access token rotation was successful
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:43:30 +02:00
Julien Veyssier
af0b5d1325
fix(oauth): make the throttling reason more specific
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:43:30 +02:00
Julien Veyssier
79700b3c2b
fix(oauth): wrap token rotation in a transaction, only rotate if the token hasn't been modified since we have read it
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:43:30 +02:00
Côme Chilliet
f43863df3e
fix: Add missing PasswordConfirmationRequired attributes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-04-27 11:02:18 +02:00
Peter Ringelmann
b866c4e4fe
fix(frontend): add strict password confirmation for sensitive admin actions
...
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-04-27 10:46:36 +02:00
Ferdinand Thiessen
8b77009457
fix(dav): do not list intermediate upload folders
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-22 21:01:26 +02:00
Ferdinand Thiessen
06c699fb10
fix(dav): do not read intermediate uploads
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-22 21:01:20 +02:00
Robin Appelman
a3310217d9
chore: update openapi
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-04-22 16:21:45 +02:00
Robin Appelman
2a1a48b8ff
chore: psalm fixes
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-04-22 16:21:45 +02:00
Robin Appelman
1f2fb382da
fix: redact share token if share has more permissions than the current user
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-04-22 16:21:42 +02:00
Côme Chilliet
8a4516637a
fix(oauth2): Add missing urlencode for failure redirection
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-04-21 09:10:16 +00:00
Stephan Orbaugh
6b0fed7a2e
Merge pull request #58993 from nextcloud/backport/58689/stable29
...
Integration sqlite / changes (push) Waiting to run
Integration sqlite / integration-sqlite (8.2, stable29, --tags ~@large files_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, capabilities_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, collaboration_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, comments_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, dav_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, federation_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, filesdrop_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, ldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, openldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, openldap_numerical_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, remoteapi_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, setup_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, sharees_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, sharing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, videoverification_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
[stable29] Fix federated reshares
2026-04-21 10:13:09 +02:00
Cristian Scheid
bc6641abb7
feat(files): add configurations for file grouping
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-04-18 14:21:07 -03:00
Cristian Scheid
81c3038d39
feat(recent-search): pass recent_limit config value to getRecentSearch function
...
feat(recent-search): pass recent_limit config value to getRecentSearch function
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
[skip ci]
2026-03-26 11:14:50 -03:00
Cristian Scheid
a39f2f8994
feat(file-info): encapsulate logic to get last activity in getLastActivity function
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-03-26 08:05:26 +00:00
Benjamin Gaussorgues
31f7064f39
Merge pull request #59061 from nextcloud/backport/59013/stable29
Integration sqlite / changes (push) Waiting to run
Integration sqlite / integration-sqlite (8.2, stable29, --tags ~@large files_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, capabilities_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, collaboration_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, comments_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, dav_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, federation_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, filesdrop_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, ldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, openldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, openldap_numerical_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, remoteapi_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, setup_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, sharees_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, sharing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, videoverification_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
2026-03-19 16:08:36 +01:00
provokateurin
49a2354609
fix(dav): Use share initiator to get the share node, because the owner might on another server
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-03-19 15:21:35 +01:00
provokateurin
8993af674c
fix(federatedfilesharing): Do not set the share id for an existing share
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-03-19 15:21:35 +01:00
Côme Chilliet
b63280c03f
fix: Add missing Attribute and fix parameter type in renewpassword route
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-03-19 09:52:31 +01:00
Benjamin Gaussorgues
2be69ca6c2
fix(admin): use correct delegation class
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-03-18 15:00:47 +01:00
Cristian Scheid
5d49fb41e1
fix(dav): add missing search_supports_creation_time and search_supports_upload_time to Capabilities return type
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-03-04 01:06:53 +00:00
Cristian Scheid
70ec5fdc43
feat(dav): expose search_supports_upload_time capability
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-02-25 13:16:43 -03:00
Cristian Scheid
2c8a3c0c8b
feat: add upload_time support to file search and recent files
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-02-25 11:47:26 +00:00
Joas Schilling
737ae015b7
Merge pull request #56962 from nextcloud/backport/56925/stable29
...
Integration sqlite / changes (push) Waiting to run
Integration sqlite / integration-sqlite (8.2, stable29, --tags ~@large files_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, capabilities_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, collaboration_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, comments_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, dav_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, federation_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, filesdrop_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, ldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, openldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, openldap_numerical_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, remoteapi_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, setup_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, sharees_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, sharing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.2, stable29, videoverification_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
[stable29] fix(dav): handle HTML in CalDAV invitations
2025-12-11 09:54:41 +01:00
Joas Schilling
b10e8d46cf
fix(comments): Check comment object
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-12-11 08:42:50 +01:00
Christoph Wurst
ecdcbb405b
fix(dav): handle HTML in CalDAV invitations
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2025-12-10 16:48:17 +01:00
Carl Schwan
c6c03eee51
refactor(workflowengine): Check if class is correct
...
Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>
2025-12-09 10:33:47 +01:00
Louis Chmn
2f6d3ca1ea
chore(files): Remove regular stats request
...
All views are now migrated.
Signed-off-by: Louis Chmn <louis@chmn.me>
2025-12-03 09:17:00 +00:00
nfebe
03c4d74e4d
refactor(ShareApiController): Streamline share providers & add error logging
...
1. Consolidated the repetitive provider code into a clean loop
2. Added exception handling to log unexpected errors
Signed-off-by: nfebe <fenn25.fn@gmail.com>
2025-11-18 14:38:20 +01:00
Louis Chmn
4954ec4df4
fix(files_versions): Do not assume source exist when migrating versions to new storage
...
Signed-off-by: Louis Chmn <louis@chmn.me>
2025-11-06 07:24:14 +00:00
skjnldsv
7aa7d93366
feat(config): add maximum.supported.desktop.version
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-10-24 16:37:50 +02:00
Côme Chilliet
36ce3160e6
fix(dav): Allow array of array of scalars, and fix error message
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-10-20 09:06:17 +00:00
Côme Chilliet
a8df5c5ea8
fix(dav): Allow arrays (of scalars) in property values
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-10-20 09:06:17 +00:00
Côme Chilliet
abbc2f4c4b
fix(dav): Restrict properties allowed object classes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-10-20 09:06:17 +00:00
Louis Chemineau
72c2aef01a
fix(contacts): Do not expose SAB in /contactsmenu
...
When hitting the `/contactsmenu/contacts` endpoint with the `dav.system_addressbook_exposed` config switch set to `"no"`, the system address book content is still listed in the response.
This ensure that we do not expose unexpectedly the system address book.
Signed-off-by: Louis Chmn <louis@chmn.me>
2025-10-14 17:44:40 +02:00
Maxence Lange
0184dac572
fix(share): assume download enabled on federated share
...
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2025-10-01 09:44:49 +00:00
Christoph Wurst
d7a625bc64
fix(dav): clean up user's addressbook shares on deletion
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2025-09-26 15:34:11 +02:00
Ferdinand Thiessen
6f189cc034
chore: adjust for legacy Nextcloud 29 and before (use OCA instead of OCP)
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-09-02 19:56:11 +02:00
Ferdinand Thiessen
e0a566ca1d
fix(dav): ensure moving or copying a file is possible
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-09-02 16:05:10 +00:00
SebastianKrupinski
0a835064a7
fix: add missing listener
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-09-02 14:43:48 +02:00
John Molakvoæ
10a2417eb9
fix(files_sharing): bypass sidebar call and return null straight away
...
Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
2025-08-21 11:48:12 +02:00
skjnldsv
f687db149e
fix(files_sharing): sharing status action permission and sidebar await
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
[skip ci]
2025-08-21 09:27:21 +00:00
Christoph Wurst
efd80b5ce0
fix(dav): calculate permissions based on addressbook principal
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2025-08-06 21:37:10 +00:00
Ferdinand Thiessen
12e742af72
fix(settings): verify source of app-discover media
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-07-22 03:45:42 +02:00
Julius Knorr
855d4551e9
perf(dav): Preload dav search with tags/favorites
...
Signed-off-by: Julius Knorr <jus@bitgrid.net>
2025-07-07 20:10:27 +02:00
Julius Knorr
80ca877cd1
perf: Skip photos app related property in custom properties
...
Signed-off-by: Julius Knorr <jus@bitgrid.net>
2025-07-02 19:54:43 +00:00
Andy Scherzinger
438e231d5e
Merge pull request #53460 from nextcloud/backport/53356/stable29
...
[stable29] fix(user_ldap): Harmonize parameter obfuscation and serialization accross logging methods
2025-07-02 19:51:16 +02:00
