mirror of
https://github.com/nextcloud/server.git
synced 2026-07-15 21:03:00 -04:00
Gate the temporary-token bearer auth behind an allowOcmAccessToken flag that only the public, share-masked webdav endpoints set, and drop the BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now honored only on /public.php/webdav, where per-share masking applies. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se> |
||
|---|---|---|
| .. | ||
| BackgroundJobs | ||
| Listeners | ||
| AvailabilityCoordinator.php | ||
| Backend.php | ||
| Database.php | ||
| DisabledUserException.php | ||
| DisplayNameCache.php | ||
| LazyUser.php | ||
| LoginException.php | ||
| Manager.php | ||
| NoUserException.php | ||
| OutOfOfficeData.php | ||
| PartiallyDeletedUsersBackend.php | ||
| Session.php | ||
| User.php | ||