nextcloud/lib/private/Authentication/Token
Arthur Schiwon f0494ec17a fix(Session): avoid password confirmation on SSO
SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-11 20:19:18 +02:00
..
INamedToken.php Update php licenses 2021-06-04 22:02:41 +02:00
IProvider.php Import OCP IToken as OCPIToken to avoid a name clash in lib/private 2024-01-11 15:45:14 +01:00
IToken.php Improve docblock annotations for tokens and their exceptions 2023-10-23 15:20:04 +02:00
IWipeableToken.php composer run cs:fix 2023-01-20 11:45:08 +01:00
Manager.php Import OCP IToken as OCPIToken to avoid a name clash in lib/private 2024-01-11 15:45:14 +01:00
PublicKeyToken.php fix: Apply new coding standard to all files 2024-04-04 11:45:22 +02:00
PublicKeyTokenMapper.php feat(perf): add cache for authtoken lookup 2024-02-28 15:04:04 +01:00
PublicKeyTokenProvider.php fix(Session): avoid password confirmation on SSO 2024-06-11 20:19:18 +02:00
RemoteWipe.php Always catch OCP versions of authentication exceptions 2024-01-11 14:02:15 +01:00
TokenCleanupJob.php Add back TokenCleanupJob to invalidate old temporary tokens 2022-08-25 11:31:21 +02:00