nextcloud/tests/lib/AppFramework/Middleware
Arthur Schiwon f0494ec17a fix(Session): avoid password confirmation on SSO
SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-11 20:19:18 +02:00
..
PublicShare techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25 2023-08-28 15:50:45 +02:00
Security fix(Session): avoid password confirmation on SSO 2024-06-11 20:19:18 +02:00
AdditionalScriptsMiddlewareTest.php fix!: Remove legacy event dispatching Symfony's GenericEvent from AdditionalScripts 2023-07-27 09:57:52 +02:00
CompressionMiddlewareTest.php composer run cs:fix 2023-01-20 11:45:08 +01:00
MiddlewareDispatcherTest.php Fix tests 2022-02-23 11:01:58 +01:00
MiddlewareTest.php chore: apply changes from Nextcloud coding standards 1.1.1 2023-11-23 10:36:13 +01:00
NotModifiedMiddlewareTest.php composer run cs:fix 2023-01-20 11:45:08 +01:00
OCSMiddlewareTest.php composer run cs:fix 2023-01-20 11:45:08 +01:00
SessionMiddlewareTest.php feat(app-framework): Add UseSession attribute to replace annotation 2023-01-27 09:40:35 +01:00