nextcloud/apps/settings/src
Peter Ringelmann 10d1cec02d fix(frontend): add strict password confirmation for sensitive admin actions
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.

Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-04-23 15:08:00 +02:00
..
components fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 15:08:00 +02:00
composables fix(AppNavigationGroupList): restore navigation panel and search/filter functionality for sub-admin groups 2025-06-02 07:19:42 +00:00
constants fix(settings): add missing AI icon 2025-08-14 11:20:55 +00:00
mixins fix(UserRow): retrieve available groups from the store 2025-06-02 07:19:42 +00:00
router fix(settings): disable Discover when appstore is disabled 2024-09-17 08:34:04 +00:00
service fix(settings): Fix editing groups and subadmin groups of user 2025-04-01 10:17:32 +00:00
store fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 15:08:00 +02:00
utils fix(settings): Natural order groups 2025-04-01 10:17:33 +00:00
views chore: Backport fixes 2025-04-01 14:37:27 +02:00
admin-settings-sharing.ts chore: Add SPDX header 2024-06-03 20:33:31 +02:00
admin.js fix(setupchecks): Treat information messages as success 2025-03-24 20:12:39 +00:00
app-types.ts fix: address review comments 2024-10-30 20:36:57 +02:00
apps.js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
logger.ts chore: Add SPDX header 2024-06-03 20:33:31 +02:00
main-admin-ai.js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
main-admin-basic-settings.js chore(deps): Update @nextcloud/auth to v2.4.0 and use getCSPNonce where possible 2024-08-13 17:54:47 +02:00
main-admin-delegation.js fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 15:08:00 +02:00
main-admin-security.js fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 15:08:00 +02:00
main-apps-users-management.ts fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 15:08:00 +02:00
main-declarative-settings-forms.ts chore: Enable ESLint for apps and fix all errors 2024-07-09 17:13:30 +02:00
main-nextcloud-pdf.js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
main-personal-info.js chore(deps): Update @nextcloud/auth to v2.4.0 and use getCSPNonce where possible 2024-08-13 17:54:47 +02:00
main-personal-password.js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
main-personal-security.js chore(deps): Update @nextcloud/auth to v2.4.0 and use getCSPNonce where possible 2024-08-13 17:54:47 +02:00
main-personal-webauth.js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
webpack.shim.d.ts chore(deps): Update @nextcloud/auth to v2.4.0 and use getCSPNonce where possible 2024-08-13 17:54:47 +02:00