nextcloud/apps/settings
Peter Ringelmann 058a60774e
fix(frontend): add strict password confirmation for sensitive admin actions
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.

Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-04-23 11:27:15 +02:00
..
appinfo feat(branchoff): Bump versions and requirements in apps 2024-08-14 10:03:30 +02:00
composer fix(admin-delegation): Prevent delegation to group if delegation already exist 2026-02-05 11:08:39 +01:00
css chore(assets): Recompile assets 2025-12-12 15:52:11 +01:00
data
img chore: Add SPDX header 2024-06-06 22:53:41 +02:00
js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
l10n fix(l10n): Update translations from Transifex 2026-02-19 00:21:27 +00:00
lib fix: Add missing PasswordConfirmationRequired attributes 2026-04-23 11:25:20 +02:00
src fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 11:27:15 +02:00
templates chore: remove X from social links 2026-02-05 00:30:47 +01:00
tests docs: remove developer documentation link 2026-02-17 09:24:56 +01:00
.editorconfig chore: Remove old travis related stuff 2024-09-19 20:16:29 +02:00
.gitignore chore: Add SPDX header 2024-06-03 20:33:31 +02:00
.l10nignore chore: Add SPDX header 2024-06-03 20:33:31 +02:00
openapi-administration.json fix(settings): Fix log file download return type 2025-01-07 15:44:48 +01:00
openapi-administration.json.license chore: Add SPDX header 2024-06-03 20:33:31 +02:00
openapi-full.json fix(settings): Fix log file download return type 2025-01-07 15:44:48 +01:00
openapi-full.json.license chore: Add SPDX header 2024-06-03 20:33:31 +02:00
openapi.json chore(deps): Update openapi-extractor 2024-07-02 09:08:04 +02:00
openapi.json.license chore: Add SPDX header 2024-06-03 20:33:31 +02:00