nextcloud/apps
Micke Nordin db96073459 fix(auth): confine OCM access token to the masked share endpoint
Gate the temporary-token bearer auth behind an allowOcmAccessToken flag
that only the public, share-masked webdav endpoints set, and drop the
BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now
honored only on /public.php/webdav, where per-share masking applies.

Assisted-by: ClaudeCode:claude-fable-5

Signed-off-by: Micke Nordin <kano@sunet.se>
2026-07-07 13:56:32 +02:00
..
admin_audit refactor: Add new modern events for system tag lifecycle 2026-06-23 10:57:41 +02:00
appstore build(rector-strict): Bump PHP set to 8.3 2026-07-06 16:32:20 +02:00
cloud_federation_api fix(OCM): Remove comment meant only for OCP APIs 2026-06-18 11:56:54 +02:00
comments fix(l10n): Update translations from Transifex 2026-07-05 00:22:29 +00:00
contactsinteraction fix(l10n): Update translations from Transifex 2026-07-02 00:22:46 +00:00
dashboard fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
dav fix(auth): confine OCM access token to the masked share endpoint 2026-07-07 13:56:32 +02:00
encryption fix(l10n): Update translations from Transifex 2026-07-05 00:22:29 +00:00
federatedfilesharing fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
federation fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
files Merge pull request #61128 from nextcloud/feat/ocp/interaction 2026-07-07 12:42:46 +02:00
files_external fix(l10n): Update translations from Transifex 2026-07-05 00:22:29 +00:00
files_reminders fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
files_sharing Merge pull request #61128 from nextcloud/feat/ocp/interaction 2026-07-07 12:42:46 +02:00
files_trashbin fix(l10n): Update translations from Transifex 2026-07-05 00:22:29 +00:00
files_versions fix(l10n): Update translations from Transifex 2026-07-05 00:22:29 +00:00
lookup_server_connector fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
oauth2 fix(l10n): Update translations from Transifex 2026-07-03 00:22:24 +00:00
profile fix(l10n): Update translations from Transifex 2026-07-03 00:22:24 +00:00
provisioning_api fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
settings fix(l10n): Update translations from Transifex 2026-07-06 00:22:24 +00:00
sharebymail fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
systemtags fix(l10n): Update translations from Transifex 2026-07-07 00:22:58 +00:00
testing refactor: Expose a public exception when no user is found 2026-06-30 21:56:10 +02:00
theming fix(l10n): Update translations from Transifex 2026-07-06 00:22:24 +00:00
twofactor_backupcodes fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
updatenotification fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
user_ldap fix(l10n): Update translations from Transifex 2026-07-05 00:22:29 +00:00
user_status fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
weather_status fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00
webhook_listeners fix(l10n): Update translations from Transifex 2026-07-03 00:22:24 +00:00
workflowengine fix(l10n): Update translations from Transifex 2026-07-04 00:22:53 +00:00