nextcloud/lib
Micke Nordin db96073459 fix(auth): confine OCM access token to the masked share endpoint
Gate the temporary-token bearer auth behind an allowOcmAccessToken flag
that only the public, share-masked webdav endpoints set, and drop the
BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now
honored only on /public.php/webdav, where per-share masking applies.

Assisted-by: ClaudeCode:claude-fable-5

Signed-off-by: Micke Nordin <kano@sunet.se>
2026-07-07 13:56:32 +02:00
..
composer feat(Interaction): Implement all existing restrictions 2026-07-07 08:19:15 +02:00
l10n fix(l10n): Update translations from Transifex 2026-07-05 00:22:29 +00:00
private fix(auth): confine OCM access token to the masked share endpoint 2026-07-07 13:56:32 +02:00
public feat(Interaction): Implement all existing restrictions 2026-07-07 08:19:15 +02:00
unstable fix(psalm): Set PHP version to 8.3 2026-06-25 09:08:53 +02:00
base.php refactor: Fix rebasing issues 2026-06-05 11:03:04 +02:00
OC.php refactor: consolidate app loading logic in bootstrap process 2026-06-24 14:15:21 +02:00
versioncheck.php chore(PHP): Drop 8.2 for Nextcloud 35 2026-06-12 11:11:50 +02:00