mirror of
https://github.com/nextcloud/server.git
synced 2026-07-11 18:47:17 -04:00
Gate the temporary-token bearer auth behind an allowOcmAccessToken flag that only the public, share-masked webdav endpoints set, and drop the BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now honored only on /public.php/webdav, where per-share masking applies. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se> |
||
|---|---|---|
| .. | ||
| composer | ||
| l10n | ||
| private | ||
| public | ||
| unstable | ||
| base.php | ||
| OC.php | ||
| versioncheck.php | ||