mirror of
https://github.com/nextcloud/server.git
synced 2026-07-12 02:57:52 -04:00
Gate the temporary-token bearer auth behind an allowOcmAccessToken flag that only the public, share-masked webdav endpoints set, and drop the BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now honored only on /public.php/webdav, where per-share masking applies. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se> |
||
|---|---|---|
| .. | ||
| apps | ||
| blueprints | ||
| Core | ||
| data | ||
| docker | ||
| lib | ||
| playwright | ||
| autoload.php | ||
| bootstrap.php | ||
| databases-all-config.php | ||
| enable_all.php | ||
| memcached.config.php | ||
| phpunit-autotest-external.xml | ||
| phpunit-autotest.xml | ||
| preseed-config.php | ||
| redis-cluster.config.php | ||
| redis.config.php | ||
| startsessionlistener.php | ||