nextcloud/apps/settings/src
Peter Ringelmann 85dd814f54 fix(frontend): add strict password confirmation for sensitive admin actions
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.

Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-04-21 16:49:31 +02:00
..
components fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-21 16:49:31 +02:00
composables fix(AppNavigationGroupList): restore navigation panel and search/filter functionality for sub-admin groups 2025-06-02 08:53:10 +02:00
constants feat(settings): allow to set own timezone in personal settings 2025-08-18 12:35:31 +02:00
mixins fix: update() function does not return a Promise 2026-01-29 11:40:28 +01:00
router fix(settings): disable Discover when appstore is disabled 2024-09-16 16:28:04 +02:00
service chore: adjust style imports of password confirmation library 2026-03-18 14:39:03 +01:00
store fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-21 16:49:31 +02:00
utils fix(settings): Natural order groups 2025-03-28 14:12:52 -07:00
views docs: remove developer documentation link 2026-02-05 18:01:51 +01:00
admin-settings-sharing.ts chore: Add SPDX header 2024-06-03 20:33:31 +02:00
admin.js fix(settings): improve mail test error handling and logging 2025-12-09 15:03:13 +00:00
app-types.ts feat(settings): Deploy daemon selection support during ExApp installation 2025-08-13 21:19:38 +03:00
apps.js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
logger.ts chore: Add SPDX header 2024-06-03 20:33:31 +02:00
main-admin-ai.js fix: adjust webpack nonce generation 2025-04-07 14:44:53 +02:00
main-admin-basic-settings.js chore(deps): Update @nextcloud/auth to v2.4.0 and use getCSPNonce where possible 2024-08-13 17:54:47 +02:00
main-admin-delegation.js fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-21 16:49:31 +02:00
main-admin-overview.ts feat(settings): migrate setup checks to Vue to prevent visual issues 2025-08-26 18:35:55 +02:00
main-admin-security.js fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-21 16:49:31 +02:00
main-admin-settings-presets.ts feat(Settings): Add section to select preset 2025-08-27 14:20:58 +00:00
main-apps-users-management.ts fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-21 16:49:31 +02:00
main-declarative-settings-forms.ts feat: add support for sensitive Declarative settings values encryption 2025-05-28 20:43:04 +03:00
main-nextcloud-pdf.js chore: Add SPDX header 2024-06-03 20:33:31 +02:00
main-personal-info.js feat(settings): allow to set own timezone in personal settings 2025-08-18 12:35:31 +02:00
main-personal-password.js fix: adjust webpack nonce generation 2025-04-07 14:44:53 +02:00
main-personal-security.js chore: adjust style imports of password confirmation library 2026-03-18 14:39:03 +01:00
main-personal-webauth.js fix: adjust webpack nonce generation 2025-04-07 14:44:53 +02:00
settings-types.ts feat(settings): migrate setup checks to Vue to prevent visual issues 2025-08-26 18:35:55 +02:00
webpack.shim.d.ts chore(deps): Update @nextcloud/auth to v2.4.0 and use getCSPNonce where possible 2024-08-13 17:54:47 +02:00