Arthur Schiwon eea5e1cca2 fix(Session): avoid password confirmation on SSO ... SSO backends like SAML and OIDC tried a trick to suppress password confirmations as they are not possible by design. At least for SAML it was not reliable when existing user backends where used as user repositories. Now we are setting a special scope with the token, and also make sure that the scope is taken over when tokens are regenerated. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>		2024-06-12 19:35:37 +02:00
..
AppPasswordController.php	fix(core): Add password confirmation requirement for getapppassword	2023-07-17 12:11:08 +02:00
AutoCompleteController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
AvatarController.php	composer run cs:fix	2023-01-20 11:45:08 +01:00
ClientFlowLoginController.php	make OAuth2 authorization code expire	2024-01-22 13:06:15 +01:00
ClientFlowLoginV2Controller.php	fix(client-login-flow): Use correct response for missing state token	2023-02-09 14:11:28 +01:00
CollaborationResourcesController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
ContactsMenuController.php	Modernize contacts menu	2022-05-12 18:31:59 +02:00
CSRFTokenController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
CssController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
ErrorController.php	Use proper error pages instead of always redirecting	2022-10-21 15:12:21 +02:00
GuestAvatarController.php	Update avatars on update	2022-09-09 14:23:41 +02:00
HoverCardController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
JsController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
LoginController.php	fix the login log entry	2023-01-30 17:07:44 +01:00
LostController.php	fix(lostpassword): Also rate limit the setPassword endpoint	2023-05-15 15:57:25 +02:00
NavigationController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
OCJSController.php	fix(Session): avoid password confirmation on SSO	2024-06-12 19:35:37 +02:00
OCMController.php	ocm services	2023-09-22 19:46:42 -01:00
OCSController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
PreviewController.php	Fix type of PreviewController::$userId	2022-11-24 02:33:31 -08:00
ProfileApiController.php	Improve handling of profile fields	2023-04-03 15:52:22 -07:00
ProfilePageController.php	Add api to load additional section in profile page	2022-09-14 12:55:40 +02:00
RecommendedAppsController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
ReferenceApiController.php	handle and return touchProvider errors	2023-01-27 11:10:56 +01:00
ReferenceController.php	[reference preview] fix getting null mimetype if the cached reference lacks an image content type	2023-02-22 12:39:26 +01:00
SearchController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
SetupController.php	Rename canInstallExists method and add new method for removal	2023-01-10 11:59:06 +00:00
TranslationApiController.php	feat(translation): Allow guests to use translations as well	2023-04-13 09:09:44 +02:00
TwoFactorChallengeController.php	feat(app-framework): Add UseSession attribute to replace annotation	2023-01-27 09:40:35 +01:00
UnifiedSearchController.php	fix(unifiedsearch): Allow searching for "0"	2023-09-28 15:50:10 +00:00
UnsupportedBrowserController.php	Cleanup ie and old edge properties	2022-10-19 10:02:51 +02:00
UserController.php	Update core to PHP 7.4 standard	2022-05-20 22:18:06 +02:00
WalledGardenController.php	composer run cs:fix	2023-01-20 11:45:08 +01:00
WebAuthnController.php	feat(app-framework): Add UseSession attribute to replace annotation	2023-01-27 09:40:35 +01:00
WellKnownController.php	composer run cs:fix	2023-01-20 11:45:08 +01:00
WhatsNewController.php	composer run cs:fix	2023-01-20 11:45:08 +01:00
WipeController.php	composer run cs:fix	2023-01-20 11:45:08 +01:00