nextcloud/core
Arthur Schiwon f0494ec17a fix(Session): avoid password confirmation on SSO
SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-11 20:19:18 +02:00
..
ajax fix(updatenotification): spread the use of new appconfig 2024-03-13 02:22:11 -01:00
BackgroundJobs Make adjustments based on the review 2024-02-26 09:22:45 +01:00
Command fix(db): cs-fix spacing 2024-05-22 17:01:23 +00:00
Controller fix(Session): avoid password confirmation on SSO 2024-06-11 20:19:18 +02:00
css chore: Compile assets 2024-05-28 16:52:53 +02:00
Data Uses PHP8's constructor property promotion. 2023-06-23 23:03:56 +03:30
Db fix: Apply new coding standard to all files 2024-04-04 11:45:22 +02:00
doc feat: rename users to account or person 2024-02-13 21:06:30 +01:00
Events Uses PHP8's constructor property promotion. 2023-06-23 23:03:56 +03:30
Exception Update php licenses 2021-06-04 22:02:41 +02:00
fonts Include additional scripts in Noto fonts 2021-03-01 19:15:01 +01:00
img fix(core): package-x-generic svg width and height 2024-05-31 15:45:10 +02:00
js fix(tests): Add mock for window._oc_webroot 2024-03-23 20:48:13 +01:00
l10n Fix(l10n): Update translations from Transifex 2024-06-10 00:19:48 +00:00
Listener chore: Fix missing template parameter for IEventListener 2024-01-30 10:57:15 +01:00
Middleware AppAPI: allowed to bypass Two-Factor 2023-12-28 20:59:02 +03:00
Migrations fix(migrations): Help developers to add description and copyright info 2024-03-05 12:56:38 +01:00
Notification feat: rename users to account or person 2024-02-13 21:06:30 +01:00
Service Always catch OCP versions of authentication exceptions 2024-01-11 14:02:15 +01:00
skeleton ownCloud -> Nextcloud 2016-07-28 15:47:04 +02:00
src fix(core): unsupported browser getRootUrl import 2024-06-07 09:00:26 +02:00
templates fix: Fix truncation on public shares 2024-04-23 10:39:11 -07:00
vendor Remove jstz usage from server 2023-01-04 17:40:40 +00:00
.l10nignore Add core/js/dist/ to l10nignore 2019-06-13 13:55:22 +02:00
Application.php fix(caldav): automatically delete outdated scheduling objects 2024-06-03 11:10:03 +00:00
openapi.json Merge pull request #45644 from nextcloud/backport/45632/stable29 2024-06-06 12:52:22 +02:00
register_command.php feat(occ): Add user:keys:test command 2024-02-27 22:43:08 +01:00
ResponseDefinitions.php Merge pull request #45644 from nextcloud/backport/45632/stable29 2024-06-06 12:52:22 +02:00
routes.php refactor(core): Switch to attribute based routing 2024-02-21 12:07:50 +01:00
shipped.json feat: Ship downloadlimit 2024-03-07 02:28:03 -08:00
strings.php feat: rename users to account or person 2024-02-13 21:06:30 +01:00