mirror of
https://github.com/nextcloud/server.git
synced 2026-07-11 02:32:56 -04:00
Gate the temporary-token bearer auth behind an allowOcmAccessToken flag that only the public, share-masked webdav endpoints set, and drop the BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now honored only on /public.php/webdav, where per-share masking applies. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se> |
||
|---|---|---|
| .. | ||
| Sabre | ||
| LegacyDAVACL.php | ||
| LegacyPublicAuth.php | ||