mirror of
https://github.com/nextcloud/server.git
synced 2026-07-11 10:36:08 -04:00
Gate the temporary-token bearer auth behind an allowOcmAccessToken flag that only the public, share-masked webdav endpoints set, and drop the BearerAuth backend from the CalDAV/CardDAV entrypoints. The token is now honored only on /public.php/webdav, where per-share masking applies. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se> |
||
|---|---|---|
| .. | ||
| AvailabilityCoordinatorTest.php | ||
| AvatarUserDummy.php | ||
| Backend.php | ||
| DatabaseTest.php | ||
| Dummy.php | ||
| ManagerTest.php | ||
| SessionTest.php | ||
| UserTest.php | ||