feat(Security): add Factory for IP addresses and ranges

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

feat(security): Add public API to allow validating IP Ranges and checking for "in range"

Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

feat(security): restrict admin actions to IP ranges

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

Merge pull request #46622 from nextcloud/fix/delete-user

fix(settings): Fix endless spinner when wiping or deleting accounts

Merge pull request #46608 from nextcloud/error-log-textprocessing

fix(TextProcessing): use error instead of info for exception logging

Merge pull request #46055 from nextcloud/R0Wi-patch-1

Increase PHP memory limit for DevContainer to 512mb

Merge pull request #46368 from nextcloud/fix/task-processing

TaskProcessing follow-up

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(settings): Fix endless spinner when wiping or deleting accounts

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #46583 from nextcloud/filecache-sharding-compat

Make filecache queries compatible with sharding

Merge pull request #46589 from nextcloud/fix/files_sharing-file-request-followup

chore(integration): add file request tests

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore: compile assets

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): file request expiration date timezone

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): file request form validation and date component event

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): improve file request info messages

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): also allow removing READ permissions on email shares

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix: drop outdated handlebar comments template

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

feat(files_sharing): add public name prompt for files requests

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

feat(files_sharing): allow uploading to subfolders in File requests

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

feat(files_sharing): use label as title and file drop destination if available

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): file request creation permissions and link copy display

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): use ClipboardText icon and fix trailing-button-click

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): improve file request email handling

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): file request margin and buttons order

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): file request add email on focusout

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): file request use l10n `t` and `n` aliases

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files_sharing): file request conditions with link/email global settings

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

Merge pull request #46446 from nextcloud/update-app-api-rate-limit-key

use "app_api" session key in rate limit middleware, "app_api_system" is deprecated

Merge pull request #46615 from nextcloud/feat/webhook_listeners-AppApiAdminAccessWithoutUser

feat: allow for ExApps to use webhook_listeners without user context

feat: allow to use webhook_listeners without user context

Signed-off-by: Alexander Piskun <bigcat88@icloud.com>

Merge pull request #46567 from nextcloud/tests/cleanupremotestoragestest-named-parameters

move share tests await from positional parameters

chore: use "app_api" session key, "app_api_system" is deprecated

Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>

Merge pull request #46587 from nextcloud/fix/shrink-headlines

fix(css): Shrink headlines a bit

Merge pull request #46594 from nextcloud/fix/issue-28162-2

fix(caldav): decode values before returning

Merge pull request #46607 from nextcloud/feat/AppApiAdminAccessWithoutUser-attribute

feat: allow for ExApps to call Admin endpoints marked with specific attr

fix(TextProcessing): use error instead of info for exception logging

Signed-off-by: Anupam Kumar <kyteinsky@gmail.com>

feat: allow for ExApps to call Admin endpoints marked with specific attr

Signed-off-by: Alexander Piskun <bigcat88@icloud.com>

Merge pull request #45547 from nextcloud/feature/recurrence-invitations2

feature: Improved Recurrence Invitations Messages

Merge pull request #46606 from nextcloud/feat/security/warn-annotations

feat(Security): Warn about using annotations instead of attributes

Signed-off-by: provokateurin <kate@provokateurin.de>

Merge pull request #46593 from nextcloud/fix/issue-30514

fix(caldav): Throw 403 Forbidden Error instead of 500 Internal Server…

chore: update openapi specs

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

feat: Improve recurrence invitations messages

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

Merge pull request #46581 from nextcloud/fix/reference_api_no_anon_rate

fix(ReferenceApiController): Remove accidently added AnonRateLimit

fix(caldav): Throw 403 Forbidden Error instead of 500 Internal Server Error

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

fix(caldav): decode values before returning

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

fix: make batch propagator work with sharding restrictions

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: make usermountcache compatible with sharding

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #46510 from nextcloud/feat/info-xml-backends

feat: hide caldav server settings if no app uses the caldav backend

Merge pull request #46509 from nextcloud/feat/settings/taskprocessing

feat(settings/admin/ai): Add Task Processing API settings

chore: Recompile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(css): Shrink headlines a bit

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: make joining on tags in search queries work with sharding

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: always set storage id in Cache::get

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: add set storage id for more cache queries

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix(ReferenceApiController): Remove accidently added AnonRateLimit

Signed-off-by: Jonas <jonas@freesources.org>

Merge pull request #45974 from nextcloud/fix/caldav-scheduling-job

fix(caldav): lower scheduling table size warning

feat(settings/admin/ai): fix provider list not being declared

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

feat(settings/admin/ai): fix tests

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

feat(settings/admin/ai): compile assets

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

feat(settings/admin/ai): increase min width of provider selects

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

feat(settings/admin/ai): Add Task Processing API settings

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Merge pull request #46378 from nextcloud/feat/public_reference_api

feat(Reference): Add public API endpoints to get references

fix(TaskProcessing): Add since doc for new EShapeType method

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessing): Update openapi specs

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessing): Run cs:fix

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessing): Use getScalarType instead of relying on magic integers

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessing): fix tests

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

test(TaskProcessing): Add test for setTaskResult with fileIds

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessingA/Manager): Catch new error

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessingA/Manager): Use time() along with rand int for file names

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessingApiController): Address review comments

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessing\Manager#setTaskResult): Replace files contents with ID instead of File object

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix: do not overwrite the output if NodeID exists

Signed-off-by: Alexander Piskun <bigcat88@icloud.com>
Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(TaskProcessing\Manager#setTaskResult): Replace files contents with ID instead of File object

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix: Validate output properly

Differentiate between output with file IDs and output with File data

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix: psalm errors

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

feat(TaskProcessing): Allow setting task results for file slots

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

feat(Reference): Add public API endpoints to get references

Calling the public API endpoints will check for matching registered
reference providers that implement `IPublicReferenceProvider` and call
their respective functions. If no matching provider is found, the
default `LinkReferenceProvider` will be used to provide open graph data.

The frontend reference widget components will call these endpoints from
unauthorized sessions, e.g. in public shares.

If present, the sharing token of the origin URL is passed to
`resolveReferencePublic()` as additional information for the reference
provider to determine the access scope. This allows the respective
reference providers to determine whether the origin share has access to
the linked resource.

`getCacheKeyPublic` also gets the sharing token so it can scope the cached
entry to it.

Contributes to #45978

Signed-off-by: Jonas <jonas@freesources.org>

Merge pull request #46555 from nextcloud/emptyArrayAppStoreFail

fix(appstore): Return an empty array in case of fail

Merge pull request #46419 from nextcloud/bugfix/noid/limit-logo-size-for-outlook

fix(mail): Fix big logos in mail templates for Outlook

fix(caldav): lower scheduling table size warning

Signed-off-by: Anna Larch <anna@nextcloud.com>

fix(mail): Fix big logos in mail templates for Outlook

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46342 from nextcloud/fix-getimagesize

Merge pull request #46477 from nextcloud/support-direct-appapi-requests

feat: webhooks_listeners app: send direct requests to ExApps using AppAPI

Merge pull request #46557 from nextcloud/enh/declarative-settings-design

refactor: Improve design of declarative settings

Merge branch 'master' into support-direct-appapi-requests

feat: webhooks_listeners app support for sending direct requests to ExApps using AppAPI.

Signed-off-by: Alexander Piskun <bigcat88@icloud.com>

chore: add warning in case of failure

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>

test: update share tests to work with sharding

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #46538 from nextcloud/fix/use-filename-validator

refactor: Migrate filename validation from `Storage` and `Util` to `FilenameValidator`

Merge pull request #46547 from nextcloud/query-builder-connection

feat: allow running QueryBuilder queries on different connections

Merge pull request #46450 from nextcloud/artonge/fix/prevent_generating_metadata_on_every_upgrade

fix(files_metadata): Don't run generation job on every upgrade

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #46551 from nextcloud/fix/shareapi-l10n

refactor: Improve design of declarative settings

* Remove the hint from DOM if empty (otherways they still take some place in layout)
* Individual fields of the same section should not be spaced 60px, 20px (2x 10px) should be enough
* We have the type `multi-checkbox` for real checkboxes where you can select on of multiple, and we have `checkbox` which is only used for enable / disable, so we shall use `switch` type of the checkbox component as we do for all other (non declarative) settings

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>