fix(share): Ensure unique share tokens

- check for token collisions and retry up to three times.
- throw after 3 attempts without finding a unique token.

Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com>

Merge pull request #48341 from nextcloud/automated/noid/stable27-update-ca-cert-bundle

[stable27] fix(security): Update CA certificate bundle

fix(security): Update CA certificate bundle

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #48291 from nextcloud/backport/48282/stable27

[stable27] chore: add .git-blame-ignore-revs

chore: add .git-blame-ignore-revs

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #47864 from nextcloud/backport/46534/stable27

fix: Add direct parameter to flow auth v2

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #46677 from nextcloud/backport/44295/stable27

[stable27] Allow injecting the user temporarily for direct editing

fix(logging): Restore the option to log with debug level

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix: Implement option to temporarily set the user session

Signed-off-by: Julius Härtl <jus@bitgrid.net>

fix: Do not use incognito mode for direct editing

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #47698 from nextcloud/backport/47627/stable27

[stable27] [LinkReferenceProvider] Better size check

Merge pull request #47703 from nextcloud/backport/47635/stable27

[stable27] [oauth2] Store hashed secret instead of encrypted

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(oauth2): fix tests

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

fix(oauth2): store hashed secret instead of encrypted

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

fix(linkReferenceProvider): better size check

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Merge pull request #47325 from nextcloud/backport/47227/stable27

[stable27] Apply group limit on remove from group

chore: Remove test not compatible with 27 and below

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Remove call to non-existing method in 28 and add missing use in test

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(tests): Fix PHP 8.0 compatibility

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(tests): Adapt tests to change of DefaultShareProvider constructor

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Remove shares only if there are no more common groups between users

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

chore(tests): Test limiting sharing to same group

Signed-off-by: Louis Chemineau <louis@chmn.me>

fix(files_sharing): Delete user shares if needed when user is removed from a group

Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #47446 from nextcloud/backport/44369/stable27

 [stable27] fix: csrf check failed on public share with password

build: js assets

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix: csrf check failed on public share with password

Signed-off-by: Luka Trovic <luka@nextcloud.com>

fix: csrf check failed on public share with password

Signed-off-by: Luka Trovic <luka@nextcloud.com>

Merge pull request #47280 from nextcloud/backport/46881/stable27

[stable27] fix: try to find non-recursive share source

fix: try to find non-recursive share source

instead of always picking the first one, try to find one that won't blow up

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47066 from nextcloud/backport/47043/stable27

[stable27] fix(inherited-shares): ignore top root folder

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(inherited-shares): ignore top root folder

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

Merge pull request #47087 from nextcloud/backport/45193/stable27

[stable27] docs: added customclient_fdroid key to the config.sample.php file

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

docs: added customclient_fdroid config key to config.sample.php file

Co-authored-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Bahman Jafarzadeh <bahman026@gmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46861 from nextcloud/backport/46849/stable27

[stable27] fix: fix recursive share check

fix: fix recursive share check

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46667 from nextcloud/backport/46640/stable27

[stable27] fix(Token): take over scope in token refresh with login by cookie

fix(Token): take over scope in token refresh with login by cookie

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
# Conflicts:
# lib/private/Authentication/Token/IProvider.php
# lib/private/Authentication/Token/Manager.php
# lib/private/Authentication/Token/PublicKeyTokenProvider.php

Merge pull request #46762 from nextcloud/backport/46672/stable27

[stable27] Avoid using partial file info as valid one

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46741 from nextcloud/backport/46693/stable27

fix: Do not return partial file info if we have a cache entry

Signed-off-by: Julius Härtl <jus@bitgrid.net>

fix: Ignore preview requests for invalid file ids

Signed-off-by: Julius Härtl <jus@bitgrid.net>

feat: add a specialized writeStream implementation for s3 external storage

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #46089 from nextcloud/backport/46073/stable27

fix: allows admin to edit global credentials

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

Merge pull request #46682 from nextcloud/backport/46674/stable27

feat: add config flag to toggle persistent redis connections

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #46066 from nextcloud/backport/45877/stable27

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix: don't use custom certificate bundle if no customer certificates are configured

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #45921 from nextcloud/backport/45582/stable27

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45975 from nextcloud/fix/stable27/caldav-scheduling-job

[stable27] fix(caldav): lower scheduling table size warning

Merge pull request #46600 from nextcloud/backport/46589/stable27

fix(files_sharing): also allow removing READ permissions on email shares

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46227 from nextcloud/backport/45608/stable27

[stable27] docs(ShareApiController): Correct note about expiry date timezone

Merge pull request #45873 from nextcloud/backport/45024/stable27

[stable27] fix(files_sharing): Add one string for every share type + fix(sharingDetails): Show correct share target

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(sharingDetails): Show correct share target

The share details page should show the target email or user/server to which

the user is creating the share.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

fix(files_sharing): Add one string for every share type to not assume any language

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46279 from nextcloud/backport/46068/stable27

[stable27] fix(ExternalSharing): Handle template shares from external sources

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

refactor(SharingInput): Remove unused addShare

The new sharing flow since NC27 requires that users open the sharing details tab and

customize their share before creating it.

In https://github.com/nextcloud/server/pull/39472 the work of `addShare` was handed down to

`openSharingDetails` that opens the sharing details tab for the user to customize and manually

creat their share.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

fix(ExternalSharing): Handle template share from external sources

The new sharing flow requires or implies that users should edit share before creating.
External sources should not created the share IF we would upon sharing details tab on first request.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #46463 from nextcloud/automated/noid/stable27-update-psalm-baseline

[stable27] Update psalm-baseline.xml

Merge pull request #46312 from nextcloud/backport/46193/stable27

[stable27] fix(carddav): limit vcard size

chore(tests): Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(carddav): limit vcard size

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

Merge pull request #46435 from nextcloud/backport/46398/stable27

[stable27] fix(Session): avoid race conditions on clustered setups