fix(loginflow): log info about regeneration session ids

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(loginflow): log more session related data to setting state token

- exisiting values
- set values
- retry once more if set and generated token differ
- log session state

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(loginflow): log setting, removing and clearing state token in session

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(loginflow): report reason for token mismatch

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #46065 from nextcloud/release/27.1.11

27.1.11

Merge pull request #46087 from nextcloud/backport/46075/stable27

[stable27] fix(Token): add FILESYSTEM scope with SCOPE_SKIP_PASSWORD_VALIDATION

fix(Token): add FILESYSTEM scope with SCOPE_SKIP_PASSWORD_VALIDATION

The scope design requires scopes to be either not specified, or
specified explicitely. Therefore, when setting the
skip-password-validation scope for user authentication from mechanisms
like SAML, we also have to set the filesystem scope, otherwise they will
lack access to the filesystem.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

build(hub): 27.1.11

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46005 from nextcloud/release/27.1.11_rc3

build(hub): 27.1.11 RC3

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

Merge pull request #45989 from nextcloud/backport/45968/stable27

[stable27] fix(dav): Limit number of UPDATES for sync token created_at

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(dav): Limit number of UPDATES for sync token created_at

Address book and calendar sync tokens have a created_at column in 26+
and we need to assign a current timestamp to the existing data at
upgrade so the data isn't cleaned up immediately. Updating the full
table is expensive and fails on clustered setups that limit transaction
size. We don't need a timestamp for the oldest rows so we can skip
updating them.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #45926 from nextcloud/backport/45912/stable27

[stable27] ci: use precise ref for 3rdparty check

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45915 from nextcloud/release/27.1.11_rc2

27.1.11 RC2

ci: use precise ref for 3rdparty check

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

build(hub): 27.1.11 RC2

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #45908 from nextcloud/backport/stable27/delete-concurrency

[stable27] fix(deleteAction): Bump up delete requests concurrency to 5

fix(deleteAction): Bump up delete requests concurrency to 5

Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45797 from nextcloud/release/27.1.11_rc1

27.1.11 RC1

Merge pull request #45732 from nextcloud/automated/noid/stable27-fix-npm-audit

[stable27] Fix npm audit

tests: Fix cypress component test import of package for mocking

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(deps): Fix npm audit

Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: Louis Chemineau <louis@chmn.me>

fix(files): Make navigation reactive again

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45681 from nextcloud/test-scanner-no-transactions-27

[27] feat: add option to disable scanner transactions

Merge pull request #45855 from nextcloud/backport/45804/stable27

[stable27] fix(cron): Log long running jobs

Merge pull request #45849 from nextcloud/backport/43531/stable27

[stable27] get child ids for folder in a separate query during move

Merge pull request #45824 from nextcloud/backport/45811/stable27

[stable27] test: add tests for ProfilePageController

fix(cron): Log long running jobs

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

fix: get child ids for folder in a separate query during move

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #45838 from nextcloud/backport/45649/stable27

[stable27] fix(ObjectStore): Fix regression when hostname is empty

Merge pull request #45806 from nextcloud/backport/45768/stable27

[stable27] Use isRetryable to catch retryable exceptions

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(ObjectStore): handle empty S3 hostname

Fixes #45637

The support for s3-accelerate added in #44496 introduced a regression in AWS S3 environments when `hostname` is blank (which is a valid configuration w/ AWS since the hostname gets auto-generated).

Signed-off-by: Josh <josh.t.richards@gmail.com>

Merge pull request #45703 from nextcloud/backport/43942/stable27

[stable27] fix(Session): avoid password confirmation on SSO

Merge pull request #45828 from nextcloud/fix/stable27/bubble-up-share-data

fix(ShareEntryLinkedList): Correctly propagate share data

style(PHP): remove unacceptable empty lines

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(Token): make new scope future compatible

- "password-unconfirmable" is the effective name for 30, but a draft
  name was backported.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(Session): avoid password confirmation on SSO

SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

test: add tests for ProfilePageController

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(ShareEntryLinkedList): Correctly propagate share data

`this.shares.unshift` mutates the share object for every component that uses
the share mixin.

Using the immutable approach changes the array reference which makes the mixin
lose track of the share object.

It would have been better to bubble up the share object but here we are :)

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

fix(files): Use isRetryable to catch retryable exceptions

Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #45798 from nextcloud/backport/45775/stable27

[stable27] fix(caldav): event links in shared calendar notifications

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(caldav): event links in shared calendar notifications

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #43776 from nextcloud/automated/noid/stable27-update-psalm-baseline

[stable27] Update psalm-baseline.xml

build(hub): 27.1.11 RC1

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #45749 from nextcloud/manual/backport/4910/stable27

Manual/backport/44910/stable27

chore(tests): Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

fix(sharing): Don't change the type of the controller argument

[EA] New value type (\DateTime) is not matching the resolved parameter type and might introduce types-related false-positives.

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(shareApiController): avoid duplicated expiryDate operations

`expireDate` can be set once and used anywhere needed, the current implementation,
duplicates this behavior which leads to `parseDate` receiving an a date object it
parsed and returend earlier in the createShare method.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

refactor(shareApiController): use contrusctor property promotion & DI logger

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #45762 from nextcloud/fix/failing-tests-for-setupcheck

[stable27] fix: failing tests for setup check

Merge pull request #45776 from nextcloud/backport/45669/stable27

[stable27] fix: Autodetect legacy filekey instead of trusting the header for legacy header

fix: failing tests for setup check

Signed-off-by: Anna Larch <anna@nextcloud.com>

test: Fix encryption test

Signed-off-by: Louis Chemineau <louis@chmn.me>

fix: add default value for new flag `$useDecryptAll` on getFileKey

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Autodetect legacy filekey instead of trusting the header for legacy header

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45736 from nextcloud/ci/eol/update-workflow-stable27

[stable27] ci(eol): update workflow from template

Merge pull request #45757 from nextcloud/backport/45120/stable27

[stable27] fix(dav): Don't log access control as error

fix(dav): Don't log access control as error

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

ci(eol): update workflow from template

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45544 from nextcloud/backport/44664/stable27

Merge pull request #44991 from nextcloud/backport/44923/stable27

Merge pull request #45527 from nextcloud/backport/45014/stable27

Merge pull request #45589 from nextcloud/backport/36942/stable27

fix(dav): Rate limit address book creation

Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com>

Merge pull request #45639 from nextcloud/backport/45235/stable27

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix: Fix truncation on public shares

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #44009 from nextcloud/backport/43252/stable27

Merge pull request #44957 from nextcloud/backport/44884/stable27

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45441 from nextcloud/backport/45390/stable27

[stable27] fix: Mark more configs as sensitive

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

feat: add option to disable scanner transactions

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #44397 from nextcloud/backport/44075/stable27

Merge pull request #45664 from nextcloud/fix/upload_conflict_race

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(dav): Add retention time to sync token cleanup

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

fix(dialogs): Make sure conflict dialog is loaded before adding conflicts

Fixes a possible race condition where conflicts are added and the dialog
loading finishes only afterwards.

The race condition sometimes led to missing files in the conflict dialog
when uploading several existing files at once.

Fixes: #45661

Merge pull request #45624 from nextcloud/backport/45494/stable27

fix(core): remove unwanted unsupported browser import

Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(core): unsupported browser `getRootUrl` import

Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>