fix: Resolve some psalm issues

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat: Implement settings frontend for allowed CORS domains

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Make CORS handling admin configurable and fix tests

Also make sure to only return allowed methods for DAV responses

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Removed beforeController Logic

I removed the beforeController logic here due to the change of handling CORS since PR 28457[1]

According to previous implementation, CORS was only allowed with methods that had @PublicPage notation for preventing CSRF attacks.
But in the latest PR by me, the current implementations is as follows:

    * maintain a white-list of domains for whom CORS is enabled
    * This list can be viewed and edited under settings -> personal -> security

This implementation removes the need for `@PublicPage`[2].

[1] https://github.com/owncloud/core/pull/28457
[2] https://github.com/owncloud/core/pull/28864/

Enabled CORS on webdav and ocs

* Exclude DAV CORS handling when no Origin specified
  This will exclude non-browser clients from CORS handling.
  Fixes some clients like davfs which break when CORS is enabled.
* fix: CORS on WebDAV is not working
  WebDAV is not working at all when used by on browser Javascript because the CORS headers
  are only present in the OPTION request, but not in the subsequent WebDAV methods.
  * This behavior is caused by a erroneous json_decode call while retriving the user's domains whitelist.
    It return an object, so the is_array always fails and no header are sent.
* Add Access-Control-Expose-Headers - to allow clients to access certain headers
* Adding many headers as allowed headers + add capability to read additional allowed headers from config.php

Merge pull request #40517 from nextcloud/feat/sharing-status

feat(files): add files_sharing indicator

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Merge pull request #39626 from nextcloud/fix/remove-litmus-locks-tests

Remove litmus locks tests

Merge pull request #40213 from nextcloud/dependabot/npm_and_yarn/nextcloud/browserslist-config-3.0.0

chore(deps): Bump @nextcloud/browserslist-config from 2.3.0 to 3.0.0

Merge pull request #40504 from nextcloud/fix/remove-ilogger-uses-in-user_ldap

Remove deprectated ILogger uses from user_ldap application

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40481 from nextcloud/fix/guest-pages-contentinfo

fix: content info footer on guest pages

fix: content info footer on guest pages

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #39964 from nextcloud/dependabot/npm_and_yarn/camelcase-8.0.0

chore(deps): Bump camelcase from 6.3.0 to 8.0.0

Merge pull request #40488 from nextcloud/bugfix/noid/message-expiration-breaks-pagination

fix(comments): Use provided offset in best effort when loading comments

Remove deprectated ILogger uses from user_ldap application

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(systemtags): Add one unittest for to test tags parsing after the dependency was updated

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore(deps): Bump camelcase from 6.3.0 to 8.0.0

Bumps [camelcase](https://github.com/sindresorhus/camelcase) from 6.3.0 to 8.0.0.
- [Release notes](https://github.com/sindresorhus/camelcase/releases)
- [Commits](https://github.com/sindresorhus/camelcase/compare/v6.3.0...v8.0.0)

---
updated-dependencies:
- dependency-name: camelcase
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #40423 from nextcloud/enh/proved-db-as-string

Merge pull request #39720 from nextcloud/dependabot/composer/build/integration/symfony/event-dispatcher-5.4.26

chore(deps-dev): Bump symfony/event-dispatcher from 5.4.22 to 5.4.26 in /build/integration

Merge pull request #40210 from nextcloud/dependabot/npm_and_yarn/cypress/webpack-preprocessor-6.0.0

chore(deps-dev): Bump @cypress/webpack-preprocessor from 5.17.1 to 6.0.0

chore(deps): Bump @nextcloud/browserslist-config from 2.3.0 to 3.0.0

Bumps [@nextcloud/browserslist-config](https://github.com/nextcloud/browserslist-config) from 2.3.0 to 3.0.0.
- [Release notes](https://github.com/nextcloud/browserslist-config/releases)
- [Commits](https://github.com/nextcloud/browserslist-config/compare/v2.3.0...v3.0.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/browserslist-config"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #40355 from nextcloud/dependabot/github_actions/cypress-io/github-action-6.5.0

chore(deps): Bump cypress-io/github-action from 5.8.3 to 6.5.0

Merge pull request #40052 from nextcloud/dependabot/composer/build/integration/phpunit/phpunit-9.6.11

enh(db): provide database providers via API

To avoid leaking internals (OC), wrap the getDatabasePlatform and provide the
associated constants

fixes https://github.com/nextcloud/server/issues/30877

Signed-off-by: Anna Larch <anna@nextcloud.com>

chore(deps-dev): Bump phpunit/phpunit in /build/integration

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 9.6.10 to 9.6.11.
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.11/ChangeLog-9.6.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.10...9.6.11)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #39974 from nextcloud/dependabot/github_actions/actions/setup-node-3.8.1

chore(deps): Bump actions/setup-node from 3.6.0 to 3.8.1

Merge pull request #39972 from nextcloud/dependabot/github_actions/peter-evans/create-pull-request-5

chore(deps): Bump peter-evans/create-pull-request from 3 to 5

Merge pull request #40455 from nextcloud/dependabot/composer/build/integration/phpunit/phpunit-9.6.12

chore(deps-dev): Bump phpunit/phpunit from 9.6.10 to 9.6.12 in /build/integration

chore(deps-dev): Bump symfony/event-dispatcher in /build/integration

Bumps [symfony/event-dispatcher](https://github.com/symfony/event-dispatcher) from 5.4.22 to 5.4.26.
- [Release notes](https://github.com/symfony/event-dispatcher/releases)
- [Changelog](https://github.com/symfony/event-dispatcher/blob/6.3/CHANGELOG.md)
- [Commits](https://github.com/symfony/event-dispatcher/compare/v5.4.22...v5.4.26)

---
updated-dependencies:
- dependency-name: symfony/event-dispatcher
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #40470 from nextcloud/fix/bump-phpseclib/phpseclib-to-2.0.45-in-master

Bump phpseclib/phpseclib to 2.0.45 in master

Merge pull request #40475 from nextcloud/feat/f2v/systemtags

Merge pull request #39531 from nextcloud/sso-kerberos-fix2

kerberos sso ci fix

Merge pull request #40485 from nextcloud/fix/report-test

fix(dav): fix report tests

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(dav): fix report tests

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Merge pull request #40357 from nextcloud/dependabot/github_actions/actions/checkout-4

chore(deps): Bump actions/checkout from 3 to 4

fix(comments): Use provided offset in best effort when loading comments

When we didn't find the "$lastKnownComment" the whole condition was ignored.
Now we still use the ID as an offset.
This is required as a fall-back for expired messages in Talk
and deleted comments in other apps.

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(deps): Bump actions/checkout from 3 to 4

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...3df4ab11eba7bda6032a0b82a6bb43b11571feac)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #40183 from nextcloud/sftp-fixes

SFTP improvements

use user_saml from git

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #40480 from privatemaker/fix/dashboard-icon-apps-dark

Update 3rdparty to master commit

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Bump phpseclib/phpseclib to 2.0.45 in master

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(systemtags): fix capabilities and sidebar + tag visibility

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

kerberos sso ci fixes

Signed-off-by: Robin Appelman <robin@icewind.nl>

sftp psalm fixes

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix(files): allow downloading folders within user root folders only

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

feat(files): add systemtags view

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

remove stroke= and style= attributes from dashboard.svg

Signed-off-by: Private Maker <privatemaker@posteo.net>

Merge pull request #40465 from nextcloud/fix/customElementRendered

fix(files): CustomElementRender $el replacement bug

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #40474 from nextcloud/fix/report-dav

Merge pull request #39818 from nextcloud/feature/trashbin-restore-improvements#39724

Let `occ trashbin:restore` restore also from groupfolders and add filters

fix(dav): report status

Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>

Merge pull request #40420 from nextcloud/fix/remove-at-matcher-in-core

Remove last calls to deprecated at matcher in tests/Core

Merge pull request #39039 from fsamapoor/refactor_lib_private_log

Refactors lib/private/Log

Remove last calls to deprecated at matcher in tests/Core

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #40424 from nextcloud/fix/remove-at-matcher-in-dav-2

Remove last at matcher call in dav application tests

Merge pull request #40419 from nextcloud/fix/remove-at-matcher-in-installer-test

Remove deprecated at matcher in tests/lib/InstallerTest.php

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40358 from nextcloud/automated/noid/master-update-psalm-baseline

[master] Update psalm-baseline.xml

Merge pull request #40426 from nextcloud/fix/openapi/provisioning_api/quota

provisioning_api: Fix quota constants in OpenAPI

Merge pull request #40421 from nextcloud/fix/openapi/core/reference-api

core: Fix OpenAPI for reference API

Merge pull request #38610 from fsamapoor/replace_strpos_calls_in_dav_app

Refactors "strpos" calls in /apps/dav

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40203 from lhsazevedo/fix/mimetype-40064

Merge pull request #40409 from nextcloud/feat/f2v-unread-comments-action

refactor(f2v): Migrate unread comments action to the new FileAction API

Signed-off-by: Lucas Azevedo <lhs_azevedo@hotmail.com>

chore(deps-dev): Bump phpunit/phpunit in /build/integration

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 9.6.10 to 9.6.12.
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.12/ChangeLog-9.6.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.10...9.6.12)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40418 from nextcloud/fix/noid/dont-join-dav-tags

Merge pull request #40440 from nextcloud/40396-consider-link-shares-in-remove-share

Consider link shares in removeShare method in SharingTab

Consider link shares in removeShare method in SharingTab

Currently, the `removeShare` method in the `SharingTab` view,
does not take into account `linkShares`.

Since link shares now shares thesame detail view with other share types,
it should therefore be considered hence this commit.

Resolves : https://github.com/nextcloud/server/issues/40396

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix: don't use davtags for tag search

1. https://github.com/nextcloud/server/pull/26813 Initial implementation with support for systemtags and davtags (vcategory)
2. https://github.com/nextcloud/server/pull/39062 Additional check if the given tag exists, though ISystemTagManager.getAllTags only looks for systemtags

Therefore it's not possible anymore to search for davtags and unnecessary to join the other tables.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #40434 from nextcloud/40431-correctly-switch-permissions-radios

Correctly switch/revert from custom to bundled perms

Correctly switch/revert from custom to bundled perms

We have a set custom permissions checkbox, that when selected should set
the quick permissions settings to custom as well as show the custom permission settings.

When the checkbox is unchecked the quick permissions have to be reset to the default,
`bundledPermissions.ALL` but also users can switch from custom permissions to `bundled`
by just changing the radio select, hence we need a mechanism to set the permissions back
to the correct fallback depending on where the user has toggled the the custom permission from.

The mechanism is `revertSharingPermission` and this commit, makes sure revert values are correctly
set upon toggle.

Resolves : https://github.com/nextcloud/server/issues/40431

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #40428 from nextcloud/artonge/fix/users_list_bugs

Do not display userCount when it is equal to 0

Merge pull request #40411 from nextcloud/artonge/fix/translation

Use t and n for translation

Merge pull request #40416 from nextcloud/fix/noid/check-for-user-count

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(ux): Show initial loading state of managers

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #40389 from nextcloud/40172-invite-guests-and-others

Fix invite guest for new sharing flow

Properly align all sharing-entry types

SharingEntryLink and regular ShareEntry were not properly visually aligned
before this commit.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Do not display userCount when it is equal to 0

Signed-off-by: Louis Chemineau <louis@chmn.me>

Reset loading state on UserRow mount

Signed-off-by: Louis Chemineau <louis@chmn.me>

Do not preload potential manager list on UserRow mount

Signed-off-by: Louis Chemineau <louis@chmn.me>

Do not manipulate userCount when it is equal to 0

Signed-off-by: Louis Chemineau <louis@chmn.me>

core: Fix OpenAPI for reference API

Signed-off-by: jld3103 <jld3103yt@gmail.com>

provisioning_api: Fix quota constants in OpenAPI

Signed-off-by: jld3103 <jld3103yt@gmail.com>

Remove last at matcher call in dav application tests

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Fix invite guest for new sharing flow

Call external handlers such as the one in the guess app
https://github.com/nextcloud/guests/blob/master/src/main.js#L30
if present.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Remove deprecated at matcher in tests/lib/InstallerTest.php

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: use faster method to fetch user count

countUsers: the actual user count reported by the backend.
countSeenUsers: count every user who was logged in once.

1: We should avoid expensive operations (like asking every backend for it's user count) in migrations.
2: The current check is wrong because countUsers returns an array. var_dump([] > 1000) => true ;)

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #40365 from nextcloud/artonge/fix/do_not_show_related_ressources_when_share_details_is_open

Hide additional content when share details is open

Merge branch 'master' into artonge/fix/do_not_show_related_ressources_when_share_details_is_open