Get the proper UID

Some user backends (like the database backend) allow us to obtain a user
case insensitive. However the UID itself is case sensitive.

Example:
* create a user User1
* login as User1
  - This results the data/User1 folder to be created etc
* now have some code somewhere that obtains the userFolder (from
IRootFolder) but pas in 'uSER1' as uid
  - The code will check if that is a valid user. And in this case it is
  since User1 and uSER1 both map to the same user
  - However the the UID in the user object is used for the folder a new
  folder fill be create data/uSER1

With this PR this is avoided now. Since we obtain the real UID casing in
the backend before creating the user object.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #16711 from nextcloud/fix/csp/form_actions/loginflow

Fix login flow form actions

Bump vue-router from 3.0.7 to 3.1.2 (#16718)

Bump vue-router from 3.0.7 to 3.1.2

[tx-robot] updated from transifex

Merge pull request #16721 from nextcloud/fix/16644

Correctly handle emtpy string in proxyuserpwd config

Bump vue-router from 3.0.7 to 3.1.2

Bumps [vue-router](https://github.com/vuejs/vue-router) from 3.0.7 to 3.1.2.
- [Release notes](https://github.com/vuejs/vue-router/releases)
- [Changelog](https://github.com/vuejs/vue-router/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-router/compare/v3.0.7...v3.1.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16179 from J0WI/mv-frameoptions

Add X-Frame-Options header to .htaccess

Correctly handle emtpy string in proxyuserpwd config

As documented, the default value for config value proxyuserpwd is ''.
However, that value results in the error:
 "cURL error 5: Unsupported proxy syntax in '@'".
This patch handles the values of '' and null (the default in the code)
the same for config values proxyuserpwd and proxy.

Signed-off-by: Scott Shambarger <devel@shambarger.net>

Merge pull request #16713 from nextcloud/dependabot/npm_and_yarn/style-loader-1.0.0

Bump style-loader from 0.23.1 to 1.0.0

Remove duplicated spaces

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Use "always" condition for security headers

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Sort headers

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Add X-Frame-Options header to .htaccess

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

Fix login flow form actions

So fun fact. Chrome considers a redirect after submitting a form part of
the form actions. Since we redirect to a new protocol (nc://login/).
Causing the form submission to work but the redirect failing hard.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump style-loader from 0.23.1 to 1.0.0

Bumps [style-loader](https://github.com/webpack-contrib/style-loader) from 0.23.1 to 1.0.0.
- [Release notes](https://github.com/webpack-contrib/style-loader/releases)
- [Changelog](https://github.com/webpack-contrib/style-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/style-loader/compare/v0.23.1...v1.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16716 from nextcloud/dependabot/npm_and_yarn/css-loader-3.2.0

Bump css-loader from 3.1.0 to 3.2.0

Merge pull request #16717 from nextcloud/dependabot/npm_and_yarn/file-loader-4.2.0

Bump file-loader from 4.1.0 to 4.2.0

Bump css-loader from 3.1.0 to 3.2.0

Bumps [css-loader](https://github.com/webpack-contrib/css-loader) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/webpack-contrib/css-loader/releases)
- [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/css-loader/compare/v3.1.0...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16714 from nextcloud/dependabot/npm_and_yarn/nextcloud-vue-0.12.1

Bump nextcloud-vue from 0.12.0 to 0.12.1

Merge pull request #16715 from nextcloud/dependabot/npm_and_yarn/blueimp-md5-2.11.1

Bump blueimp-md5 from 2.11.0 to 2.11.1

Bump file-loader from 4.1.0 to 4.2.0

Bumps [file-loader](https://github.com/webpack-contrib/file-loader) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/webpack-contrib/file-loader/releases)
- [Changelog](https://github.com/webpack-contrib/file-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/file-loader/compare/v4.1.0...v4.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump sass-loader from 7.1.0 to 7.2.0 (#16712)

Bump sass-loader from 7.1.0 to 7.2.0

Bump nextcloud-vue from 0.12.0 to 0.12.1

Bumps [nextcloud-vue](https://github.com/nextcloud/nextcloud-vue) from 0.12.0 to 0.12.1.
- [Release notes](https://github.com/nextcloud/nextcloud-vue/releases)
- [Commits](https://github.com/nextcloud/nextcloud-vue/compare/v0.12.0...v0.12.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #16613 from nextcloud/enh/featurepolicy

Add Feature-Policy header

Bump blueimp-md5 from 2.11.0 to 2.11.1

Bumps [blueimp-md5](https://github.com/blueimp/JavaScript-MD5) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/blueimp/JavaScript-MD5/releases)
- [Commits](https://github.com/blueimp/JavaScript-MD5/compare/v2.11.0...v2.11.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

Bump sass-loader from 7.1.0 to 7.2.0

Bumps [sass-loader](https://github.com/webpack-contrib/sass-loader) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/webpack-contrib/sass-loader/releases)
- [Changelog](https://github.com/webpack-contrib/sass-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/sass-loader/compare/v7.1.0...v7.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Add tests

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add feature policy header

This adds the events and the classes to modify the feature policy.
It also adds a default restricted feature policy.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Bump js-yaml from 3.12.0 to 3.13.1 in /build (#16693)

Bump js-yaml from 3.12.0 to 3.13.1 in /build

Merge pull request #16638 from nextcloud/fix/noid/ldap-ext-storage-handler-loading-cli

delay sending event from app init to when they are needed

Have the OCSBaseResponse call the parent constructor

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump js-yaml from 3.12.0 to 3.13.1 in /build

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.12.0 to 3.13.1.
- [Release notes](https://github.com/nodeca/js-yaml/releases)
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/3.12.0...3.13.1)

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #15187 from vitormattos/bugfix-create-database-user

Bugfix: user is not allowed

Merge pull request #16683 from nextcloud/fix/audit/disabled-user-message

Fix enable/disable user audit message

Merge pull request #16686 from nextcloud/fix/16684/return_int_getIf

Properly return an int in the getId function of the cache

[tx-robot] updated from transifex

Bump nextcloud-vue to 0.12.0 (#16681)

Bump nextcloud-vue to 0.12.0

Properly return an int in the getId function of the cache

fixes #16684

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix enable/disable user audit message

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Bump nextcloud-vue to 0.12.0

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

[tx-robot] updated from transifex

Fix ie app menu loading click (#16667)

Fix ie app menu loading click

Fix ie app menu loading click

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

prevent the server's app-navigation's css to overrule the scop… (#16661)

prevent the server's app-navigation's css to overrule the scoped css …

prevent the server's app-navigation's css to overrule the scoped css in vue components

Signed-off-by: Marco Ambrosini <marcoambrosini@pm.me>

[tx-robot] updated from transifex

Merge pull request #16498 from nextcloud/feature/noid/room_metadata

Allow calendar resources/rooms to provide metadata

Merge pull request #16639 from nextcloud/feature/noid/new-types

Adding comparaison types: +regex +wildcard (fulltextsearch)

Merge pull request #16643 from nextcloud/enh/moreDIUsage

Lets use DI where we can

Merge pull request #16649 from nextcloud/dependabot/npm_and_yarn/nextcloud-vue-collections-0.5.6

Bump nextcloud-vue-collections from 0.5.4 to 0.5.6

Bump nextcloud-vue-collections from 0.5.4 to 0.5.6

Bumps [nextcloud-vue-collections](https://github.com/juliushaertl/nextcloud-vue-collections) from 0.5.4 to 0.5.6.
- [Release notes](https://github.com/juliushaertl/nextcloud-vue-collections/releases)
- [Commits](https://github.com/juliushaertl/nextcloud-vue-collections/compare/v0.5.4...v0.5.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

Merge pull request #16651 from nextcloud/dependabot/npm_and_yarn/webpack-4.39.1

Bump webpack from 4.38.0 to 4.39.1

Bump webpack from 4.38.0 to 4.39.1

Bumps [webpack](https://github.com/webpack/webpack) from 4.38.0 to 4.39.1.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v4.38.0...v4.39.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Lets use DI where we can

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add standard metadata key for room-features

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

comparaison types: +regex +wildcard

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

delay sending event from app init to when they are needed

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #16525 from nextcloud/bugfix/external-user-substitution

files_external: proper user context for sharing

fix check for null

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Adjust tests

Signed-off-by: Julius Härtl <jus@bitgrid.net>

fixes terminology and allows to request an IUser instance

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

adjusts LDAP's home handler to use the correct user object

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

do not send null value when string is expected

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Provide proper user context from initMountPoints

Signed-off-by: Julius Härtl <jus@bitgrid.net>

files_external: Make sure the correct user context is used in substitution of variables

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Allow to do a principal property search based on metadata keys

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Provide standard metadata keys for contact person of a resource

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Provide standard metadata keys for location of room

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Test resource and room principal backend to check that they provide metadata

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Merge pull request #16624 from nextcloud/bugfix/noid/versions-fetch-owner-only

Make sure we only fetch the file by id for the actual owner

Merge pull request #16622 from nextcloud/design/scrollbar

Standardize scrollbar color and width across Webkit and Firefox

Test sync of resource and room metadata

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Merge pull request #16586 from nextcloud/feature/16585_adminAuditShareCirclesRemotel/wiswedel

log circles and remote shares in admin_audit

log circles and remote shares in admin_audit

Signed-off-by: Sascha Wiswedel <sascha.wiswedel@nextcloud.com>

Merge pull request #16592 from nextcloud/bugfix/noid/federated-reshare

Fix permission check on incoming federated shares

Make sure we only fetch the file by id for the actual owner

Otherwise this will fetch all mounts for the file id which is quite
expensive and causes long saving times in big sharing structures

Signed-off-by: Julius Härtl <jus@bitgrid.net>

sync metadata of rooms / resources with cache

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

provide room / resource properties as principal properties

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

add oc_calendar_resources_md and oc_calendar_rooms_md tables

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Add \OCP\Calendar\IMetadataProvider interface and provider for common metadata keys

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

Merge pull request #16618 from nextcloud/enh/csp/form-action

Add form-action CSP element

Standardize scrollbar color and width across Webkit and Firefox

Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>

Update CSP test cases to handle the new form-action

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add form-action CSP element

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix permission check on incoming federated shares

Since federated shares have their permissions set on the node, we do not need
to check for parent share permissions. Otherwise reshares of incoming federated
have no permission variable defined and creating them will fail

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #16619 from nextcloud/bugfix/16446/theming-url-validate

Validate urls in theming settings and properly handle error messages

Merge pull request #16544 from nextcloud/bugfix/16540

Add missing password reset page to vue

Merge pull request #16616 from nextcloud/dep/setEvalScript

setting unsafe-eval is deprecated

Validate urls in theming settings and properly handle error messages

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Move actual password reset to vue

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

setting unsafe-eval is deprecated

This will be removed in a future version of Nextcloud.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>