add bruteforce protection in OauthApiController

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38708 from nextcloud/backport/38398/stable26

[stable26] Store encrypted OAuth2 client secrets

encrypt oauth2 client secrets

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

add test that inserts a long oauth client secret

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Merge pull request #38853 from nextcloud/backport/38823/stable26

[stable26] generate user themed favicon and touchicon

Merge pull request #38887 from nextcloud/backport/38868/stable26

[stable26] fix confusion around mail settings and improve layout a bit

Merge pull request #38932 from nextcloud/backport/38915/stable26

[stable26] adjust admin setup check to increase warning to configure https

Merge pull request #38942 from nextcloud/release/26.0.3

26.0.3

26.0.3

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

adjust admin setup check to increase warning to set up https

Signed-off-by: Simon L <szaimen@e.mail.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38904 from nextcloud/release/26.0.3_rc2

26.0.3 RC2

26.0.3 RC2

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #38892 from nextcloud/obj-store-copy-list-source-cache-26

use source cache when listing folder during recursive copy

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix confusion around mail settings

Signed-off-by: Simon L <szaimen@e.mail.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

generate user themed favicon and touchicon

Signed-off-by: Simon L <szaimen@e.mail.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38755 from nextcloud/release/26.0.3_rc1

26.0.3 RC1

Merge pull request #38023 from nextcloud/backport/32877/stable26

[stable26] allow storing multiple mounts for the same rootid in the mount cache

ci: revert to avoid conflict for release PR

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #37230 from nextcloud/backport/36033/stable26

[stable26] invalidate existing tokens when deleting an oauth client

Merge pull request #38757 from nextcloud/backport/38468/stable26

[stable26] log failures to read certificates during listing

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

adjust @since annotation

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #38684 from nextcloud/backport/37802/stable26

[stable26] Sharing: Do not show copy action when user doesn't have permissions

Merge pull request #38818 from nextcloud/backport/38811/stable26

[stable26] make sure to show download button only one time

make sure to show download button only one time

Signed-off-by: Simon L <szaimen@e.mail.de>

Merge pull request #38807 from nextcloud/automated/noid/stable26-fix-npm-audit

[stable26] Fix npm audit

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38396 from nextcloud/backport/38164/stable26

[stable26] Show pending popover menu when password is enabled by default

chore(assets): Recompile JS

Signed-off-by: Joas Schilling <coding@schilljs.com>
(cherry picked from commit 9f8fa4802bc419b9f0637efad32c24778e8215ff)

Show pending popover menu when password is enabled by default

When "Enforce password protection" is enabled in the sharing settings a
popover menu is shown to set a password before the share is created. On
the other hand, when "Always ask for a password" was enabled in the
sharing settings and a new link share was created the share was
immediately created with a default password; the user was not able to
specify a password (nor create the share without password).

The component template already provided the needed elements to also ask
for the password without enforcing it, but the popover menu was not
shown due to "enableLinkPasswordByDefault" being missing in "if"
conditions.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
(cherry picked from commit d4631921b4f4ab2832bc6698def47aa16d60c621)

Rename "pendingPassword" to "pendingEnforcedPassword"

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
(cherry picked from commit d80f8fc84f0e548ebf7520ee0995d6e06ec00c1d)

Merge pull request #38358 from nextcloud/backport/38294/stable26

[stable26] Use aria-expanded correctly on toggle user actions

Merge pull request #37776 from nextcloud/backport/37534/stable26

[stable26] Adjust the value of the "max-parts" parameter of the object storage 'ListPart' interface to 1000

Merge pull request #38574 from nextcloud/backport/38301/stable26

[stable26] fix(caldav): Ignore invalid events for reminder generation

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38752 from nextcloud/backport/38735/stable26

[stable26] allow to specify upgrade.cli-upgrade-link in order to link to the correct documentation

Merge pull request #38583 from nextcloud/backport/38206/stable26

[stable26] Increase from 100000 to 600000 iterations for hash_pbkdf2

Merge pull request #38564 from nextcloud/backport/38549/stable26

[stable26] Fix app menu flicker

Compile frontend js files

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

fix(files_sharing): Don't show copy action when !canDownload and no update permissions

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Merge pull request #38399 from nextcloud/backport/38291/stable26

[stable26] fix loading custom logo image

log failures to read certificates during listing

Signed-off-by: Robin Appelman <robin@icewind.nl>

26.0.3 RC1

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

allow to specify upgrade.cli-upgrade-link in order to link to the correct documentation

Signed-off-by: Simon L <szaimen@e.mail.de>

Merge pull request #38741 from nextcloud/automated/noid/stable26-fix-npm-audit

[stable26] Fix npm audit

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38557 from nextcloud/backport/38259/stable26

[stable26] reload filelist when adding or removing shares

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

reload filelist when adding or removing shares

Signed-off-by: Robin Appelman <robin@icewind.nl>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #38720 from nextcloud/backport/38719/stable26

Create lint-eslint-when-unrelated.yml

Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>

Merge pull request #38704 from nextcloud/backport/38486/stable26

fix(psalm): Install apcu, ftp and ldap extension like in static-code-analysis-security

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(CI): Temporary workaround - Run Psalm CI with 1 thread only so it finishes

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix: keep important php and node versions

Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>

fix(CI): Update oracle image and config

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore: update workflows from templates

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #38698 from nextcloud/backport/38694/stable26

fix(actions): cypress

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38672 from nextcloud/backport/38577/stable26

[stable26] Improve oauth2 database migration from ownCloud

shorten oauth2 client names before resizing the column

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

drop the oauth2_clients trusted column, delete unsupported clients and their access tokens

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Merge pull request #38487 from nextcloud/backport/37522/stable26

[stable26] Ungroup `placeholder` css rules

fix(core): Ungroup `placeholder` css rules to prevent browsers from removing all rules

When rules are grouped using the comma operator and one selector is invalid / unknown then the whole group is invalidated[1].
In this case `::-ms-input-placeholder` is unknown to Firefox and Chrome, so the `::placeholder` rule is never applied.
[1]: https://www.w3.org/TR/selectors-3/#grouping

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #38677 from nextcloud/backport/38648/stable26

[stable26] fix(caldav): Cast calendar objects id to int when building index

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(caldav): Cast calendar objects id to int when building index

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #38660 from nextcloud/backport/38649/stable26

[stable26] fix(caldav): Close DB cursor in reminder index background job

Merge pull request #38479 from nextcloud/backport/38440/stable26

[stable26] fix: Catch Deadlock properly as execute throws Doctrine exceptions not our wrapped ones

fix(caldav): Close DB cursor in reminder index background job

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #38654 from nextcloud/backport/37904/stable26

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38521 from nextcloud/artonge/backport/stable26/38469

fix: Use proper link for navigating to files on click handler

Signed-off-by: Julius Härtl <jus@bitgrid.net>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #38573 from nextcloud/backport/38355/stable26

[stable26] fix(trashbin): Truncate long filenames

Fix initialisation of versions in the DB

Broken after https://github.com/nextcloud/server/pull/36690

Signed-off-by: Louis Chemineau <louis@chmn.me>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38598 from nextcloud/automated/noid/stable26-update-psalm-baseline

[stable26] Update psalm-baseline.xml

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #38118 from nextcloud/automated/noid/stable26-fix-npm-audit

[stable26] Fix npm audit

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>