fix(LDAP): solve race condition reading groups of disappeared LDAP user

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #40839 from nextcloud/fix/noid/ldap-group-config-di

Pass IConfig by constructor to Group_LDAP

refactor(LDAP): pass IConfig via constructor to Group_LDAP

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

refactor(tests): simplify code, reduce duplication

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

test(Group LDAP): add test for getting groups of OfflineUser

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(ldap): store last known user groups

- for LDAP user life cycle management

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #40783 from nextcloud/enh/40710/adjust-focus-visible

adjust color of focus-visible to be better visible

Signed-off-by: Simon L <szaimen@e.mail.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #33105 from nextcloud/feature/noid/talk-federation-auth

Talk federation authentication

Merge pull request #40784 from nextcloud/enh/39414/move-docs

Talk federation authentication

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #40181 from nextcloud/bugfix/noid/copy-all-source-files-in-cypress

Merge pull request #40829 from nextcloud/fix/fix-dynamic-property-in-core-tests

Fix Dynamic property timeFactory in ClientFlowLoginControllerTest

Merge pull request #40737 from nextcloud/cors-app_api

added CORS skip if the session was created by AppAPI

Merge pull request #40770 from nextcloud/fix/cypress-on-branches

fix(cypress): empty group, tag and ci-build-id when not using cypress cloud

Merge pull request #40731 from nextcloud/imaginary-performance

Generate all preview sizes for Imaginary

fix(cypress): runs on integration branches

Empty `group`, `tag` and `ci-build-id` when `record` is false.
When not using cypress cloud these need to be empty.

Note that cypress expects strings for group and tag.
Therefore `false` will be interpreted as `"false"`.
Use an empty string instead.

Signed-off-by: Max <max@nextcloud.com>

Fix Dynamic property timeFactory in ClientFlowLoginControllerTest

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge branch 'master' into cors-app_api

Merge pull request #40805 from nextcloud/dependabot/npm_and_yarn/types/dockerode-3.3.20

chore(deps-dev): Bump @types/dockerode from 3.3.19 to 3.3.20

Merge pull request #40472 from nextcloud/fix/aborted_pgsql_transaction_on_error

fix(twofactor): avoid DB error on Twofactor (en/dis)abled event

fix(CI): Fix server setup in cypress by overwriting all files in shallow-server

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge branch 'master' into imaginary-performance

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40294 from nextcloud/fix/37087/new-comment-description

fix(comments): move new comment instructions placeholder to description

chore(assets): Re-compile assets

Signed-off-by: Grigorii K. Shartsev <me@shgk.me>

fix(comments): move new comment instructions placeholder to description

Signed-off-by: Grigorii K. Shartsev <me@shgk.me>

chore(deps-dev): Bump @types/dockerode from 3.3.19 to 3.3.20

Bumps [@types/dockerode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dockerode) from 3.3.19 to 3.3.20.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dockerode)

---
updated-dependencies:
- dependency-name: "@types/dockerode"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #40692 from nextcloud/deps/nextcloud/vue-8.0.0-beta.7

fix(ci): Update dav snapshot

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(acceptance): Locate contacts menu button

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: Adapt to breaking DateTime rename

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: Bump @nextcloud/vue + @nextcloud/dialogs + @nextcloud/calendar-availability-vue

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix double heading

Signed-off-by: Simon L <szaimen@e.mail.de>

address review

Signed-off-by: Simon L <szaimen@e.mail.de>

Merge pull request #38556 from nextcloud/techdebt/noid/doctrine/dbal-to-3.6.2

chore(deps): Bump doctrine/dbal to 3.7.x

fix(DB): Update comment to state why we still use the max 4k limit

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(sqlite): Remove some old SQLite cheats

- Doctrine correctly forces integer for autoincrement by now
- Doctrine correctly maintains integer types by now

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(oracle): Move away from internal and deprecated SchemaDiff API

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(dbal): Move migrator away from deprecated calls

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(mysql): Remove custom MySQL workaround from 2015

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(postgres): Remove old Postgres 9.4 workaround

Postgres 10 is the minimum in the meantime
and doctrine/dbal fixed this in 2.6.0 already
ref https://github.com/doctrine/dbal/pull/2614

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(sqlite): Remove no longer required autoincrement fix

- I installed current master and exported the schema as SQL
- Then I went to this branch, removed the content of the run() method (so made it no-op)
- I installed again and exported the schema as SQL
- The files are exactly the same, so whatever we tried to fix was fixed since 2015 in doctrine dbal

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(CI): Add a stub for SensitiveParameter, so Psalm is not failing on Doctrine/DBAL

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(dbal): Doctrine\DBAL\Connection::PARAM_* types are deprecated

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(deps): Bump doctrine/dbal to supported 3.7.0

Signed-off-by: Joas Schilling <coding@schilljs.com>

fixed Drone test

Signed-off-by: Alexander Piskun <bigcat88@icloud.com>

fix(twofactor): avoid error in pgsql for duplicate entry

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

Merge pull request #40563 from nextcloud/updateCrl

Update crl after revoke mfazones.csr

Merge pull request #40795 from nextcloud/fix/user/log-app-token-login-name-mismatch-user

fix(user): Log affected user of app token login name mismatch

Update crl after revoke mfazones.csr

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>

fix(user): Log affected user of app token login name mismatch

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #40719 from nextcloud/enh/a11y/semantic-user-table

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(cypress): User table create/delete tests

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(cypress): User table disable/enable tests

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(cypress): User table modify tests

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(cypress): User table column tests

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

enh(settings): Semantic user table markup

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Move inline docs to online documentation

Signed-off-by: Simon L <szaimen@e.mail.de>

Merge pull request #40766 from nextcloud/enh/noid/oauth2-code-expiration

Make OAuth2 authorization code expire

adjust phpdoc types in OauthApiController

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

update OpenAPI specs

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

update autoload files

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

adjust oauth app

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

adjust oauth tests

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

rename oauth2_access_token's created_at to code_created_at

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

add db index on oauth2_access_tokens's (token_count, created_at)

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

add test for refusing to get an oauth token from a code when we're not in authorization state

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

delete oauth access token when receiving a code that has expired

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

refuse oauth authorization code if a token has already been delivered (active token)

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

cleanup access tokens that are still in authorization state and that have expired

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

add tests for oauth2 authorization code expiration

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

make oauth2 authorization code expire after 10 minutes

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Merge pull request #40764 from nextcloud/chore/eslint-no-external-apps

chore: Do not lint external apps

Merge pull request #40745 from nextcloud/fix/noid/ocm-provider-rewrite-rules

fix ocm-provider rewrite rules

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40771 from nextcloud/fix/37098/migrate-to-nc-icon-svg-wrapper

Merge pull request #40768 from nextcloud/fix/37098/dashboard-duplicated-ids

fix(dashboard): remove duplicated IDs on the dashboard page

chore(assets): Recompile assets

Signed-off-by: Grigorii K. Shartsev <me@shgk.me>

fix(files): migrate from CustomSvgIconrenderer to NcIconSvgWrapper

Signed-off-by: Grigorii K. Shartsev <me@shgk.me>

Merge pull request #40662 from nextcloud/fix-37080_correct_aria_label_text_on_action_inputs

Correct `aria-label` on action input and text field

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #40515 from nextcloud/fix/redirect-if-wrong-dir

chore: build assets

Signed-off-by: Grigorii K. Shartsev <me@shgk.me>

fix(dashboard): remove duplicated IDs

Signed-off-by: Grigorii K. Shartsev <me@shgk.me>

Correct `aria-label` on action input and text field

Signed-off-by: julia.kirschenheuter <julia.kirschenheuter@nextcloud.com>

Merge branch 'master' into imaginary-performance

fix: redirect to proper directory if file not found

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Merge pull request #40585 from nextcloud/fix/illegal-characters

fix(files): disallow illegal characters

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Merge branch 'master' into imaginary-performance

Merge pull request #40660 from nextcloud/bugfix/noid/fix-missing-user-status-on-autocomplete-api

fix(autocomplete): Fix missing user status on autocomplete endpoint

Merge pull request #40439 from Koc/feature/clickable-logo

Merge pull request #40756 from nextcloud/fix/encoded-source

fix(files): legacy humanFileSize tests

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

chore: Do not lint external apps

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>