Remove unused CSS styles

* could not find an traces of .popup and .arrow anywhere else

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #4372 from nextcloud/smtp-password

Don't put the SMTP password into the HTML code

[tx-robot] updated from transifex

Fix unit tests

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #4376 from nextcloud/add-bruteforce-protection-to-change-self-password

Add bruteforce protection to changePersonalPassword

Add bruteforce protection to changePersonalPassword

While the risk is actually quite low because one would already have the user session and could potentially do other havoc it makes sense to throttle here in case of invalid previous password attempts.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Fix some more stuff

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix tests

Signed-off-by: Joas Schilling <coding@schilljs.com>

Don't put the SMTP password into the HTML code

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #2834 from nextcloud/accesListToShareManager

Access list to share manager

[tx-robot] updated from transifex

Merge pull request #4330 from nextcloud/activities-for-password-mail-change

Add activities when email or password is changed

Merge pull request #4346 from nextcloud/properly-do-bruteforce-protection-via-annotation

Make BruteForceProtection annotation more clever

[tx-robot] updated from transifex

Fix autoloader

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Make BruteForceProtection annotation more clever

This makes the new `@BruteForceProtection` annotation more clever and moves the relevant code into it's own middleware.

Basically you can now set `@BruteForceProtection(action=$key)` as annotation and that will make the controller bruteforce protected. However, the difference to before is that you need to call `$responmse->throttle()` to increase the counter. Before the counter was increased every time which leads to all kind of unexpected problems.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #4326 from nextcloud/downstream-27562

Reorder the entries of the log for easier reading

Merge pull request #4308 from nextcloud/lost-password-email

Update email template for lost password email

Merge pull request #2424 from nextcloud/fix-login-controller-test-consolidate-login

Fix login controller test and consolidate login

Improve PHPDoc

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #4337 from nextcloud/fix-adblock-share-icon

Fix AdBlock blocking share icon, ref #866

Use constants

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #4341 from nextcloud/local-link-explanation

Explain local link

Explain local link

The local link is a clever thing and the clients should support this imho but it might not be clear to all users. For one, the term 'local link' is a bit odd. Local with respect to what? It links directly to the file or folder, so direct link seems to make more sense to me. And we should explain the difference with a public link. So this PR:
* renames local link to direct link
* adds a short explanation, noting it only works for users who have access to this file/folder.

As other links are called public link you could also consider calling this 'private link', I suppose. But the links we sent by mail to ppl could also be called 'private link' (they are for one user, who git it by email) so I think it might be confusing. What do @nextcloud/designers think?

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #4336 from nextcloud/add-ratelimiting

Add support for ratelimiting via annotations

Merge pull request #4342 from nextcloud/update-certificate-bundle

Update CA bundle

Merge pull request #4344 from nextcloud/dont-load-handlebars

Don't load handlebars in template

Mail shares trigger the public key

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Update autoloader

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix server container registration

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Don't load handlebars in template

It's already loaded in core.json

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Not needed in the DIContainer anymore

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Do not set full path if not currentAccess

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add samples to the docs

Signed-off-by: Joas Schilling <coding@schilljs.com>

Add more tests for the share helper

Signed-off-by: Joas Schilling <coding@schilljs.com>

Catch exceptions and use as many results as possible

Signed-off-by: Joas Schilling <coding@schilljs.com>

Activate the test

Signed-off-by: Joas Schilling <coding@schilljs.com>

Adjust docs and make !$currentAccess simpler

Signed-off-by: Joas Schilling <coding@schilljs.com>

Add unit tests for sharebymail provider

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix share manager test

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix default share provider

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix tests for ShareHelper

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix federated file sharing

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix returned paths for remote shares

Signed-off-by: Joas Schilling <coding@schilljs.com>

Return the token as well

Signed-off-by: Joas Schilling <coding@schilljs.com>

Also return the token

Signed-off-by: Joas Schilling <coding@schilljs.com>

Return the paths for the users without setting them all up

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix comments

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add shareHelper test

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add mail element to access list

* Each provider just returns what they have so adding an element won't
require changing everything
* Added tests

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Offload acceslist creation to providers

* This allows for effective queries.
* Introduce currentAccess parameter to speciy if the users needs to have
currently acces (deleted incomming group share). (For notifications)

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Added ShareHelper

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix tests

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Port Encryption/file to new getAccessList

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Added to public interface

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add owner to access list

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Add getAccessList to ShareManager

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

No need for those emails anymore

Signed-off-by: Joas Schilling <coding@schilljs.com>

Send an email to the old address on email change

Signed-off-by: Joas Schilling <coding@schilljs.com>

Allow to read the old email on the hook as well

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #4313 from nextcloud/ldap-name-change

Change LDAP method names

Move logic into new class with DI

Signed-off-by: Joas Schilling <coding@schilljs.com>

Remove expired attempts

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Add tests for multiple parameters

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Enable testing app in CI step

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Update static autoloadermap

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Move to dedicated MiddleWare

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Fix .drone.yml

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Add isset() as it can be an empty result

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Register in ServerContainer

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Add support for ratelimiting via annotations

This allows adding rate limiting via annotations to controllers, as one example:

```
@UserRateThrottle(limit=5, period=100)
@AnonRateThrottle(limit=1, period=100)
```

Would mean that logged-in users can access the page 5 times within 100 seconds, and anonymous users 1 time within 100 seconds. If only an AnonRateThrottle is specified that one will also be applied to logged-in users.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Update CA bundle

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Send an email on password change

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #4340 from nextcloud/remove-invalid-route

Remove invalid route

Add activities when email or password is changed

Signed-off-by: Joas Schilling <coding@schilljs.com>

Remove invalid route

Said file doesn't exist anymore and accessing it would just return a 500

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #3966 from nextcloud/downstream-26570

Override config.php values through environment variables

Merge pull request #3043 from nextcloud/issue-3038-no-logentry-on-email-login

Dont create a log entry on email login

[tx-robot] updated from transifex

Merge pull request #4338 from nextcloud/handlebars-min

Move to handlebars.min.js

Move to handlebars.min.js

core.js is now below 1mb!

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Update email template for lost password email

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #4307 from nextcloud/sharing-emails

New emails for sharebymail

Merge pull request #4335 from nextcloud/jquery-ui-min

Moved to jquery-ui.custom.min.js

Merge pull request #4282 from nextcloud/oci-connect-string

use the same oci connectstring in all code paths

Moved to jquery-ui.custom.min.js

Shaves off about 200kb of the default loaded js libs

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #4306 from nextcloud/followup-3905

Favorites integration tests for shared files

Merge pull request #4331 from nextcloud/query-builder-sum

Add sum() to the query function builder

Fix unit tests

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Favorites integration tests for shared files

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #4329 from nextcloud/move-out-shared-folder

Fix moving files out of a shared folder

Dont add click-button text for plaintext mails

Signed-off-by: Joas Schilling <coding@schilljs.com>

No newlines when heading is empty

Signed-off-by: Joas Schilling <coding@schilljs.com>

make the plain text footer standard compliant and add a space after '--'. It also adds a line break in front so that there is some spacing between the mail body and the footer

Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>

Use instance name as alt-text

Signed-off-by: Joas Schilling <coding@schilljs.com>

Don't duplicate the sentence with the header

Signed-off-by: Joas Schilling <coding@schilljs.com>

Use new email design for sharebymail emails

Signed-off-by: Morris Jobke <hey@morrisjobke.de>