refactor(Token): introduce scope constants

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(Session): avoid password confirmation on SSO

SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #45512 from nextcloud/feat/ldap/additional-attributes

feat(ldap): sync additional properties to profile and SAB

feat(ldap): sync additional properties to profile and SAB

Synced from LDAP to profile:
- Date of birth

Synced from LDAP to SAB (via the profile):
- Biography
- Date of birth

Original code by Jake Nabasny (GitHub: @slapcat)

Co-authored-by: Jake Nabasny <jake@nabasny.com>
Co-authored-by: Richard Steinmetz <richard@steinmetz.cloud>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #44906 from nextcloud/feat/localized-ownership-transfer-target

feat(files): Use receiving users language for the ownership transfer target folder

Merge pull request #45480 from nextcloud/fix/archive-grey-color

fix(theming): replace standard generic package icon by material design

feat(files): Use receiving users language for the ownership transfer target folder

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #45508 from Agnibaan/issue-42611-security-txt-fix

fix:Ensure security.txt file ends with a newline character

Merge pull request #44272 from nextcloud/feature/40205/show-add-menu-in-emptycontent

Show upload menu in folders' emptycontent

Merge pull request #45428 from nextcloud/fix/update-archive-tar

chore(deps): Bump pear/archive_tar from 1.4.14 to 1.5.0

Merge pull request #45222 from nextcloud/bug/noid/caldav-search-limit-and-timerange

CalDAV fix search with limit and time range

Merge pull request #45247 from nextcloud/add-border-width

Add variable for inputs border width

chore(deps): Bump pear/archive_tar from 1.4.14 to 1.5.0

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Keep 'back'-button for not found directories or if user can not upload

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat(files): Show upload menu in folders' emptycontent

Signed-off-by: Marco <marcoambrosini@icloud.com>

Merge pull request #45562 from nextcloud/fix-maintain-share-client-behaviour

fix(ShareApiClients): Maintain meaning of `''` and null for share api cli…

Merge pull request #45559 from nextcloud/bug/noid/add-reason-lock-wait-timeout

add mapping for lock wait timeout

fix(ShareApiClients): Maintain meaning of `''` and null for share api clients

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #45411 from nextcloud/fix/auth/selective-token-activity-update

fix(auth): Update authtoken activity selectively

feat(db): add mapping for lock wait timeout

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #45295 from nextcloud/add-temporary-border-radius-variable

Add temporary variable for border radius

Merge pull request #45554 from nextcloud/chore/noid/spdx-batch8

Add SPDX header - batch 8

Feat: Update apps/theming/css/default.css

Co-authored-by: Grigorii K. Shartsev <me@shgk.me>
Signed-off-by: Marco <marcoambrosini@proton.me>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

chore: Add SPDX header

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

feat(theming): Add variable for border width

Signed-off-by: Marco Ambrosini <marcoambrosini@proton.me>

feat(caldav): order the calendar objects by start date for search

Sorting the events by the start date leads to more predictable results for the search API consumers.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

fix(caldav): event search with limit and timerange

Event recurrences are evaluated at runtime because the database only knows the first and last occurrence.

Given, a user created 8 events with a yearly reoccurrence and two for events tomorrow.
The upcoming event widget asks the CalDAV backend for 7 events within the next 14 days.

If limit 7 is applied to the SQL query, we find the 7 events with a yearly reoccurrence and discard the events after evaluating the reoccurrence rules because they are not due within the next 14 days and end up with an empty result even if there are two events to show.

The workaround for search requests with a limit and time range is asking for more row than requested and retrying if we have not reached the limit.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #45549 from nextcloud/chore/noid/spdx-batch7

Add SPDX header - batch 7

Merge pull request #44664 from nextcloud/fix/dav/rate-limit-create-adress-book

fix(dav): Rate limit address book creation

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

chore: Add SPDX header

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

Merge pull request #45536 from nextcloud/dependabot/github_actions/github-actions-0199c2e312

chore(deps): bump the github-actions group across 1 directory with 5 updates

Merge pull request #45539 from nextcloud/chore/noid/spdx-batch6

Add SPDX header - batch 6

Merge pull request #45013 from nextcloud/fix/db/two-primary-connections-transaction-isolation-level

fix(db): Prevent two connections for single node databases

fix(db): Prevent two connections for single node databases

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #45537 from nextcloud/fix/remove-type-import

fix(files): Adjust type import and usage for removed dependency

Feat: Add temporary border-radius variable

Signed-off-by: Marco Ambrosini <marcoambrosini@proton.me>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

chore: Add SPDX header

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(files): Adjust type import and usage for removed dependency

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore(deps): bump the github-actions group across 1 directory with 5 updates

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dorny/paths-filter](https://github.com/dorny/paths-filter) | `2.11.1` | `3.0.2` |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.2` | `4.1.6` |
| [skjnldsv/read-package-engines-version-actions](https://github.com/skjnldsv/read-package-engines-version-actions) | `2.2` | `3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.1` | `4.3.3` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.0.2` | `6.0.5` |

Updates `dorny/paths-filter` from 2.11.1 to 3.0.2
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dorny/paths-filter/compare/v2.11.1...de90cc6fb38fc0963ad72b210f1f284cd68cea36)

Updates `actions/checkout` from 4.1.2 to 4.1.6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.2...a5ac7e51b41094c92402da3b24376905380afc29)

Updates `skjnldsv/read-package-engines-version-actions` from 2.2 to 3
- [Release notes](https://github.com/skjnldsv/read-package-engines-version-actions/releases)
- [Commits](https://github.com/skjnldsv/read-package-engines-version-actions/compare/v2.2...06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4)

Updates `actions/upload-artifact` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4.3.1...65462800fd760344b1a7b4382951275a0abb4808)

Updates `peter-evans/create-pull-request` from 6.0.2 to 6.0.5
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6.0.2...6d6857d36972b65feb161a90e484f2984215f83e)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: skjnldsv/read-package-engines-version-actions
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #45524 from nextcloud/chore/noid/spdx-batch5

Add SPDX header - batch 5

Merge pull request #39589 from nextcloud/enh/set-nest-transactions-with-savepoints

set Doctrine to use nest transactions with savepoints

Merge pull request #45419 from nextcloud/fix/files-sorting

fix(files): Implement `SortingService` to fix sorting of files

fix(dav): Rate limit address book creation

Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com>

chore: Add SPDX header

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

Merge pull request #45014 from nextcloud/forbid-moving-subfolder

fix: forbid moving a folder into a subfolder of itself

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Implement `SortingService` to fix sorting of files

The previously used library was parsing strings to try to detect dates,
but for filenames it makes no sense to parse them as dates.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #45521 from nextcloud/chore/update-jshintrc

chore: update .jshintrc

Merge pull request #45506 from nextcloud/jtr/fix-db-log-long-transactions-debug

fix(db): Log long transaction times at debug level

fix:Ensure security.txt file ends with a newline character

Signed-off-by: Archisman Das <archisman.officials@gmail.com>

Merge pull request #45499 from nextcloud/chore/noid/spdx-batch4

Add SPDX header - batch 4

chore: update .jshintrc

Changes:
- `esversion: 11` We use bundlers so let's use a modern version of js
- `maxlen: 120` This should be enforced by linters if at all (the rule is
  deprected by jshintrc anyway: https://jshint.com/docs/options/#maxlen)
- `asi: true` Suppress warnings about missing semicolons (it's 2024
  after all)

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

chore: Add SPDX header

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

fix(db): Log loong transaction times at debug level

Signed-off-by: Josh <josh.t.richards@gmail.com>

Merge pull request #45474 from nextcloud/chore/noid/spdx-batch4

Add SPDX header for `/lib/*` - batch 4

chore: Add SPDX header

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

Merge pull request #44485 from nextcloud/44219-share-server-respect-empty-expiry-date

Respect empty `expiryDate` value in server

Merge pull request #45032 from nextcloud/Jerome-Herbinet-date-and-time-wording-in-email-notifcation

Replaces "Time:" with "Date and time:" in calendar e-mail notification

fix(dav): Replaces "Time:" with "Date and time:" in calendar invite email

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

fix(theming): replace standard generic package icon by material design

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

test(Sharing): Integration test for no expiration set date for share

- Verify that explicitly sending empty `expireDate` param to server overwrite default
and sets not expiry date, if non is enforced.

- Update tests to avoid converting empty string to date.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

refactor(shareManager): Use constructor property promotion

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

fix(shareManager): Respect empty `expireDate` in server

If `expireDate` is an empty string and not `null` then the server should not set a default.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #45370 from nextcloud/feat/add-back-search-in-disabled-users

feat: Add back searching in disabled user list

Merge pull request #45459 from nextcloud/ifileaccess-alias

Merge pull request #45417 from nextcloud/fix/preview-clear-files-etag

feat(files): refresh preview on etag change

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix: Update openapi spec for provisioning_api app

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Also search in email field for disabled users

To match what is done for Database backend for enabled users

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

feat: Add back searching in disabled user list

When disabled users where moved to their own endpoint we overlooked
 search, so adding it back.
The search is done case-insensitive in uid and display name.

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #45394 from nextcloud/fix/files-cleanup-list

refactor(files): Fix some ESLint and Typescript issues in FilesList

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(files): Debounce does not return a function so it should be used as computed

This also fixes hacky solution to `this` access

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Use translation function directly instead of calling the instance method

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Fix typing issues with data

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Fix naming issue for reserved Vue property names

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #45429 from nextcloud/chore/noid/spdx-batch3

Add SPDX header - Batch 3

chore: Add SPDX header

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

Merge pull request #45400 from nextcloud/temp-db-replica-loss-prevention

fix(db): Prevent data loss by temporarily disabling `db:convert-type`

fix: register DI alias for IFileAccess

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #45390 from nextcloud/bugfix/noid/mark-more-configs-as-sensitive

Merge pull request #42977 from nextcloud/theming/create-color-from-background

theming: Separate `primary` and `background` colors - fix the header menu colors

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(theming): Add some strict checking for userId

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(tests): Adjust theming test for new splitted background and primary colors

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(settings): Return mean color of background image on set

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Always populate `--image-background`

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: cleanup theming app code

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(styles): Adjust background stylings

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(settings): Make background selector be responsive to user changes

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(core): Adjust styles for header menu icons

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(tests): Adjust theming test for new splitted background and primary colors

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(theming): Also apply new background colors to guest view

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat(theming): Allow users to configure their primary color

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(theming): Also reset background color settings when updating global background image

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>