nextcloud

Commit graph

Autor	SHA1	Nachricht	Datum
Roeland Jago Douma	579162d7b9	Allow 2FA to be setup on first login Once 2FA is enforced for a user and they have no 2FA setup yet this will now prompt them with a setup screen. Given that providers are enabled that allow setup then. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	83e994c11f	Make it possible to enforce mandatory 2FA for groups Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Roeland Jago Douma	956fe1b867	Generate backups code notification if not enable but 2fa is Generate a notification to generate backup codes if you enable an other 2FA provider but backup codes are not yet generated. * Add event listner * Insert background job * Background job tests and emits notification every 2 weeks * If the backup codes are generated the next run will remove the job Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	vor 5 Jahren
Christoph Wurst	259c0ce11d	Add mandatory 2FA service/class Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	7586b19e52	Only allow 2FA state changs if providers support the operation Ref https://github.com/nextcloud/server/issues/11019. Add `twofactorauth:cleanup` command Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	5c70aa2a22	Remove unused import Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	1124b87bc0	Fix 2FA being enforced if only backup codes provider is active Fixes https://github.com/nextcloud/server/issues/10634. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	8db66d5dfb	Fix double-inserts of the same provider state Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	85bc5edb5e	Add integration/unit test for the double-insert of same values Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	d8197f2b97	Rename providerset method to get primary providers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	c6e47e8a51	Fix login redirection if only one 2FA provider is active Fixes https://github.com/nextcloud/server/issues/10500. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	d248a0bd1e	Fix 2FA provider registry population on login If the 2FA provider registry has not been populated yet, we have to make sure all available providers are loaded and queried on login. Otherwise previously active 2FA providers aren't detected as enabled. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 5 Jahren
Christoph Wurst	fc149bab3c	Fix duplicate inserts in the 2fa provider registry DAO Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 6 Jahren
Christoph Wurst	7be465febe	Make new classes strict and fix license header Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 6 Jahren
Christoph Wurst	13d93f5b25	Make 2FA providers stateful This adds persistence to the Nextcloud server 2FA logic so that the server knows which 2FA providers are enabled for a specific user at any time, even when the provider is not available. The `IStatefulProvider` interface was added as tagging interface for providers that are compatible with this new API. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 6 Jahren
Julius Härtl	372e06d742	Add all parameters to returnValueMap Signed-off-by: Julius Härtl <jus@bitgrid.net>	vor 6 Jahren
Roeland Jago Douma	c92eff919e	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	vor 6 Jahren
Roeland Jago Douma	9163cf9241	Fix AppPassword 2FA auth Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	vor 6 Jahren
Roeland Jago Douma	b96485b6bd	Fix login with basic auth Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	vor 6 Jahren
Roeland Jago Douma	84b7022118	Improve 2FA * Store the auth state in the session so we don't have to query it every time. * Added some tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	vor 7 Jahren
Roeland Jago Douma	e43649e67e	Fix tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	vor 7 Jahren
Joas Schilling	5695a4ec92	Don't do a recursive search Signed-off-by: Joas Schilling <coding@schilljs.com>	vor 7 Jahren
Christoph Wurst	88b7d033df	fix 2fa activities tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 7 Jahren
Christoph Wurst	d907666232	bring back remember-me * try to reuse the old session token for remember me login * decrypt/encrypt token password and set the session id accordingly * create remember-me cookies only if checkbox is checked and 2fa solved * adjust db token cleanup to store remembered tokens longer * adjust unit tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 7 Jahren
Christoph Wurst	f27b7fa8d1	Do not use underscores in PSR4 namespaces of the backup codes app Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	vor 7 Jahren
Roeland Jago Douma	4d3b92e687	Fix getMock Authentication	vor 7 Jahren
Christoph Wurst	8acb734854	add 2fa backup codes app * add backup codes app unit tests * add integration tests for the backup codes app	vor 7 Jahren
Christoph Wurst	6af2efb679	prevent infinite redirect loops if the there is no 2fa provider to pass This fixes infinite loops that are caused whenever a user is about to solve a 2FA challenge, but the provider app is disabled at the same time. Since the session value usually indicates that the challenge needs to be solved before we grant access we have to remove that value instead in this special case.	vor 7 Jahren
Christoph Wurst	3521f974db	assert app is loaded in unit tests	vor 8 Jahren
Christoph Wurst	a40d64ff7f	load 2FA provider apps before querying classes	vor 8 Jahren
Christoph Wurst	5daa9a5417	fail hard if 2fa provider can not be loaded (#25061)	vor 8 Jahren
Joas Schilling	4b1e8a1184	One more PSR-4 fix (#24852)	vor 8 Jahren

32 Commits (6f6729b3ac976fc920a365d365b87ac3b7362518)