| Commit message (Collapse) | Author | Age | Files | Lines |
|\
| |
| | |
Add activities when email or password is changed
|
| |
| |
| |
| | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| |
| |
| |
| | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \
| | |
| | |
| | |
| | | |
nextcloud/properly-do-bruteforce-protection-via-annotation
Make BruteForceProtection annotation more clever
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This makes the new `@BruteForceProtection` annotation more clever and moves the relevant code into it's own middleware.
Basically you can now set `@BruteForceProtection(action=$key)` as annotation and that will make the controller bruteforce protected. However, the difference to before is that you need to call `$responmse->throttle()` to increase the counter. Before the counter was increased every time which leads to all kind of unexpected problems.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
|/ / |
|
|\ \
| | |
| | | |
Reorder the entries of the log for easier reading
|
| | |
| | |
| | |
| | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | |
|
|\ \ \
| | | |
| | | | |
Update email template for lost password email
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
nextcloud/fix-login-controller-test-consolidate-login
Fix login controller test and consolidate login
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Fix AdBlock blocking share icon, ref #866
|
| | |_|/ /
| |/| | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Explain local link
|
| | |_|_|/
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The local link is a clever thing and the clients should support this imho but it might not be clear to all users. For one, the term 'local link' is a bit odd. Local with respect to what? It links directly to the file or folder, so direct link seems to make more sense to me. And we should explain the difference with a public link. So this PR:
* renames local link to direct link
* adds a short explanation, noting it only works for users who have access to this file/folder.
As other links are called public link you could also consider calling this 'private link', I suppose. But the links we sent by mail to ppl could also be called 'private link' (they are for one user, who git it by email) so I think it might be confusing. What do @nextcloud/designers think?
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Add support for ratelimiting via annotations
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
This allows adding rate limiting via annotations to controllers, as one example:
```
@UserRateThrottle(limit=5, period=100)
@AnonRateThrottle(limit=1, period=100)
```
Would mean that logged-in users can access the page 5 times within 100 seconds, and anonymous users 1 time within 100 seconds. If only an AnonRateThrottle is specified that one will also be applied to logged-in users.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Update CA bundle
|
| | |/ / / /
| |/| | | |
| | | | | |
| | | | | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Don't load handlebars in template
|
| | |/ / / /
| |/| | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
It's already loaded in core.json
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
|\ \ \ \ \ \
| |/ / / / /
|/| | | | | |
Change LDAP method names
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
|\ \ \ \ \ \
| |_|/ / / /
|/| | | | | |
Remove invalid route
|
|/ / / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Said file doesn't exist anymore and accessing it would just return a 500
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Override config.php values through environment variables
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|