| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|\
| |
| | |
Fix upload of folders in Chrome
|
| |
| |
| |
| | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
|\ \
| | |
| | | |
Don't list on public calendar endpoints
|
| | |
| | |
| | |
| | |
| | |
| | | |
There is no need to allow listing here.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | | |
|
|\ \ \
| |/ /
|/| | |
Save the scope of an auth token in the session
|
| | |
| | |
| | |
| | | |
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Robin Appelman <robin@icewind.nl>
|
|\ \ \
| | | |
| | | | |
Also add the root of external storages to the file id list
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \ \ \
| |_|/ /
|/| | | |
Rename config section
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \ \ \
| | | | |
| | | | | |
Allow to reset the password with the email as an input
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \ \ \ \
| |_|/ / /
|/| | | | |
User mgmt settings design improvements
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
|
|/ / / / |
|
|\ \ \ \
| | | | |
| | | | | |
Match slashes in ../{id} resource routes
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Fixes #2954
Before we could match on <prefix>/{id} however if the id contains a /
this would not match properly. But since we define the resource routes
internally we now make sure that we match all chars (up until the ?).
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
nextcloud/fix/custom-default-app-redirect-2fa-selection
Redirect to 2FA selection screen
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Apps like 'rainloop' use \OCP\Util::isLoggedIn() to check whether the
current request is authenticated. Since we redirected to the index
page before, it resulted in an infinite redirection loop. This change
sets the redirection URL to the 2FA selection page, which is the only
allowed page in that authentication state.
Fixes https://github.com/nextcloud/server/issues/3702
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
fix fseek (Swift backend) against string not resource by removing append support
|
|/ / / / / /
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
only chmod logfile if necessary
|
| | | | | | |
| | | | | | |
| | | | | | | |
otherwise e.g. on SELinux this will log an error, so we better avoid it if not necessary.
|
|\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Make sure blob columns are correctly converted as parameters
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Signed-off-by: Joas Schilling <coding@schilljs.com>
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Introduce bruteforce settings
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
https://github.com/nextcloud/bruteforcesettings
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
This adds the bruteforce settings app that allows to configure (for now)
subnets that are to be ignored when doing brute force analysis. This can
for example be the LAN since we trust people from there.
* Add app
* Add php tests
* Add js tests
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
|
|\ \ \ \ \ \ \ \ \
| | | | | | | | | |
| | | | | | | | | | |
Make public links work with master key
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
In public link mode there is no session, so the code should use the
public key instead.
|
|\ \ \ \ \ \ \ \ \ \
| | | | | | | | | | |
| | | | | | | | | | | |
Endorse password protection
|
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | | |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | | |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | | |
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | | |
works like "enforce password protection", but let the
user optionally remove the password protection after the
password is set.
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | |
| | | | | | | | | | | |
works like "enforce password protection", but let the
user optionally remove the password protection after the
password is set. by Timo Benk
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
|