aboutsummaryrefslogtreecommitdiffstats
path: root/apps/oauth2/lib
Commit message (Collapse)AuthorAgeFilesLines
* fix: Rename config option to skipAuthPickerApplications to match what it doesfeat/allow-oauth-grant-bypassCôme Chilliet2025-01-071-2/+2
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* feat(oauth2): Skip page before login as well for authorized applicationsCôme Chilliet2025-01-071-6/+27
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* refactor(OpenAPI): Adjust scopes to match previous behaviorprovokateurin2025-01-062-0/+4
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* refactor(apps): Use constructor property promotion when possibleprovokateurin2024-10-212-23/+8
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* Merge pull request #47329 from nextcloud/feat/add-datetime-qbmapper-supportFerdinand Thiessen2024-10-182-6/+8
|\ | | | | feat(AppFramework): Add full support for date / time / datetime columns
| * fix: Adjust Entity typesfeat/add-datetime-qbmapper-supportFerdinand Thiessen2024-10-172-6/+8
| | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | chore(db): Apply query prepared statementsdbQueriesExecStmt2Git'Fellow2024-10-171-11/+5
|/ | | | | | | | | | | | | | | | Fix: psalm fix: bad file fix: bug chore: add batch chore: add batch chore: add batch fix: psalm
* fix(BackgroundJobs): Adjust intervals and time sensitivitiesprovokateurin2024-10-081-2/+1
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* chore: Apply rector configuration to apps folderCôme Chilliet2024-09-201-1/+1
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* chore(deps): Update nextcloud/coding-standard to v1.3.1provokateurin2024-09-194-5/+4
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* fix(oauth2): fix testsJulien Veyssier2024-09-021-1/+1
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* fix(oauth2): store hashed secret instead of encryptedJulien Veyssier2024-09-024-8/+55
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* invalidate oauth2 tokens only for seen usersArtur Neumann2024-08-161-1/+1
| | | | Signed-off-by: Artur Neumann <artur@jankaritech.com>
* refactor(oauth2): Replace security annotations with respective attributesprovokateurin2024-07-292-8/+12
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* chore: Add SPDX headerAndy Scherzinger2024-05-3117-343/+34
| | | | Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
* Always catch OCP versions of authentication exceptionsCôme Chilliet2024-01-112-3/+3
| | | | | | And always throw OC versions for BC Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* chore: apply changes from Nextcloud coding standards 1.1.1Joas Schilling2023-11-234-12/+12
| | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* adjust phpdoc types in OauthApiControllerJulien Veyssier2023-10-051-4/+4
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* adjust oauth appJulien Veyssier2023-10-052-3/+5
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* adjust oauth testsJulien Veyssier2023-10-051-2/+2
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* rename oauth2_access_token's created_at to code_created_atJulien Veyssier2023-10-054-11/+11
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* add db index on oauth2_access_tokens's (token_count, created_at)Julien Veyssier2023-10-051-3/+6
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* delete oauth access token when receiving a code that has expiredJulien Veyssier2023-10-051-0/+3
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* refuse oauth authorization code if a token has already been delivered ↵Julien Veyssier2023-10-051-1/+11
| | | | | | (active token) Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* cleanup access tokens that are still in authorization state and that have ↵Julien Veyssier2023-10-055-4/+122
| | | | | | expired Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* add tests for oauth2 authorization code expirationJulien Veyssier2023-10-051-1/+1
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* make oauth2 authorization code expire after 10 minutesJulien Veyssier2023-10-053-6/+90
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25Joas Schilling2023-08-281-2/+2
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* oauth2: Add OpenAPI specjld31032023-07-122-12/+24
| | | | Signed-off-by: jld3103 <jld3103yt@gmail.com>
* add bruteforce protection in OauthApiControllerJulien Veyssier2023-06-191-5/+17
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* add extra migration that sets the secret column length in case the previous ↵Julien Veyssier2023-06-141-0/+56
| | | | | | step has run when it was setting it to 256 Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* make oauth2 client secret column largerJulien Veyssier2023-06-141-1/+1
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* encrypt oauth2 client secretsJulien Veyssier2023-06-074-78/+140
| | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* public interface to invalidate tokens of userArtur Neumann2023-03-141-9/+2
| | | | Signed-off-by: Artur Neumann <artur@jankaritech.com>
* invalidate existing tokens when deleting an oauth clientArtur Neumann2023-03-141-2/+26
| | | | Signed-off-by: Artur Neumann <artur@jankaritech.com>
* Fix typos in apps/ subdirectoryluz paz2022-09-051-1/+1
| | | | | | | Found via `codespell -q 3 -S l10n,./apps/files_external/3rdparty -L adn,ba,boxs,keypair,jus,optionel,ressource,tabel ./apps/` Signed-off-by: luz paz <luzpaz@github.com> Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
* Cleanup oauth2 admin settingsCarl Schwan2022-07-141-11/+14
| | | | | | | - Use more vue components - Add link to doc Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Use property name for addTypeDaniel Kesselberg2022-05-121-2/+2
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Add oauth2_clients migration for OwncloudLouis Chemineau2022-03-241-4/+7
| | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
* More test fixingJoas Schilling2021-12-011-14/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Introduce ISecureRandom::CHAR_ALPHANUMERICJ0WI2021-07-081-2/+2
| | | | Signed-off-by: J0WI <J0WI@users.noreply.github.com>
* Update php licensesJohn Molakvoæ (skjnldsv)2021-06-0413-26/+14
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Fix usage of rename executeUpdateChristoph Wurst2021-05-051-1/+1
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Add psalm annotation to the DB handlers of OAuth2Roeland Jago Douma2021-03-112-1/+7
| | | | | | | * Psalm annotations * To new executeUpdate Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Update license headers for 19Christoph Wurst2020-04-295-0/+5
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Add visibility to all constantsChristoph Wurst2020-04-101-1/+1
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Format control structures, classes, methods and functionChristoph Wurst2020-04-104-5/+5
| | | | | | | | | | | | | | | To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Remove trailing and in between spacesChristoph Wurst2020-04-091-1/+1
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Update the license headers for Nextcloud 19Christoph Wurst2020-03-311-0/+1
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Fix invalid instantiation of TemplateResponse if client not foundDaniel Kesselberg2020-03-151-4/+3
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-14 22:58:06 +0000