aboutsummaryrefslogtreecommitdiffstats
path: root/apps/settings/lib
Commit message (Collapse)AuthorAgeFilesLines
* fix(app-store): Ensure the `groups` property is always an arraybackport/48853/stable30Ferdinand Thiessen2024-10-231-0/+4
| | | | | | | If the value was a string, like a single group, then `json_decode` will also yield only a string. So in this case we ensure the property is always an array with that value. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* fix(appstore): Hide last modified information for shipped appsbackport/48743/stable30Marcel Müller2024-10-181-1/+1
| | | | Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>
* fix: correctly count disabled users for subadminsbackport/48437/stable30Maksim Sukharev2024-09-301-4/+4
| | | | Signed-off-by: Maksim Sukharev <antreesy.web@gmail.com>
* fix: Ensure app discover section is returned as listbackport/48311/stable30Ferdinand Thiessen2024-09-241-1/+1
| | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* Merge pull request #47944 from nextcloud/backport/47883/stable30Ferdinand Thiessen2024-09-193-43/+51
|\ | | | | [stable30] fix(setup-checks): Ensure URL with webroot works
| * refactor(settings): `CheckServerResponseTrait` always expect absolute pathbackport/47883/stable30Ferdinand Thiessen2024-09-153-38/+44
| | | | | | | | | | | | Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * fix(setup-checks): Ensure URL with webroot worksFerdinand Thiessen2024-09-153-25/+27
| | | | | | | | | | | | | | | | | | | | | | We basically mock the way `URLGenerator::getAbsoluteURL` works, so we must make sure that the URL might already contain the webroot. Because `baseURL` and `cliURL` also contain the webroot we need to remove the webroot from the URL first. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Daniel <mail@danielkesselberg.de> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | fix(a11y): Add OTF font loading checkbackport/48063/stable30Joas Schilling2024-09-161-6/+21
|/ | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* fix(setupchecks): Test overwrite.cli url first, then generated one, andCôme Chilliet2024-09-051-16/+30
| | | | | | trusted domains as last fallback. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* fix: add option to remove the webroot for setup checks and don't check ↵Daniel Kesselberg2024-09-053-13/+38
| | | | | | | | | | trusted_domains. 1) The checks for well-known urls should always run against the root domain and therefore the option to remove the webroot. 2) For trusted domains, the available protocol is unknown, and thus some guesswork would be needed to make that work. I've decided for now to not consider them anymore to reduce false-positives. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* fix(settings): Fix sharing exclude groups from password requirement option ↵provokateurin2024-09-031-2/+2
| | | | | | | not working Signed-off-by: provokateurin <kate@provokateurin.de> Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
* fix(security): Update expiration date in security.txtJoas Schilling2024-08-141-1/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Merge pull request #46816 from nextcloud/refactor/settings/security-attributesKate2024-08-1413-75/+91
|\
| * refactor(settings): Replace security annotations with respective attributesprovokateurin2024-07-2713-75/+91
| | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* | fix(SetupCheck): Properly check public access to data directoryFerdinand Thiessen2024-08-081-4/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | When checking for public (web) access to the data directory the status is not enough as you might have a webserver that forwards to e.g. a login page. So instead check that the content of the file matches. For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content to allow checking. ¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | Merge pull request #46353 from nextcloud/skipOPcacheCLIGit'Fellow2024-08-011-0/+5
|\ \ | | | | | | fix(setupchecks): Skip checking for OPcache settings if running checks from CLI
| * | fix: typoGit'Fellow2024-07-081-1/+1
| | | | | | | | | Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
| * | fix: check both CLI and valueGit'Fellow2024-07-081-1/+1
| | | | | | | | | Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
| * | fix(setupchecks): Skip checking for OPcache if running from CLIGit'Fellow2024-07-081-0/+5
| | | | | | | | | Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
* | | fix(AdminSettings/AI): show pref list of only the enabled translation providersAnupam Kumar2024-08-011-1/+6
| |/ |/| | | | | Signed-off-by: Anupam Kumar <kyteinsky@gmail.com>
* | Merge pull request #45092 from nextcloud/fix/user-provider-search-shownBenjamin Gaussorgues2024-07-241-1/+1
|\ \
| * | fix(search): show user search provider for deactivated and admin pagesBenjamin Gaussorgues2024-04-291-1/+1
| | | | | | | | | | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* | | Merge pull request #46418 from nextcloud/artonge/feat/user_admin_delegationLouis2024-07-242-1/+68
|\ \ \ | | | | | | | | feat(users): Add users and group management to admin delegation
| * | | feat(users): Enable features for delegated user adminsLouis Chemineau2024-07-221-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
| * | | feat(users): Add support for admin delegation for users and groups managementLouis Chemineau2024-07-222-2/+69
| | | | | | | | | | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
* | | | feat: let users configure their first day of weekRichard Steinmetz2024-07-221-0/+2
|/ / / | | | | | | | | | Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
* | | feat(security): Add public API to allow validating IP Ranges and checking ↵Joas Schilling2024-07-191-14/+11
| | | | | | | | | | | | | | | | | | | | | for "in range" Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* | | feat(security): restrict admin actions to IP rangesBenjamin Gaussorgues2024-07-192-0/+68
| | | | | | | | | | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* | | Merge pull request #46509 from nextcloud/feat/settings/taskprocessingMarcel Klehr2024-07-172-2/+29
|\ \ \ | | | | | | | | feat(settings/admin/ai): Add Task Processing API settings
| * | | feat(settings/admin/ai): Add Task Processing API settingsMarcel Klehr2024-07-172-2/+29
| | | | | | | | | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net>
* | | | fix(caldav): lower scheduling table size warningAnna Larch2024-07-171-2/+6
|/ / / | | | | | | | | | Signed-off-by: Anna Larch <anna@nextcloud.com>
* | | chore(settings): Rename user groupsChristopher Ng2024-07-111-1/+1
| | | | | | | | | | | | | | | | | | | | | - "Active accounts" -> "All accounts" - "Recent accounts" -> "Recently active" Signed-off-by: Christopher Ng <chrng8@gmail.com>
* | | chore(l10n): Translate group namesChristopher Ng2024-07-111-2/+2
| | | | | | | | | | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* | | feat: Add Recent accounts sectionChristopher Ng2024-07-111-1/+7
| |/ |/| | | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* | fix(IntegrityCheck): Ensure the check is run if no results are availableFerdinand Thiessen2024-07-032-1/+12
| | | | | | | | | | | | | | | | | | If there are no cached results the current implementation was also returning an empty array, but this was the same as when there was a successful run. So to distinguish this we return `null` if there are *no* results. In this case we need to rerun the integrity checker. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | Merge pull request #46009 from nextcloud/refactor/ajax-cronFerdinand Thiessen2024-06-291-1/+1
|\ \ | | | | | | refactor(cron): Use `IAppConfig` for cron settings and migrate ajax cron away from jQuery
| * | refactor: Use `IAppConfig` for setting cron typeFerdinand Thiessen2024-06-281-1/+1
| | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | Merge pull request #46190 from ↵Daniel2024-06-291-2/+6
|\ \ \ | | | | | | | | | | | | | | | | nextcloud/bug/45047/skip-check-when-disk-free-space-disabled fix(setupchecks): skip check when disk_free_space is disabled
| * | | fix(setupchecks): skip check when disk_free_space is disabledDaniel Kesselberg2024-06-281-2/+6
| |/ / | | | | | | | | | | | | | | | Make it easier to discover that the check failed because disk_free_space is disabled. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | | refactor(SetupCheck): Make mariadb and mysql version variablesFerdinand Thiessen2024-06-271-5/+37
| | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | fix(settings): Adjust SetupCheck for supported database versionsFerdinand Thiessen2024-06-271-8/+10
|/ / | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | fix(settings): make trailing slash for caldav/carddav redirects optionalMichaIng2024-06-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | #43939 moved the CalDAV/CardDAV redirect checks from the frontend to a new backend API. Since the backend does not send an authentication header, checking for the expected response code 207 of the DAV endpoint does not work anymore, hence the URL of the last redirect is checked instead. This URL is expected to contain a trailing slash, which was not required before, since the DAV endpoint works properly without it (when authenticated). While a trailing slash in the redirect does no harm, it causes many setups to throw an admin panel warning, while in fact the redirects work properly. Furthermore, the proposed "/.well-known/carddav" => "/remote.php/dav/" redirect leads to double slashes, when doing a request to "/.well-known/carddav/", which seems more wrong then right. This change makes the trailing slash optional, hence old and adjusted setups won't throw the warning anymore, and the DAV endpoint works well in both cases. Signed-off-by: MichaIng <micha@dietpi.com>
* | feat: add setup check for needed mimetype migrationsRobin Appelman2024-06-182-0/+46
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Merge pull request #43942 from nextcloud/fix/43612/avoid-pwd-confirm-ssoArthur Schiwon2024-06-071-2/+2
|\ \ | | | | | | fix(Session): avoid password confirmation on SSO
| * | refactor(Token): introduce scope constantsArthur Schiwon2024-06-051-2/+2
| | | | | | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | | chore: Add SPDX headerAndy Scherzinger2024-06-03121-2479/+255
| | | | | | | | | | | | Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
* | | fix(caldav): automatically delete outdated scheduling objectsAnna Larch2024-05-312-0/+50
|/ / | | | | | | Signed-off-by: Anna Larch <anna@nextcloud.com>
* | feat(ldap): sync additional properties to profile and SABJake Nabasny2024-05-302-1/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Synced from LDAP to profile: - Date of birth Synced from LDAP to SAB (via the profile): - Biography - Date of birth Original code by Jake Nabasny (GitHub: @slapcat) Co-authored-by: Jake Nabasny <jake@nabasny.com> Co-authored-by: Richard Steinmetz <richard@steinmetz.cloud> Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
* | fix:Ensure security.txt file ends with a newline characterArchisman Das2024-05-271-1/+2
| | | | | | | | Signed-off-by: Archisman Das <archisman.officials@gmail.com>
* | Merge pull request #45262 from nextcloud/check-HttpsUrlGenerationCôme Chilliet2024-05-131-5/+12
|\ \ | | | | | | fix(SetupChecks): Detect CLI mode in HTTPS / URL generator check
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-26 22:32:08 +0000