aboutsummaryrefslogtreecommitdiffstats
path: root/core/Controller
Commit message (Collapse)AuthorAgeFilesLines
* fix: Add direct parameter to flow auth v2Julius Härtl2024-08-061-4/+6
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* fix: Ignore preview requests for invalid file idsJulius Härtl2024-07-291-0/+4
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* feat: don't count failed CSRF as failed login attemptBenjamin Gaussorgues2024-07-111-4/+12
| | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* Merge pull request #44977 from nextcloud/backport/44745/stable29Arthur Schiwon2024-06-121-3/+6
|\ | | | | [stable29] fix(auth): Keep redirect URL during 2FA setup and challenge
| * fix(auth): Keep redirect URL during 2FA setup and challengeChristoph Wurst2024-04-231-3/+6
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | test: add tests for ProfilePageControllerDaniel Kesselberg2024-06-121-2/+11
| | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | fix(core): Return X-NC-IsCustomAvatar for guest avatars tooprovokateurin2024-06-122-5/+7
| | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* | fix(files_sharing): dark avatar supportskjnldsv2024-06-121-5/+5
| | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
* | fix(core): allow guest avatar fallbackskjnldsv2024-06-121-2/+12
| | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
* | fix(Session): avoid password confirmation on SSOArthur Schiwon2024-06-111-1/+4
| | | | | | | | | | | | | | | | | | | | | | SSO backends like SAML and OIDC tried a trick to suppress password confirmations as they are not possible by design. At least for SAML it was not reliable when existing user backends where used as user repositories. Now we are setting a special scope with the token, and also make sure that the scope is taken over when tokens are regenerated. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | fix(core): unsupported browser redirect urlJohn Molakvoæ (skjnldsv)2024-06-071-1/+3
| | | | | | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* | fix(search): Limit maximum number of search resultsJoas Schilling2024-05-151-2/+5
|/ | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* fix: Apply new coding standard to all filesCôme Chilliet2024-04-041-2/+2
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* feat(login): Clear login form (password) after IDLE timeoutFerdinand Thiessen2024-03-251-24/+17
| | | | | | | | | For security reasons it is recommended to stop the login process at a defined time, this could prevent password leaks by e.g. user forgetting that they entered their password on public devices. Enforced e.g. by the BSI ORP.4.A13 rule. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* feat: Limit email input on auth pages to 255 charsfenn-cs2024-03-212-1/+16
| | | | | | | | | Excessively long emails reported make server unresponsive. We could at some point, consider adding a configuration for sysadmins to bypass this setting on their instance if they want. Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
* feat: added login's initial possible email-statesEduardo Morales2024-03-101-0/+31
| | | | Signed-off-by: Eduardo Morales <emoral435@gmail.com>
* Merge pull request #43471 from nextcloud/cache-path-by-idRobin Appelman2024-03-051-4/+2
|\ | | | | Cache path by id
| * perf: switch places that always use the first getById result to getFirstNodeByIdRobin Appelman2024-03-041-4/+2
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | feat: Implement team provider apiJulius Härtl2024-03-051-0/+97
|/ | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* refactor(core): Switch to attribute based routingprovokateurin2024-02-2138-0/+135
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* feat(core): Add OCS endpoint for confirming the user passwordprovokateurin2024-02-201-0/+36
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* feat(core): Expose the confirm password endpointprovokateurin2024-02-201-1/+12
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* fix: phpunitJohn Molakvoæ2024-02-131-1/+1
| | | | Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
* fix: openapiJohn Molakvoæ2024-02-131-3/+3
| | | | Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
* feat: rename users to account or personVincent Petry2024-02-133-5/+5
| | | | | | Replace translated text in most locations Signed-off-by: Vincent Petry <vincent@nextcloud.com>
* fix: Support other schemes than HTTP and HTTPS in app navigationCôme Chilliet2024-02-061-1/+2
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* fix: Revert external url support in icon as it’s not allowedCôme Chilliet2024-02-061-1/+1
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Allow application to pass external links in navigationCôme Chilliet2024-02-061-2/+2
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* refactor: Migrate IgnoreOpenAPI attributes to OpenAPIprovokateurin2024-01-1816-36/+36
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* Suppress or fix psalm errors related to InvalidTokenExceptionCôme Chilliet2024-01-112-4/+2
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Always catch OCP versions of authentication exceptionsCôme Chilliet2024-01-114-6/+8
| | | | | | And always throw OC versions for BC Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* fix(openapi): Make OpenAPI CI green againJoas Schilling2024-01-111-2/+2
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* enh(core): Refactor profile page to use vue componentsFerdinand Thiessen2024-01-101-2/+2
| | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* Keep https check Gaspard d'Hautefeuille2024-01-051-1/+4
| | | | | | https://github.com/nextcloud/server/issues/41196 + keep https check Co-authored-by: Louis <louis@chmn.me> Signed-off-by: Gaspard d'Hautefeuille <github@dhautefeuille.eu>
* Cancel PR #37405, remove regression codeGaspard d'Hautefeuille2024-01-051-2/+2
| | | | Signed-off-by: Gaspard d'Hautefeuille <github@dhautefeuille.eu>
* chore: apply changes from Nextcloud coding standards 1.1.1Joas Schilling2023-11-239-26/+26
| | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* Fix invalid users/groups handling in advanced searchBenjamin Gaussorgues2023-11-151-1/+2
| | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* Merge pull request #41271 from nextcloud/enh/text-processing-iprovider2Joas Schilling2023-11-131-2/+10
|\ | | | | enh(TextProcessing): Add two new provider interfaces
| * Merge branch 'master' into enh/text-processing-iprovider2Marcel Klehr2023-11-091-1/+2
| |\
| * \ Merge branch 'master' into enh/text-processing-iprovider2Marcel Klehr2023-11-081-1/+3
| |\ \ | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net>
| * | | fix(TextProcessing/Manager): Throw TaskFailureException upon failureMarcel Klehr2023-11-061-1/+2
| | | | | | | | | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net>
| * | | enh(TextProcessing): Add IProvider2Marcel Klehr2023-11-031-2/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - allow providers to obtain current task's userId - allow providers to expose average task runtime Signed-off-by: Marcel Klehr <mklehr@gmx.net>
* | | | feat(search): Allow multiple search terms in UnifiedControllerBenjamin Gaussorgues2023-11-101-13/+22
| |_|/ |/| | | | | | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* | | fix: Show error message when CSRF check fails at loginChristoph Wurst2023-11-081-1/+2
| |/ |/| | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | fix: Only highlight profile entry when viewing own profileChristopher Ng2023-11-021-1/+3
|/ | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* feat(events): Add typed event for filtering autocompletion suggestionsJoas Schilling2023-11-021-0/+13
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* load script and styles on setup pageRobin Appelman2023-10-311-0/+8
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Reset BFP for sudo actionMarcel Müller2023-10-281-1/+2
| | | | Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>
* fix: Set profile as active nav entryChristopher Ng2023-10-261-0/+4
| | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* Merge pull request #40326 from nextcloud/enh/text-to-image-apiJoas Schilling2023-10-261-0/+246
|\ | | | | Implement TextToImage OCP API
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-09 05:12:38 +0000