aboutsummaryrefslogtreecommitdiffstats
path: root/core/Controller
Commit message (Collapse)AuthorAgeFilesLines
...
* | [reference preview] fix getting null mimetype if the cached reference lacks ↵Julien Veyssier2023-02-221-1/+4
| | | | | | | | | | | | an image content type Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* | Merge pull request #36443 from nextcloud/fix/23063/fix-login-log-entrySimon L2023-02-151-2/+2
|\ \ | |/ |/| fix the login log entry
| * fix the login log entrySimon L2023-01-301-2/+2
| | | | | | | | Signed-off-by: Simon L <szaimen@e.mail.de>
* | Merge pull request #36489 from ↵Joas Schilling2023-02-061-1/+5
|\ \ | | | | | | | | | | | | nextcloud/bugfix/noid/brute-force-protection-password-reset Add bruteforce protection to password reset page
| * | Add bruteforce protection to password reset pageJoas Schilling2023-02-021-1/+5
| |/ | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* / fix(client-login-flow): Handle missing stateToken gracefullyChristoph Wurst2023-02-061-3/+26
|/ | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Merge pull request #36363 from nextcloud/feat/app-framework/usesession-attributeChristoph Wurst2023-01-275-15/+20
|\ | | | | feat(app-framework): Add UseSession attribute to replace annotation
| * feat(app-framework): Add UseSession attribute to replace annotationChristoph Wurst2023-01-275-15/+20
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | handle and return touchProvider errorsJulien Veyssier2023-01-271-7/+3
| | | | | | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* | add 'last used timestamp' management for reference providersJulien Veyssier2023-01-271-1/+19
| | | | | | | | Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* | extend the reference API for the new link pickerJulien Veyssier2023-01-271-0/+14
|/ | | | | | | | | - add 2 interfaces for discoverable and searchable reference providers - new OCS route to get info on discoverable/searchable reference providers - new abstract ADiscoverableReferenceProvider that only implements jsonSerialize - listen to RenderReferenceEvent to inject provider list with initial state Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
* composer run cs:fixCôme Chilliet2023-01-205-12/+8
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Merge pull request #27492 from ↵Simon L2023-01-181-5/+3
|\ | | | | | | | | cyclops8456/feature/24301-remove-can-install-on-occ-maintenance-install Remove the CAN_INSTALL file when occ maintenance:install is complete
| * Rename canInstallExists method and add new method for removalAlex Harpin2023-01-101-2/+2
| | | | | | | | | | | | | | | | Rename canInstallExists to shouldRemoveCanInstallFile to cover removal of this file for non-git channels and logging any failure to remove it. Add new method to detect if this file exists during web based installation. Signed-off-by: Alex Harpin <development@landsofshadow.co.uk>
| * Move CAN_INSTALL check to method and remove unlink from SetupControllerAlex Harpin2023-01-101-5/+3
| | | | | | | | | | | | Move the check for the CAN_INSTALL file in the config directory to a method in the Setup class and remove the call to unlink from the SetupController as this in now handled in the Setup class. Signed-off-by: Alex Harpin <development@landsofshadow.co.uk>
* | feat(app framework)!: Inject services into controller methodsChristoph Wurst2023-01-181-11/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Usually Nextcloud DI goes through constructor injection. This has the implication that each instance of a class builds the full DI tree. That is the injected services, their services, etc. Occasionally there is a service that is only needed for one controller method. Then the DI tree is build regardless if used or not. If services are injected into the method, we only build the DI tree if that method gets executed. This is also how Laravel allows injection. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Fix login loop if login CSRF fails and user is not logged inChristoph Wurst2023-01-181-4/+16
|/ | | | | | | | | | If CSRF fails but the user is logged in that they probably logged in in another tab. This is fine. We can just redirect. If CSRF fails and the user is also not logged in then something is fishy. E.g. because Nextcloud contantly regenrates the session and the CSRF token and the user is stuck in an endless login loop. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Add a const for the max user password lengthJoas Schilling2023-01-041-1/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Also limit the password length on resetJoas Schilling2023-01-032-1/+5
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* chore: Make the LoginController strictChristoph Wurst2022-12-151-1/+4
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Fix GH-33187Daniel Kesselberg2022-12-121-1/+1
| | | | | | $this->userId is null when loggedin via app password. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Fix default redirect on successful WebAuthn loginRichard Steinmetz2022-12-051-2/+8
| | | | Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
* Merge pull request #35385 from pulsejet/patch-previewtypeSimon L2022-12-031-1/+1
|\ | | | | Fix type of PreviewController::$userId
| * Fix type of PreviewController::$userIdVarun Patil2022-11-241-1/+1
| | | | | | | | | | | | Can be null if not logged in; currently crashes Signed-off-by: Varun Patil <varunpatil@ucla.edu>
* | Revert unrelated change from #34940Carl Schwan2022-12-021-1/+1
|/ | | | | | | Probably a left over from an experience that I added by mistake in the change Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Add mastodon personal info fieldCarl Schwan2022-11-211-1/+1
| | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Check share attributes on preview endpointsJulius Härtl2022-10-251-0/+11
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Use proper error pages instead of always redirectingJulius Härtl2022-10-211-0/+62
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Cleanup ie and old edge propertiesJohn Molakvoæ (skjnldsv)2022-10-191-0/+51
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Add rate limiting on lost password emailsCôme Chilliet2022-10-181-6/+17
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* fix reference preview endpoint when no server-side cache configuredJulien Veyssier2022-10-131-4/+7
| | | | Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
* Fix URLs on reference resolvingJoas Schilling2022-09-301-1/+1
| | | | | | The vue-richtext app currently sends leading spaces if they are in the text. Signed-off-by: Joas Schilling <coding@schilljs.com>
* Add cache header for image endpoint if link previewsJulius Härtl2022-09-281-2/+4
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Add endpoint to fetch a cachable reference dataJulius Härtl2022-09-261-0/+10
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Add api to load additional section in profile pageCarl Schwan2022-09-141-1/+8
| | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Update avatars on updateCarl Schwan2022-09-092-4/+4
| | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Dark theme for guest avatarCarl Schwan2022-09-091-2/+11
| | | | | | And better caching policy Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Avatar new styleCarl Schwan2022-09-091-1/+39
| | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Remake profile picture saving with VueChristopher Ng2022-09-021-0/+13
| | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* Inject all dependnencies and increase cache timeoutJulius Härtl2022-08-311-1/+2
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Refactor cache handlingJulius Härtl2022-08-311-2/+4
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* CleanupJulius Härtl2022-08-312-20/+18
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Implement image cachingJulius Härtl2022-08-312-40/+105
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* API for fetching reference metadataJulius Härtl2022-08-311-0/+82
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Fix wording of undeliverable push notificationsJoas Schilling2022-08-311-1/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Improve handling of profile pageChristopher Ng2022-08-221-1/+1
| | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* Update core/Controller/LostController.phpNoSleep822022-08-211-1/+1
| | | | Co-authored-by: John Molakvoæ <skjnldsv@users.noreply.github.com> Signed-off-by: NoSleep82 <52562874+NoSleep82@users.noreply.github.com>
* Update LostController.phpNoSleep822022-08-191-2/+2
| | | | | i would be useful to know who is trying to reset the password (misspelled username or email, ex user or some sort of attack) Signed-off-by: NoSleep82 <52562874+NoSleep82@users.noreply.github.com>
* Redesign guest pages for better accessibilityCarl Schwan2022-07-271-0/+1
| | | | | | | - Use white box and put content on it - Improve focus indicator Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* Identify the login page explicitly by the page titleChristopher Ng2022-07-201-1/+5
| | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-04 09:38:34 +0000