summaryrefslogtreecommitdiffstats
path: root/core/Controller
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #10898 from ↵Morris Jobke2018-10-082-5/+2
|\ | | | | | | | | nextcloud/feature/10684/default-logo-color-theme-colors Switches the default logo color depending on the primary color
| * Refactors the scss svg functionsMichael Weimann2018-10-021-3/+1
| | | | | | | | Signed-off-by: Michael Weimann <mail@michael-weimann.eu>
| * Moves the logo files to logoMichael Weimann2018-10-022-4/+3
| | | | | | | | Signed-off-by: Michael Weimann <mail@michael-weimann.eu>
* | Add an endppoint for clients to request an app passwordRoeland Jago Douma2018-10-031-0/+108
| | | | | | | | | | | | | | | | Now that we allow enforcing 2 factor auth it make sense if we also allow and endpoint where the clients can in the background fetch an apppassword if they were configured before the login flow was present. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Update all the publickey tokens if needed on web loginRoeland Jago Douma2018-10-021-0/+1
|/ | | | | | | | | | * On weblogin check if we have invalid public key tokens * If so update them all with the new token This ensures that your marked as invalid tokens work again if you once login on the web. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #10743 from ↵blizzz2018-09-131-9/+12
|\ | | | | | | | | danielkesselberg/bugfix/noid/allow-password-reset-for-duplicate-email Enable password reset for user with same email address when only one is active
| * Enable password reset for user with same email address when only one is activeDaniel Kesselberg2018-08-191-9/+12
| | | | | | | | | | | | | | | | | | When two or more user share the same email address its not possible to reset password by email. Even when only one account is active. This pr reduce list of users returned by getByEmail by disabled users. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | Do not invalidate main token on OAuthRoeland Jago Douma2018-09-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #10584 We deleted the main token when using the login flow else mutliple tokens would show up for a single user. However in the case of OAuth this is perfectly fine as the authentication happens really in your browser: 1. You are already logged in, no need to log you out 2. You are not logged in yet, but since you log in into the exact same browser the expected behavior is to stay logged in. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Change password expiration time from 12h to 7dMorris Jobke2018-08-311-1/+1
| | | | | | | | | | | | We use the same logic for creating accounts without a password and there the 12h is a bit short. Users don't expect that the signup link needs to be clicked within 12h - 7d should be a more expected behavior. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Merge pull request #10670 from nextcloud/fix/login-throttle-username-lengthMorris Jobke2018-08-241-1/+1
|\ \ | |/ |/| Fix max length requirements for the throttler metadata
| * Fix max length requirements for the throttler metadataChristoph Wurst2018-08-131-1/+1
| | | | | | | | | | | | | | | | | | If a failed login is logged, we save the username as metadata in the bruteforce throttler. To prevent database error due to very long strings, this truncates the username at 64 bytes in the assumption that no real username is longer than that.long strings, Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | only warn about data lose on password reset if per-user keys are usedBjoern Schiessle2018-08-151-1/+10
|/ | | | Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
* Rename providerset method to get primary providersChristoph Wurst2018-08-081-1/+1
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Fix login redirection if only one 2FA provider is activeChristoph Wurst2018-08-081-1/+1
| | | | | | Fixes https://github.com/nextcloud/server/issues/10500. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Make the info available if the avatar was uploaded or generatedJoas Schilling2018-08-011-5/+6
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Merge pull request #10391 from ↵Morris Jobke2018-07-251-1/+2
|\ | | | | | | | | nextcloud/bugfix/10389/fix-app-navigation-controller Fix app navigation controller to return an array
| * Fix app navigation controller to return an arrayJulius Härtl2018-07-251-1/+2
| | | | | | | | | | | | This is required to not break compatibility with existing consumers of that endpoint like the apps management or the client Signed-off-by: Julius Härtl <jus@bitgrid.net>
* | Allow to access SVGs as guestJoas Schilling2018-07-251-3/+3
|/ | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Implements handling for deactivated usersMichael Weimann2018-07-211-25/+84
| | | | Signed-off-by: Michael Weimann <mail@michael-weimann.eu>
* Php code bumpJohn Molakvoæ (skjnldsv)2018-07-191-5/+13
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Fix settings icon fetchingJulius Härtl2018-07-191-1/+1
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Fixed svg generator regex && added missing iconsJohn Molakvoæ (skjnldsv)2018-07-191-1/+1
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Fixed icons detection and cachingJohn Molakvoæ (skjnldsv)2018-07-191-10/+4
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Mixin scss icon apiJohn Molakvoæ (skjnldsv)2018-07-191-1/+7
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* use built in response cacheFor functionJohn Molakvoæ (skjnldsv)2018-07-191-1/+1
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Svg icon api sass function and upgrade of all stylesJohn Molakvoæ (skjnldsv)2018-07-191-2/+10
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Svg from appJohn Molakvoæ (skjnldsv)2018-07-191-1/+32
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Svg color apiJohn Molakvoæ (skjnldsv)2018-07-192-2/+99
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* wire the frontendArthur Schiwon2018-07-051-2/+11
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Backend work to provide NC whats New info to usersArthur Schiwon2018-07-051-0/+117
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Merge pull request #9632 from nextcloud/enhancement/stateful-2fa-providersMorris Jobke2018-06-252-5/+26
|\ | | | | Stateful 2fa providers
| * Make 2FA providers statefulChristoph Wurst2018-06-202-5/+26
| | | | | | | | | | | | | | | | | | | | | | This adds persistence to the Nextcloud server 2FA logic so that the server knows which 2FA providers are enabled for a specific user at any time, even when the provider is not available. The `IStatefulProvider` interface was added as tagging interface for providers that are compatible with this new API. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | prefill userid for login after password resetRobin Appelman2018-06-211-3/+4
|/ | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Removed debug stackJohn Molakvoæ (skjnldsv)2018-06-151-1/+0
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Avatar imagick bumpJohn Molakvoæ (skjnldsv)2018-06-131-48/+14
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Controller tests fixesJohn Molakvoæ (skjnldsv)2018-06-131-6/+16
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Return Svg avatarsJohn Molakvoæ (skjnldsv)2018-06-131-9/+37
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Fix usageRoeland Jago Douma2018-06-042-18/+0
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #9531 from remyj38/masterMorris Jobke2018-05-221-0/+3
|\ | | | | Fix translation bug on lost password page
| * Fix translation bug on lost password pageRémy Jacquin2018-05-201-0/+3
| | | | | | | | | | | | Fix nextcloud/password_policy#26 Signed-off-by: Rémy Jacquin <remy@remyj.fr>
* | Don't use special chars to avoid confusionRoeland Jago Douma2018-05-221-1/+1
|/ | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* move log constants to ILoggerArthur Schiwon2018-04-261-1/+2
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Use proper typesRoeland Jago Douma2018-04-111-4/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Avoid to leak a user ID that is not a string to reach a user backendMorris Jobke2018-04-111-0/+4
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #9115 from nextcloud/feature/noid/login_flow_wordingRoeland Jago Douma2018-04-091-0/+38
|\ | | | | Improve login flow
| * Improve login flowRoeland Jago Douma2018-04-081-0/+38
| | | | | | | | | | | | | | * Add page explaining you are about to grant access * Show grant access page after login Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Remove unused parameterRoeland Jago Douma2018-04-061-2/+1
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Fix testsRoeland Jago Douma2018-04-061-1/+2
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Always remember meRoeland Jago Douma2018-04-061-3/+1
|/ | | | | | Fixes #8004 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Make the new autocomplete endpoint OCSJoas Schilling2018-03-211-1/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>