summaryrefslogtreecommitdiffstats
path: root/core/Controller
Commit message (Collapse)AuthorAgeFilesLines
* Only allow requesting new CSRF tokens if it passes the SameSite Cookie testRoeland Jago Douma2020-01-031-0/+5
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Update license headers for 18Christoph Wurst2019-12-201-3/+6
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Merge pull request #17784 from nextcloud/enh/disable-clear-site-data-via-configRoeland Jago Douma2019-12-121-2/+6
|\ | | | | Disable Clear-Site-Data for Chrom* (and Opera, Brave, etc)
| * Send Clear-Site-Data expect for ChromeDaniel Kesselberg2019-11-301-2/+6
| | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | Add a dedicated page for the recommended apps installationChristoph Wurst2019-12-122-1/+54
| | | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
* | Update license headersChristoph Wurst2019-12-0525-43/+90
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Add checkbox to install recommended apps during setupChristoph Wurst2019-12-041-2/+9
| | | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
* | Merge pull request #17715 from nextcloud/fix/5456/respect_avatar_privacyJoas Schilling2019-12-041-16/+20
|\ \ | |/ |/| Honor avatar visibility settings
| * Update testsRoeland Jago Douma2019-11-131-21/+3
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * Honor avatar visibility settingsRoeland Jago Douma2019-10-281-4/+26
| | | | | | | | | | | | | | | | | | Fixes #5456 Only when an avatar is set to public should we show it to the public. For now this has an open question as to how to solve federated avatars. But I assume a dedicated paramter or endpooint would make sense there. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Trim the login nameChristoph Wurst2019-11-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise we keep on using it with leading or trailing whitespaces for app tokens and other logic. The reason this doesn't throw an error immediately with local users is that (My)SQL compares strings regardless of their padding by default. So we look up 'uid ' and get the row for the user 'uid'. Other back-ends will lead to a hard error, though, and the user is unable to log out as all request fail. Ref https://stackoverflow.com/a/10495807/2239067 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Fix autocomplete suggestions with numeric user idsJoas Schilling2019-11-261-1/+1
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | Merge pull request #18079 from nextcloud/fixes/phpcsRoeland Jago Douma2019-11-2513-21/+27
|\ \ | | | | | | Some php-cs fixes
| * | Some php-cs fixesRoeland Jago Douma2019-11-2213-21/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Order the imports * No leading slash on imports * Empty line before namespace * One line per import * Empty after imports * Emmpty line at bottom of file Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | Remove exception for settings app from svg controllerDaniel Kesselberg2019-11-241-6/+0
|/ / | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* / Check getRedirectUri() for queriesRussellAult2019-11-131-3/+11
|/ | | | | | | | Resolves Issue #17885 Check getRedirectUri() for queries, and add a '&' instead of a '?' to $redirectUri if it already has them; otherwise, $redirectUri might end up with two '?'. Signed-off-by: RussellAult <russellault@users.noreply.github.com>
* Harden middleware checkRoeland Jago Douma2019-10-251-0/+3
| | | | | | | These annotations will allow for extra checks. And thus make it harder to break things. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* fix oauth client redirectSergej Nikolaev2019-10-041-2/+10
| | | | Signed-off-by: Sergej Nikolaev <kinolaev@gmail.com>
* Allow rotation of apppasswordsRoeland Jago Douma2019-08-271-0/+24
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Stop if there is no encrypted tokenDaniel Kesselberg2019-08-181-1/+5
| | | | | | Fix Argument 1 passed to OC\Security\Crypto::decrypt() must be of the type string, null given Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Fix login flow form actionsRoeland Jago Douma2019-08-111-2/+14
| | | | | | | | So fun fact. Chrome considers a redirect after submitting a form part of the form actions. Since we redirect to a new protocol (nc://login/). Causing the form submission to work but the redirect failing hard. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #16544 from nextcloud/bugfix/16540Roeland Jago Douma2019-07-311-5/+12
|\ | | | | Add missing password reset page to vue
| * Move actual password reset to vueJulius Härtl2019-07-311-5/+12
| | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* | Merge pull request #16563 from nextcloud/enh/lostcontroller/better_exceptionsMorris Jobke2019-07-291-18/+13
|\ \ | | | | | | Use proper exception in lostController
| * | Use proper exception in lostControllerRoeland Jago Douma2019-07-271-18/+13
| |/ | | | | | | | | | | | | | | | | | | There is no need to log the expcetion of most of the stuff here. We should properly log them but an exception is excessive. This moves it to a proper exception which we can catch and then log. The other exceptions will still be fully logged. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* / Update PreviewControllerRoeland Jago Douma2019-07-261-6/+1
|/ | | | | | | | | | | | | The constructor is called with the userId. However if a user is not logged in this is null. Which means that we get an exception instead of this being handled gracefully in the middleware. There are cleaner solutions. But this is the solution that is the easiest to apply without lots of work and risk of breaking things (handling the logged in middleware before initializing the controller etc). Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #16308 from nextcloud/fix/undefined-offset-0Morris Jobke2019-07-101-3/+6
|\ | | | | Prevent undefined offset 0 in findByUserIdOrMail
| * Return first value from $usersDaniel Kesselberg2019-07-091-3/+6
| | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | Don't send executionContexts for Clear-Site-DataDaniel Kesselberg2019-07-091-1/+1
|/ | | | | | | | | | There are plans to remove executionContexts from the spec: https://github.com/w3c/webappsec-clear-site-data/issues/59 Firefox already removed it https://bugzilla.mozilla.org/show_bug.cgi?id=1548034 Chromium implementation is not finish: https://bugs.chromium.org/p/chromium/issues/detail?id=898503&q=clear-site-data&sort=-modified&colspec=ID%20Pri%20M%20Stars%20ReleaseBlock%20Component%20Status%20Owner%20Summary%20OS%20Modified Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Fall back to black for non-color valuesJoas Schilling2019-06-201-0/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Add extendedSupport to SubscriptionJulius Härtl2019-06-171-0/+1
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Vueify the login pageChristoph Wurst2019-05-291-54/+71
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Remote wipe supportRoeland Jago Douma2019-05-201-0/+98
| | | | | | | | This allows a user to mark a token for remote wipe. Clients that support this can then wipe the device properly. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Merge pull request #15304 from nextcloud/enh/2fa_setup_at_loginRoeland Jago Douma2019-05-171-0/+67
|\ | | | | 2FA setup during login
| * Allow 2FA to be setup on first loginRoeland Jago Douma2019-05-171-0/+67
| | | | | | | | | | | | | | | | | | Once 2FA is enforced for a user and they have no 2FA setup yet this will now prompt them with a setup screen. Given that providers are enabled that allow setup then. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Allow clients to delete their own apptokenRoeland Jago Douma2019-05-171-0/+23
|/ | | | | | Fixes #15480 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Add a login chain to reduce the complexity of LoginController::tryLoginChristoph Wurst2019-05-071-126/+37
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Block install without CAN_INSTALL fileRoeland Jago Douma2019-04-111-0/+16
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Make the endpoint more robust against faulty resource providersJoas Schilling2019-03-281-13/+59
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Return 200 instead of 404 when asking for collections of a resourceJoas Schilling2019-03-191-1/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Use rich objects instead of name, link and iconJoas Schilling2019-03-191-7/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Replace the icon-class with an absolute link to an imageJoas Schilling2019-03-191-1/+1
| | | | | | Otherwise the icon can not be displayed in mobile apps Signed-off-by: Joas Schilling <coding@schilljs.com>
* Also check the access to collections on preparingJoas Schilling2019-03-011-0/+4
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Further work on the access cacheJoas Schilling2019-03-011-17/+11
| | | | | | Searching for all is still a problem Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fix doc blocksJoas Schilling2019-03-011-3/+3
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Implement search and rename in backendJulius Härtl2019-03-011-1/+43
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Implement frontend for search/renameJulius Härtl2019-03-011-1/+1
| | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net> Move to vuex Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Add iconClass to resourcesJulius Härtl2019-03-011-2/+3
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Make sure we query the node before fetching the nameJulius Härtl2019-03-011-0/+4
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Adjust parameter names on createCollectionOnResourceJulius Härtl2019-03-011-2/+2
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-01 07:19:39 +0000