summaryrefslogtreecommitdiffstats
path: root/core/ajax
Commit message (Collapse)AuthorAgeFilesLines
* Use ellipsis instead of triple dotJoas Schilling2018-06-221-1/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Wait for cron to finish before running upgrade commandMorris Jobke2018-06-191-1/+5
| | | | | | * fixes #9562 Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* move log constants to ILoggerArthur Schiwon2018-04-261-1/+3
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Merge pull request #7918 from nextcloud/properly-log-exceptionsRoeland Jago Douma2018-01-231-0/+4
|\ | | | | Properly log the full exception instead of only the message
| * Properly log the full exception instead of only the messageMorris Jobke2018-01-231-0/+4
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Merge pull request #7354 from nextcloud/refacor-update-page-printblizzz2018-01-221-1/+1
|\ \ | |/ |/| Refactor method to check if update is needed
| * Refactor method to check if update is neededMorris Jobke2017-11-301-1/+1
| | | | | | | | | | | | There was only one call, that actually needed the parameter to be set to true. So this change moved the print of the page to that location and replaces all other occurences with a direct call to the underlying OCP API. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Remove not needed 3rdparty app disabling during upgrade for PHP 5.xMorris Jobke2018-01-191-7/+0
|/ | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Get the Installer via DIMorris Jobke2017-11-251-1/+2
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Update license headersMorris Jobke2017-11-061-0/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Stricter phan config fixesLukas Reschke2017-08-011-1/+5
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Proper logging for appstore updatesMorris Jobke2017-05-111-0/+9
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Check that set_time_limit is not disabled before calling itKo-2017-03-111-1/+4
| | | | Signed-off-by: Ko- <k.stoffelen@cs.ru.nl>
* Move preview endpoint to controllerRoeland Jago Douma2016-11-032-115/+0
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Move to AppDataRoeland Jago Douma2016-11-031-2/+6
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* New preview generatorRoeland Jago Douma2016-11-032-10/+54
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Make AppConfig part of the public APIJoas Schilling2016-10-211-70/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Check if the file isReadable() before sending a (cached) previewJoas Schilling2016-08-291-0/+2
|
* Kill ajax/share.phpRoeland Jago Douma2016-08-181-375/+0
| | | | | Using this file will insert invalid shares. OCS has to be used exclusively!
* Update with robinJoas Schilling2016-07-214-4/+4
|
* Fix othersJoas Schilling2016-07-214-8/+12
|
* Update license headersLukas Reschke2016-05-264-7/+7
|
* Adding progress to web upgradeThomas Müller2016-04-281-6/+58
|
* Fix web updater - fixes #24115Thomas Müller2016-04-201-3/+3
|
* Merge pull request #23911 from owncloud/split-upgrade-commandChristoph Wurst2016-04-181-1/+0
|\ | | | | Move version check code out of class Updater
| * Move version check code out of class UpdaterThomas Müller2016-04-181-1/+0
| |
* | Suggest cli based updater in case the instance is bigger - #23913Thomas Müller2016-04-181-1/+9
|/
* Fix verbose output of upgrade command - not progressbar in this case and the ↵Thomas Müller2016-04-041-0/+5
| | | | schema migration test has one progressbar now for all tables - before we had one progressbar for each table
* Add detailed logs hidden and show them on requestMorris Jobke2016-04-041-3/+0
|
* Show individual sql schema migration steps during upgrade - on web as well ↵Thomas Müller2016-04-041-0/+12
| | | | as on the command line
* Generate a valid URL for link notificationRoeland Jago Douma2016-03-151-2/+4
| | | | | | fixes #23197 * Updated unit test
* Update author informationLukas Reschke2016-03-011-1/+1
| | | | Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)
* Fix on shared groups assignment.Leonardo Diez2016-02-181-1/+1
|
* Remove modifying calls in ajax/share.phpRoeland Jago Douma2016-02-091-86/+0
| | | | | Those calls used the old sharing endpoint that created incompatible shares. Which eventually would lead to some weird bugs.
* Revert "setting to skip migration tests by default"Morris Jobke2016-02-031-6/+0
|
* setting to skip migration tests by defaultMorris Jobke2016-02-031-0/+6
| | | | | | | * if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default
* Happy new year!Thomas Müller2016-01-124-6/+5
|
* don't show previous log level in upgrade messageBjörn Schießle2016-01-041-2/+2
|
* User IUser::getEMailAddress() all over the placeThomas Müller2015-12-021-7/+13
|
* Add code integrity checkLukas Reschke2015-12-011-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release :wink:). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following: ![2015-11-04_12-02-57](https://cloud.githubusercontent.com/assets/878997/10936336/6adb1d14-82ec-11e5-8f06-9a74801c9abf.png) As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.
* Replace some OC_Config calls with ILogger methodsMorris Jobke2015-10-301-3/+4
|
* Remove invalid type-castLukas Reschke2015-10-291-4/+4
| | | | | | This is an `is_array` operation and not a `in_array` one. Thus this typecast is not required. Fixes https://github.com/owncloud/core/issues/20095
* Revert "setting to skip migration tests by default"Morris Jobke2015-10-271-10/+1
| | | | This reverts commit 7cbdd9b90bcea3566b7d0198f23da3d427e6ef45.
* Update license headersLukas Reschke2015-10-262-1/+2
|
* Fix for broken ajax/share.php endpointRoeland Jago Douma2015-10-231-3/+23
| | | | | Even more code mess :( All tests pass again. But I'm really not happy with this endpoint.
* Merge pull request #19918 from owncloud/send-begin-messageThomas Müller2015-10-211-0/+12
|\ | | | | Update: state which step we are going to start and warn if it might b…
| * Update: state which step we are going to start and warn if it might be slowJoas Schilling2015-10-211-0/+12
| |
* | Update - Only add one section for disabled appsJoas Schilling2015-10-211-6/+9
|/
* update licence headers via scriptMorris Jobke2015-10-052-0/+2
|
* Merge pull request #19508 from owncloud/setting-to-skip-migration-testsThomas Müller2015-10-021-1/+10
|\ | | | | setting to skip migration tests by default
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-29 02:52:59 +0000