summaryrefslogtreecommitdiffstats
path: root/core/routes.php
Commit message (Collapse)AuthorAgeFilesLines
* Run phan over code baseLukas Reschke2017-07-191-0/+4
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* add contactsmenu popoverGeorg Ehrke2017-04-261-0/+1
| | | | Signed-off-by: Georg Ehrke <developer@georgehrke.com>
* Merge branch 'master' into contactsmenuJan-Christoph Borchardt2017-04-261-0/+3
|\ | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
| * Add new auth flowLukas Reschke2017-04-251-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This implements the basics for the new app-password based authentication flow for our clients. The current implementation tries to keep it as simple as possible and works the following way: 1. Unauthenticated client opens `/index.php/login/flow` 2. User will be asked whether they want to grant access to the client 3. If accepted the user has the chance to do so using existing App Token or automatically generate an app password. If the user chooses to use an existing app token then that one will simply be redirected to the `nc://` protocol handler. While we can improve on that in the future, I think keeping this smaller at the moment has its advantages. Also, in the near future we have to think about an automatic migration endpoint so there's that anyways :-) If the user chooses to use the regular login the following happens: 1. A session state token is written to the session 2. User is redirected to the login page 3. If successfully authenticated they will be redirected to a page redirecting to the POST controller 4. The POST controller will check if the CSRF token as well as the state token is correct, if yes the user will be redirected to the `nc://` protocol handler. This approach is quite simple but also allows to be extended in the future. One could for example allow external websites to consume this authentication endpoint as well. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | Use HTTP POST to retrieve the list of contactsChristoph Wurst2017-04-251-1/+1
| | | | | | | | | | | | | | | | We do not want to have sensitive information in the URL and therefore also not in the access log. Thus the GET request is replaced by a POST request. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Contacts menuChristoph Wurst2017-04-251-0/+1
|/ | | | | | | * load list of contacts from the server * show last message of each contact Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Merge pull request #4027 from nextcloud/better-spreed-call-urlsRobin Appelman2017-03-271-8/+34
|\ | | | | Better spreed call urls
| * Throw a nice HintException when the apps are missingJoas Schilling2017-03-241-10/+30
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * Allow to use short URLs for callsJoas Schilling2017-03-241-0/+6
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | [PoC] JS CombinerRoeland Jago Douma2017-03-241-0/+1
|/ | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* unify endpoints form core and the the provisioning apiBjoern Schiessle2017-01-251-1/+0
| | | | Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
* Css cache folder name fix, route fix and various fixesJohn Molakvoæ (skjnldsv)2017-01-061-1/+1
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Appdata integration 2John Molakvoæ (skjnldsv)2017-01-061-0/+1
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Add identity proofLukas Reschke2016-11-211-0/+1
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Introduce the UI for password confirmationJoas Schilling2016-11-181-0/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Move OC\OCS\Person to OCSControllerRoeland Jago Douma2016-11-161-0/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Move preview endpoint to controllerRoeland Jago Douma2016-11-031-6/+2
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Move to AppDataRoeland Jago Douma2016-11-031-2/+2
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* New preview generatorRoeland Jago Douma2016-11-031-0/+2
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Move oc.js to a proper classRoeland Jago Douma2016-10-251-3/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Make AppConfig part of the public APIJoas Schilling2016-10-211-3/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Remove unused endpointJoas Schilling2016-09-301-1/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Remove the core tag routes since they are brokenRoeland Jago Douma2016-08-261-37/+0
| | | | | | Private internal stuff that nobody *should* be using anyways. But on top of that already broken for a long time. So nobody could be using it even.
* Merge pull request #956 from nextcloud/fix_952Lukas Reschke2016-08-231-2/+2
|\ | | | | When using permalinks don't error out if file id can't be found
| * When using permalinks don't error out if file id can't be foundRoeland Jago Douma2016-08-191-2/+2
| | | | | | | | | | | | | | | | Fixes #952 * Use only the index route (since it went to showFile anyways) * Fix tests * Use getUserFolder to force init of users mounts
* | Merge pull request #865 from nextcloud/ocs_configMorris Jobke2016-08-191-0/+1
|\ \ | | | | | | Move OCS route /config to proper controller
| * | Move /config over to Core OCSControllerRoeland Jago Douma2016-08-181-0/+1
| |/
* / Kill ajax/share.phpRoeland Jago Douma2016-08-181-3/+0
|/ | | | | Using this file will insert invalid shares. OCS has to be used exclusively!
* Move /cloud/user to Core appRoeland Jago Douma2016-08-091-0/+1
|
* Move getCapabilities over to CoreRoeland Jago Douma2016-08-091-0/+3
|
* Fix othersJoas Schilling2016-07-211-3/+4
|
* Revert "occ web executor (#24957)"Morris Jobke2016-07-071-1/+0
| | | | This reverts commit 854352d9a064a1e469ede207493bce44fd41d96c.
* occ web executor (#24957)VicDeo2016-06-221-0/+1
| | | | | | | | | | | | * Initial web executor * Fix PHPDoc Fix broken integration test OccControllerTests do not require database access - moch them all! Kill unused sprintf
* Update license headersLukas Reschke2016-05-261-1/+3
|
* Add two factor auth to coreChristoph Wurst2016-05-231-0/+3
|
* Add controller to generate client tokensChristoph Wurst2016-05-111-0/+1
|
* token based authChristoph Wurst2016-05-111-1/+2
| | | | | | | | * Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token
* Add route to resolve fileid to files app URLVincent Petry2016-05-061-0/+6
| | | | | | | The following routes will redirect to the files app and display the matching folder. If the fileid is a file, it will scroll to it. - http://localhost/owncloud/index.php/f/$fileid - http://localhost/owncloud/index.php/files/?dir=somedir&fileid=$fileid
* Move logout to controllerLukas Reschke2016-04-181-0/+1
| | | | Testable code. Yay.
* Move login form into controllerLukas Reschke2016-04-151-0/+1
| | | | First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.
* Happy new year!Thomas Müller2016-01-121-1/+1
|
* Update license headersLukas Reschke2015-10-261-1/+1
|
* update license headers and authorsMorris Jobke2015-06-251-1/+0
|
* Fix routesLukas Reschke2015-04-281-4/+4
| | | | Fixes public sharing as reported on https://github.com/owncloud/core/issues/15913
* Update license headersJenkins for ownCloud2015-03-261-4/+27
|
* Avatar controller moved to AppFrameWorkRoeland Jago Douma2015-03-111-23/+13
| | | | | | | | * Original avatarcontroller migrated to the appframework * Added DataDisplayResponse that show data inline in the browser (used to retrun the image) * Removed some unneeded code * Added unit tests for the avatarcontroller
* Revert "Updating license headers"Morris Jobke2015-02-261-26/+5
| | | | This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
* Updating license headersJenkins for ownCloud2015-02-231-5/+26
|
* adjust paths for searchMorris Jobke2015-01-141-2/+2
|
* Refactor file sharing public link handlingLukas Reschke2014-11-141-3/+16
| | | | | | | fixes download issue introduced by #10755 Conflicts: apps/files_sharing/public.php
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-29 13:56:03 +0000