| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
| |
* Add InvalidTokenException
* add DefaultTokenMapper and use it to check if a auth token exists
* create new token for the browser session if none exists
hash stored token; save user agent
* encrypt login password when creating the token
|
| |
|
| |
|
|\
| |
| | |
Move \OC\AppFramework to PSR-4
|
| |
| |
| |
| | |
* Also moved the autoloader setup a bit up since we need it in initpaths
|
|/
|
|
| |
https://github.com/owncloud/core/issues/23913#issuecomment-213432232
|
|\
| |
| | |
In case of fatal php errors and other unhandled exceptions no html er…
|
| |
| |
| |
| | |
page is expected to be displayed in the console
|
|\ \
| | |
| | | |
Move post_removeFromGroup to shareManager
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The last sharing hook to be moved over.
* Added unit tests
* Removed old tests that relied on old behaviour
* Removed old hooks.php
|
| |/
|/|
| |
| | |
Testable code. Yay.
|
| | |
|
| |
| |
| |
| | |
This is required until the new controller can also handle POST requests
|
| |
| |
| |
| | |
First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.
|
|/ |
|
|
|
|
|
|
|
|
| |
The hook now calls the share manager that will call the responsible
shareProvider to do the proper cleanup.
* Unit tests added
Again nothing should change it is just to cleanup old code
|
|\
| |
| | |
Remove pre/post_addToGroup hooks for shares
|
| |
| |
| |
| |
| | |
There is no need to perform the checks for unique targets on add to
group as we have to do this all when mounting the shares anyway.
|
|/
|
|
| |
Signed-off-by: Stefan Weil <sw@weilnetz.de>
|
|\
| |
| | |
Migrate post_userDelete hook to share manager
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This makes the post_userDelete hook call the sharemanager. This will
cleanup to and from this user.
* All shares owned by this user
* All shares with this user (user)
* All custom group shares
* All link share initiated by this user (to avoid invisible link shares)
Unit tests are added for the defaultshare provider as well as the
federated share provider
|
|/
|
|
| |
as on the command line
|
|
|
|
|
|
| |
in order to create a 1:1 copy of a file if a version gets created
we need to store this information on copyBetweenStorage(). This
allows us to by-pass the encryption wrapper if we read the source file.
|
|\
| |
| | |
Consistently use rel=noreferrer
|
| |
| |
| |
| | |
When linking to external entities we should consistently use rel=noreferrer
|
|/
|
|
|
|
| |
PATH_INFO will be empty at this point and thus the logic in base.php did not catch this. Changing this to "getRawPathInfo" will ensure that the path info is properly read.
Fixes https://github.com/owncloud/core/issues/23199
|
| |
|
|\
| |
| | |
Composers PSR-4 autoloader in core
|
| |
| |
| |
| |
| |
| |
| |
| | |
This introduces the defacto standard PSR-4 autoloader from composer into
core. This will allow proper PSR-4 naming of our classes.
Since our original autoloader is still available we can slowly switch
over classes to PSR-4.
|
|/ |
|
| |
|
|
|
|
| |
Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)
|
|
|
|
|
|
| |
If an app is getting enabled in the web UI, an ajax call is now made to
make sure the server still works. If it doesn't, it sends an emergency
app disabling call to disable the breaking app.
|
|
|
|
| |
Currently the "SERVER_NAME" is passed to the template, which in some cases doesn't match the host returned by "getInsecureServerHost" (or is empty).
|
|
|
|
| |
the dav app
|
|
|
| |
Fixes https://github.com/owncloud/core/issues/21873
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
I do not really consider this necessary or a real security addition. Let's get rid of it thus, cleans up the code and makes the logic easier.
|
|
|
|
| |
The native approach using the PHP calls will not work properly with the cryptowrapper and thus this code is effectively doing nothing at the moment.
|
| |
|
|
|
|
| |
There were code paths that nowadays call ISession::login directly thus bypassing the desired regeneration of the session ID. This moves the session regeneration deeper into the session handling and thus ensures that it is always called. Furthermore, I also added the session regeneration to the remember me cookie plus added some test case expectations for this.
|
| |
|
| |
|
| |
|
| |
|