summaryrefslogtreecommitdiffstats
path: root/lib/composer
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'master' into contactsmenuJan-Christoph Borchardt2017-04-262-0/+2
|\ | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
| * Add new auth flowLukas Reschke2017-04-252-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This implements the basics for the new app-password based authentication flow for our clients. The current implementation tries to keep it as simple as possible and works the following way: 1. Unauthenticated client opens `/index.php/login/flow` 2. User will be asked whether they want to grant access to the client 3. If accepted the user has the chance to do so using existing App Token or automatically generate an app password. If the user chooses to use an existing app token then that one will simply be redirected to the `nc://` protocol handler. While we can improve on that in the future, I think keeping this smaller at the moment has its advantages. Also, in the near future we have to think about an automatic migration endpoint so there's that anyways :-) If the user chooses to use the regular login the following happens: 1. A session state token is written to the session 2. User is redirected to the login page 3. If successfully authenticated they will be redirected to a page redirecting to the POST controller 4. The POST controller will check if the CSRF token as well as the state token is correct, if yes the user will be redirected to the `nc://` protocol handler. This approach is quite simple but also allows to be extended in the future. One could for example allow external websites to consume this authentication endpoint as well. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | Update composer autoloaderChristoph Wurst2017-04-254-6/+8
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Contacts menuChristoph Wurst2017-04-254-8/+32
|/ | | | | | | * load list of contacts from the server * show last message of each contact Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Kill dead codeJoas Schilling2017-04-202-2/+0
| | | | | | > No tests found in class "Test\Share\MailNotificationsTest". Signed-off-by: Joas Schilling <coding@schilljs.com>
* Merge pull request #2834 from nextcloud/accesListToShareManagerMorris Jobke2017-04-152-0/+4
|\ | | | | Access list to share manager
| * Update autoloaderRoeland Jago Douma2017-04-132-0/+2
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * Offload acceslist creation to providersRoeland Jago Douma2017-04-132-0/+2
| | | | | | | | | | | | | | | | * This allows for effective queries. * Introduce currentAccess parameter to speciy if the users needs to have currently acces (deleted incomming group share). (For notifications) Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Merge pull request #4330 from nextcloud/activities-for-password-mail-changeRoeland Jago Douma2017-04-142-0/+6
|\ \ | | | | | | Add activities when email or password is changed
| * | Fix autoloaderMorris Jobke2017-04-132-0/+6
| |/ | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Make BruteForceProtection annotation more cleverLukas Reschke2017-04-132-0/+2
| | | | | | | | | | | | | | | | This makes the new `@BruteForceProtection` annotation more clever and moves the relevant code into it's own middleware. Basically you can now set `@BruteForceProtection(action=$key)` as annotation and that will make the controller bruteforce protected. However, the difference to before is that you need to call `$responmse->throttle()` to increase the counter. Before the counter was increased every time which leads to all kind of unexpected problems. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* | Update static autoloadermapLukas Reschke2017-04-132-0/+12
|/ | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Merge pull request #3614 from nextcloud/discover-federatedsharing-endpointsBjörn Schießle2017-04-122-0/+4
|\ | | | | Discover federatedsharing endpoints
| * Update autoloaderRoeland Jago Douma2017-04-112-0/+4
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Add IEMailTemplate to public OCP APILukas Reschke2017-04-112-2/+2
|/ | | | | | Also adds `\OCP\Mail\IMailer::createEMailTemplate` as helper so the functionality can easily be used within apps. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Update autoloaderLukas Reschke2017-04-072-0/+6
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* update autoloaderRobin Appelman2017-03-302-0/+12
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Update autoloaderRoeland Jago Douma2017-03-242-0/+4
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Fix autoloaderMorris Jobke2017-03-222-0/+4
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #3844 from nextcloud/unshare_eventJoas Schilling2017-03-212-0/+2
|\ | | | | Unshare event
| * Update autoloaderRoeland Jago Douma2017-03-172-0/+2
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Update autoloaderLukas Reschke2017-03-202-0/+2
|/ | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Bump autoloaderRoeland Jago Douma2017-03-092-4/+8
| | | | | | Composer was updated so lets update the autoloader Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #3360 from nextcloud/dav-searchRobin Appelman2017-03-082-0/+20
|\ | | | | Implement webdav SEARCH
| * autoloaderRobin Appelman2017-03-012-0/+20
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Change language code for languages with only one translationMorris Jobke2017-03-012-0/+2
|/ | | | | | | | | | | | * then the language is not that specific and get also matched for fi * fallback from fi_FI to fi is supported - the other way around not * contains repair script * contains tests for repair script * fixes #869 Order results to make postgres happy Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #3605 from nextcloud/single-userJoas Schilling2017-02-242-2/+0
|\ | | | | Clean up single user mode
| * Clean up single user modeMorris Jobke2017-02-222-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Single user mode basically disables WebDAV, OCS and cron execution. Since we heavily rely on WebDAV and OCS also in the web UI it's basically useless. An admin only sees a broken interface and can't even change any settings nor sees any files. Also sharing is not possible. As this is at least the case since Nextcloud 9 and we haven't received any reports for this it seems that this feature is not used at all so I removed it. The encryption commands now rely on the well tested maintenance mode. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | cleanup old and not needed repair steps to speed up the updateMorris Jobke2017-02-222-24/+0
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Remove unneeded UpdateCertificateStore.Morris Jobke2017-02-222-2/+0
|/ | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Add a single public api for resolving a cloud id to a user and remote and backRobin Appelman2017-02-082-0/+8
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Merge pull request #2044 from nextcloud/login-credential-storeMorris Jobke2017-01-302-0/+10
|\ | | | | Login credential store
| * add login credential storeChristoph Wurst2017-01-112-0/+10
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | update autoloaderRobin Appelman2017-01-272-0/+10
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | remote now unneeded AvatarPermissions repair stepRobin Appelman2017-01-262-2/+0
| | | | | | | | | | | | Avatars are now stored in appdata Signed-off-by: Robin Appelman <robin@icewind.nl>
* | update autoloader static class filesMorris Jobke2017-01-192-0/+2
|/ | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Update autoloaderRoeland Jago Douma2017-01-112-0/+2
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #2943 from nextcloud/kill_old_preview_codeMorris Jobke2017-01-102-2/+0
|\ | | | | Cleanup old preview code
| * Update autoloaderRoeland Jago Douma2017-01-042-2/+0
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | update autoloaderRobin Appelman2017-01-062-2/+0
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Update autoloaderRoeland Jago Douma2017-01-062-0/+4
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Kill APC because it requires PHP 5.4Joas Schilling2017-01-052-2/+0
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | update autoloaderMorris Jobke2017-01-042-2/+0
|/ | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #2923 from nextcloud/remove-fakedir-streamRobin Appelman2017-01-032-2/+0
|\ | | | | remove no longer used fakedir stream wrapper
| * update autoloaderMorris Jobke2017-01-033-7/+31
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | update autoloaderRobin Appelman2016-12-283-5/+33
|/ | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Update autoloader filesLukas Reschke2016-12-192-2/+0
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Remove IDb interface which was deprecated for 3 years alreadyJoas Schilling2016-12-142-4/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Update autoloadingJoas Schilling2016-12-132-0/+2
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fixed correct filename of MoveAvatarsBackgroundJobRoeland Jago Douma2016-12-132-2/+2
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>