aboutsummaryrefslogtreecommitdiffstats
path: root/lib/private/AppFramework
Commit message (Expand)AuthorAgeFilesLines
* docs(dispatcher): Correct described return valuesjtr-docs-dispatcher-returnJosh3 days1-3/+5
* fix: Remove support for app.php loadingCôme Chilliet13 days1-2/+2
* fix: Use login name to check the passwordartonge/fix/use_loginname_to_check_passwordLouis Chemineau2025-04-021-1/+2
* fix: Move getAppInstalledVersions to AppConfig so that it can be used earlierfix/add-getappversions-replacementCôme Chilliet2025-03-251-0/+9
* fix(auth): Allow 2FA challenges for Ephemeral sessionsbugfix/ios-3365/allow-2fa-for-ephemeral-sessionsJoas Schilling2025-03-181-0/+5
* fix(login): Properly target public page with attributeartonge/fix/publicpage_attributeLouis Chemineau2025-03-051-1/+2
* Merge pull request #51116 from nextcloud/enh/noid/nullable-rangeArthur Schiwon2025-03-041-1/+1
|\
| * feat(AppFramework): extend range check to optional parametersenh/noid/nullable-rangeArthur Schiwon2025-02-271-1/+1
* | fix(login): Also check legacy annotation for ephemeral sessionsLouis Chemineau2025-02-272-6/+7
|/
* Merge pull request #51051 from nextcloud/artonge/fix/login_flow_v2_sessions_2Louis2025-02-272-1/+53
|\
| * feat: Close sessions created for login flow v2artonge/fix/login_flow_v2_sessions_2Louis Chemineau2025-02-262-1/+53
* | fix(l10n): Improve english source stringsJoas Schilling2025-02-261-3/+3
|/
* chore: Add missing star in phpdoc commentfix/fix-psalm-taint-errorsCôme Chilliet2025-02-171-1/+1
* fix: Correctly tag json encoding in BaseResponse to fix false-positiveCôme Chilliet2025-02-171-1/+9
* fix(ratelimit): Allow to bypass rate-limit from bruteforce allowlistbugfix/noid/allow-ratelimit-bypassJoas Schilling2025-01-272-9/+10
* feat(api): File conversion APIElizabeth Danzberger2025-01-151-0/+25
* feat(lexicon): configurable default valueMaxence Lange2025-01-141-1/+2
* fix(Http): Only allow valid HTTP status code values via templatefix/http/template-valid-status-codesprovokateurin2025-01-073-8/+8
* feat(config): implementation of lexiconMaxence Lange2024-12-131-0/+34
* Merge pull request #49515 from nextcloud/bugfix/noid/boolean-false-in-multipa...Joas Schilling2024-11-281-10/+2
|\
| * fix(controller): Fix false booleans in multipart/form-dataJoas Schilling2024-11-281-10/+2
* | feat: Use inline password confirmation in external storage settingsLouis Chemineau2024-11-282-66/+60
|/
* feat(Dispatcher): Add debug log for controller methods returning raw data not...feat/dispatcher/log-raw-response-dataprovokateurin2024-11-151-0/+4
* chore(profile): move profile app from core to appsskjnldsv2024-11-142-0/+2
* fix(Middleware): log deprecation when annotation was actually usedfix/noid/deprecation-correct-caseArthur Schiwon2024-11-121-1/+1
* chore: Add proper deprecation dates where missingFerdinand Thiessen2024-09-201-5/+5
* chore(deps): Update nextcloud/coding-standard to v1.3.1provokateurin2024-09-195-11/+13
* chore!: Remove `OC\AppFramework\Logger`Ferdinand Thiessen2024-09-192-112/+0
* fix(BaseResponse): Cast XML element values to stringfix/baseresponse/xml-element-value-string-castprovokateurin2024-09-151-1/+3
* chore: fix typo in `SameSiteCookieMiddleware`Ferdinand Thiessen2024-08-311-4/+4
* chore: Remove unused `CsrfTokenManager` from `CSPMiddleware`Ferdinand Thiessen2024-08-312-17/+7
* style: update codestyle for coding-standard 1.2.3Daniel Kesselberg2024-08-2510-34/+34
* perf: delay getting (sub)admin status for user in the security middleware unt...Robin Appelman2024-08-232-9/+31
* fix: Support Safari mobileFerdinand Thiessen2024-08-211-0/+1
* fix: Use `CSP_NONCE` env variable in ContentSecurity HeaderHolger Hees2024-08-131-1/+1
* fix(files_sharing): show proper share not found error messageskjnldsv2024-08-062-19/+13
* fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checksprovokateurin2024-07-251-0/+4
* feat: mail provider backendSebastianKrupinski2024-07-231-0/+24
* feat(security): Add public API to allow validating IP Ranges and checking for...Joas Schilling2024-07-192-7/+7
* feat(security): restrict admin actions to IP rangesBenjamin Gaussorgues2024-07-193-54/+56
* chore: use "app_api" session key, "app_api_system" is deprecatedAndrey Borysenko2024-07-181-2/+3
* feat: allow for ExApps to call Admin endpoints marked with specific attrAlexander Piskun2024-07-181-6/+15
* feat(Security): Warn about using annotations instead of attributesprovokateurin2024-07-184-2/+12
* feat: Add new forbidden filename options to CapabilitiesFerdinand Thiessen2024-07-111-1/+3
* feat(AppFramework): Add ExAppRequired attributeprovokateurin2024-07-012-1/+27
* fix(logger): Fix scoped PSR logger when running psalm:ciJoas Schilling2024-06-111-9/+9
* refactor(Token): introduce scope constantsArthur Schiwon2024-06-051-1/+2
* fix(Session): avoid password confirmation on SSOArthur Schiwon2024-06-052-3/+26
* chore: Add SPDX headerAndy Scherzinger2024-05-2459-1285/+148
* fix: address review commentsMarcel Klehr2024-05-141-2/+2