| Commit message (Expand) | Author | Age | Files | Lines |
* | docs(dispatcher): Correct described return valuesjtr-docs-dispatcher-return | Josh | 3 days | 1 | -3/+5 |
* | fix: Remove support for app.php loading | Côme Chilliet | 13 days | 1 | -2/+2 |
* | fix: Use login name to check the passwordartonge/fix/use_loginname_to_check_password | Louis Chemineau | 2025-04-02 | 1 | -1/+2 |
* | fix: Move getAppInstalledVersions to AppConfig so that it can be used earlierfix/add-getappversions-replacement | Côme Chilliet | 2025-03-25 | 1 | -0/+9 |
* | fix(auth): Allow 2FA challenges for Ephemeral sessionsbugfix/ios-3365/allow-2fa-for-ephemeral-sessions | Joas Schilling | 2025-03-18 | 1 | -0/+5 |
* | fix(login): Properly target public page with attributeartonge/fix/publicpage_attribute | Louis Chemineau | 2025-03-05 | 1 | -1/+2 |
* | Merge pull request #51116 from nextcloud/enh/noid/nullable-range | Arthur Schiwon | 2025-03-04 | 1 | -1/+1 |
|\ |
|
| * | feat(AppFramework): extend range check to optional parametersenh/noid/nullable-range | Arthur Schiwon | 2025-02-27 | 1 | -1/+1 |
* | | fix(login): Also check legacy annotation for ephemeral sessions | Louis Chemineau | 2025-02-27 | 2 | -6/+7 |
|/ |
|
* | Merge pull request #51051 from nextcloud/artonge/fix/login_flow_v2_sessions_2 | Louis | 2025-02-27 | 2 | -1/+53 |
|\ |
|
| * | feat: Close sessions created for login flow v2artonge/fix/login_flow_v2_sessions_2 | Louis Chemineau | 2025-02-26 | 2 | -1/+53 |
* | | fix(l10n): Improve english source strings | Joas Schilling | 2025-02-26 | 1 | -3/+3 |
|/ |
|
* | chore: Add missing star in phpdoc commentfix/fix-psalm-taint-errors | Côme Chilliet | 2025-02-17 | 1 | -1/+1 |
* | fix: Correctly tag json encoding in BaseResponse to fix false-positive | Côme Chilliet | 2025-02-17 | 1 | -1/+9 |
* | fix(ratelimit): Allow to bypass rate-limit from bruteforce allowlistbugfix/noid/allow-ratelimit-bypass | Joas Schilling | 2025-01-27 | 2 | -9/+10 |
* | feat(api): File conversion API | Elizabeth Danzberger | 2025-01-15 | 1 | -0/+25 |
* | feat(lexicon): configurable default value | Maxence Lange | 2025-01-14 | 1 | -1/+2 |
* | fix(Http): Only allow valid HTTP status code values via templatefix/http/template-valid-status-codes | provokateurin | 2025-01-07 | 3 | -8/+8 |
* | feat(config): implementation of lexicon | Maxence Lange | 2024-12-13 | 1 | -0/+34 |
* | Merge pull request #49515 from nextcloud/bugfix/noid/boolean-false-in-multipa... | Joas Schilling | 2024-11-28 | 1 | -10/+2 |
|\ |
|
| * | fix(controller): Fix false booleans in multipart/form-data | Joas Schilling | 2024-11-28 | 1 | -10/+2 |
* | | feat: Use inline password confirmation in external storage settings | Louis Chemineau | 2024-11-28 | 2 | -66/+60 |
|/ |
|
* | feat(Dispatcher): Add debug log for controller methods returning raw data not...feat/dispatcher/log-raw-response-data | provokateurin | 2024-11-15 | 1 | -0/+4 |
* | chore(profile): move profile app from core to apps | skjnldsv | 2024-11-14 | 2 | -0/+2 |
* | fix(Middleware): log deprecation when annotation was actually usedfix/noid/deprecation-correct-case | Arthur Schiwon | 2024-11-12 | 1 | -1/+1 |
* | chore: Add proper deprecation dates where missing | Ferdinand Thiessen | 2024-09-20 | 1 | -5/+5 |
* | chore(deps): Update nextcloud/coding-standard to v1.3.1 | provokateurin | 2024-09-19 | 5 | -11/+13 |
* | chore!: Remove `OC\AppFramework\Logger` | Ferdinand Thiessen | 2024-09-19 | 2 | -112/+0 |
* | fix(BaseResponse): Cast XML element values to stringfix/baseresponse/xml-element-value-string-cast | provokateurin | 2024-09-15 | 1 | -1/+3 |
* | chore: fix typo in `SameSiteCookieMiddleware` | Ferdinand Thiessen | 2024-08-31 | 1 | -4/+4 |
* | chore: Remove unused `CsrfTokenManager` from `CSPMiddleware` | Ferdinand Thiessen | 2024-08-31 | 2 | -17/+7 |
* | style: update codestyle for coding-standard 1.2.3 | Daniel Kesselberg | 2024-08-25 | 10 | -34/+34 |
* | perf: delay getting (sub)admin status for user in the security middleware unt... | Robin Appelman | 2024-08-23 | 2 | -9/+31 |
* | fix: Support Safari mobile | Ferdinand Thiessen | 2024-08-21 | 1 | -0/+1 |
* | fix: Use `CSP_NONCE` env variable in ContentSecurity Header | Holger Hees | 2024-08-13 | 1 | -1/+1 |
* | fix(files_sharing): show proper share not found error message | skjnldsv | 2024-08-06 | 2 | -19/+13 |
* | fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checks | provokateurin | 2024-07-25 | 1 | -0/+4 |
* | feat: mail provider backend | SebastianKrupinski | 2024-07-23 | 1 | -0/+24 |
* | feat(security): Add public API to allow validating IP Ranges and checking for... | Joas Schilling | 2024-07-19 | 2 | -7/+7 |
* | feat(security): restrict admin actions to IP ranges | Benjamin Gaussorgues | 2024-07-19 | 3 | -54/+56 |
* | chore: use "app_api" session key, "app_api_system" is deprecated | Andrey Borysenko | 2024-07-18 | 1 | -2/+3 |
* | feat: allow for ExApps to call Admin endpoints marked with specific attr | Alexander Piskun | 2024-07-18 | 1 | -6/+15 |
* | feat(Security): Warn about using annotations instead of attributes | provokateurin | 2024-07-18 | 4 | -2/+12 |
* | feat: Add new forbidden filename options to Capabilities | Ferdinand Thiessen | 2024-07-11 | 1 | -1/+3 |
* | feat(AppFramework): Add ExAppRequired attribute | provokateurin | 2024-07-01 | 2 | -1/+27 |
* | fix(logger): Fix scoped PSR logger when running psalm:ci | Joas Schilling | 2024-06-11 | 1 | -9/+9 |
* | refactor(Token): introduce scope constants | Arthur Schiwon | 2024-06-05 | 1 | -1/+2 |
* | fix(Session): avoid password confirmation on SSO | Arthur Schiwon | 2024-06-05 | 2 | -3/+26 |
* | chore: Add SPDX header | Andy Scherzinger | 2024-05-24 | 59 | -1285/+148 |
* | fix: address review comments | Marcel Klehr | 2024-05-14 | 1 | -2/+2 |