aboutsummaryrefslogtreecommitdiffstats
path: root/lib/private/AppFramework/Middleware
Commit message (Collapse)AuthorAgeFilesLines
...
* Merge pull request #507 from nextcloud/run-le-scriptMorris Jobke2016-07-2111-14/+27
|\ | | | | Update emails and license headers with latest changes
| * Fix othersJoas Schilling2016-07-2111-14/+27
| |
* | Merge pull request #480 from nextcloud/fix_ocs_response_formatLukas Reschke2016-07-211-1/+1
|\ \ | |/ |/| AppFramework default response for OCS is xml
| * AppFramework do not get default responseRoeland Jago Douma2016-07-201-1/+1
| | | | | | | | | | | | | | | | | | The OCSResponse differs from other responses in that it defaults to XML. However we fell back to json by default. This makes sure that if nothing is set we don't pass anything. Which defaults then to the controllers default (which is often 'json') but in the case of the OCSResponse 'xml'.
* | Merge pull request #479 from nextcloud/add-bruteforce-throttlerLukas Reschke2016-07-211-14/+11
|\ \ | |/ |/| Implement brute force protection
| * Implement brute force protectionLukas Reschke2016-07-201-14/+11
| | | | | | | | | | | | | | | | | | Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login)
* | Merge pull request #476 from nextcloud/port-same-site-cookiesLukas Reschke2016-07-202-1/+46
|\ \ | | | | | | [master] Port Same-Site Cookies to master
| * | [master] Port Same-Site Cookies to masterLukas Reschke2016-07-202-1/+46
| |/ | | | | | | Fixes https://github.com/nextcloud/server/issues/50
* / Add OCSMiddleware to catch OCS exceptionsRoeland Jago Douma2016-07-201-0/+80
|/ | | | | | | * OCSException * OCSBadRequestException * OCSForbiddenException * OCSNotFoundException
* add PasswordLoginForbiddenExceptionChristoph Wurst2016-06-171-2/+7
|
* create session token on all APIsChristoph Wurst2016-06-131-1/+1
|
* use client login method on CORS routesChristoph Wurst2016-06-081-6/+6
|
* Update license headersLukas Reschke2016-05-268-8/+16
|
* Fix inconsistent nameing of AppFrameworkRoeland Jago Douma2016-04-225-12/+12
|
* Move \OC\AppFramework to PSR-4Roeland Jago Douma2016-04-229-0/+797
* Also moved the autoloader setup a bit up since we need it in initpaths