Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | store last check timestamp in token instead of session | Christoph Wurst | 2016-06-17 | 1 | -52/+92 | |
| | | ||||||
| * | use token last_activity instead of session value | Christoph Wurst | 2016-06-17 | 1 | -16/+2 | |
| | | ||||||
* | | update session token password on user password change | Christoph Wurst | 2016-06-21 | 1 | -0/+17 | |
| | | ||||||
* | | add PasswordLoginForbiddenException | Christoph Wurst | 2016-06-17 | 1 | -17/+20 | |
|/ | ||||||
* | create session token only for clients that support cookies | Christoph Wurst | 2016-06-13 | 1 | -2/+11 | |
| | ||||||
* | create session token on all APIs | Christoph Wurst | 2016-06-13 | 1 | -2/+7 | |
| | ||||||
* | Merge pull request #25000 from owncloud/fix-email-login-dav | Vincent Petry | 2016-06-09 | 1 | -3/+14 | |
|\ | | | | | Allow login by email address via webdav as well | |||||
| * | Allow login by email address via webdav as well - fixes #24791 | Thomas Müller | 2016-06-09 | 1 | -3/+14 | |
| | | ||||||
* | | catch sessionnotavailable exception if memory session is used | Christoph Wurst | 2016-06-08 | 1 | -5/+10 | |
| | | ||||||
* | | When creating a session token, make sure it's the login password and not a ↵ | Christoph Wurst | 2016-06-08 | 1 | -5/+28 | |
|/ | | | | device token | |||||
* | Create session tokens for apache auth users | Christoph Wurst | 2016-05-31 | 1 | -4/+14 | |
| | ||||||
* | Update license headers | Lukas Reschke | 2016-05-26 | 5 | -30/+14 | |
| | ||||||
* | add default token auth config on install, upgrade and add it to sample config | Christoph Wurst | 2016-05-24 | 1 | -0/+3 | |
| | ||||||
* | do not allow client password logins if token auth is enforced or 2FA is enabled | Christoph Wurst | 2016-05-24 | 1 | -5/+65 | |
| | ||||||
* | when generating browser/device token, save the login name for later password ↵ | Christoph Wurst | 2016-05-24 | 1 | -3/+4 | |
| | | | | checks | |||||
* | login explicitly | Christoph Wurst | 2016-05-24 | 1 | -9/+6 | |
| | ||||||
* | Merge pull request #24729 from owncloud/try-token-login-first | Vincent Petry | 2016-05-23 | 1 | -5/+13 | |
|\ | | | | | try token login first | |||||
| * | try token login first | Christoph Wurst | 2016-05-20 | 1 | -5/+13 | |
| | | ||||||
* | | Merge pull request #24658 from owncloud/invalidate-disabled-user-session | Vincent Petry | 2016-05-23 | 1 | -3/+4 | |
|\ \ | | | | | | | invalidate user session if the user was disabled | |||||
| * | | invalidate user session if the user is disabled | Christoph Wurst | 2016-05-23 | 1 | -3/+4 | |
| |/ | ||||||
* / | Add two factor auth to core | Christoph Wurst | 2016-05-23 | 1 | -0/+1 | |
|/ | ||||||
* | don't allow token login for disabled users | Christoph Wurst | 2016-05-18 | 1 | -0/+4 | |
| | ||||||
* | a single token provider suffices | Christoph Wurst | 2016-05-18 | 1 | -43/+22 | |
| | ||||||
* | use the UID for creating the session token, not the login name | Christoph Wurst | 2016-05-11 | 1 | -0/+1 | |
| | ||||||
* | delete the token in case an exception is thrown when decrypting the password | Christoph Wurst | 2016-05-11 | 1 | -4/+10 | |
| | ||||||
* | fix PHPDoc and other minor issues | Christoph Wurst | 2016-05-11 | 1 | -24/+21 | |
| | ||||||
* | catch possible SessionNotAvailableExceptions | Christoph Wurst | 2016-05-11 | 1 | -6/+23 | |
| | ||||||
* | PHPDoc and other minor fixes | Christoph Wurst | 2016-05-11 | 1 | -14/+21 | |
| | ||||||
* | pass in $request on OCS api | Christoph Wurst | 2016-05-11 | 1 | -0/+2 | |
| | ||||||
* | try apache auth too | Christoph Wurst | 2016-05-11 | 1 | -4/+3 | |
| | ||||||
* | Fix existing tests | Christoph Wurst | 2016-05-11 | 1 | -21/+23 | |
| | ||||||
* | fix setup | Christoph Wurst | 2016-05-11 | 1 | -6/+22 | |
| | ||||||
* | Add fallback to allow user:token basic auth | Christoph Wurst | 2016-05-11 | 1 | -0/+7 | |
| | ||||||
* | Add token auth for OCS APIs | Christoph Wurst | 2016-05-11 | 1 | -10/+24 | |
| | ||||||
* | Add index on 'last_activity' | Christoph Wurst | 2016-05-11 | 1 | -3/+7 | |
| | | | | | | add token type column and delete only temporary tokens in the background job debounce token updates; fix wrong class import | |||||
* | Add controller to generate client tokens | Christoph Wurst | 2016-05-11 | 1 | -1/+1 | |
| | ||||||
* | Check if session token is valid and log user out if the check fails | Christoph Wurst | 2016-05-11 | 1 | -7/+38 | |
| | | | | | * Update last_activity timestamp of the session token * Check user backend credentials once in 5 minutes | |||||
* | invalidate (delete) session token on logout | Christoph Wurst | 2016-05-11 | 1 | -1/+10 | |
| | | | | add 'last_activity' column to session tokens and delete old ones via a background job | |||||
* | token based auth | Christoph Wurst | 2016-05-11 | 1 | -25/+153 | |
| | | | | | | | | * Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token | |||||
* | Add \OC\User\Backend | Roeland Jago Douma | 2016-05-10 | 4 | -11/+185 | |
| | | | | | Since some apps (ldap et al) still depend on OC_User_Backend this seemed like the cleanest approach. | |||||
* | Move OC_User_Database to \OC\User\Database | Roeland Jago Douma | 2016-05-10 | 1 | -0/+349 | |
| | ||||||
* | Move \OC\User to PSR-4 | Roeland Jago Douma | 2016-05-10 | 5 | -0/+1163 | |