summaryrefslogtreecommitdiffstats
path: root/lib/private/User
Commit message (Collapse)AuthorAgeFilesLines
* Remove default token which is deprecated since Nextcloud 13Joas Schilling2021-12-011-2/+2
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fix type errorsCôme Chilliet2021-11-231-4/+5
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Fix missing token updateJoas Schilling2021-11-121-0/+2
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fair use of push notificationsJoas Schilling2021-10-231-1/+6
| | | | | | | | | We want to keep offering our push notification service for free, but large users overload our infrastructure. For this reason we have to rate-limit the use of push notifications. If you need this feature, consider setting up your own push server or using Nextcloud Enterprise. Signed-off-by: Joas Schilling <coding@schilljs.com>
* Use cached user backend info for password loginJoas Schilling2021-09-141-3/+9
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* enable the user to set a primary (notification) email address (backend)Arthur Schiwon2021-09-092-11/+67
| | | | | | | - specific getters and setters on IUser and implementation - new notify_email field in provisioning API Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Merge pull request #28481 from nextcloud/fix/hash-keyJulius Härtl2021-08-181-2/+3
|\ | | | | Hash cache key
| * Hash cache keyChristopher Ng2021-08-171-2/+3
| | | | | | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>
* | Emit an error log when the app token login name does not matchChristoph Wurst2021-08-131-1/+6
|/ | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* refs #21045 add app config to disable unlimited quota and to set max quotaJulien Veyssier2021-07-291-0/+12
| | | | | | | | | avoid unlimited quota as default_quota fallback value if unlimited quota is not allowed avoid getting/setting/displaying unlimited default quota if not allowed implement tests for unlimited quota restrictions Signed-off-by: Julien Veyssier <eneiluj@posteo.net> Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>
* Directly return cloud id from userJulius Härtl2021-07-141-1/+1
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Migrate HintException to OCPGary Kim2021-06-301-1/+1
| | | | Signed-off-by: Gary Kim <gary@garykim.dev>
* Update php licensesJohn Molakvoæ (skjnldsv)2021-06-047-24/+3
| | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
* Merge pull request #26792 from nextcloud/user-delete-cleanup-filesJohn Molakvoæ2021-06-021-13/+0
|\ | | | | better cleanup of user files on user deletion
| * better cleanup of user files on user deletionRobin Appelman2021-04-271-13/+0
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Throw "401 Unauthenticated" when authentication is provided but invalidJoas Schilling2021-04-221-0/+2
|/ | | | | | E.g. with an AppToken that has been revoked Signed-off-by: Joas Schilling <coding@schilljs.com>
* Merge pull request #26161 from ↵Joas Schilling2021-03-173-5/+83
|\ | | | | | | | | nextcloud/bugfix/noid/improve-matching-of-phonebook-searches Improve search results when only phonebook-matches can we autocompleted
| * Fix parameter types in docsJoas Schilling2021-03-172-4/+4
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * Improve search results when only phonebook-matches can we autocompletedJoas Schilling2021-03-172-1/+79
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | dont allow creating users with __groupfolders as uidRobin Appelman2021-03-161-0/+1
|/ | | | | | Fixes https://github.com/nextcloud/groupfolders/issues/338 Signed-off-by: Robin Appelman <robin@icewind.nl>
* Fix RedundantPropertyInitializationCheckRoeland Jago Douma2021-03-091-2/+2
| | | | | | For #25839 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* token login: emit preLogin event with LoginNameLionel Elie Mamane2021-02-191-1/+1
| | | | | | to bring it in line with normal (non-token) login. Signed-off-by: Lionel Elie Mamane <lionel@mamane.lu>
* Cache the user backend info for 300sJoas Schilling2021-02-151-1/+24
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Merge pull request #24948 from nextcloud/dependabot/composer/doctrine/dbal-3.0.0Christoph Wurst2021-01-082-4/+4
|\ | | | | Bump doctrine/dbal from 2.12.0 to 3.0.0
| * Bump doctrine/dbal from 2.12.0 to 3.0.0Christoph Wurst2021-01-082-4/+4
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | allow authenticating using urlencoded passwordsRobin Appelman2021-01-071-0/+14
|/ | | | | | this allows authenticating with passwords that contain non ascii-characters in contexts that otherwise do not allow it (http basic) Signed-off-by: Robin Appelman <robin@icewind.nl>
* Update all license headers for Nextcloud 21Christoph Wurst2020-12-163-3/+3
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Fix typo Morris Jobke2020-12-041-1/+1
| | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Remember me is not an app_passwordRoeland Jago Douma2020-12-041-2/+12
| | | | | | | | While technically they are stored the same. This session variable is used to indicate that a user is using an app password to authenticate. Like from a client. Or when having it generated automatically. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Allow subscription to indicate that a userlimit is reachedMorris Jobke2020-12-021-0/+8
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Streamline user creation and deletion eventsMorris Jobke2020-11-232-4/+12
| | | | | | CreateUserEvent was the only one that didn't matched the naming scheme of BeforePASTTENSEEvent and PASTTENSEEvent. The event wasn't used at all so this just removes it again as there is BeforeUserCreatedEvent that is also available since 18. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Bearer must be in the start of the auth headerRoeland Jago Douma2020-11-061-3/+3
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Deprecate old user manager events for user creationMorris Jobke2020-11-041-0/+2
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Type the \OCP\IUserManager::callForSeenUsers closure with PsalmChristoph Wurst2020-10-281-0/+1
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Format code to a single space around binary operatorsChristoph Wurst2020-10-052-9/+9
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* add event to allow apps to overwrite user quotaRobin Appelman2020-09-171-1/+10
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Update license headers for Nextcloud 20 (again)Christoph Wurst2020-09-071-0/+1
| | | | | | | There are still lots of outdated headers, so time for another round of updates. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Return correct loginname in credentials,Lionel Elie Mamane2020-08-201-1/+3
| | | | | | | | | | | | | | | even when token is invalid or has no password. Returning the uid as loginname is wrong, and leads to problems when these differ. E.g. the getapppassword API was creating app token with the uid as loginname. In a scenario with external authentication (such as LDAP), these tokens were then invalidated next time their underlying password was checked, and systematically ceased to function. Co-authored-by: kesselb <mail@danielkesselberg.de> for: switch to consistent camelCase Signed-off-by: Lionel Elie Mamane <lionel@mamane.lu>
* Use matching parameter names form interfaces and implementationsMorris Jobke2020-08-191-4/+4
| | | | | | Found by Psalm 3.14.1 Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* User.php: rename of old dispatcher to legacyDispatcherMorris Jobke2020-07-301-11/+11
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Migrate OC_Group post_removeFromGroup hook to actual event objectMorris Jobke2020-07-301-2/+10
| | | | | | | | Ref #14552 This adds a BeforeUserRemovedEvent to the LDAP backend because it was missing. It's not really before, but we don't have the before state. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Log why a token is not valid during password checkChristoph Wurst2020-05-271-0/+4
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Update license headers for 19Christoph Wurst2020-04-292-1/+2
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Delete avatar if a user is deletedJulius Härtl2020-04-241-0/+5
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Revert "Make sure MySQL is not saying 'this' = 'this ' is true"Roeland Jago Douma2020-04-151-1/+1
|
* Make sure MySQL is not saying 'this' = 'this ' is trueJoas Schilling2020-04-151-1/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Format code according to PSR2Christoph Wurst2020-04-101-2/+2
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Add visibility to all constantsChristoph Wurst2020-04-101-9/+9
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Format control structures, classes, methods and functionChristoph Wurst2020-04-106-28/+21
| | | | | | | | | | | | | | | To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Use elseif instead of else ifChristoph Wurst2020-04-102-2/+2
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>