summaryrefslogtreecommitdiffstats
path: root/lib/private/connector
Commit message (Collapse)AuthorAgeFilesLines
* prevent 0 byte downloads when storage returns falseJörn Friedrich Dreyer2015-12-181-2/+5
| | | | | | add unit test More fixes for backport
* Check for file existence before doing a DAV copyVincent Petry2015-08-311-0/+3
| | | | Partial backport of f39fcbc250c3817e0c62627b127cf31a70dca36a from 8.1
* Remove unneeded part fileMorris Jobke2015-07-061-0/+7
|
* Properly handle NotPermittedException in SabreDAVMorris Jobke2015-07-021-0/+4
|
* block webdav in single user modeRobin Appelman2015-05-061-0/+3
|
* Fix permission checks in Sabre connectorVincent Petry2015-03-261-6/+15
| | | | | This fixes moving files in and out of shared folders with some exotic permission combinations.
* DAV authentication: also use Owncloud's internal user for short-circuitChristian Seiler2015-02-231-1/+1
| | | | | It still works otherwise, but without this, the performance optimization of #13416 is defeated in these situations.
* DAV authentication: use Owncloud's internal user instead of HTTP-supplied oneChristian Seiler2015-02-231-2/+5
| | | | Fixes: #14048, #14104, calendar#712
* Revert "adding OC-ETag header"Vincent Petry2015-02-053-20/+15
| | | | This reverts commit 96a931929ea837a40a7e9b836252587c949a8127.
* Fix webdav put for single file webdav sharesRobin Appelman2015-01-291-3/+3
|
* let init() take an INode - fixes PHP messageThomas Müller2015-01-271-2/+2
|
* Fix WebDAV auth for session authentication onlyLukas Reschke2015-01-201-2/+4
| | | | | | | | | | \Sabre\DAV\Auth\Backend\AbstractBasic::authenticate was only calling \OC_Connector_Sabre_Auth::validateUserPass when the response of \Sabre\HTTP\BasicAuth::getUserPass was not null. However, there is a case where the value can be null and the user could be authenticated anyways: The authentication via ownCloud web-interface and then accessing WebDAV resources. This was not possible anymore with this patch because it never reached the code path in this scenario. This patchs allows authenticating with a session without isDavAuthenticated value stored (this is for ugly WebDAV clients that send the cookie in any case) and thus the functionality should work again. To test this go to the admin settings and test if the WebDAV check works fine. Furthermore all the usual stuff (WebDAV / Shibboleth / etc...) needs testing as well.
* Close session properlyLukas Reschke2015-01-191-0/+1
|
* Prioritise Basic Auth header over CookieLukas Reschke2015-01-171-11/+32
| | | | | | | | | | | | | There are a lot of clients that support multiple WebDAV accounts in the same application. However, they resent all the cookies they received from one of the accounts also to the other one. In the case of ownCloud this means that we will always show the user from the session and not the user that is specified in the basic authentication header. This patch adds a workaround the following way: 1. If the user authenticates via the Sabre Auth Connector add a hint to the session that this was authorized via Basic Auth (this is to prevent logout CSRF) 2. If the request contains this hint and the username specified in the basic auth header differs from the one in the session relogin the user using basic auth Fixes https://github.com/owncloud/core/issues/11400 and https://github.com/owncloud/core/issues/13245 and probably some other issues as well. This requires proper testing also considering LDAP / Shibboleth and whatever instances.
* remove unused variable and fix undefined variableThomas Müller2015-01-081-5/+4
|
* Disable part files for OC ext storage backend + s2s backendVincent Petry2015-01-071-28/+61
| | | | | | | | | | | When uploading files to an OC ext storage backend or when using server to server sharing storage, part files aren't needed because the backend already has its own part files and takes care of the final atomic rename operation. This also fixes issues when using two encrypted ownCloud instances where one mounts the other either as external storage (ownCloud backend) or through server to server sharing.
* Improve debugging for ServiceUnavailable exceptionsChris Wilson2015-01-061-8/+8
| | | | | | | | | | | | | I was getting a lot of these in my logs for no apparent reason, and file uploads were failing: {"app":"webdav","message":"Sabre\\DAV\\Exception\\ServiceUnavailable: ","level":4,"time":"2015-01-06T15:33:39+00:00"} In order to debug it, I had to add unique messages to all the places where this exception was thrown, to identify which one it was, and that made the logs much more useful: {"app":"webdav","message":"Sabre\\DAV\\Exception\\ServiceUnavailable: Encryption is disabled","level":4,"time":"2015-01-06T15:36:47+00:00"}
* Use namespaceLukas Reschke2015-01-051-2/+18
|
* Write unit-tests and use DILukas Reschke2015-01-051-24/+37
|
* Fix code-styleLukas Reschke2015-01-051-2/+4
|
* fix "app":"PHP","message":"Undefined variable: user at/principal.php#66"derkostka2015-01-041-1/+1
| | | changed variable #user to #name
* adding getDirectDownload() to WrapperThomas Müller2014-12-281-2/+2
|
* Adding basement for the direct download urlThomas Müller2014-12-282-0/+23
|
* Merge pull request #12865 from owncloud/files-tags-webdavMorris Jobke2014-12-195-7/+431
|\ | | | | Returns tags through WebDAV
| * Fix code style issues for tags pluginVincent Petry2014-12-183-6/+4
| |
| * Remove obsolete methodVincent Petry2014-12-181-8/+0
| |
| * Returns and update tags through WebDAV PROPFIND and PROPPATCHVincent Petry2014-12-175-7/+441
| | | | | | | | | | | | | | Added oc:tags and oc:favorites in PROPFIND response. It is possible to update them with PROPPATCH. These properties are optional which means they need to be requested explicitly
* | Add getMountPoint to FileInfoRobin Appelman2014-12-172-3/+5
|/
* Fix namespace of Files_Encryption outside of the appJoas Schilling2014-12-091-2/+2
|
* Fix type hinting for app managerRobin Appelman2014-11-181-4/+4
|
* Add sabredav plugin to check if a user has access to an appRobin Appelman2014-11-171-0/+75
|
* Return real mime type on PROPFINDVincent Petry2014-11-111-0/+4
| | | | Return the real (insecure) mime type on PROPFIND
* Merge pull request #12072 from ↵Vincent Petry2014-11-104-114/+156
|\ | | | | | | | | owncloud/sabre-convertstoragenotavailableexception-secondtry Convert StorageNotAvailableException to SabreDAV exception
| * Convert StorageNotAvailableException to SabreDAV exceptionVincent Petry2014-11-104-114/+156
| | | | | | | | | | | | | | | | | | Convert \OCP\Files\StorageNotAvailableException to \Sabre\DAV\Exception\ServiceUnavailable for every file/directory operation happening inside of SabreDAV. This is necessary to avoid having the exception bubble up to remote.php which would return an exception page instead of an appropriate response.
* | clean up encryption exceptionsBjoern Schiessle2014-11-071-2/+2
|/
* throw exception if private key is missingBjoern Schiessle2014-11-051-1/+7
|
* fix odd behaviourMorris Jobke2014-10-311-4/+8
|
* Merge pull request #9044 from owncloud/add-missing-email-principalVincent Petry2014-10-311-0/+12
|\ | | | | adding missing email address for principal
| * adding missing email address for principallibasys2014-10-241-0/+12
| | | | | | | | | | * fix #8515 * add mail only if it exists
* | Properly catch 503 storage not available in getQuotaInfoVincent Petry2014-10-271-7/+11
|/ | | | | | | When doing a PROPFIND on the root and one of the mount points is not available, the returned quota attributes will now be zero. This fix prevents the expected exception to make the whole call fail.
* Use the cached fileinfo to get creatable permissionsRobin Appelman2014-10-131-1/+1
|
* Fix dav permissions for folders without create permissionsRobin Appelman2014-09-251-1/+1
|
* Merge pull request #11215 from owncloud/dav-throwwhendeletefailedMorris Jobke2014-09-232-2/+9
|\ | | | | WebDAV now throws 403 when deletion did not work
| * WebDAV now throws 403 when deletion did not workVincent Petry2014-09-222-2/+9
| | | | | | | | | | | | | | | | Assume a permission issue whenever a file could not be deleted. This is because some storages are not able to return permissions, so a permission denied situation can only be triggered during direct deletion.
* | Merge pull request #10499 from owncloud/mkcol-headers-afterbindThomas Müller2014-09-221-1/+1
|\ \ | |/ |/| Use afterBind to send fileId header for files and directories
| * Use afterBind to send fileId header for files and directoriesVincent Petry2014-08-181-1/+1
| | | | | | | | | | afterBind is called for both files and directories and is now used to send the OC-FileId headers.
* | Conceal or display SabreDAV version number in browser and http response headers.scolebrook2014-09-161-0/+8
| |
* | content size checks are not valid for LOCKThomas Müller2014-09-121-1/+1
| |
* | fix BadRequest error if CONTENT_LENGTH not setchli12014-09-041-5/+8
| | | | | | If client does not send content length header on webdav upload (e.g. because the content comes from a stream and its length is not predictable) the put() method should not try to compare the content length value with the actually amount of received data, because this will always fail and results in a BadRequest exception. So the check will only be performed if $_SERVER['CONTENT_LENGTH'] is set.
* | Merge pull request #10723 from owncloud/webdav-folder-sizeClark Tomlinson2014-09-032-2/+17
|\ \ | | | | | | adding new webdav property containing the folder size