aboutsummaryrefslogtreecommitdiffstats
path: root/lib/private/legacy
Commit message (Collapse)AuthorAgeFilesLines
* fix(OC_Files): Fix error response when `event` was not setbackport/50549/stable29Ferdinand Thiessen2025-01-311-4/+8
| | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* fix(Auth): ignore missing token when trying to set password-unconfirmablebackport/48484/stable29Arthur Schiwon2024-10-011-6/+14
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* fix: Do not try to set HTTP response code on already closed connectionbackport/47971/stable29Côme Chilliet2024-09-141-1/+2
| | | | | | | | | This avoids a PHP warning in the logs about trying to set the response code while the output already started. It’s useless to try to print an error page anyway in this situation because the connection was closed already. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* fix: gracefully handle unexpected exif orientation typesRichard Steinmetz2024-08-271-9/+15
| | | | Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
* fix(previews): Don't crash on animated WEBP imagesJosh Richards2024-08-061-2/+49
| | | | | | | | | Fixes #30029 and #37263 libgd handles animated WEBP images poorly and generates a meaningless error message as a result. We were returning a 500 error for these preview requests (web) and a fatal error at the command-line (occ). Now we bypass libgd if the we detect an animated WEBP image (and simply don't generate the preview). No more 500 error. Should fix occ too. Signed-off-by: Josh Richards <josh.t.richards@gmail.com> Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
* fix(previews): Stop returning true when getimagesize() failsJosh Richards2024-07-161-3/+3
| | | | Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
* fix(Token): add FILESYSTEM scope with SCOPE_SKIP_PASSWORD_VALIDATIONArthur Schiwon2024-06-241-1/+4
| | | | | | | | | | The scope design requires scopes to be either not specified, or specified explicitely. Therefore, when setting the skip-password-validation scope for user authentication from mechanisms like SAML, we also have to set the filesystem scope, otherwise they will lack access to the filesystem. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* fix(Token): make new scope future compatibleArthur Schiwon2024-06-121-1/+1
| | | | | | | - "password-unconfirmable" is the effective name for 30, but a draft name was backported. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* fix(Session): avoid password confirmation on SSOArthur Schiwon2024-06-111-0/+9
| | | | | | | | | | | SSO backends like SAML and OIDC tried a trick to suppress password confirmations as they are not possible by design. At least for SAML it was not reliable when existing user backends where used as user repositories. Now we are setting a special scope with the token, and also make sure that the scope is taken over when tokens are regenerated. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* fix(OC_Image): Set correct return type for exif_imagetype stubprovokateurin2024-05-061-1/+1
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* fix: Apply new coding standard to all filesCôme Chilliet2024-04-044-7/+7
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* fix(preview): webp preview formatRichard Steinmetz2024-03-261-0/+26
| | | | Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
* fix(logging): Restore the option to log with debug levelJoas Schilling2024-03-221-2/+2
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* fix: Implement option to temporarily set the user sessionJulius Härtl2024-03-191-1/+2
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Merge pull request #40127 from ↵John Molakvoæ2024-03-152-2/+6
|\ | | | | | | summersab/refactor/OC-Server-getTwoFactorAuthManager
| * Refactor `OC\Server::getTwoFactorAuthManager`Andrew Summers2024-03-152-2/+6
| | | | | | | | Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>
* | Merge branch 'master' into refactor/OC-Server-getRootFolderJohn Molakvoæ2024-03-159-80/+102
|\| | | | | Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
| * Merge pull request #43996 from nextcloud/feat/store-last-known-quota-usageCôme Chilliet2024-03-071-0/+5
| |\ | | | | | | feat: Store last known quota usage for a user
| | * fix: Avoid calling setUserValue on null user idCôme Chilliet2024-03-061-1/+1
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| | * feat: Store last known quota usage for a userCôme Chilliet2024-03-061-0/+5
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | fix: Remove calls to deprecated OC_JSON::encodeCôme Chilliet2024-03-063-16/+4
| |/ | | | | | | | | | | | | | | to_string was useless because L10N string is json serializable now and serialize to string correctly. Removed all external calls to OC_JSON::encode to ease removing the rest of it later. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * fix: Enforce forbidden filename characters on backendFerdinand Thiessen2024-02-281-2/+2
| | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * Merge branch 'master' into fix/42480/user-admin-not-adminJohn Molakvoæ2024-02-241-20/+55
| |\ | | | | | | Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
| | * feat: theme error pageRichard Steinmetz2024-02-241-9/+36
| | | | | | | | | | | | Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
| | * feat: Print early exceptions in debug mode instead of plain error pagesJulius Härtl2024-02-231-11/+19
| | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
| * | fix(admin role): fix old and wrong way to determine whether user is adminArthur Schiwon2024-02-191-11/+11
| |/ | | | | | | | | | | | | | | | | - fixes Settings knowing who is an admin of non-local group backend groups - obsoletes and removes a little old, deprecated code - double checks proper parameter type on Group\Manager::isAdmin - also fixes legacy OC_User code to check whether user is an admin Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * feat: rename users to account or personVincent Petry2024-02-132-3/+3
| | | | | | | | | | | | Replace translated text in most locations Signed-off-by: Vincent Petry <vincent@nextcloud.com>
| * chore: Deprecate OC_App::loadApps and add missing return type in ServerCôme Chilliet2024-02-081-0/+2
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * chore: use DI for \OC\RepairCôme Chilliet2024-01-301-1/+1
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * chore: Cleanup Installer class as wellCôme Chilliet2024-01-291-3/+1
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * fix: Use DI for Setup class and move away from deprecated methodsCôme Chilliet2024-01-291-9/+1
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * lazy AppConfigMaxence Lange2024-01-151-2/+4
| | | | | | Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
| * chore: apply changes from Nextcloud coding standards 1.1.1Joas Schilling2023-11-233-11/+11
| | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
| * refactor: Repalce array_search with in_array in lib/Christoph Wurst2023-11-222-2/+2
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Refactor `OC\Server::getRootFolder`Andrew Summers2023-11-101-2/+3
|/ | | | Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>
* Merge pull request #39852 from nextcloud/pragmaHeaderFerdinand Thiessen2023-10-181-1/+0
|\ | | | | Stop sending deprecated Pragma header
| * Stop sending deprecated Pragma headerGit'Fellow2023-08-281-1/+0
| | | | | | | | Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
* | Convert isset ternary to null coalescing operatorHamid Dehnavi2023-09-281-1/+1
| | | | | | | | Signed-off-by: Hamid Dehnavi <hamid.dev.pro@gmail.com>
* | Remove deprecated methods Util::writeLog and DIContainer::logCôme Chilliet2023-09-252-12/+11
| | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* | Merge pull request #39216 from shdehnavi/replace_substr_calls_in_lib_privateRobin Appelman2023-09-211-1/+1
|\ \ | | | | | | Refactor "substr" calls in lib/private to improve code readability
| * | Refactor "substr" calls to improve code readabilityHamid Dehnavi2023-07-071-1/+1
| | | | | | | | | | | | Signed-off-by: Hamid Dehnavi <hamid.dev.pro@gmail.com>
* | | fix(autoloader): no apcu no side effectsArthur Schiwon2023-09-081-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apcu lead to side effects especially with app management and (soft) inter-dependencies, and lead also to 500 server errors. While we could add management to clear apcu cache in many cases (may stil leave edge cases) the performance benefit is marginally as also class maps are already cached in opcache. Hence, the simple and effective way to go is to not use apcu for autoloading. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | | Detect aborted connection in OC\Files\View and stop writing data to the ↵Benjamin Gaussorgues2023-09-071-0/+4
| |/ |/| | | | | | | | | output buffer Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* | Merge pull request #39888 from nextcloud/less-container-queriesJoas Schilling2023-08-181-7/+12
|\ \ | | | | | | Reduce the number of container queries
| * | better caching in storage stats calculationsRobin Appelman2023-08-181-7/+12
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | add separate event for rendering login page templateRobin Appelman2023-08-171-1/+0
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | move core script loading from static template to event listenerRobin Appelman2023-08-171-39/+0
|/ / | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Fix lintGit'Fellow2023-08-131-1/+0
| | | | | | Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
* | Remove check for very old PGsql Git'Fellow2023-08-131-39/+0
| | | | | | Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
* | Merge pull request #39605 from nextcloud/bugfix/noid/final-events-cleanupJoas Schilling2023-08-041-1/+1
|\ \ | | | | | | fix!: Final round of moving to IEventDispatcher