summaryrefslogtreecommitdiffstats
path: root/lib/private/user.php
Commit message (Collapse)AuthorAgeFilesLines
* Remove OC_LogThomas Müller2015-07-031-4/+4
|
* update license headers and authorsMorris Jobke2015-06-251-0/+1
|
* Merge pull request #16499 from owncloud/fix-phpdoc-annotationsLukas Reschke2015-05-211-1/+1
|\ | | | | Fix PHPDoc :see_no_evil:
| * Fix PHPDoc :see_no_evil:Lukas Reschke2015-05-211-1/+1
| | | | | | | | *sigh*
* | wait with copying the skeleton untill login and setupfs are doneRobin Appelman2015-05-181-1/+4
|/
* Fix namespace duplication and other issues in repairlegacystoragesJoas Schilling2015-04-131-1/+1
|
* Update license headersJenkins for ownCloud2015-03-261-12/+30
|
* Revert "Updating license headers"Morris Jobke2015-02-261-31/+29
| | | | This reverts commit 6a1a4880f0d556fb090f19a5019fec31916f5c36.
* Fix namespace of OC_Setup -> \OC\SetupThomas Müller2015-02-231-1/+1
|
* Merge pull request #13829 from owncloud/appmanager-listVincent Petry2015-02-231-5/+36
|\ | | | | Better caching for enabled apps
| * also set user in UserSession when doing OC_User::setUserIdRobin Appelman2015-02-171-5/+36
| |
* | Updating license headersJenkins for ownCloud2015-02-231-29/+31
|/
* URLEncode logout attributeLukas Reschke2015-02-131-1/+1
| | | | Otherwise logout can fail if the requesttoken contains a +
* Fix WebDAV auth for session authentication onlyLukas Reschke2015-01-201-1/+1
| | | | | | | | | | \Sabre\DAV\Auth\Backend\AbstractBasic::authenticate was only calling \OC_Connector_Sabre_Auth::validateUserPass when the response of \Sabre\HTTP\BasicAuth::getUserPass was not null. However, there is a case where the value can be null and the user could be authenticated anyways: The authentication via ownCloud web-interface and then accessing WebDAV resources. This was not possible anymore with this patch because it never reached the code path in this scenario. This patchs allows authenticating with a session without isDavAuthenticated value stored (this is for ugly WebDAV clients that send the cookie in any case) and thus the functionality should work again. To test this go to the admin settings and test if the WebDAV check works fine. Furthermore all the usual stuff (WebDAV / Shibboleth / etc...) needs testing as well.
* Merge pull request #12923 from owncloud/ultra-slim-version-of-incognito-modeLukas Reschke2014-12-191-0/+7
|\ | | | | Add ultra-slim hack for incognito mode
| * Add ultra-slim hack for incognito modeLukas Reschke2014-12-171-0/+7
| | | | | | | | As discussed at https://github.com/owncloud/core/pull/12912#issuecomment-67391155
* | Merge pull request #12901 from owncloud/move-ldap-check-to-managerRobin McCorkell2014-12-181-3/+0
|\ \ | | | | | | Move the Null-Byte LDAP check to the user manager
| * | Move the Null-Byte LDAP check to the user managerLukas Reschke2014-12-171-3/+0
| |/ | | | | | | | | | | The existing method is deprecated and just a wrapper around the manager method. Since in the future other code paths might call this function instead we need to perform that check here. Related to http://owncloud.org/security/advisory/?id=oc-sa-2014-020
* / Move basic auth login out of `isLoggedIn`Lukas Reschke2014-12-171-5/+9
|/ | | | | | | | | | | | Potentially fixes https://github.com/owncloud/core/issues/12915 and opens the door for potential other bugs... Please test very carefully, this includes: - Testing from OCS via cURL (as in #12915) - Testing from OCS via browser (Open the "Von Dir geteilt" shares overview) - WebDAV - CalDAV - CardDAV
* Add filter for 'backend' to user REST routeLukas Reschke2014-12-101-0/+1
| | | | | | | | This adds a "backend" type filter to the index REST route which is a pre-requisite for https://github.com/owncloud/core/issues/12620 For example when calling `index.php/settings/users/users?offset=0&limit=10&gid=&pattern=&backend=OC_User_Database` only users within the backend `OC_User_Database` would be shown. (requires sending a CSRF token as well) Depends upon https://github.com/owncloud/core/pull/12711
* Add REST route for user & group managementLukas Reschke2014-12-081-20/+5
| | | | First step of a somewhat testable user management. - I know, the JSON returns are in an ugly format but the JS expects it that way. So let's keep it that way until we have time to fix the JS in the future.
* logging changesCraig Morrissey2014-11-071-0/+3
|
* Remove confusingly names \OC\User\Manager::delete and fix the automatic ↵Robin Appelman2014-11-051-3/+0
| | | | cache cleanup instead
* better variable nameArthur Schiwon2014-10-221-3/+4
|
* set up FS by username, not login name\!Arthur Schiwon2014-10-221-1/+1
|
* Move BasicAuth check to "isLoggedIn()"Lukas Reschke2014-09-181-3/+7
| | | | Ensures that Basic Auth works properly for APIs and removes the need for some even uglier lines of code.
* Use proper RNG generatorLukas Reschke2014-09-031-1/+1
| | | | | OC_Util::generateRandomBytes() only returns lowercase alphanumeric values. We should use the new RNG which has a broader characterset.
* Don't automatically setup the filesystem the moment we load OC\Files\FileSystemRobin Appelman2014-09-021-1/+5
|
* kill OC::$sessionJörn Friedrich Dreyer2014-08-291-4/+4
| | | | | | | | | | | | maintain deprecated \OC::$session when getting or setting the session via the server container or UserSession restore order os OC::$session and OC::$CLI remove unneded initialization of dummy session write back session when $useCustomSession is true log warning when deprecated app is used
* update deprecation docsJörn Friedrich Dreyer2014-08-141-1/+1
|
* Merge pull request #10144 from owncloud/issue/9972Thomas Müller2014-08-061-1/+1
|\ | | | | Issue/9972 Fix issues with group and username `0`
| * Fix isLoggedIn() check for user '0'Joas Schilling2014-08-041-1/+1
| | | | | | | | Fix #9972
* | Merge pull request #8443 from owncloud/csrf-on-login-and-logoutVincent Petry2014-06-021-1/+1
|\ \ | |/ |/| Add CSRF check on login and logout
| * Merge branch 'master' into csrf-on-login-and-logoutThomas Müller2014-05-191-34/+34
| |\ | | | | | | | | | | | | Conflicts: core/templates/login.php
| * | Add CSRF check on login and logoutLukas Reschke2014-05-041-1/+1
| | | | | | | | | | | | This is a minor issue and not worth a backport in my opinion as it could break more things than it's worth having it.
* | | clean up tryRememberLogin and save the timestamp of users last loginArthur Schiwon2014-05-211-0/+11
| |/ |/|
* | Remove all occurences of @brief and @returns from PHPDocMorris Jobke2014-05-191-29/+29
| | | | | | | | * test case added to avoid adding them later
* | Change parameter type for useBackendRobin McCorkell2014-05-131-1/+1
| |
* | Squash 'a | b' into 'a|b', in /libRobin McCorkell2014-05-131-1/+1
| |
* | Fix @return array PHPDocs, in /libRobin McCorkell2014-05-131-3/+3
| |
* | Replace @returns with @return, in /libRobin McCorkell2014-05-131-4/+4
|/
* Some more PHPDoc fixesLukas Reschke2014-04-211-2/+9
|
* Merge branch 'master' into load-apps-proper-masterThomas Müller2014-03-211-4/+10
|\ | | | | | | | | | | | | Conflicts: apps/files/ajax/rawlist.php cron.php ocs/v1.php
| * Move session_regenerate_id to `login()`Lukas Reschke2014-02-211-0/+1
| |
| * Merge pull request #6519 from nhirokinet/masterLukas Reschke2014-02-201-1/+0
| |\ | | | | | | Security Update: session fixation
| | * Update user.php to fix duplicate session-duplicatenhirokinet2013-12-221-1/+0
| | |
| * | Scrutinizer Auto-FixesScrutinizer Auto-Fixer2014-02-191-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch was automatically generated as part of the following inspection: https://scrutinizer-ci.com/g/owncloud/core/inspections/cdfecc4e-a37e-4233-8025-f0d7252a8720 Enabled analysis tools: - PHP Analyzer - JSHint - PHP Copy/Paste Detector - PHP PDepend
| * | Merge branch 'master' into scrutinizer_documentation_patchesThomas Müller2014-02-141-0/+3
| |\ \ | | | | | | | | | | | | | | | | Conflicts: lib/private/appconfig.php
| | * | Revert "Use Cache->clear to cleanup the filecache for removed users"Robin Appelman2014-02-031-10/+5
| | | | | | | | | | | | | | | | This reverts commit 5a5b6f187e719e6c0bac5e64c411eb74e6d28389.
| | * | Use Cache->clear to cleanup the filecache for removed usersRobin Appelman2014-01-221-5/+10
| | | |