summaryrefslogtreecommitdiffstats
path: root/lib/private/user.php
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #12923 from owncloud/ultra-slim-version-of-incognito-modeLukas Reschke2014-12-191-0/+7
|\ | | | | Add ultra-slim hack for incognito mode
| * Add ultra-slim hack for incognito modeLukas Reschke2014-12-171-0/+7
| | | | | | | | As discussed at https://github.com/owncloud/core/pull/12912#issuecomment-67391155
* | Merge pull request #12901 from owncloud/move-ldap-check-to-managerRobin McCorkell2014-12-181-3/+0
|\ \ | | | | | | Move the Null-Byte LDAP check to the user manager
| * | Move the Null-Byte LDAP check to the user managerLukas Reschke2014-12-171-3/+0
| |/ | | | | | | | | | | The existing method is deprecated and just a wrapper around the manager method. Since in the future other code paths might call this function instead we need to perform that check here. Related to http://owncloud.org/security/advisory/?id=oc-sa-2014-020
* / Move basic auth login out of `isLoggedIn`Lukas Reschke2014-12-171-5/+9
|/ | | | | | | | | | | | Potentially fixes https://github.com/owncloud/core/issues/12915 and opens the door for potential other bugs... Please test very carefully, this includes: - Testing from OCS via cURL (as in #12915) - Testing from OCS via browser (Open the "Von Dir geteilt" shares overview) - WebDAV - CalDAV - CardDAV
* Add filter for 'backend' to user REST routeLukas Reschke2014-12-101-0/+1
| | | | | | | | This adds a "backend" type filter to the index REST route which is a pre-requisite for https://github.com/owncloud/core/issues/12620 For example when calling `index.php/settings/users/users?offset=0&limit=10&gid=&pattern=&backend=OC_User_Database` only users within the backend `OC_User_Database` would be shown. (requires sending a CSRF token as well) Depends upon https://github.com/owncloud/core/pull/12711
* Add REST route for user & group managementLukas Reschke2014-12-081-20/+5
| | | | First step of a somewhat testable user management. - I know, the JSON returns are in an ugly format but the JS expects it that way. So let's keep it that way until we have time to fix the JS in the future.
* logging changesCraig Morrissey2014-11-071-0/+3
|
* Remove confusingly names \OC\User\Manager::delete and fix the automatic ↵Robin Appelman2014-11-051-3/+0
| | | | cache cleanup instead
* better variable nameArthur Schiwon2014-10-221-3/+4
|
* set up FS by username, not login name\!Arthur Schiwon2014-10-221-1/+1
|
* Move BasicAuth check to "isLoggedIn()"Lukas Reschke2014-09-181-3/+7
| | | | Ensures that Basic Auth works properly for APIs and removes the need for some even uglier lines of code.
* Use proper RNG generatorLukas Reschke2014-09-031-1/+1
| | | | | OC_Util::generateRandomBytes() only returns lowercase alphanumeric values. We should use the new RNG which has a broader characterset.
* Don't automatically setup the filesystem the moment we load OC\Files\FileSystemRobin Appelman2014-09-021-1/+5
|
* kill OC::$sessionJörn Friedrich Dreyer2014-08-291-4/+4
| | | | | | | | | | | | maintain deprecated \OC::$session when getting or setting the session via the server container or UserSession restore order os OC::$session and OC::$CLI remove unneded initialization of dummy session write back session when $useCustomSession is true log warning when deprecated app is used
* update deprecation docsJörn Friedrich Dreyer2014-08-141-1/+1
|
* Merge pull request #10144 from owncloud/issue/9972Thomas Müller2014-08-061-1/+1
|\ | | | | Issue/9972 Fix issues with group and username `0`
| * Fix isLoggedIn() check for user '0'Joas Schilling2014-08-041-1/+1
| | | | | | | | Fix #9972
* | Merge pull request #8443 from owncloud/csrf-on-login-and-logoutVincent Petry2014-06-021-1/+1
|\ \ | |/ |/| Add CSRF check on login and logout
| * Merge branch 'master' into csrf-on-login-and-logoutThomas Müller2014-05-191-34/+34
| |\ | | | | | | | | | | | | Conflicts: core/templates/login.php
| * | Add CSRF check on login and logoutLukas Reschke2014-05-041-1/+1
| | | | | | | | | | | | This is a minor issue and not worth a backport in my opinion as it could break more things than it's worth having it.
* | | clean up tryRememberLogin and save the timestamp of users last loginArthur Schiwon2014-05-211-0/+11
| |/ |/|
* | Remove all occurences of @brief and @returns from PHPDocMorris Jobke2014-05-191-29/+29
| | | | | | | | * test case added to avoid adding them later
* | Change parameter type for useBackendRobin McCorkell2014-05-131-1/+1
| |
* | Squash 'a | b' into 'a|b', in /libRobin McCorkell2014-05-131-1/+1
| |
* | Fix @return array PHPDocs, in /libRobin McCorkell2014-05-131-3/+3
| |
* | Replace @returns with @return, in /libRobin McCorkell2014-05-131-4/+4
|/
* Some more PHPDoc fixesLukas Reschke2014-04-211-2/+9
|
* Merge branch 'master' into load-apps-proper-masterThomas Müller2014-03-211-4/+10
|\ | | | | | | | | | | | | Conflicts: apps/files/ajax/rawlist.php cron.php ocs/v1.php
| * Move session_regenerate_id to `login()`Lukas Reschke2014-02-211-0/+1
| |
| * Merge pull request #6519 from nhirokinet/masterLukas Reschke2014-02-201-1/+0
| |\ | | | | | | Security Update: session fixation
| | * Update user.php to fix duplicate session-duplicatenhirokinet2013-12-221-1/+0
| | |
| * | Scrutinizer Auto-FixesScrutinizer Auto-Fixer2014-02-191-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch was automatically generated as part of the following inspection: https://scrutinizer-ci.com/g/owncloud/core/inspections/cdfecc4e-a37e-4233-8025-f0d7252a8720 Enabled analysis tools: - PHP Analyzer - JSHint - PHP Copy/Paste Detector - PHP PDepend
| * | Merge branch 'master' into scrutinizer_documentation_patchesThomas Müller2014-02-141-0/+3
| |\ \ | | | | | | | | | | | | | | | | Conflicts: lib/private/appconfig.php
| | * | Revert "Use Cache->clear to cleanup the filecache for removed users"Robin Appelman2014-02-031-10/+5
| | | | | | | | | | | | | | | | This reverts commit 5a5b6f187e719e6c0bac5e64c411eb74e6d28389.
| | * | Use Cache->clear to cleanup the filecache for removed usersRobin Appelman2014-01-221-5/+10
| | | |
| | * | Also remove the user's home storage from the storage table when deleting a userRobin Appelman2014-01-211-0/+3
| | | |
| * | | polish documentation based on scrutinizer patchesJörn Friedrich Dreyer2014-02-061-3/+4
| |/ /
* / / Within OC:init() the minimum set of apps is loaded - which is filesystem, ↵Thomas Müller2014-02-061-2/+0
|/ / | | | | | | authentication and logging
* / set login name within apache auth backendThomas Müller2014-01-091-0/+2
|/
* return false if user is in incognito modeBjoern Schiessle2013-11-271-2/+2
|
* Merge pull request #6058 from owncloud/ldap2avatarblizzz2013-11-261-0/+16
|\ | | | | Set Avatar for LDAP users automatically (if a picture is available)
| * Enable user backends to provide avatar imagesArthur Schiwon2013-11-221-0/+16
| |
* | add incognito mode, allows to hide my user ID. For example, this is useful ↵Bjoern Schiessle2013-11-221-1/+13
|/ | | | to access public resources while a user is still logged in
* use getHome() to delete users dataBjoern Schiessle2013-10-291-3/+3
|
* remove user from cache if he was deleted successfullyBjoern Schiessle2013-10-291-9/+16
|
* Fix logout link HTML.Andreas Fischer2013-10-141-1/+1
| | | | <a id="logout" href=/projects/owncloud/core/index.php?logout=true>
* User::delete should return boolVictor Dubiniuk2013-10-071-0/+4
|
* Move backend finding into its own method.Andreas Fischer2013-10-071-16/+26
|
* move call to print_unescaped() to templateThomas Müller2013-10-071-1/+1
|