Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge pull request #12923 from owncloud/ultra-slim-version-of-incognito-mode | Lukas Reschke | 2014-12-19 | 1 | -0/+7 |
|\ | | | | | Add ultra-slim hack for incognito mode | ||||
| * | Add ultra-slim hack for incognito mode | Lukas Reschke | 2014-12-17 | 1 | -0/+7 |
| | | | | | | | | As discussed at https://github.com/owncloud/core/pull/12912#issuecomment-67391155 | ||||
* | | Merge pull request #12901 from owncloud/move-ldap-check-to-manager | Robin McCorkell | 2014-12-18 | 1 | -3/+0 |
|\ \ | | | | | | | Move the Null-Byte LDAP check to the user manager | ||||
| * | | Move the Null-Byte LDAP check to the user manager | Lukas Reschke | 2014-12-17 | 1 | -3/+0 |
| |/ | | | | | | | | | | | The existing method is deprecated and just a wrapper around the manager method. Since in the future other code paths might call this function instead we need to perform that check here. Related to http://owncloud.org/security/advisory/?id=oc-sa-2014-020 | ||||
* / | Move basic auth login out of `isLoggedIn` | Lukas Reschke | 2014-12-17 | 1 | -5/+9 |
|/ | | | | | | | | | | | | Potentially fixes https://github.com/owncloud/core/issues/12915 and opens the door for potential other bugs... Please test very carefully, this includes: - Testing from OCS via cURL (as in #12915) - Testing from OCS via browser (Open the "Von Dir geteilt" shares overview) - WebDAV - CalDAV - CardDAV | ||||
* | Add filter for 'backend' to user REST route | Lukas Reschke | 2014-12-10 | 1 | -0/+1 |
| | | | | | | | | This adds a "backend" type filter to the index REST route which is a pre-requisite for https://github.com/owncloud/core/issues/12620 For example when calling `index.php/settings/users/users?offset=0&limit=10&gid=&pattern=&backend=OC_User_Database` only users within the backend `OC_User_Database` would be shown. (requires sending a CSRF token as well) Depends upon https://github.com/owncloud/core/pull/12711 | ||||
* | Add REST route for user & group management | Lukas Reschke | 2014-12-08 | 1 | -20/+5 |
| | | | | First step of a somewhat testable user management. - I know, the JSON returns are in an ugly format but the JS expects it that way. So let's keep it that way until we have time to fix the JS in the future. | ||||
* | logging changes | Craig Morrissey | 2014-11-07 | 1 | -0/+3 |
| | |||||
* | Remove confusingly names \OC\User\Manager::delete and fix the automatic ↵ | Robin Appelman | 2014-11-05 | 1 | -3/+0 |
| | | | | cache cleanup instead | ||||
* | better variable name | Arthur Schiwon | 2014-10-22 | 1 | -3/+4 |
| | |||||
* | set up FS by username, not login name\! | Arthur Schiwon | 2014-10-22 | 1 | -1/+1 |
| | |||||
* | Move BasicAuth check to "isLoggedIn()" | Lukas Reschke | 2014-09-18 | 1 | -3/+7 |
| | | | | Ensures that Basic Auth works properly for APIs and removes the need for some even uglier lines of code. | ||||
* | Use proper RNG generator | Lukas Reschke | 2014-09-03 | 1 | -1/+1 |
| | | | | | OC_Util::generateRandomBytes() only returns lowercase alphanumeric values. We should use the new RNG which has a broader characterset. | ||||
* | Don't automatically setup the filesystem the moment we load OC\Files\FileSystem | Robin Appelman | 2014-09-02 | 1 | -1/+5 |
| | |||||
* | kill OC::$session | Jörn Friedrich Dreyer | 2014-08-29 | 1 | -4/+4 |
| | | | | | | | | | | | | maintain deprecated \OC::$session when getting or setting the session via the server container or UserSession restore order os OC::$session and OC::$CLI remove unneded initialization of dummy session write back session when $useCustomSession is true log warning when deprecated app is used | ||||
* | update deprecation docs | Jörn Friedrich Dreyer | 2014-08-14 | 1 | -1/+1 |
| | |||||
* | Merge pull request #10144 from owncloud/issue/9972 | Thomas Müller | 2014-08-06 | 1 | -1/+1 |
|\ | | | | | Issue/9972 Fix issues with group and username `0` | ||||
| * | Fix isLoggedIn() check for user '0' | Joas Schilling | 2014-08-04 | 1 | -1/+1 |
| | | | | | | | | Fix #9972 | ||||
* | | Merge pull request #8443 from owncloud/csrf-on-login-and-logout | Vincent Petry | 2014-06-02 | 1 | -1/+1 |
|\ \ | |/ |/| | Add CSRF check on login and logout | ||||
| * | Merge branch 'master' into csrf-on-login-and-logout | Thomas Müller | 2014-05-19 | 1 | -34/+34 |
| |\ | | | | | | | | | | | | | Conflicts: core/templates/login.php | ||||
| * | | Add CSRF check on login and logout | Lukas Reschke | 2014-05-04 | 1 | -1/+1 |
| | | | | | | | | | | | | This is a minor issue and not worth a backport in my opinion as it could break more things than it's worth having it. | ||||
* | | | clean up tryRememberLogin and save the timestamp of users last login | Arthur Schiwon | 2014-05-21 | 1 | -0/+11 |
| |/ |/| | |||||
* | | Remove all occurences of @brief and @returns from PHPDoc | Morris Jobke | 2014-05-19 | 1 | -29/+29 |
| | | | | | | | | * test case added to avoid adding them later | ||||
* | | Change parameter type for useBackend | Robin McCorkell | 2014-05-13 | 1 | -1/+1 |
| | | |||||
* | | Squash 'a | b' into 'a|b', in /lib | Robin McCorkell | 2014-05-13 | 1 | -1/+1 |
| | | |||||
* | | Fix @return array PHPDocs, in /lib | Robin McCorkell | 2014-05-13 | 1 | -3/+3 |
| | | |||||
* | | Replace @returns with @return, in /lib | Robin McCorkell | 2014-05-13 | 1 | -4/+4 |
|/ | |||||
* | Some more PHPDoc fixes | Lukas Reschke | 2014-04-21 | 1 | -2/+9 |
| | |||||
* | Merge branch 'master' into load-apps-proper-master | Thomas Müller | 2014-03-21 | 1 | -4/+10 |
|\ | | | | | | | | | | | | | Conflicts: apps/files/ajax/rawlist.php cron.php ocs/v1.php | ||||
| * | Move session_regenerate_id to `login()` | Lukas Reschke | 2014-02-21 | 1 | -0/+1 |
| | | |||||
| * | Merge pull request #6519 from nhirokinet/master | Lukas Reschke | 2014-02-20 | 1 | -1/+0 |
| |\ | | | | | | | Security Update: session fixation | ||||
| | * | Update user.php to fix duplicate session-duplicate | nhirokinet | 2013-12-22 | 1 | -1/+0 |
| | | | |||||
| * | | Scrutinizer Auto-Fixes | Scrutinizer Auto-Fixer | 2014-02-19 | 1 | -0/+2 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch was automatically generated as part of the following inspection: https://scrutinizer-ci.com/g/owncloud/core/inspections/cdfecc4e-a37e-4233-8025-f0d7252a8720 Enabled analysis tools: - PHP Analyzer - JSHint - PHP Copy/Paste Detector - PHP PDepend | ||||
| * | | Merge branch 'master' into scrutinizer_documentation_patches | Thomas Müller | 2014-02-14 | 1 | -0/+3 |
| |\ \ | | | | | | | | | | | | | | | | | Conflicts: lib/private/appconfig.php | ||||
| | * | | Revert "Use Cache->clear to cleanup the filecache for removed users" | Robin Appelman | 2014-02-03 | 1 | -10/+5 |
| | | | | | | | | | | | | | | | | This reverts commit 5a5b6f187e719e6c0bac5e64c411eb74e6d28389. | ||||
| | * | | Use Cache->clear to cleanup the filecache for removed users | Robin Appelman | 2014-01-22 | 1 | -5/+10 |
| | | | | |||||
| | * | | Also remove the user's home storage from the storage table when deleting a user | Robin Appelman | 2014-01-21 | 1 | -0/+3 |
| | | | | |||||
| * | | | polish documentation based on scrutinizer patches | Jörn Friedrich Dreyer | 2014-02-06 | 1 | -3/+4 |
| |/ / | |||||
* / / | Within OC:init() the minimum set of apps is loaded - which is filesystem, ↵ | Thomas Müller | 2014-02-06 | 1 | -2/+0 |
|/ / | | | | | | | authentication and logging | ||||
* / | set login name within apache auth backend | Thomas Müller | 2014-01-09 | 1 | -0/+2 |
|/ | |||||
* | return false if user is in incognito mode | Bjoern Schiessle | 2013-11-27 | 1 | -2/+2 |
| | |||||
* | Merge pull request #6058 from owncloud/ldap2avatar | blizzz | 2013-11-26 | 1 | -0/+16 |
|\ | | | | | Set Avatar for LDAP users automatically (if a picture is available) | ||||
| * | Enable user backends to provide avatar images | Arthur Schiwon | 2013-11-22 | 1 | -0/+16 |
| | | |||||
* | | add incognito mode, allows to hide my user ID. For example, this is useful ↵ | Bjoern Schiessle | 2013-11-22 | 1 | -1/+13 |
|/ | | | | to access public resources while a user is still logged in | ||||
* | use getHome() to delete users data | Bjoern Schiessle | 2013-10-29 | 1 | -3/+3 |
| | |||||
* | remove user from cache if he was deleted successfully | Bjoern Schiessle | 2013-10-29 | 1 | -9/+16 |
| | |||||
* | Fix logout link HTML. | Andreas Fischer | 2013-10-14 | 1 | -1/+1 |
| | | | | <a id="logout" href=/projects/owncloud/core/index.php?logout=true> | ||||
* | User::delete should return bool | Victor Dubiniuk | 2013-10-07 | 1 | -0/+4 |
| | |||||
* | Move backend finding into its own method. | Andreas Fischer | 2013-10-07 | 1 | -16/+26 |
| | |||||
* | move call to print_unescaped() to template | Thomas Müller | 2013-10-07 | 1 | -1/+1 |
| |