summaryrefslogtreecommitdiffstats
path: root/lib/private
Commit message (Collapse)AuthorAgeFilesLines
* Correctly handle Redis::keys returning falseCôme Chilliet2022-09-301-1/+1
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Merge pull request #33750 from nextcloud/backport/33734/stable23blizzz2022-09-281-1/+1
|\ | | | | [stable23] remove leading slash for search results at mountpoint root
| * remove leading slash for search results at mountpoint rootRobin Appelman2022-08-301-1/+1
| | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Merge pull request #33786 from nextcloud/backport/33772/stable23blizzz2022-09-271-0/+8
|\ \ | | | | | | [stable23] Log if cookie login failed with token mismatch or session unavailability
| * | Log if cookie login failed with token mismatch or session unavailabilityChristoph Wurst2022-09-011-0/+8
| | | | | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | | Merge pull request #34102 from nextcloud/backport/33700/stable23Vincent Petry2022-09-271-0/+10
|\ \ \ | | | | | | | | [stable23] make groupfolders use system wide encryption keys
| * | | make groupfolders use system wide encryption keysRobin Appelman2022-09-151-0/+10
| | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | dont try email login if the provider username is not a valid emailRobin Appelman2022-09-161-0/+3
|/ / / | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Merge pull request #33982 from nextcloud/backport/33788/stable23Carl Schwan2022-09-131-27/+55
|\ \ \ | | | | | | | | [stable23] Improve getting recent files performance
| * | | Filter out old files when trying to get recent filesCarl Schwan2022-09-081-27/+55
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Only do so when asking for less than 100 files and having an offset equal to 0. Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | | Do not empty config.php file if reading failed for any reasonszaimen2022-09-121-0/+4
|/ / / | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> Signed-off-by: szaimen <szaimen@e.mail.de>
* | | Revert "[stable23] Compare lowercase email when updating from ldap"blizzz2022-09-071-1/+1
| | |
* | | I dug into it again, and the issue is much simpler than I previously though.Louis Chemineau2022-09-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - LDAP has an email address with capital letters - NC store this address in lower case - When the user logs in, we compare the [stored email with the new lower case email](https://github.com/nextcloud/server/blob/master/lib/private/AllConfig.php#L259-L261) before storing it. Here, both email will be the same, so we won't store the new email address with upper case letters. Which is what we want. - We then [compare emails as they are before triggering an event](https://github.com/nextcloud/server/blob/master/lib/private/User/User.php#L202-L204), they won't match, so the user will receive an email signaling an email change every time he logs in. The fix is to compare the old email with the new lower case email before sending the event. Signed-off-by: Louis Chemineau <louis@chmn.me>
* | | Merge pull request #32985 from nextcloud/backport/32242/stable23blizzz2022-09-012-14/+24
|\ \ \ | |/ / |/| | [stable23] Fix logging data context to file
| * | Fix logging data context to fileThomas Citharel2022-08-302-14/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was only logged when an exception was provided or when using logData (which is not being much used). We make sure the interpolated parameters are not logged. Only tested with file write logger, but shouldn't work differently. Crash reporters always had the context. Signed-off-by: Thomas Citharel <tcit@tcit.fr>
* | | Merge pull request #33763 from nextcloud/backport/33603/stable23blizzz2022-08-311-5/+7
|\ \ \ | | | | | | | | [stable23] optimize search post-processing for jail wrapper
| * | | optimize search post-processing for jail wrapperRobin Appelman2022-08-301-5/+7
| |/ / | | | | | | | | | | | | | | | don't both asking the wrapped cache if we know it's not in our jail anyway Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | Merge pull request #32751 from nextcloud/backport/32744/stable23Joas Schilling2022-08-301-1/+2
|\ \ \ | |/ / |/| | [stable23] Always log errors from sending federation api requests to ease debugging
| * | Always log errors from sending federation api requests to ease debuggingJoas Schilling2022-08-021-1/+2
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | Merge pull request #33515 from nextcloud/backport/33513/stable23blizzz2022-08-301-4/+17
|\ \ \ | |_|/ |/| | [stable23] Recover installation when creating the database user fails and improve password strength
| * | Create more secure passwords by defaultJoas Schilling2022-08-121-4/+10
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * | Recover installation when creating the user failedJoas Schilling2022-08-121-0/+7
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | logger ignore args of sharepoint-related methodsArthur Schiwon2022-08-251-0/+5
|/ / | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | Do not update passwords if nothing changedJulius Härtl2022-08-091-3/+6
| | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* | Merge pull request #33443 from nextcloud/backport/33407/stable23blizzz2022-08-041-3/+6
|\ \ | | | | | | [stable23] Handle one time and large passwords
| * | Handle one time and large passwordsCarl Schwan2022-08-031-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For passwords bigger than 250 characters, use a bigger key since the performance impact is minor (around one second to encrypt the password). For passwords bigger than 470 characters, give up earlier and throw exeception recommanding admin to either enable the previously enabled configuration or use smaller passwords. This adds an option to disable storing passwords in the database. This might be desirable when using single use token as passwords or very large passwords. Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | Merge pull request #33354 from nextcloud/backport/33031/stable23blizzz2022-08-032-2/+199
|\ \ \ | |/ / |/| | [stable23] Improve local IP detection
| * | Remove call to undefined function, fix typingCôme Chilliet2022-08-011-22/+11
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | Align copied file with our code styleCôme Chilliet2022-08-011-184/+178
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | Copy IpUtils from Symfony to avoid new dependency on backportCôme Chilliet2022-08-012-0/+203
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | Use Symfony IpUtils to check for local IP rangesCôme Chilliet2022-07-261-3/+6
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | Check for local IPs nested in IPv6 as wellCôme Chilliet2022-07-261-1/+3
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | Refactor local IP if and set strict to true for in_arrayCôme Chilliet2022-07-261-6/+6
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | Improve local IP detectionCôme Chilliet2022-07-261-0/+6
| | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* | | Merge pull request #33156 from nextcloud/backport/32997/stable23blizzz2022-08-013-13/+25
|\ \ \ | | | | | | | | [stable23] load dashboard widgets of enabled apps only
| * | | fix PHP 7.3 compatArthur Schiwon2022-08-011-2/+5
| | | | | | | | | | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * | | avoid early DI of IAppManagerArthur Schiwon2022-07-271-4/+7
| | | | | | | | | | | | | | | | | | | | | | | | - might break install Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * | | load widgets only of enabled appsArthur Schiwon2022-07-273-13/+19
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - per design, all enabled apps have their registration run - limitations, e.g. enabled by group, are not considered in that state, because we do not have a session (and might need apps?) - before instantiation of widget it has to be checked whether the providing app is actually enabled for the logged in user. - a public interface is being changed, but it is not meant to be implemented or used outside of the core handling. Therefore save to backport. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* / / don't set `null` as a bundle pathRobin Appelman2022-07-271-3/+6
|/ / | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | Merge pull request #33253 from nextcloud/backport/32963/stable23blizzz2022-07-222-12/+24
|\ \ | | | | | | [stable23] also use nextcloud certificate bundle when downloading from s3
| * | only use nextcloud bundle when explicitly enabledRobin Appelman2022-07-182-10/+15
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | also use nextcloud certificate bundle when downloading from s3Robin Appelman2022-07-182-10/+17
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | fix loading legacy app.php with multi app dirArthur Schiwon2022-07-191-1/+1
|/ / | | | | | | | | | | | | | | | | | | - requireAppFile() only appends /appinfo/app.php - without the absolute path, require_once looks into include_path - the first match in inlcude_path however migth be different from appPath - fixed by providing the tested(!), full path to the app Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | Merge pull request #33158 from nextcloud/backport/33153/stable23John Molakvoæ2022-07-081-4/+4
|\ \
| * | Only ignore attempts of the same actionJoas Schilling2022-07-071-4/+4
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | Merge pull request #32987 from nextcloud/backport/stable23/31771blizzz2022-07-071-13/+22
|\ \ \ | |/ / |/| | [stable23] Fix hook encryption with cron job
| * | Fix hook encryption with cron jobCarl Schwan2022-07-061-13/+22
| | | | | | | | | | | | | | | | | | | | | | | | Make sure the setup fs is set before using the Update service Backport of #29674 Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | | Merge pull request #33114 from nextcloud/backport/stable23/31194Carl Schwan2022-07-072-4/+17
|\ \ \ | | | | | | | | [stable23] Allow to disable password policy enforcement for selected groups
| * | | Allow to disable password policy enforcement for selected groupsCarl Schwan2022-07-052-4/+17
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu> Co-authored-by: Vincent Petry <vincent@nextcloud.com> Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
* | | | Do not save invalid display name to the databaseChristopher Ng2022-07-061-0/+4
| | | | | | | | | | | | | | | | Signed-off-by: Christopher Ng <chrng8@gmail.com>