aboutsummaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | feat(object_store): Add support for session token in AWS credentialsHector Valcarcel2025-02-061-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | - Pass session token, either null or with value, to the AWS Credentials constructor Signed-off-by: Hector Valcarcel <hmvalcarcel@gmail.com>
* | | | fix: No IFactory in constructorbugfix/50619/no-session-work-in-constructorMarcel Müller2025-03-051-3/+1
| | | | | | | | | | | | | | | | Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>
* | | | fix(files): Don't do session related work in the constructor of the ViewJoas Schilling2025-03-051-10/+10
| | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | | fix: use mb_strtolower to convert login namecase-insensitive-loginCleopatra Enjeck M.2025-03-051-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
* | | | fix: Improve string comparisonCleopatra Enjeck M.2025-03-051-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
* | | | fix: Use case insensitive check when validating login nameCleopatra Enjeck M.2025-03-051-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
* | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-03-052-0/+12
| |/ / |/| | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | Merge pull request #47686 from nextcloud/fix/move-email-logic-local-user-backendCôme Chilliet2025-03-045-180/+140
|\ \ \ | | | | | | | | fix: Move login via email logic to local backend
| * | | fix: Move login via email logic to local backendfix/move-email-logic-local-user-backendFerdinand Thiessen2025-03-035-180/+140
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Backends can decide which names they accept for login, e.g. with user_ldap you can configure arbitrary login fields. This was a hacky approach to allow login via email, so instead this is now only handled by the local user backend. This also fixes some other related problems: Other logic relys on `backend::get()` which was not handling email, so e.g. password policy could not block users logged in via email if they use out-dated passwords. Similar for other integrations, as the user backend was not consistent with what is a login name and what not. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | | Merge pull request #51073 from nextcloud/dbal-exception-queryRobin Appelman2025-03-042-6/+9
|\ \ \ \ | | | | | | | | | | feat: log query for dbal exceptions
| * | | | feat: log query for dbal exceptionsdbal-exception-queryRobin Appelman2025-02-262-6/+9
| | |_|/ | |/| | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | Merge pull request #51116 from nextcloud/enh/noid/nullable-rangeArthur Schiwon2025-03-041-1/+1
|\ \ \ \ | | | | | | | | | | feat(AppFramework): extend range check to optional parameters
| * | | | feat(AppFramework): extend range check to optional parametersenh/noid/nullable-rangeArthur Schiwon2025-02-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now it also applies when a paramater is documtend with a pending |null, but no further unionation is considered. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | | | | feat(appconfig): removing pre-migration checkenh/noid/clean-migration-check-appconfigMaxence Lange2025-03-041-42/+7
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
* | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-03-048-0/+14
| |_|/ / |/| | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | Merge pull request #51000 from nextcloud/fix/federatedfilesharing/group-cleanupStephan Orbaugh2025-03-037-30/+92
|\ \ \ \ | | | | | | | | | | fix(FederatedShareProvider): Delete external shares when groups are deleted or users removed from a group
| * | | | fix(Share20\Manager): Propagate user and group deletion to remote share ↵provokateurin2025-03-031-4/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | providers Signed-off-by: provokateurin <kate@provokateurin.de>
| * | | | fix(Share20): Convert broken hooks to IEventListenerprovokateurin2025-03-036-26/+76
| | | | | | | | | | | | | | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* | | | | refactor(TempManager): Simplify and unify implementations and remove legacy ↵refactor/tempmanagerprovokateurin2025-03-032-63/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | behavior Signed-off-by: provokateurin <kate@provokateurin.de>
* | | | | Merge pull request #51095 from nextcloud/artonge/fix/epehmeral_sessionsLouis2025-03-033-7/+11
|\ \ \ \ \ | | | | | | | | | | | | fix(login): Ephemeral sessions
| * | | | | fix(login): Support subfolder install for ephemeral sessionsartonge/fix/epehmeral_sessionsLouis Chemineau2025-02-271-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
| * | | | | fix(login): Also check legacy annotation for ephemeral sessionsLouis Chemineau2025-02-272-6/+7
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
* | | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-03-034-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | | | Merge pull request #51190 from nextcloud/pulsejet/truncate-1Varun Patil2025-03-023-0/+36
|\ \ \ \ \ \ | | | | | | | | | | | | | | feat(db): add truncateTable method
| * | | | | | feat(db): add truncateTable methodpulsejet/truncate-1Varun Patil2025-03-023-0/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Varun Patil <varunpatil@ucla.edu>
* | | | | | | Fix A+ rating when checking with Nextcloud Security Scan.backport/51173/masterDaleBCooper2025-03-021-7/+7
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | Due to commit 33d7019 session.cookie_secure=true is not set when accessing /status.php. This results in a degration from A+ to A rating due to missing __Host prefix for nc_sameSiteCookielax and nc_sameSiteCookiestrict cookies.
* | | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-03-024-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-03-012-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-03-018-0/+64
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | | | Merge pull request #50452 from nextcloud/chore/update-stubJoas Schilling2025-02-281-3/+3
|\ \ \ \ \ \ | | | | | | | | | | | | | | chore: update php intl stub and fix type issues
| * | | | | | fix: incorrect types detected by updated stubschore/update-stubFerdinand Thiessen2025-02-271-3/+3
| | |_|/ / / | |/| | | | | | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-02-28138-334/+168
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | | | Merge pull request #50908 from nextcloud/chore/server-annotationsFerdinand Thiessen2025-02-271-6/+4
|\ \ \ \ \ \ | |/ / / / / |/| | | | | chore: Adjust `OCP\Server::get` annotation to work with phpstan
| * | | | | chore: Adjust `OCP\Server::get` annotation to work with phpstanchore/server-annotationsFerdinand Thiessen2025-02-191-6/+4
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | | | | | Merge pull request #50999 from nextcloud/fix/move-away-from-oc-appCôme Chilliet2025-02-274-32/+21
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | fix: Replace OC_App calls by IAppManager
| * | | | | fix: Remove incorrect `@throws` annotations and move away from OC_Appfix/move-away-from-oc-appCôme Chilliet2025-02-241-19/+3
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | | | fix: Replace OC_App calls by IAppManagerCôme Chilliet2025-02-243-13/+18
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* | | | | | Merge pull request #51051 from nextcloud/artonge/fix/login_flow_v2_sessions_2Louis2025-02-276-61/+99
|\ \ \ \ \ \ | | | | | | | | | | | | | | feat: Close sessions created for login flow v2
| * | | | | | feat: Close sessions created for login flow v2artonge/fix/login_flow_v2_sessions_2Louis Chemineau2025-02-266-61/+99
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Sessions created during the login flow v2 should be short lived to not leave an unexpected opened session in the browser. This commit add a property to the session object to track its origin, and will close it as soon as possible, i.e., on the first non public page request. Signed-off-by: Louis Chemineau <louis@chmn.me>
* | | | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-02-27138-334/+334
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | | | | Merge pull request #51050 from nextcloud/artonge/fix/extra_files_integrity_checkLouis2025-02-261-2/+2
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | fix: Report duplicated extra files in integrity check
| * | | | | | | fix: Report duplicated extra files in integrity checkartonge/fix/extra_files_integrity_checkLouis Chemineau2025-02-261-2/+2
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The `array_diff` is not comparing the array keys. This means that an extra key with an expected hash will not be reported. Using `array_diff_assoc` will report such files. For example, copying `status.php` to `status 2.php`, will only be reported with the new version. Signed-off-by: Louis Chemineau <louis@chmn.me>
* / / / / / / fix(l10n): Improve english source stringsJoas Schilling2025-02-262-4/+4
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - No leading/trailing whitespace - Use asci single quote Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | | | | Fix(l10n): Update translations from TransifexNextcloud bot2025-02-264-20/+20
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nextcloud bot <bot@nextcloud.com>
* | | | | | fix(lint): correct comment identationenh/ldap-clearer-errorsAndy Scherzinger2025-02-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
* | | | | | Merge pull request #50764 from p1gp1g/patch-1Andy Scherzinger2025-02-251-0/+2
|\ \ \ \ \ \ | | | | | | | | | | | | | | Update doc comment for prefixTableName
| * | | | | | Update doc comment for prefixTableNameS1m2025-02-111-0/+2
| | | | | | | | | | | | | | | | | | | | | Signed-off-by: S1m <31284753+p1gp1g@users.noreply.github.com>
* | | | | | | feat: support migrating an instance to shardingsharding-existingRobin Appelman2025-02-255-18/+51
| |_|_|_|/ / |/| | | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | | | Merge pull request #50874 from nextcloud/artonge/fix/login_flow_v2_sessionsJulius Knorr2025-02-251-2/+2
|\ \ \ \ \ \ | | | | | | | | | | | | | | fix: Initialize lastConnectionCheck after first connection
| * | | | | | fix: Initialize lastConnectionCheck after first connectionartonge/fix/login_flow_v2_sessionsLouis Chemineau2025-02-191-2/+2
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We are checking whether the DB connection is alive once every 30 seconds. But when we are lacking the last check time, we are skipping the check and reconnect logic. This is causing the reconnect logic to never fire in those cases. It seems to me that "those cases", are actually always the case, as upon initialization, we are not using the proper connection name to store the time. In the `connect()` logic, when `$this->_conn` is null, `$this->getConnectionName()` is returning `replica`, so `$this->lastConnectionCheck` will be equal to `['replica' => time()];` https://github.com/nextcloud/server/blob/60711ea4cfde6f53d0b18bcd7e166a34a43056a5/lib/private/DB/Connection.php#L215-L221 https://github.com/nextcloud/server/blob/60711ea4cfde6f53d0b18bcd7e166a34a43056a5/lib/private/DB/Connection.php#L891-L893 https://github.com/nextcloud/3rdparty/blob/2b6d7bf65ff242ea050e736925f752a38d8da220/doctrine/dbal/src/Connections/PrimaryReadReplicaConnection.php#L136-L139 Then, if the connection name ends up as being 'primary', the reconnect logic is skipped: https://github.com/nextcloud/server/blob/60711ea4cfde6f53d0b18bcd7e166a34a43056a5/lib/private/DB/Connection.php#L874-L880 Follow-up of https://github.com/nextcloud/server/pull/41819 Signed-off-by: Louis Chemineau <louis@chmn.me>