| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|\
| |
| | |
Issue/13451 redis json encode
|
| | |
|
|/
|
|
|
|
|
|
|
|
| |
\Sabre\DAV\Auth\Backend\AbstractBasic::authenticate was only calling \OC_Connector_Sabre_Auth::validateUserPass when the response of \Sabre\HTTP\BasicAuth::getUserPass was not null.
However, there is a case where the value can be null and the user could be authenticated anyways: The authentication via ownCloud web-interface and then accessing WebDAV resources. This was not possible anymore with this patch because it never reached the code path in this scenario.
This patchs allows authenticating with a session without isDavAuthenticated value stored (this is for ugly WebDAV clients that send the cookie in any case) and thus the functionality should work again.
To test this go to the admin settings and test if the WebDAV check works fine. Furthermore all the usual stuff (WebDAV / Shibboleth / etc...) needs testing as well.
|
| |
|
|\
| |
| |
| |
| | |
owncloud/reauthenticate-if-session-differs-from-basic-auth
Prioritise Basic Auth header over Cookie
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
There are a lot of clients that support multiple WebDAV accounts in the same application. However, they resent all the cookies they received from one of the accounts also to the other one. In the case of ownCloud this means that we will always show the user from the session and not the user that is specified in the basic authentication header.
This patch adds a workaround the following way:
1. If the user authenticates via the Sabre Auth Connector add a hint to the session that this was authorized via Basic Auth (this is to prevent logout CSRF)
2. If the request contains this hint and the username specified in the basic auth header differs from the one in the session relogin the user using basic auth
Fixes https://github.com/owncloud/core/issues/11400 and https://github.com/owncloud/core/issues/13245 and probably some other issues as well.
This requires proper testing also considering LDAP / Shibboleth and whatever instances.
|
|\ \
| | |
| | | |
set MySQL autocommit on connection setup
|
| | | |
|
|/ / |
|
| | |
|
|\ \
| | |
| | |
| | |
| | | |
owncloud/share-fixfindshareforuserwithmultiplegroups
Fix getItemSharedWithUser for groups
|
| | |
| | |
| | |
| | |
| | |
| | | |
Fixed SQL query for whenever a user has more than one group.
Added missing $owner where clause for group lookup.
Added unit tests for the group cases.
|
|\ \ \
| | | |
| | | | |
Reuse the array key of mimetypes
|
| | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | | |
This function is called a lot of times and was really slow before due to not reusing the same array.
Previously when it was called 500'000 times it took about 2seconds, now we're down to 0.2 seconds on my local machine.
Ref https://github.com/owncloud/core/issues/13434
|
|/ /
| |
| |
| |
| |
| |
| |
| | |
fixes #13363
Links:
* http://www.daveperrett.com/articles/2012/07/28/exif-orientation-handling-is-a-ghetto/
* Example data: https://github.com/recurser/exif-orientation-examples
|
| | |
|
|\ \
| | |
| | | |
replace line breaks in the app description by spaces - fixes #13315
|
| | |
| | |
| | |
| | |
| | |
| | | |
* replace line breaks (on non empty lines) in the app description by spaces
* fixes #13315
* includes unit tests
|
|\ \ \
| |_|/
|/| | |
Disable part files for OC ext storage backend + s2s backend
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
When uploading files to an OC ext storage backend or when using server
to server sharing storage, part files aren't needed because the backend
already has its own part files and takes care of the final atomic rename
operation.
This also fixes issues when using two encrypted ownCloud instances where
one mounts the other either as external storage (ownCloud backend) or
through server to server sharing.
|
|\ \ \
| | | |
| | | | |
Fix PHPDoc
|
| | | | |
|
|\ \ \ \
| |/ / /
|/| | | |
Mask table and column names with backticks and add lastInsertID() workar...
|
| | | | |
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Add PHPDoc for `urlParams`
|
| |/ / / |
|
|/ / /
| | |
| | |
| | |
| | |
| | | |
prefer url parameters passed into the main method. If they are not present, use the containers urlParameters
add space
|
|\ \ \
| | | |
| | | | |
Return valid fileinfo objects for part files
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Add a repair step to clean up orphan tags and tag entries
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Add PHPDoc for magic property 'server'
|
| | | | | | |
|
|\ \ \ \ \ \
| |/ / / / /
|/| | | | | |
Autoload app's js translations
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
|/ / / / / |
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
adapt decrypt all to the new folder structure
|
| | | | |
| | | | |
| | | | |
| | | | | |
for encryption key introduced with OC8
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Fix annotations in file view
|
| | | | | | |
|