summaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* Add --admin-email to cli installerDaniel Kesselberg2018-10-021-0/+9
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Merge pull request #11390 from nextcloud/feature/11043/apptoken_v3Morris Jobke2018-10-029-3/+106
|\ | | | | Apptoken v3: imrpove token handling on external password change
| * Add testsRoeland Jago Douma2018-10-021-1/+4
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * Update all the publickey tokens if needed on web loginRoeland Jago Douma2018-10-026-1/+52
| | | | | | | | | | | | | | | | | | | | * On weblogin check if we have invalid public key tokens * If so update them all with the new token This ensures that your marked as invalid tokens work again if you once login on the web. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * Mark token as invalid if the password doesn't matchRoeland Jago Douma2018-10-026-3/+50
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
| * Add column to DB to store expired passwordsRoeland Jago Douma2018-10-022-0/+2
| | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Merge pull request #11336 from nextcloud/bugfix/3342/database-name-prefix-sqliteMorris Jobke2018-10-022-8/+44
|\ \ | | | | | | Allow --database-name and --database-table-prefix for sqlite from occ
| * | Use empty instead ?? because dbname is '' sometimesDaniel Kesselberg2018-09-231-2/+7
| | | | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
| * | Use const for dbname and dbtableprefix defaultsDaniel Kesselberg2018-09-232-8/+41
| | | | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
| * | --database-name or --database-table-prefix are ignored for sqliteDaniel Kesselberg2018-09-231-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The default implementation of initialize in AbstractDatabase writes database information to config.php. The method is overwritten in Sqlite but parent is never called. Database-Name and Database-Table-Prefix are never written to config.php. But from this point setup use values from config. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | | Make logfile's mode configurable.Roland Tapken2018-10-021-2/+5
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | The file logger currently resets the mode of the logfile to 0640. When the webserver is running as a different user than the cron job (but both are in the same group) the files mode has to be 0660. The current implementation breaks logging for the user that is not the owner of the logfile. This patch introduces a new config option 'logfilemode' that expects an octal value (defaults to 0640). Unless the value is lower or equal than 0 the logfiles mode will be resetted to this value. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* | Merge pull request #11433 from nextcloud/feature/all_lax_cookies2Christoph Wurst2018-10-024-4/+108
|\ \ | | | | | | Make authenticated cookies lax
| * | Make authenticated cookies laxRoeland Jago Douma2018-09-284-4/+108
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This protects our cookies a bit more. It makes sure that when a 3rdparty websites embededs a public alendar for example. That all the users see this in anonymous mode there. It adds a small helper function. In the future we can think about protecting other cookies like this as well. But for now this is sufficient to not have the user logged in at all when doing 3rdparty requests. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | Document possibly thrown excption of QBMapper::insertOrUpdateChristoph Wurst2018-10-021-0/+1
| | | | | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | | Add QBMapper::insertOrUpdate()Christoph Wurst2018-10-021-1/+18
| | | | | | | | | | | | | | | | | | | | | | | | This allows elegant upserts where the entity ID is provided (e.g. by an external system) and when that data is fed into our database multiple times. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | | [tx-robot] updated from transifexNextcloud bot2018-10-022-0/+30
| | |
* | | Let 2FA providers provide their custom icons (dark/light)Christoph Wurst2018-10-013-0/+57
| | | | | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | | Emit event on enablign or disabling of 2FA providerRoeland Jago Douma2018-10-015-1/+83
| | | | | | | | | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | | Merge pull request #11461 from ↵Morris Jobke2018-10-011-14/+1
|\ \ \ | | | | | | | | | | | | | | | | nextcloud/feature/noid/drop-find-and-pass-additional-paths Dont use find to lookup binaries
| * | | Dont use find to lookup binariesDaniel Kesselberg2018-09-291-14/+1
| |/ / | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* / / Add mandatory 2FA service/classChristoph Wurst2018-09-304-2/+64
|/ / | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | [tx-robot] updated from transifexNextcloud bot2018-09-282-0/+8
| |
* | Compile contactmenu handlebars templatesRoeland Jago Douma2018-09-271-0/+1
| | | | | | | | | | | | | | | | | | | | Fixes #11029 For https://github.com/orgs/nextcloud/projects/18 Ship the compiled handlebars templates. This makes it possible to have a scricter CSP. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | Remove unused constructor argumentChristoph Wurst2018-09-272-7/+0
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Reduce settings manager complexity by loading sections via DIChristoph Wurst2018-09-272-91/+31
| | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | [tx-robot] updated from transifexNextcloud bot2018-09-272-2/+2
| |
* | Merge pull request #11150 from nextcloud/feature/noid/unit-test-find-webrootblizzz2018-09-261-11/+31
|\ \ | | | | | | Extract logic for webroot into method and add test
| * | Change visibility to privateDaniel Kesselberg2018-09-131-1/+1
| | | | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
| * | Change return false to throw newDaniel Kesselberg2018-09-101-5/+12
| | | | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
| * | Extract logic for webroot into method and add testDaniel Kesselberg2018-09-101-9/+22
| | | | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | | [tx-robot] updated from transifexNextcloud bot2018-09-262-6/+6
| | |
* | | Merge pull request #11240 from ↵Morris Jobke2018-09-251-2/+2
|\ \ \ | | | | | | | | | | | | | | | | nextcloud/feature/noid/consider-openssl-settings-from-config.php Consider openssl settings from config.php
| * | | Consider openssl settings from config.phpDaniel Kesselberg2018-09-161-2/+2
| | | | | | | | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | | | Merge pull request #11316 from nextcloud/container-queryexception-onlyRoeland Jago Douma2018-09-251-7/+1
|\ \ \ \ | | | | | | | | | | only catch QueryException when trying to build class
| * | | | only catch QueryException when trying to build classRobin Appelman2018-09-211-7/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | | | Only allow 2FA state changs if providers support the operationChristoph Wurst2018-09-258-25/+170
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ref https://github.com/nextcloud/server/issues/11019. Add `twofactorauth:cleanup` command Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | | | | Merge pull request #11297 from nextcloud/bugfix/noid/this-database-dudeRoeland Jago Douma2018-09-252-3/+3
|\ \ \ \ \ | | | | | | | | | | | | Copy the expiration from 480864b3e32d88361b17b70d238f986f64579757 to …
| * | | | | Also adjust the expiration of PublicKeyTokenProviderJoas Schilling2018-09-201-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * | | | | Copy the expiration from 480864b3e32d88361b17b70d238f986f64579757 to ↵Joas Schilling2018-09-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | getTokenById Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | | | | [tx-robot] updated from transifexNextcloud bot2018-09-254-26/+36
| | | | | |
* | | | | | Merge pull request #11222 from nextcloud/gs-and-samlblizzz2018-09-241-1/+1
|\ \ \ \ \ \ | | | | | | | | | | | | | | make the server ready to use global scale with SAML as auth back-end
| * | | | | | add back-end as parameter to the pre-login hookBjoern Schiessle2018-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is needed for the Global Scale setup to allow the master node to perform different operations during login, depending on the user management. Because in case of SAML, the authentication at the idp happens at the master node. Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
* | | | | | | [tx-robot] updated from transifexNextcloud bot2018-09-242-38/+38
| |_|_|_|_|/ |/| | | | |
* | | | | | [tx-robot] updated from transifexNextcloud bot2018-09-232-0/+4
| | | | | |
* | | | | | [tx-robot] updated from transifexNextcloud bot2018-09-224-40/+54
| |_|/ / / |/| | | |
* | | | | [tx-robot] updated from transifexNextcloud bot2018-09-212-4/+6
| | | | |
* | | | | Merge pull request #11292 from ↵blizzz2018-09-191-2/+0
|\ \ \ \ \ | |_|/ / / |/| | | | | | | | | | | | | | nextcloud/revert/9442/do-not-apcu-cache-the-autoloader Revert "Use APCu caching of composer"
| * | | | Revert "Use APCu caching of composer"Joas Schilling2018-09-191-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 948ab8a4d06b3821ab94c11a3a04c820e60d6c8a. For details why see https://github.com/nextcloud/server/issues/11290
* | | | | Merge pull request #11134 from nextcloud/locale-template-fixJoas Schilling2018-09-193-2/+34
|\ \ \ \ \ | | | | | | | | | | | | Use user locale as default in the template
| * | | | | Fix since tagJohn Molakvoæ (skjnldsv)2018-09-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>