aboutsummaryrefslogtreecommitdiffstats
path: root/tests/lib/Authentication
Commit message (Collapse)AuthorAgeFilesLines
* chore: run rector on tests with new rulerector-testsRobin Appelman2025-06-121-7/+7
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* chore: run rector on testsRobin Appelman2025-06-128-34/+38
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* test: Fix coding standardsci/noid/update-phpunit10Joas Schilling2025-05-155-6/+5
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* test: Remove more withConsecutiveJoas Schilling2025-05-1517-91/+166
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Merge pull request #51130 from nextcloud/fix/credential-passwordless-authJulius Knorr2025-03-071-0/+40
|\ | | | | fix: Do not build encrypted password if there is none
| * fix: Do not build encrypted password if there is nonefix/credential-passwordless-authJulius Knorr2025-03-061-0/+40
| | | | | | | | Signed-off-by: Julius Knorr <jus@bitgrid.net>
* | fix: Move login via email logic to local backendfix/move-email-logic-local-user-backendFerdinand Thiessen2025-03-031-148/+0
|/ | | | | | | | | | | | | | | | | | Backends can decide which names they accept for login, e.g. with user_ldap you can configure arbitrary login fields. This was a hacky approach to allow login via email, so instead this is now only handled by the local user backend. This also fixes some other related problems: Other logic relys on `backend::get()` which was not handling email, so e.g. password policy could not block users logged in via email if they use out-dated passwords. Similar for other integrations, as the user backend was not consistent with what is a login name and what not. Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* fix: Handle exception when clearing previously removed two factor tokensclear-pending-two-factor-tokens-also-from-configurationDaniel Calviño Sánchez2024-11-051-0/+32
| | | | | | | | If a token was already removed from the database but not from the configuration clearing the tokens will try to remove it again from the database, which caused a DoesNotExistException to be thrown. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* fix: Clear pending two factor tokens also from configurationDaniel Calviño Sánchez2024-11-051-0/+26
| | | | | | | | | Otherwise as the tokens were removed from the database but not from the configuration the next time that the tokens were cleared the previous tokens were still got from the configuration, and trying to remove them again from the database ended in a DoesNotExistException being thrown. Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
* fix: crypto type made not nullable and tests run using ICryptoyemkareems2024-10-281-5/+4
| | | | Signed-off-by: yemkareems <yemkareems@gmail.com>
* fix: encrypt and store password, decrypt and retrieve the sameyemkareems2024-10-281-3/+20
| | | | Signed-off-by: yemkareems <yemkareems@gmail.com>
* chore(deps): Update nextcloud/coding-standard to v1.3.1provokateurin2024-09-191-4/+4
| | | | Signed-off-by: provokateurin <kate@provokateurin.de>
* refactor: Add void return type to PHPUnit test methodsChristoph Wurst2024-09-1532-192/+192
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* style: update codestyle for coding-standard 1.2.3Daniel Kesselberg2024-08-251-1/+1
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* feat(auth): Clean-up unused auth tokens and wipe tokensChristoph Wurst2024-08-131-11/+10
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* refactor(Token): introduce scope constantsArthur Schiwon2024-06-051-2/+3
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* chore: Add SPDX headerAndy Scherzinger2024-05-1334-623/+69
| | | | Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
* Refactor `OC\Server::getHasher`Andrew Summers2024-03-151-1/+1
| | | | Signed-off-by: Andrew Summers <18727110+summersab@users.noreply.github.com>
* feat(perf): add cache for authtoken lookupBenjamin Gaussorgues2024-02-282-17/+13
| | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* AppAPI: allowed to bypass Two-FactorAlexander Piskun2023-12-281-4/+19
| | | | Signed-off-by: Alexander Piskun <bigcat88@icloud.com>
* chore: apply changes from Nextcloud coding standards 1.1.1Joas Schilling2023-11-231-1/+1
| | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
* Add tests for occ user:auth-tokens:deleteLucas Azevedo2023-08-253-6/+44
| | | | Signed-off-by: Lucas Azevedo <lhs_azevedo@hotmail.com>
* Fix various deprecation warnings in tests on PHP 8.3Côme Chilliet2023-08-141-0/+3
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* fix!: Remove legacy event dispatching Symfony's GenericEvent from 2FA ManagerJoas Schilling2023-07-271-11/+4
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fix event names of 2FA related typed eventsJoas Schilling2023-07-031-2/+20
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Adapt tests to config value typingCôme Chilliet2023-04-052-5/+12
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* unit tests for Manager::invalidateTokensOfUserArtur Neumann2023-03-141-0/+44
| | | | Signed-off-by: Artur Neumann <artur@jankaritech.com>
* Fix unit testsJoas Schilling2023-02-091-47/+42
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* composer run cs:fixCôme Chilliet2023-01-2028-29/+0
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* PublickKeyTokenProvider: Fix password update routine with password hashMarcel Klehr2023-01-041-0/+2
| | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net>
* Fix PublicKeyTokenProviderTest import and mockChristoph Wurst2022-11-101-4/+2
| | | | | | | * IDBConnection import missing * Atomic doesn't need a mock Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Skip general login with email for non-valid addresses and LDAPJulius Härtl2022-10-261-2/+3
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Run session token renewals in a database transactionChristoph Wurst2022-10-181-2/+18
| | | | | | | | | | | | | The session token renewal does 1) Read the old token 2) Write a new token 3) Delete the old token If two processes succeed to read the old token there can be two new tokens because the queries were not run in a transaction. This is particularly problematic on clustered DBs where 1) would go to a read node and 2) and 3) go to a write node. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Merge pull request #31499 from nextcloud/bugfix/empty-secretCarl Schwan2022-10-171-3/+15
|\ | | | | Add fallback routines for empty secret cases
| * Fix unit testsCarl Schwan2022-03-101-3/+15
| | | | | | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | Handle one time password betterCarl Schwan2022-07-281-1/+9
| | | | | | | | Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | Handler large passwordsCarl Schwan2022-07-051-0/+19
| | | | | | | | | | | | | | | | | | | | | | For passwords bigger than 250 characters, use a bigger key since the performance impact is minor (around one second to encrypt the password). For passwords bigger than 470 characters, give up earlier and throw exeception recommanding admin to either enable the previously enabled configuration or use smaller passwords. Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | Handle one time passwordsCarl Schwan2022-07-051-4/+56
| | | | | | | | | | | | | | | | This adds an option to disable storing passwords in the database. This might be desirable when using single use token as passwords or very large passwords. Signed-off-by: Carl Schwan <carl@carlschwan.eu>
* | Fix user agent trimming on installationJoas Schilling2022-05-091-2/+7
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | Automatically cut the token name on the first levelJoas Schilling2022-03-231-0/+31
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | Fix unit testsJoas Schilling2022-03-232-73/+58
|/ | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* More test fixingJoas Schilling2021-12-012-4/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* More test fixingJoas Schilling2021-12-012-235/+6
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* More unit test adjustmentsJoas Schilling2021-12-014-878/+0
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fix test class namesCôme Chilliet2021-11-232-2/+2
| | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
* Prevent duplicate auth token activity updatesChristoph Wurst2021-10-221-7/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | The auth token activity logic works as follows * Read auth token * Compare last activity time stamp to current time * Update auth token activity if it's older than x seconds This works fine in isolation but with concurrency that means that occasionally the same token is read simultaneously by two processes and both of these processes will trigger an update of the same row. Affectively the second update doesn't add much value. It might set the time stamp to the exact same time stamp or one a few seconds later. But the last activity is no precise science, we don't need this accuracy. This patch changes the UPDATE query to include the expected value in a comparison with the current data. This results in an affected row when the data in the DB still has an old time stamp, but won't affect a row if the time stamp is (nearly) up to date. This is a micro optimization and will possibly not show any significant performance improvement. Yet in setups with a DB cluster it means that the write node has to send fewer changes to the read nodes due to the lower number of actual changes. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Fix Authentication testJoas Schilling2021-04-221-4/+5
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Move 2FA registration to IBootstrapRoeland Jago Douma2021-04-201-1/+38
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Fix unit testRoeland Jago Douma2021-04-1613-15/+14
| | | | | | | | | * Fix namespace * Fix test Was broken after https://github.com/nextcloud/server/pull/26529 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Add real events for enabled 2fa providers for usersRoeland Jago Douma2021-03-221-0/+7
| | | | | | | * Shiny new events * Listener to still emit the old event Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
generated by cgit v1.2.3 (git 2.39.1) at 2025-07-22 20:14:13 +0000