aboutsummaryrefslogtreecommitdiffstats
path: root/tests
Commit message (Collapse)AuthorAgeFilesLines
...
* | | style: update codestyle for coding-standard 1.2.3Daniel Kesselberg2024-08-25110-4067/+4067
| | | | | | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | | perf: delay getting (sub)admin status for user in the security middleware ↵Robin Appelman2024-08-231-2/+15
| | | | | | | | | | | | | | | | | | untill we need it Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | feat(Security): Allow setting password context for validation and generationFerdinand Thiessen2024-08-222-0/+61
|/ / | | | | | | | | | | Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de> Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com> Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | Merge pull request #47259 from nextcloud/memcache-ncadRobin Appelman2024-08-211-0/+23
|\ \ | | | | | | feat: add negative compare-and-delete to imemcache
| * | feat: add negative compare-and-delete to imemcacheRobin Appelman2024-08-201-0/+23
| | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* | | ci: Skip flaky test on PHP 8.3Joas Schilling2024-08-211-0/+4
| | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | | fix: `FilenameValidator::isForbidden` should only check forbidden filesFerdinand Thiessen2024-08-211-17/+7
|/ / | | | | | | | | | | And not forbidden basenames as this is used for different purposes. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | refactor(Log): Use new in initializer instead of constructor bodyFerdinand Thiessen2024-08-171-7/+5
| | | | | | | | | | | | | | PHP 8.1 allows us to now move the `new` into the initializer, this makes the code a bit nicer (and 3 lines shorter). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
* | Merge branch 'master' into jr-readdir-false-falseJohn Molakvoæ2024-08-16651-24465/+14167
|\ \ | | | | | | Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
| * \ Merge pull request #43573 from nextcloud/HolgerHees-fix-csp-nonce-handlingFerdinand Thiessen2024-08-134-262/+267
| |\ \ | | | | | | | | Fix for ignored `CSP_NONCE` in ContentSecurity Header
| | * | feat: Provide CSP nonce as `<meta>` elementFerdinand Thiessen2024-08-131-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| | * | test: Adjust tests for CSP nonceFerdinand Thiessen2024-08-134-261/+267
| | | | | | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * | | feat(auth): Clean-up unused auth tokens and wipe tokensChristoph Wurst2024-08-131-11/+10
| | | | | | | | | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
| * | | fix(tests): Adapt tests to change of DefaultShareProvider constructorCôme Chilliet2024-08-121-6/+15
| |/ / | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | fix(SetupCheck): Properly check public access to data directoryFerdinand Thiessen2024-08-082-10/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When checking for public (web) access to the data directory the status is not enough as you might have a webserver that forwards to e.g. a login page. So instead check that the content of the file matches. For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content to allow checking. ¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * | fix(session): Log when session_* calls are slowChristoph Wurst2024-08-073-17/+17
| | | | | | | | | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
| * | fix: Fix failing test for group listingJulius Härtl2024-08-061-0/+6
| | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
| * | Merge pull request #46967 from nextcloud/fix/share-not-foundJohn Molakvoæ2024-08-061-2/+4
| |\ \
| | * | fix(files_sharing): show proper share not found error messageskjnldsv2024-08-061-2/+4
| | | | | | | | | | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
| * | | Merge pull request #46985 from nextcloud/feat/email-share-formatJohn Molakvoæ2024-08-063-20/+20
| |\ \ \
| | * | | fix: emails tests after new design fixesskjnldsv2024-08-063-20/+20
| | | | | | | | | | | | | | | | | | | | Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
| * | | | chore(tests): Adapt tests to the group:list changeCôme Chilliet2024-08-061-28/+32
| | |/ / | |/| | | | | | | | | | Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
| * | | fix: unify bundle namingJérôme Herbinet2024-08-061-1/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com> Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
| * | | chore: delete repair step for 8y old oc_mounts issueRobin Appelman2024-08-021-114/+0
| |/ / | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | chore: Remove deprecated legacy search backendJulius Härtl2024-08-011-2/+0
| | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
| * | Merge pull request #46476 from nextcloud/enh/noid/migration-attributesStephan Orbaugh2024-07-302-4/+386
| |\ \ | | | | | | | | Migration Attributes
| | * | feat(migration-attributes): testsMaxence Lange2024-07-292-4/+386
| | | | | | | | | | | | Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
| * | | feat(log): Allow to combine log.conditions to only log (app&user)Joas Schilling2024-07-301-0/+90
| | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| * | | Merge pull request #46379 from nextcloud/fix/folder-search-ownerFerdinand Thiessen2024-07-301-3/+11
| |\ \ \ | | |/ / | |/| | fix: `OCP\Files\Node\Folder::search` was not setting the owner
| | * | fix: `OCP\Files\Node\Folder::search` was not setting the ownerFerdinand Thiessen2024-07-111-3/+11
| | | | | | | | | | | | | | | | | | | | | | | | The owner was not set on the file info causing e.g. webdav searches to never return the known owner. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * | | Merge pull request #46760 from nextcloud/fix/appframework/csrf-custom-headerJohn Molakvoæ2024-07-271-0/+20
| |\ \ \
| | * | | fix(AppFramework): Allow requests with OCS-APIRequest header to pass CSRF checksprovokateurin2024-07-251-0/+20
| | | | | | | | | | | | | | | | | | | | Signed-off-by: provokateurin <kate@provokateurin.de>
| * | | | Merge pull request #46672 from nextcloud/fix/preview-invalid-idAndy Scherzinger2024-07-251-0/+1
| |\ \ \ \ | | |/ / / | |/| | | Avoid using partial file info as valid one
| | * | | fix: Ignore preview requests for invalid file idsJulius Härtl2024-07-221-0/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
| * | | | feat(TaskProcessing): Implement enums and default valuesMarcel Klehr2024-07-251-0/+96
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Marcel Klehr <mklehr@gmx.net>
| * | | | Merge pull request #46644 from nextcloud/cast-bigintFerdinand Thiessen2024-07-241-1/+3
| |\ \ \ \ | | | | | | | | | | | | fix: cast to bigint on postgresql
| | * | | | fix: cast to bigint on postgresqlRobin Appelman2024-07-231-1/+3
| | |/ / / | | | | | | | | | | | | | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
| * | | | Merge pull request #46418 from nextcloud/artonge/feat/user_admin_delegationLouis2024-07-241-8/+6
| |\ \ \ \ | | | | | | | | | | | | feat(users): Add users and group management to admin delegation
| | * | | | feat(users): Add support for admin delegation for users and groups managementLouis Chemineau2024-07-221-8/+6
| | |/ / / | | | | | | | | | | | | | | | Signed-off-by: Louis Chemineau <louis@chmn.me>
| * / / / feat: mail provider backendSebastianKrupinski2024-07-234-0/+469
| |/ / / | | | | | | | | | | | | Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
| * | | feat(taskprocessing): add support for webhooks (http or AppAPI) in the task ↵Julien Veyssier2024-07-221-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | processing API Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
| * | | Merge pull request #46571 from nextcloud/chore/migrate-to-filenamevalidatorStephan Orbaugh2024-07-221-9/+6
| |\ \ \ | | | | | | | | | | refactor: Migrate some legacy and core functions to `IFilenameValidator`
| | * | | refactor: Migrate some legacy and core functions to `IFilenameValidator`Ferdinand Thiessen2024-07-191-9/+6
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
| * | | | Merge pull request #46473 from nextcloud/feat/restrict_admin_to_ipsAndy Scherzinger2024-07-223-32/+118
| |\ \ \ \ | | |/ / / | |/| | | feat(security): restrict admin actions to IP ranges
| | * | | feat(security): Add public API to allow validating IP Ranges and checking ↵Joas Schilling2024-07-193-18/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | for "in range" Signed-off-by: Joas Schilling <coding@schilljs.com> Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
| | * | | feat(security): restrict admin actions to IP rangesBenjamin Gaussorgues2024-07-193-32/+115
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
| * | | | Merge pull request #46605 from nextcloud/bugfix/noid/test-more-oracle-versionsJoas Schilling2024-07-197-22/+21
| |\ \ \ \ | | |/ / / | |/| | | fix(deps): Deprecate functionality deprecated by doctrine and test on more oracle versions
| | * | | fix(test): Make the test less flakyJoas Schilling2024-07-191-0/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
| | * | | fix(db): Deprecate `IExpressionBuilder::or()` and ↵Joas Schilling2024-07-191-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | `IExpressionBuilder::and()` without parameters Signed-off-by: Joas Schilling <coding@schilljs.com>
| | * | | fix(db): Promote the use of `getDatabaseProvider` to reduce the impage of ↵Joas Schilling2024-07-195-20/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | removed upstream platforms Signed-off-by: Joas Schilling <coding@schilljs.com>