isEnabled()) { $this->throwInvalidTokenException(InvalidTokenException::USER_UNKNOWN); } $encryptedToken = $this->config->getUserValue($user->getUID(), 'core', $subject, null); if ($encryptedToken === null) { $this->throwInvalidTokenException(InvalidTokenException::TOKEN_NOT_FOUND); } try { $decryptedToken = $this->crypto->decrypt($encryptedToken, $passwordPrefix . $this->config->getSystemValueString('secret')); } catch (\Exception $e) { // Retry with empty secret as a fallback for instances where the secret might not have been set by accident try { $decryptedToken = $this->crypto->decrypt($encryptedToken, $passwordPrefix); } catch (\Exception $e2) { $this->throwInvalidTokenException(InvalidTokenException::TOKEN_DECRYPTION_ERROR); } } $splitToken = explode(':', $decryptedToken); if (count($splitToken) !== 2) { $this->throwInvalidTokenException(InvalidTokenException::TOKEN_INVALID_FORMAT); } if ($splitToken[0] < ($this->timeFactory->getTime() - self::TOKEN_LIFETIME) || ($expiresWithLogin && $user->getLastLogin() > $splitToken[0])) { $this->throwInvalidTokenException(InvalidTokenException::TOKEN_EXPIRED); } if (!hash_equals($splitToken[1], $token)) { $this->throwInvalidTokenException(InvalidTokenException::TOKEN_MISMATCH); } } public function create( IUser $user, string $subject, string $passwordPrefix = '', ): string { $token = $this->secureRandom->generate( 21, ISecureRandom::CHAR_DIGITS . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER ); $tokenValue = $this->timeFactory->getTime() . ':' . $token; $encryptedValue = $this->crypto->encrypt($tokenValue, $passwordPrefix . $this->config->getSystemValueString('secret')); $this->config->setUserValue($user->getUID(), 'core', $subject, $encryptedValue); $jobArgs = json_encode([ 'userId' => $user->getUID(), 'subject' => $subject, 'pp' => $passwordPrefix, 'notBefore' => $this->timeFactory->getTime() + self::TOKEN_LIFETIME * 2, // multiply to provide a grace period ]); $this->jobList->add(CleanUpJob::class, $jobArgs); return $token; } public function delete(string $token, IUser $user, string $subject): void { $this->config->deleteUserValue($user->getUID(), 'core', $subject); } } login Nextcloud server, a safe home for all your data: https://github.com/nextcloud/serverwww-data
aboutsummaryrefslogtreecommitdiffstats
path: root/apps/files_versions/composer/composer.lock
blob: fd0bcbcb75366231c08403f8bf92a60ac366a990 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
{
    "_readme": [
        "This file locks the dependencies of your project to a known state",
        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
        "This file is @generated automatically"
    ],
    "content-hash": "d751713988987e9331980363e24189ce",
    "packages": [],
    "packages-dev": [],
    "aliases": [],
    "minimum-stability": "stable",
    "stability-flags": [],
    "prefer-stable": false,
    "prefer-lowest": false,
    "platform": [],
    "platform-dev": [],
    "plugin-api-version": "2.1.0"
}