Micke Nordin
1bad4fe238
fix: Make sodium optional
...
This commit switches the default signature algorithm to
ecdsa-p256-sha256 instead of Ed25519. This allows us to make sodium
optional again, and we only pull it in to use it for verifying incomming
signatures. If sodium is not installed, we throw on Ed25519 signatures
instead. At least it is easy for most people to make their Nextcloud
install fully RFC compliant by installing sodium.
I also renamed all the Ed25519 function names to be more precis, using
Jwks for the JSON Web Keys, and RFC9421 for the http-signature code,
where it is needed to distinguish from draft-cavage signatures.
Signed-off-by: Micke Nordin <kano@sunet.se>
2026-05-27 11:03:55 +02:00
Micke Nordin
ea9bbe64c1
chore: require ext-sodium
...
Promote ext-sodium from recommended to required so RFC 9421 Ed25519
signing/verifying can rely on libsodium unconditionally. Add the
matching openssl + sodium psalm stubs.
Signed-off-by: Micke Nordin <kano@sunet.se>
2026-05-27 11:03:55 +02:00
Peter Ringelmann
4b1c3fbe3b
fix(settings,oauth2): preserve wipe state across admin deletion paths
...
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-05-26 16:41:02 +02:00
Joas Schilling
70410d2f6e
fix(security): Update Expires time
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2026-05-15 09:24:40 +02:00
Carl Schwan
4caa444f90
refactor(utils): Mark share related methods as deprecated
...
The underlying OC_Utils methods are already deprecated
Signed-off-by: Carl Schwan <carlschwan@kde.org>
2026-05-12 18:24:12 +02:00
Benjamin Gaussorgues
9e36754429
fix(snowflake): fix wrong documentation about serverId
...
Maximum value of a server ID is 511 (9 bits) and not 1023.
Also adjust SetupCheck
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-05-12 10:47:44 +02:00
Ferdinand Thiessen
5b756ad8bc
refactor: split appstore from settings
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-05-05 10:41:04 +02:00
Ferdinand Thiessen
e7a2f660c7
refactor(Fetcher): properly type AppStore fetcher
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-30 14:01:56 +02:00
Marcel Klehr
b2ffaaf147
Merge pull request #59958 from nextcloud/feat/setupcheck-taskprocessing-worker
...
Feat: Better reporting if something is wrong with taskprocessing
2026-04-29 12:07:20 +02:00
Marcel Klehr
1adf75499a
fix: Fix psalm issues
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-04-29 10:59:32 +02:00
Marcel Klehr
cbaf5fa99f
fix(TaskProcessingWorker): Adjust config key name
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-04-29 10:11:25 +02:00
Ferdinand Thiessen
27c7164e86
chore: add psalm-api to for classes we need to mock in unit tests
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-28 23:52:43 +02:00
Ferdinand Thiessen
d8e8703796
chore: add missing Override attribute to app code
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-28 21:29:28 +02:00
Marcel Klehr
beef1a62fe
fix(TaskProcessingWorkerIsRunning): Different message if the worker has never run
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-04-28 15:19:53 +02:00
Marcel Klehr
554882534c
fix: Address review comment
...
Co-authored-by: Julien Veyssier <julien-nc@posteo.net>
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-04-28 12:51:34 +02:00
Marcel Klehr
2d18aedf06
fix: Register taskprocessing setup checks
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-04-28 12:49:35 +02:00
Marcel Klehr
99fc7b2c78
fix(TaskProcessing): Make setup checks more sensitive
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-04-28 11:44:51 +02:00
Marcel Klehr
3802c0d24a
feat(TaskProcessing): Add setup check for task processing worker status
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-04-28 11:43:03 +02:00
Côme Chilliet
cfd5f04116
fix: Add missing PasswordConfirmationRequired attributes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-04-21 10:21:07 +02:00
Joas Schilling
c9d7bce447
fix(apppasswords): Require password also on delete and update
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2026-04-13 15:09:10 +02:00
Marcel Klehr
861f9bdb31
fix(settings): Check all values first, then apply them
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-03-26 11:32:42 +01:00
Marcel Klehr
a375265111
fix(settings): Throw JSON errors and return 400 status if JSON encode fails
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-03-26 11:03:31 +01:00
Marcel Klehr
7fe3d1c6a0
feat(settings): Log AI config changes to audit log
...
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2026-03-26 10:50:01 +01:00
Benjamin Gaussorgues
1b504bf4ec
Merge pull request #58863 from nextcloud/fix/annotation-attributes-fix
2026-03-18 08:46:31 +01:00
Benjamin Gaussorgues
aaab13c7ca
fix(admin): use correct delegation class
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-03-17 16:49:44 +01:00
Joas Schilling
7e5a690a67
fix(qrcode): Enable one-time QR codes by default for 34
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2026-03-17 12:54:36 +01:00
Côme Chilliet
bd343a6e9e
fix: Fix AuthorizedAdminSetting attribute behavior
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-03-11 11:25:31 +01:00
Julien Veyssier
2fc9eda850
feat(profile-picker): add an admin setting in the profile section to toggle the picker and the previews
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-02-23 14:40:50 +01:00
provokateurin
e454cc6765
refactor(settings): Modernize authorized group classes
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-02-17 06:43:16 +01:00
provokateurin
f12cecb684
feat(rector): Enable SafeDeclareStrictTypesRector
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-02-09 10:59:31 +01:00
Carl Schwan
c96ece0bcb
refactor: Add more typing
...
- repairs job
- database
- redis
And remove Helpertest which was unused outside of some tests.
Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>
2026-02-06 13:55:39 +01:00
Carl Schwan
5d0d0c17e5
chore(rector): Run rector on apps, core and tests directory
...
Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>
2026-02-06 13:23:23 +01:00
Joas Schilling
15906306c3
Merge pull request #57854 from nextcloud/feat/add-twofactor-warning
...
feat: Add SetupCheck to warn about missing second factor provider
2026-02-05 16:25:18 +01:00
Kate
18d5dedb29
Merge pull request #58002 from nextcloud/fix/let-user-backend-lock-fields
...
feat: Allow user backends to manage property permissions
2026-02-05 12:11:07 +01:00
Julius Knorr
edeba296b3
feat: Add office switcher with feature comparison
...
Signed-off-by: Julius Knorr <jus@bitgrid.net>
2026-02-03 19:12:22 +01:00
Côme Chilliet
26cec2d117
feat: Add info level result if 2FA is not enforced
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-02-03 15:50:50 +01:00
Côme Chilliet
de011ee668
feat: Allow user backends to manage property permissions
...
Not yet reflected in the UI apart from displayname/email/avatar
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-02-03 10:22:26 +01:00
Elizabeth Danzberger
b5092e598f
Merge pull request #57533 from nextcloud/fix/limit-app-to-group-initial-state
...
fix(app-settings): limit app to group initial state
2026-02-02 13:22:23 -05:00
Côme Chilliet
8475bed525
fix(settings): Only consider primary providers for 2FA setup check
...
In practice this filters out backup codes. Also fixed the english
formulation and the copyright year.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-02-02 11:55:17 +01:00
Côme Chilliet
1f5e6cbbb4
feat: Add SetupCheck to warn about missing second factor provider
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-02-02 11:55:16 +01:00
Ferdinand Thiessen
2e4ede0320
refactor(settings): use NcAppNavigation for the settings navigation
...
Migrate away from jQuery and Snap.js for the navigation.
This is required to finally drop both dependencies.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-01-27 02:29:41 +01:00
Elizabeth Danzberger
fc94930b16
fix(app-settings): provide groups by initial state
...
Signed-off-by: Elizabeth Danzberger <elizabeth@elzody.dev>
2026-01-26 12:46:24 -05:00
Joas Schilling
2ae3988c23
fix(security): Update Expires time
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2026-01-22 08:43:39 +01:00
Arsalan Ul Haq Sohni
02dc7f1f79
docs: remove developer documentation link
...
Signed-off-by: Arsalan Ul Haq Sohni <arsalan-ul-haq.sohni@strato.de>
2026-01-20 09:40:03 +01:00
Cristian Scheid
ed486167d6
refactor: change method name from getMemberships to getTeamsForUser
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-01-19 12:10:15 +00:00
Cristian Scheid
d3dd2f41d5
refactor: use list<> syntax and remove unecessary check
...
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Cristian Scheid <74515775+cristianscheid@users.noreply.github.com>
2026-01-19 12:10:15 +00:00
Cristian Scheid
a109ed365f
refactor: improve code quality and doc block in PersonalInfo
...
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Cristian Scheid <74515775+cristianscheid@users.noreply.github.com>
2026-01-19 12:10:14 +00:00
Cristian Scheid
7e1b5af9e8
chore: fix code style in PersonalInfo
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-01-19 12:10:14 +00:00
Cristian Scheid
5c1b795cb5
feat(profile): show Teams memberships on account details
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-01-19 12:10:14 +00:00
Ferdinand Thiessen
7d21350040
feat(settings): add option to allow self-signed mail certificates
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-01-15 02:12:03 +01:00