Stephan Orbaugh
923b5605f8
Merge pull request #59053 from nextcloud/backport/58724/stable30
...
Integration sqlite / changes (push) Has been cancelled
Psalm static code analysis / static-code-analysis (push) Has been cancelled
Psalm static code analysis / static-code-analysis-security (push) Has been cancelled
Psalm static code analysis / static-code-analysis-ocp (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, --tags ~@large files_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, capabilities_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, collaboration_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, comments_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, dav_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, federation_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, filesdrop_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, ldap_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, openldap_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, openldap_numerical_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, remoteapi_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, setup_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, sharees_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, sharing_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, theming_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, videoverification_features) (push) Has been cancelled
Integration sqlite / integration-sqlite-summary (push) Has been cancelled
[stable30] fix(files_sharing): respect config to skip certificate verification
2026-06-03 14:46:24 +02:00
Stephan Orbaugh
088bc441f2
Merge pull request #60577 from nextcloud/backport/60547/stable30
...
Integration sqlite / changes (push) Waiting to run
Integration sqlite / integration-sqlite (8.1, stable30, --tags ~@large files_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, capabilities_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, collaboration_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, comments_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, dav_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, federation_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, filesdrop_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, ldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, openldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, openldap_numerical_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, remoteapi_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, setup_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, sharees_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, sharing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, theming_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, videoverification_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis (push) Waiting to run
Psalm static code analysis / static-code-analysis-security (push) Waiting to run
Psalm static code analysis / static-code-analysis-ocp (push) Waiting to run
[stable30] fix: don't tell the remote their token is lower
2026-05-20 20:26:47 +02:00
Stephan Orbaugh
022f2f59cd
Merge pull request #60562 from nextcloud/backport/60558/stable30
...
[stable30] fix: improve check if external storage backend is local
2026-05-20 20:26:27 +02:00
Robin Appelman
19cac44cb9
test: adjust tests for updated local backend check
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-05-20 17:07:04 +02:00
Robin Appelman
91eee32499
fix: improve check if external storage backend is local
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-05-20 17:07:04 +02:00
Robin Appelman
d1993bfd6e
fix: remove duplicate 'allow creating local storage' check
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-05-20 17:07:01 +02:00
Robin Appelman
9e8f0b06d2
test: adjust tests
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-05-20 16:38:54 +02:00
Robin Appelman
759974b842
fix: don't tell the remote their token is lower
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-05-19 15:47:59 +00:00
Robin Appelman
2fdcbdb33e
test: adjust tests redacted password field
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-05-19 15:16:28 +00:00
Robin Appelman
327bf3b87f
fix: don't put hashed password in share api response
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-05-19 15:16:27 +00:00
Benjamin Gaussorgues
64cb8ac5ce
Merge pull request #59760 from nextcloud/backport/59693/stable30
Integration sqlite / changes (push) Has been cancelled
Psalm static code analysis / static-code-analysis (push) Has been cancelled
Psalm static code analysis / static-code-analysis-security (push) Has been cancelled
Psalm static code analysis / static-code-analysis-ocp (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, --tags ~@large files_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, capabilities_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, collaboration_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, comments_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, dav_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, federation_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, filesdrop_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, ldap_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, openldap_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, openldap_numerical_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, remoteapi_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, setup_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, sharees_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, sharing_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, theming_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, videoverification_features) (push) Has been cancelled
Integration sqlite / integration-sqlite-summary (push) Has been cancelled
2026-04-30 15:32:51 +02:00
Stephan Orbaugh
2f2cb04569
Merge pull request #59863 from nextcloud/backport/59780/stable30
...
[stable30] fix(dav): do not list intermediate files
2026-04-28 16:02:24 +02:00
Hamza
3adddc883a
fix: add ACLs for calender delegation
...
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
2026-04-28 13:31:59 +02:00
Julien Veyssier
8a18757d55
fix(oauth): align stable30 oauth tests with rotateToken backport
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:41:42 +02:00
Julien Veyssier
eb9c2e744d
fix(oauth): rotate the auth token only if the access token rotation was successful
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:41:42 +02:00
Julien Veyssier
3c982ddc81
fix(oauth): make the throttling reason more specific
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:41:42 +02:00
Julien Veyssier
a4dd930927
fix(oauth): wrap token rotation in a transaction, only rotate if the token hasn't been modified since we have read it
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2026-04-27 20:41:41 +02:00
Côme Chilliet
364756e93d
fix: Add missing PasswordConfirmationRequired attributes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-04-23 15:18:54 +02:00
Peter Ringelmann
10d1cec02d
fix(frontend): add strict password confirmation for sensitive admin actions
...
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-04-23 15:08:00 +02:00
Ferdinand Thiessen
f7c8d8ed53
fix(dav): do not list intermediate upload folders
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-22 20:47:17 +02:00
Ferdinand Thiessen
a03c71b1fd
fix(dav): do not read intermediate uploads
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-22 20:45:40 +02:00
Robin Appelman
1b3c0abb67
chore: update openapi
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-04-22 15:50:46 +02:00
Robin Appelman
9e737199cd
chore: psalm fixes
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-04-22 15:50:46 +02:00
Robin Appelman
b15a9c602b
fix: redact share token if share has more permissions than the current user
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2026-04-22 15:50:40 +02:00
Côme Chilliet
fcb450380f
fix(oauth2): Add missing urlencode for failure redirection
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-04-21 09:10:02 +00:00
provokateurin
eb9f88e79c
fix(dav): Use share initiator to get the share node, because the owner might on another server
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-04-20 16:28:42 +02:00
provokateurin
5e6f099624
fix(federatedfilesharing): Do not set the share id for an existing share
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-04-20 16:28:41 +02:00
Cristian Scheid
6ffae37783
feat(files): add configurations for file grouping
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-04-16 08:43:13 -03:00
Cristian Scheid
ba99779fcc
feat(recent-search): pass recent_limit config value to getRecentSearch function
...
feat(recent-search): pass recent_limit config value to getRecentSearch function
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-03-26 09:42:47 -03:00
Cristian Scheid
676afbca2a
feat(file-info): encapsulate logic to get last activity in getLastActivity function
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-03-26 08:05:42 +00:00
David Dreschner
a260b15d8c
feat(CalDAV): Add function to get the token of a publicly shared calendar
...
Signed-off-by: David Dreschner <david.dreschner@nextcloud.com>
2026-03-19 16:57:33 +01:00
Salvatore Martire
eaed4ff959
chore: apply cs-fixer
...
Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com>
2026-03-19 12:41:14 +01:00
Salvatore Martire
c2f81e307d
fix(files_sharing): respect config to skip certificate verification
...
This is important especially for local development, as certificate are
self-signed.
Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com>
2026-03-19 12:27:41 +01:00
Côme Chilliet
9ff8e110da
fix: Add missing Attribute and fix parameter type in renewpassword route
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-03-19 08:46:32 +00:00
Benjamin Gaussorgues
c2d1fe89ca
fix(admin): use correct delegation class
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-03-18 10:07:06 +00:00
Cristian Scheid
6a3f8f8498
fix(dav): add missing search_supports_creation_time and search_supports_upload_time to Capabilities return type
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-03-03 23:24:21 +00:00
Cristian Scheid
69265b85a3
refactor(recent-search): use d:creationdate instead of c:creation_time and crtime instead of attributes.upload_time
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-03-03 19:51:11 -03:00
Cristian Scheid
b9fc55c4ec
refactor(recently-created-icon): use mdi/js path instead of raw svg prop setup() instead of data()
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-03-03 19:51:11 -03:00
Cristian Scheid
0142738839
feat: set creation_time on file creation and render recently created icon
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-03-03 19:51:11 -03:00
Cristian Scheid
9a95cc6c41
feat(dav): expose search_supports_upload_time capability
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-02-25 13:05:51 -03:00
Cristian Scheid
ead7e80de5
feat: add upload_time support to file search and recent files
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-02-25 11:47:15 +00:00
Andy Scherzinger
45cf1db466
Merge pull request #58446 from nextcloud/backport/58414/stable30
...
Integration sqlite / changes (push) Has been cancelled
Psalm static code analysis / static-code-analysis (push) Has been cancelled
Psalm static code analysis / static-code-analysis-security (push) Has been cancelled
Psalm static code analysis / static-code-analysis-ocp (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, --tags ~@large files_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, capabilities_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, collaboration_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, comments_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, dav_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, federation_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, filesdrop_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, ldap_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, openldap_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, openldap_numerical_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, remoteapi_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, setup_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, sharees_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, sharing_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, theming_features) (push) Has been cancelled
Integration sqlite / integration-sqlite (8.1, stable30, videoverification_features) (push) Has been cancelled
Integration sqlite / integration-sqlite-summary (push) Has been cancelled
[stable30] fix(TransferOwnershipService): Remove groupfolders size
2026-02-20 23:16:33 +01:00
provokateurin
68cce22468
fix(TransferOwnershipService): Remove groupfolders size
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-02-20 07:33:38 +01:00
Salvatore Martire
38c9f5c900
fix(dav): set user id header in response earlier
...
Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com>
2026-02-19 14:27:37 +00:00
SebastianKrupinski
bd4e802601
feat: restrict calendar invitation participants
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
2026-01-12 15:24:27 -05:00
Robin Appelman
c9955f2e14
feat: also send x-user-id for dav responses
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-12-19 18:19:19 +01:00
Maksim Sukharev
e8ef40592e
fix(NewUserDialog): allow to deselect a group from the list
...
Signed-off-by: Maksim Sukharev <antreesy.web@gmail.com>
2025-12-15 14:54:20 +00:00
Joas Schilling
a840aeaa42
Merge pull request #56963 from nextcloud/backport/56925/stable30
...
Integration sqlite / changes (push) Waiting to run
Integration sqlite / integration-sqlite (8.1, stable30, --tags ~@large files_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, capabilities_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, collaboration_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, comments_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, dav_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, federation_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, filesdrop_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, ldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, openldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, openldap_numerical_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, remoteapi_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, setup_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, sharees_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, sharing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, theming_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (8.1, stable30, videoverification_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis (push) Has been cancelled
Psalm static code analysis / static-code-analysis-security (push) Has been cancelled
Psalm static code analysis / static-code-analysis-ocp (push) Has been cancelled
[stable30] fix(dav): handle HTML in CalDAV invitations
2025-12-11 09:54:08 +01:00
Joas Schilling
0aceb8fd11
fix(comments): Check comment object
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-12-11 08:41:14 +01:00
Carl Schwan
cad12d706f
refactor(workflowengine): Check if class is correct
...
Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>
2025-12-10 19:12:53 +01:00