Enrique Pérez Arnaud
3956c4e9be
feat(cloud_federation_api): accept new protocol envelope and delegate validation
...
Accept both the legacy options.sharedSecret envelope and the new
protocol[name].sharedSecret form. Preserve the original cloud ID so the
factory can discover capabilities, then reset shareWith to the local
username for user lookup.
Delegate per-protocol validation to providers via the new
IValidationAwareCloudFederationProvider interface, with split exception
handling: BadRequestException -> 400, ProviderCouldNotAddShareException
-> the exception's own HTTP status (501 fallback).
In the notification handler, fall back to looking up the refresh token
via OcmTokenMapMapper when the access token cannot identify the federation.
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
2026-06-17 11:01:13 +02:00
Enrique Pérez Arnaud
789ff6a8a3
feat(cloud_federation_api): add token exchange endpoint issuing JWT access tokens
...
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
2026-06-17 11:01:11 +02:00
Enrique Pérez Arnaud
2c54011789
feat(dav): accept bearer access tokens on webdav endpoints
...
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
2026-06-17 10:44:53 +02:00
Nextcloud bot
188006bc95
fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2026-06-17 00:22:57 +00:00
Andy Scherzinger
51a7ee1d0f
Merge pull request #61310 from nextcloud/fix/noid/ocm-add-share-validation
...
fix(ocm-add-share): adjust domain validation
2026-06-16 20:34:03 +02:00
Micke Nordin
d8a2e0719a
Merge pull request #61201 from nextcloud/kano-ocm-notification-event
...
Add OCM Notification Received Event
2026-06-16 13:23:30 +02:00
Micke Nordin
0f2003ebc8
test(OCM): Add test that tests the notificationReceived function
...
Signed-off-by: Micke Nordin <kano@sunet.se>
2026-06-16 11:30:00 +02:00
Micke Nordin
2beb626995
feat(OCM): Add event for received notifications
...
OCM is standardizing and expanding the use of notifications and having
an event for acting on in apps will be very useful.
Signed-off-by: Micke Nordin <kano@sunet.se>
2026-06-16 11:30:00 +02:00
Cristian Scheid
88df72a661
feat(ocm-add-share): add validation to detect idn homograph attacks
...
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
2026-06-16 10:21:24 +02:00
Côme Chilliet
30ba835e90
fix(user_ldap): Escape filter part when searching for group members
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-06-16 10:07:17 +02:00
Stephan Orbaugh
ec03e87675
Merge pull request #61289 from nextcloud/carl/oauth2-commands
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Psalm static code analysis / changes (push) Waiting to run
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
feat(oauth2): Add commands for adding and deleting clients
2026-06-15 18:30:41 +02:00
Andy Scherzinger
71f966801d
Merge pull request #61253 from nextcloud/fix/theming-preserve-uploaded-favicon
...
fix(theming): preserve uploaded favicon and touch icon
2026-06-15 16:19:28 +02:00
Côme Chilliet
5a1c0844df
chore(tests): Adapt BackupCodeStorageTest to code changes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-06-15 14:47:25 +02:00
Côme Chilliet
4c80a04dc4
fix(twofactor_backupcodes): Add a clean helper to set code as used
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-06-15 14:35:52 +02:00
Carl Schwan
734904e7f0
feat(oauth2): Add commands for adding and deleting clients
...
Refactor the code for doing that from the controller to a seperate
service.
Signed-off-by: Carl Schwan <carlschwan@kde.org>
2026-06-15 13:06:09 +02:00
Nextcloud bot
a7eb76d031
fix(l10n): Update translations from Transifex
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2026-06-15 00:23:21 +00:00
Nextcloud bot
eaae45d7dc
fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2026-06-14 00:22:44 +00:00
Simon L.
1d2b23eed7
fix(theming): preserve uploaded favicon and touch icon
...
PR #58224 dropped the `$iconFile === null` guard around the app-specific
icon generation in getFavicon()/getTouchIcon(), so an uploaded custom
favicon was always overwritten by the generated, context-colored icon
whenever Imagick could produce an ICO/PNG.
Restore the guard so the generation path only runs as a fallback when no
custom favicon was uploaded, while keeping the improved Imagick
capability detection from #58224 .
Assisted-by: ClaudeCode:claude-opus-4-8
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-06-13 21:43:48 +02:00
Nextcloud bot
d02155784b
fix(l10n): Update translations from Transifex
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2026-06-13 00:24:20 +00:00
Sebastian Krupinski
0ef2f4046d
Merge pull request #61017 from nextcloud/fix/use-card-interface
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Psalm static code analysis / changes (push) Waiting to run
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
fix: use card interface instead of object
2026-06-12 10:08:59 -04:00
Kate
718dfd0656
Merge pull request #61142 from nextcloud/chore/php/drop-8.2
...
chore(PHP): Drop 8.2 for Nextcloud 35
2026-06-12 15:27:12 +02:00
Louis
045905b1a4
Merge pull request #60801 from nextcloud/fix/fix-encryption-recovery-key-enabling
...
fix(encryption): Fix endpoint /ajax/userSetRecovery to support boolean
2026-06-12 11:54:20 +02:00
provokateurin
a7da9cd596
chore(PHP): Drop 8.2 for Nextcloud 35
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2026-06-12 11:11:50 +02:00
Nextcloud bot
b7b45a8118
fix(l10n): Update translations from Transifex
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2026-06-12 00:45:50 +00:00
Andy Scherzinger
b49ea3596e
Merge pull request #60596 from nextcloud/fix/settings-clear-app-navigation-toggle-overhang
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Psalm static code analysis / changes (push) Waiting to run
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
fix(settings): clear NcAppNavigation toggle overhang
2026-06-11 23:25:07 +02:00
Andy Scherzinger
e99befd96f
Merge pull request #58750 from nextcloud/jtr/migrate-AuditLogger-to-IAppConfig
...
refactor(admin_audit): migrate to IAppConfig
2026-06-11 20:18:29 +02:00
Thorsten Daners
30b30d09d5
fix(profile): add rel tag for ferdiverse link to make verification possible
...
Signed-off-by: Thorsten Daners <thorsten@daners.info>
2026-06-11 17:23:37 +02:00
Ferdinand Thiessen
4b5fb3a197
fix(appstore): bring back "update all" button
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-06-11 15:37:30 +02:00
Louis
e6b8de4d0d
Merge pull request #60483 from masskrdjn/fix-hiding-unselectable-groups-in-account-manager
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Psalm static code analysis / changes (push) Waiting to run
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
feat: implement isSelectableGroup function to filter out unselectable groups
2026-06-11 15:36:58 +02:00
John Molakvoæ
09a3ca924a
fix: remove unnecessary copyright header
...
Signed-off-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-06-11 15:24:49 +02:00
Pawel Boguslawski
9d9d372551
feat(files): added parameter to disable web UI integration with local client
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2026-06-11 15:24:37 +02:00
Louis
da706223e4
Merge pull request #61140 from nextcloud/fix/fix-deprecations-in-tests
...
Fix deprecations in tests
2026-06-11 14:48:10 +02:00
Peter Ringelmann
ca950f7f5b
fix(settings): clear NcAppNavigation toggle overhang
...
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-06-11 14:35:49 +02:00
Josh
5d01ea8755
chore: migrate AuditLogger to IAppConfig
...
Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Carl Schwan <carlschwan@kde.org>
2026-06-11 12:18:31 +02:00
Benjamin Gaussorgues
6470514906
Merge pull request #60285 from nextcloud/jtr/feat-settings-office-section
...
feat(settings): add shared Office admin section
2026-06-11 12:11:22 +02:00
Andy Scherzinger
d1921c9c13
Merge pull request #59413 from nextcloud/jtr/fix-setupcheck-maintenance-length
...
fix(SetupChecks): maintenance window length is 4h (not 6h)
2026-06-11 11:37:49 +02:00
Louis
035801fede
Merge pull request #60713 from nextcloud/fix/F3-scheduled-notifications-throwable
...
fix(files_reminders): keep batch alive on per-row failure
2026-06-11 11:06:15 +02:00
Louis
20bc4e715e
Merge pull request #60714 from nextcloud/fix/F4-federation-retainjob-reset
...
fix(federation): reset retainJob at start of run()
2026-06-11 11:04:47 +02:00
krazyhell
f8980dab61
feat: implement isSelectableGroup function to filter out unselectable groups
...
Signed-off-by: krazyhell <hellwarrior@riseup.net>
2026-06-11 11:00:58 +02:00
Kate
d3c74a545a
Merge pull request #60842 from nextcloud/fix/guard-null-path
...
fix(files_versions): guard null path in event listeners
2026-06-11 10:48:06 +02:00
Louis
eb0584896e
Merge pull request #59358 from nextcloud/jtr/refactor-files-reminder-drop-db-side-now-use
...
fix(files_reminders): switch from DB-side `NOW()` to PHP-side generation
2026-06-11 10:35:35 +02:00
Louis
8f93d51354
Merge pull request #60029 from icarta-l/fix/missing-early-fail-for-basic-auth-without-credentials
...
Fix: missing early fail for basic auth without credentials
2026-06-11 10:22:07 +02:00
Louis
3e2578113b
Merge pull request #60379 from nextcloud/jtr/test-settings-auth-group-dups
...
test(settings): reduce flakiness of authorized group integration assertions
2026-06-11 10:20:17 +02:00
Côme Chilliet
b37044d484
chore: Fix psalm issues following strong typing of IUser
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-06-11 09:45:32 +02:00
Côme Chilliet
2315159b15
fix(dav): Remove useless null check on displayName
...
There is already a fallback to uid inside User.php
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-06-11 09:45:31 +02:00
Côme Chilliet
d881bca11f
chore(tests): Adapt tests to IUser strict typing
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-06-11 09:45:31 +02:00
Côme Chilliet
4eed4bff3a
chore: Fix test in user_ldap passing wrong type
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-06-11 09:45:30 +02:00
Côme Chilliet
805902eed3
chore: Re-enable tests failing on drone
...
We do not use drone anymore, let’s see if we can fix these tests or if
they should be removed.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-06-11 09:45:29 +02:00
Benjamin Gaussorgues
a8fb722b0e
chore: add strict types in IAddressBook::getKey
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-06-11 09:45:28 +02:00
Kate
0302d60f0c
Merge pull request #61176 from nextcloud/fix/deprecated-85
...
fix: resolve PHP deprecation of `imagedestroy`
2026-06-11 08:14:34 +02:00