Commit graph

601 commits

Author SHA1 Message Date
Ferdinand Thiessen
6e6b4efb30
fix: handle IDLE timeout
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-06-03 19:34:07 +02:00
Louis Chemineau
67362b3092
feat: Close sessions created for login flow v2
Sessions created during the login flow v2 should be short lived to not leave an unexpected opened session in the browser.

This commit add a property to the session object to track its origin, and will close it as soon as possible, i.e., on the first non public page request.

Signed-off-by: Louis Chemineau <louis@chmn.me>

[skip ci]

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-03 12:30:48 +01:00
Julius Härtl
1f15850de6 fix: Add direct parameter to flow auth v2
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-09-17 20:37:44 +02:00
Julius Härtl
4ba1154cb6 fix: Ignore preview requests for invalid file ids
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2024-07-28 12:15:44 +02:00
Arthur Schiwon
6738cd61e9
Merge pull request #45824 from nextcloud/backport/45811/stable27
[stable27] test: add tests for ProfilePageController
2024-06-13 15:29:10 +02:00
Arthur Schiwon
495ccc9bec
style(PHP): remove unacceptable empty lines
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-12 19:28:57 +02:00
Arthur Schiwon
02313013ad
fix(Session): avoid password confirmation on SSO
SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-12 19:28:57 +02:00
Daniel Kesselberg
6739eb1715
test: add tests for ProfilePageController
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2024-06-12 18:34:01 +02:00
John Molakvoæ (skjnldsv)
a2f7b59d34 fix(core): unsupported browser redirect url
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2024-06-04 13:26:56 +00:00
fenn-cs
806141e49c feat: Limit email input on auth pages to 255 chars
Excessively long emails reported make server unresponsive.

We could at some point, consider adding a configuration for sysadmins to bypass this setting
on their instance if they want.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
2024-05-28 21:29:58 +00:00
Joas Schilling
90c5b1273c
fix(search): Limit maximum number of search results
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-05-15 10:46:23 +02:00
Julien Veyssier
3f19bf7660
make OAuth2 authorization code expire
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2024-01-22 13:26:01 +01:00
Christoph Wurst
32a02b0ec7 fix: Show error message when CSRF check fails at login
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2023-12-04 19:09:01 +00:00
Christoph Wurst
825bb29287 fix(unifiedsearch): Allow searching for "0"
empty("0") evaluates to true

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2023-10-10 09:09:50 +02:00
Maxence Lange
0fac750bcd ocm services
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2023-09-22 17:26:02 -01:00
Julien Veyssier
8a9ad050d0
fix psalm issues
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2023-08-09 14:58:02 +02:00
Julien Veyssier
993a559ec6
fix psalm issue
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
(cherry picked from commit f154fe7f8e)
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2023-08-09 14:58:02 +02:00
Julius Härtl
0564bd23f2
feat: Add delete task API
Signed-off-by: Julius Härtl <jus@bitgrid.net>
(cherry picked from commit fca1c309a0)
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2023-08-09 14:58:02 +02:00
Julien Veyssier
8e657a8945
allow anon text processing scheduling
add a textprocessing_tasks index
convert anotations to method attributes
refactor TP manager
add mapper methods

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

(cherry picked from commit 41b19cf969)
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2023-08-09 14:58:02 +02:00
Julien Veyssier
6eb18570c0
start implementing ocs endpoint to get task list from user+appId+identifier
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
(cherry picked from commit 9986e02097)
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
2023-08-09 14:58:02 +02:00
Marcel Klehr
ad645c96f3 Fix tests: Adjust constructor signature
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit 6d568b0d32)
2023-08-09 10:05:24 +02:00
Marcel Klehr
00e3fb143f Remove Task::factory method
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit 7389567c7d)
2023-08-09 10:05:23 +02:00
Marcel Klehr
d8c44da4f4 Fix psalm errors
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit 95d2d3af5c)
2023-08-09 10:05:09 +02:00
Marcel Klehr
cf2c42ae36 Massive refactoring: Turn LanguageModel OCP API into TextProcessing API
Signed-off-by: Marcel Klehr <mklehr@gmx.net>

(cherry picked from commit ffe27ce14c)
2023-08-09 10:05:05 +02:00
Marcel Klehr
696a45ddf1 Update core/Controller/LanguageModelApiController.php
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit bd45c436eb)
2023-08-09 10:02:34 +02:00
Marcel Klehr
5d975b96e7 Update core/Controller/LanguageModelApiController.php
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit d430cbbfca)
2023-08-09 10:02:32 +02:00
Marcel Klehr
6f5119c093 Fix openapi docs
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit 48c8206538)
2023-08-09 10:02:30 +02:00
Marcel Klehr
fbd178ab8b Update core/Controller/LanguageModelApiController.php
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit b7c3b50e41)
2023-08-09 10:02:28 +02:00
Marcel Klehr
1ad0a2960e LanguageModelApiController: Use jsonSerialize method to help psalm
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit 49ea56b306)
2023-08-09 10:02:25 +02:00
Marcel Klehr
a39e3c90e9 cs:fix
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit a4578cd995)
2023-08-09 10:02:22 +02:00
Marcel Klehr
39d59a10b1 LLM OCP API: Fix OpenApi docs
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit ea4dc4cba8)
2023-08-09 10:02:17 +02:00
Marcel Klehr
17351b64ec LLM OCP API: Fix psalm issues
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit de1cfaae9c)
2023-08-09 10:02:16 +02:00
Marcel Klehr
e312b2bdd2 LLM OCS API: Add OpenAPI docs
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit 61b9b4f474)
2023-08-09 10:01:48 +02:00
Marcel Klehr
8567315c93 LLM OCS API: s/tasks/tasktypes/
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit d33b7a8da4)
2023-08-09 10:01:46 +02:00
Marcel Klehr
7320011948 LLM OCP API: Fix psam errors
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit d6d4e0ffe3)
2023-08-09 10:01:40 +02:00
Marcel Klehr
445b72a93c LLM OCP API: Fix security issue
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit f7e1e79880)
2023-08-09 10:01:36 +02:00
Marcel Klehr
e90dd4a000 LLM OCP API: Fix copyright
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit 94fcf88892)
2023-08-09 10:01:05 +02:00
Marcel Klehr
fb9262e864 LLM OCP API: Use OCP\Common\Exception\NotFoundException
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
(cherry picked from commit b00a9a6eae)
2023-08-09 10:01:02 +02:00
Marcel Klehr
236c32b13f LLM OCP API: Implement ocs API
Signed-off-by: Marcel Klehr <mklehr@gmx.net>

(cherry picked from commit 795b097122)
2023-08-09 09:59:58 +02:00
Joas Schilling
0ea23b6ef0
fix(core): Add password confirmation requirement for getapppassword
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-07-17 12:09:47 +02:00
Joas Schilling
7ee81b6555
fix(lostpassword): Also rate limit the setPassword endpoint
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-15 09:21:07 +02:00
Joas Schilling
9d6ec68b59
feat(translation): Return the detected language so clients can show more details
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-05-02 16:38:33 +02:00
Joas Schilling
e5d0ff0c19
feat(translation): Allow guests to use translations as well
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-13 09:02:46 +02:00
Joas Schilling
032821d2b5
fix(translation): Use 400 as status code to be distinguishable from server errors
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-13 09:02:42 +02:00
Joas Schilling
b7c1e61d0b
fix(translation): Properly set the numbers as HTTP status code
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-13 09:02:38 +02:00
Joas Schilling
21b056ee2d
fix(translation): Translate error messages on translations API
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-13 08:53:15 +02:00
Côme Chilliet
5063b76c8a
Merge pull request #37495 from joshtrichards/jr-trim-pw-reset-username
Trim the user/email provided for password resets
2023-04-05 11:36:53 +02:00
Josh Richards
9899b12478
Trim user earlier
Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
2023-04-04 10:03:15 -04:00
Christopher Ng
7bc8b543be Improve handling of profile fields
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2023-03-30 17:11:41 -07:00
Josh Richards
203b9131ec
Trim the user/email provided for password resets
Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
2023-03-30 11:59:13 -04:00