upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-11 01:30:50 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 79
79918 commits 1039 branches 1221 tags 8.3 GiB
Commit graph

711 commits

Author SHA1 Message Date
provokateurin
ff10f9f60f
chore(deps): Update openapi-extractor to v1.0.0 
Signed-off-by: provokateurin <kate@provokateurin.de>
 2024-08-21 11:07:50 +02:00
Artur Neumann
84ee79fe43 fix: expect invalidateTokensOfUser only be called for seen users 
Signed-off-by: Artur Neumann <artur@jankaritech.com>
 2024-08-16 10:33:56 +02:00
Artur Neumann
cc44ec54ad invalidate oauth2 tokens only for seen users 
Signed-off-by: Artur Neumann <artur@jankaritech.com>
 2024-08-16 10:33:52 +02:00
Nextcloud bot
e218d1f98e
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-08-15 00:25:46 +00:00
Joas Schilling
eb365438d6
feat(branchoff): Bump versions and requirements in apps 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2024-08-14 10:03:30 +02:00
Kate
ca9752482c
Merge pull request #46814 from nextcloud/refactor/oauth2/security-attributes 2024-08-14 09:38:28 +02:00
Nextcloud bot
4b4af0b6b8
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-07-31 00:20:17 +00:00
provokateurin
d8adbce1be refactor(oauth2): Replace security annotations with respective attributes 
Signed-off-by: provokateurin <kate@provokateurin.de>
 2024-07-29 16:45:54 +02:00
Ferdinand Thiessen
691f570237
chore: Enable ESLint for apps and fix all errors 
Nevertheless this causes a huge amount of new warnings.
Previously the shell script for directories to lint was wrong it was generating all app names to lint,
but was missing the `apps/` prefix. Causing only `core` to be linted.

Co-authored-by: Grigorii K. Shartsev <me@shgk.me>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2024-07-09 17:13:30 +02:00
provokateurin
32de958259
chore(deps): Update openapi-extractor 
Signed-off-by: provokateurin <kate@provokateurin.de>
 2024-07-02 09:08:04 +02:00
Andy Scherzinger
ce7b331d33
chore: Add SPDX header 
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
 2024-06-19 12:02:43 +02:00
Nextcloud bot
f0f4db3464
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-06-14 00:19:48 +00:00
Nextcloud bot
59c181b4cb
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-06-13 00:19:50 +00:00
Nextcloud bot
94bc020d07
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-06-05 09:56:05 +00:00
Andy Scherzinger
cc1686dba9
chore: Add SPDX header 
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
 2024-05-31 10:38:47 +02:00
Nextcloud bot
878538ca54
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-04-24 00:20:17 +00:00
Nextcloud bot
1001d41197
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-04-07 00:20:11 +00:00
Nextcloud bot
7dad12ef75
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-04-04 00:20:03 +00:00
Nextcloud bot
93065b22c4
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-04-02 00:19:28 +00:00
Nextcloud bot
c93d44bb3f
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-03-31 00:19:32 +00:00
Joas Schilling
03090bb5ee
feat(branchoff): Bump versions and requirements in apps 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2024-03-28 11:26:18 +01:00
Nextcloud bot
27b09ce00a
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-03-08 00:19:17 +00:00
Nextcloud bot
fea2277b63
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-02-14 00:19:31 +00:00
Nextcloud bot
af313a79e8
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-01-21 00:19:16 +00:00
Côme Chilliet
eee9f1eec4 Always catch OCP versions of authentication exceptions 
And always throw OC versions for BC

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2024-01-11 14:02:15 +01:00
Nextcloud bot
77b783a9cb
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-01-10 00:20:28 +00:00
Nextcloud bot
6690eebff4
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2024-01-04 00:19:57 +00:00
Nextcloud bot
be46ca3658
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-22 00:20:19 +00:00
Nextcloud bot
66b2fd95d1
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-20 00:19:18 +00:00
Nextcloud bot
6fa377e90e
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-19 00:19:27 +00:00
Nextcloud bot
0ff674607f
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-18 00:19:21 +00:00
Nextcloud bot
84e0b9007c
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-17 00:18:58 +00:00
Nextcloud bot
538041b6e7
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-16 00:19:23 +00:00
Eduardo Morales
254f4b00d9 enh(oauth2): allowed toggling of aria label 
Signed-off-by: Eduardo Morales <emoral435@gmail.com>
 2023-12-14 20:16:37 -06:00
Nextcloud bot
b9cf8fd8bc
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-15 00:18:59 +00:00
Nextcloud bot
6aeb5d4a08
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-12 00:18:52 +00:00
Nextcloud bot
b71b6dca97
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-07 00:19:41 +00:00
Nextcloud bot
f49550db97
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-12-01 00:18:33 +00:00
Nextcloud bot
79aa8bb64c
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-11-28 00:26:21 +00:00
Nextcloud bot
28e0ccfed9
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-11-25 00:25:54 +00:00
Nextcloud bot
2ec9936b93
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-11-24 00:27:09 +00:00
Arthur Schiwon
c5caae1bf0
Merge pull request #41678 from nextcloud/branchoff/master-is-now-29 
Master is now 29
 2023-11-23 12:02:20 +01:00
Joas Schilling
aa5f037af7
chore: apply changes from Nextcloud coding standards 1.1.1 
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
 2023-11-23 10:36:13 +01:00
Joas Schilling
64e0829fc8
feat(branchoff): Bump versions and requirements in apps 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2023-11-23 10:09:40 +01:00
Nextcloud bot
3ce31fc1bf
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-11-11 00:22:14 +00:00
Nextcloud bot
33e1db616d
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-11-04 00:29:23 +00:00
Nextcloud bot
0398d74ebd
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-11-01 00:28:44 +00:00
Nextcloud bot
16bfe0cc65
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-10-31 00:26:17 +00:00
Nextcloud bot
600351c4cf
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-10-30 00:26:19 +00:00
Nextcloud bot
fe471da316
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-10-29 00:25:29 +00:00
Nextcloud bot
0aa65d9714
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-10-28 00:28:21 +00:00
julia.kirschenheuter
fbc970855f Create semantically right table for the "OAuth 2.0 clients" 
Adapt styles

Signed-off-by: julia.kirschenheuter <julia.kirschenheuter@nextcloud.com>
 2023-10-27 09:55:45 +02:00
Nextcloud bot
d772537d90
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-10-24 00:25:42 +00:00
Julien Veyssier
d56950a6c9
adjust phpdoc types in OauthApiController 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:03 +02:00
Julien Veyssier
98c8a465b0
update OpenAPI specs 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:03 +02:00
Julien Veyssier
da63d3c27b
update autoload files 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
d2bc483adf
adjust oauth app 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
32f984c520
adjust oauth tests 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
c6da99474e
rename oauth2_access_token's created_at to code_created_at 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
e944980eb6
add db index on oauth2_access_tokens's (token_count, created_at) 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
ddfc124767
add test for refusing to get an oauth token from a code when we're not in authorization state 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
779e1d51ac
delete oauth access token when receiving a code that has expired 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
1ab45bad5d
refuse oauth authorization code if a token has already been delivered (active token) 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
7bba410997
cleanup access tokens that are still in authorization state and that have expired 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
2995b0948f
add tests for oauth2 authorization code expiration 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
Julien Veyssier
807f173dec
make oauth2 authorization code expire after 10 minutes 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-10-05 14:24:02 +02:00
julia.kirschenheuter
ea881fee2f Add labels for input fields 
Signed-off-by: julia.kirschenheuter <julia.kirschenheuter@nextcloud.com>
 2023-09-22 10:46:46 +02:00
Joas Schilling
25309bcb45
techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2023-08-28 15:50:45 +02:00
Ferdinand Thiessen
663db2bb34 chore: Update nextcloud-vue to v8 beta2 and renamed changed properties 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2023-08-02 15:19:26 +02:00
Nextcloud bot
46d80b4f70
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-07-19 00:26:31 +00:00
jld3103
1c19c567fe
oauth2: Add OpenAPI spec 
Signed-off-by: jld3103 <jld3103yt@gmail.com>
 2023-07-12 07:32:30 +02:00
Nextcloud bot
a62a8fab97
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-07-08 00:30:07 +00:00
Joas Schilling
05aa39d777
Fix event names of 2FA related typed events 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2023-07-03 14:25:01 +02:00
Julien Veyssier
629adc318f add bruteforce protection in OauthApiController 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-06-19 11:18:06 +02:00
Nextcloud bot
7250b98791
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-06-19 00:18:02 +00:00
Julien Veyssier
578bf8cc0b add extra migration that sets the secret column length in case the previous step has run when it was setting it to 256 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-06-14 17:21:38 +02:00
Julien Veyssier
24e517c5b3 make oauth2 client secret column larger 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-06-14 17:21:38 +02:00
Julien Veyssier
8086d7e41b add test that inserts a long oauth client secret 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-06-14 17:21:38 +02:00
Nextcloud bot
2259eedf76
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-06-11 00:34:31 +00:00
Nextcloud bot
689936020d
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-06-10 00:17:36 +00:00
Julien Veyssier
808819a4d0
fix oauth2 tests 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-06-08 13:02:40 +02:00
Julien Veyssier
18c742a901
encrypt oauth2 client secrets 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2023-06-07 11:36:08 +02:00
jld3103
4218f719ea
Add OpenAPI specs 
Signed-off-by: jld3103 <jld3103yt@gmail.com>
 2023-05-24 16:51:38 +02:00
Nextcloud bot
96f0118312
Fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-05-21 00:17:10 +00:00
Joas Schilling
7e45fdf867
chore(release): Bump requirements and versions in apps/ 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2023-05-17 10:44:23 +02:00
Joas Schilling
cca3b9495c
chore(autoloader): Update autoloaders with composer 2.5.5 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2023-04-21 15:53:55 +02:00
Nextcloud bot
2eda49e28d
Fix(l10n): 🔠 Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-03-30 02:27:36 +00:00
John Molakvoæ
8633f13e0a
chore(eslint): fix missing import extensions 
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
 2023-03-23 08:14:19 +01:00
Nextcloud bot
4521c79169
Fix(l10n): 🔠 Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-03-23 02:27:06 +00:00
Artur Neumann
e97540b9c6
move mocks into private variables 
Signed-off-by: Artur Neumann <artur@jankaritech.com>
 2023-03-14 17:18:56 +01:00
Artur Neumann
707e69b203
adjust SettingsController tests 
Signed-off-by: Artur Neumann <artur@jankaritech.com>
 2023-03-14 17:13:29 +01:00
Artur Neumann
f634badf12
public interface to invalidate tokens of user 
Signed-off-by: Artur Neumann <artur@jankaritech.com>
 2023-03-14 17:13:29 +01:00
Artur Neumann
21be557e2a
invalidate existing tokens when deleting an oauth client 
Signed-off-by: Artur Neumann <artur@jankaritech.com>
 2023-03-14 17:13:23 +01:00
Joas Schilling
d21db216f7
chore(release): Bump requirements and versions in apps/ 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2023-03-03 06:44:27 +01:00
Nextcloud bot
d33fbbed1d
Fix(l10n): 🔠 Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-02-17 02:25:58 +00:00
Nextcloud bot
4774637b5f
Fix(l10n): 🔠 Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-02-12 02:25:57 +00:00
Christoph Wurst
aee9941fed
chore(autoloaders): Update autoloader files for Composer 2.5.1 
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
 2023-01-25 10:42:34 +01:00
Nextcloud bot
dc7e2fbe48
Fix(l10n): 🔠 Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2023-01-12 02:24:43 +00:00
Côme Chilliet
9b26c4a277
Fix PHP error on PHP >= 8.2 about dynamic property use in tests 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2022-12-19 15:58:46 +01:00
Julien Veyssier
73f2876d64
rename SabrePublicPluginEvent to BeforeSabrePubliclyLoadedEvent, run build/autoloaderchecker.sh 
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
 2022-12-15 17:37:34 +01:00