Commit graph

25026 commits

Author SHA1 Message Date
Louis
3459ff9638
Merge pull request #51280 from nextcloud/artonge/fix/publicpage_attribute
fix(login): Properly target public page with attribute
2025-03-05 17:54:16 +01:00
Andy Scherzinger
fdb246c1cf
Merge pull request #50702 from Institutional-Investment-Group/feat/support-aws-session-token9
feat(object_store): Add support for session token (STS) in AWS credentials
2025-03-05 17:40:05 +01:00
Louis Chemineau
a163fa08d0 fix(login): Properly target public page with attribute
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-05 16:36:26 +01:00
Marcel Müller
3391279068 fix: No IFactory in constructor
Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>
2025-03-05 11:04:55 +01:00
Joas Schilling
0522b0373e
fix(files): Don't do session related work in the constructor of the View
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-03-05 09:06:16 +01:00
Cleopatra Enjeck M.
32e46a8b3a fix: use mb_strtolower to convert login name
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 05:00:24 +00:00
Cleopatra Enjeck M.
a6d6a1fa9e fix: Improve string comparison
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 05:00:24 +00:00
Cleopatra Enjeck M.
6690a28cc0 fix: Use case insensitive check when validating login name
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 05:00:24 +00:00
Nextcloud bot
4479b2710f
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-05 00:22:42 +00:00
Hector Manuel
12a92a2e8b
Merge branch 'master' into feat/support-aws-session-token 2025-03-04 18:27:54 +01:00
Côme Chilliet
2ef04bfb5d
Merge pull request #47686 from nextcloud/fix/move-email-logic-local-user-backend
fix: Move login via email logic to local backend
2025-03-04 18:21:57 +01:00
Robin Appelman
9bbe8c59d7
Merge pull request #51073 from nextcloud/dbal-exception-query
feat: log query for dbal exceptions
2025-03-04 16:32:55 +01:00
Arthur Schiwon
42d752f767
Merge pull request #51116 from nextcloud/enh/noid/nullable-range
feat(AppFramework): extend range check to optional parameters
2025-03-04 14:23:21 +01:00
Maxence Lange
a572a5c515 feat(appconfig): removing pre-migration check
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2025-03-04 10:28:14 -01:00
Nextcloud bot
a3729740b8
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-04 00:23:28 +00:00
Ferdinand Thiessen
3c4feff028
fix: Move login via email logic to local backend
Backends can decide which names they accept for login,
e.g. with user_ldap you can configure arbitrary login fields.
This was a hacky approach to allow login via email,
so instead this is now only handled by the local user backend.

This also fixes some other related problems:
Other logic relys on `backend::get()` which was not handling email,
so e.g. password policy could not block users logged in via email
if they use out-dated passwords.
Similar for other integrations, as the user backend was not consistent with
what is a login name and what not.

Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-03 18:02:07 +01:00
Stephan Orbaugh
3bc3d03048
Merge pull request #51000 from nextcloud/fix/federatedfilesharing/group-cleanup
fix(FederatedShareProvider): Delete external shares when groups are deleted or users removed from a group
2025-03-03 16:29:10 +01:00
provokateurin
0df4817be1
fix(Share20\Manager): Propagate user and group deletion to remote share providers
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-03 12:49:01 +01:00
provokateurin
dd47daa4a8
fix(Share20): Convert broken hooks to IEventListener
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-03 12:49:01 +01:00
provokateurin
8acfc0f0f2
refactor(TempManager): Simplify and unify implementations and remove legacy behavior
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-03 11:11:12 +01:00
Louis
afae742a2b
Merge pull request #51095 from nextcloud/artonge/fix/epehmeral_sessions
fix(login): Ephemeral sessions
2025-03-03 10:06:27 +01:00
Nextcloud bot
2dfc9eae17
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-03 00:22:53 +00:00
Varun Patil
0080853543
Merge pull request #51190 from nextcloud/pulsejet/truncate-1
feat(db): add truncateTable method
2025-03-02 14:52:21 -08:00
Varun Patil
c414ddee54 feat(db): add truncateTable method
Signed-off-by: Varun Patil <varunpatil@ucla.edu>
2025-03-02 10:36:13 -08:00
DaleBCooper
e1e0b68feb Fix A+ rating when checking with Nextcloud Security Scan.
Due to commit 33d7019 session.cookie_secure=true is not set when accessing /status.php.
This results in a degration from A+ to A rating due to missing  __Host prefix for nc_sameSiteCookielax and nc_sameSiteCookiestrict cookies.
2025-03-02 11:33:13 +00:00
Nextcloud bot
8e06e75717
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-02 00:22:45 +00:00
Nextcloud bot
92ba8fdcb5
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-01 00:45:06 +00:00
Nextcloud bot
a3d98c8756
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-01 00:22:56 +00:00
Joas Schilling
fed74d78ca
Merge pull request #50452 from nextcloud/chore/update-stub
chore: update php intl stub and fix type issues
2025-02-28 08:37:18 +01:00
Nextcloud bot
e1c8c2099a
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-02-28 00:23:18 +00:00
Ferdinand Thiessen
6900ac99e0
Merge pull request #50908 from nextcloud/chore/server-annotations
chore: Adjust `OCP\Server::get` annotation to work with phpstan
2025-02-27 22:23:20 +01:00
Arthur Schiwon
6594d7d96d
feat(AppFramework): extend range check to optional parameters
Now it also applies when a paramater is documtend with a pending |null,
but no further unionation is considered.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2025-02-27 19:49:04 +01:00
Ferdinand Thiessen
c82337f3b9
fix: incorrect types detected by updated stubs
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-27 19:07:39 +01:00
Côme Chilliet
001b12c482
Merge pull request #50999 from nextcloud/fix/move-away-from-oc-app
fix: Replace OC_App calls by IAppManager
2025-02-27 18:33:47 +01:00
Louis Chemineau
68f86b3066
fix(login): Support subfolder install for ephemeral sessions
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-02-27 16:22:45 +01:00
Louis Chemineau
47bd75a052
fix(login): Also check legacy annotation for ephemeral sessions
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-02-27 13:12:55 +01:00
Louis
c7900de4f2
Merge pull request #51051 from nextcloud/artonge/fix/login_flow_v2_sessions_2
feat: Close sessions created for login flow v2
2025-02-27 08:52:00 +01:00
Nextcloud bot
7ef9ffa078
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-02-27 00:22:16 +00:00
Robin Appelman
f3bd4a79d9
feat: log query for dbal exceptions
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-02-26 17:37:13 +01:00
Louis
2afb6ed50a
Merge pull request #51050 from nextcloud/artonge/fix/extra_files_integrity_check
fix: Report duplicated extra files in integrity check
2025-02-26 14:22:00 +01:00
Louis Chemineau
c6293204a2
feat: Close sessions created for login flow v2
Sessions created during the login flow v2 should be short lived to not leave an unexpected opened session in the browser.

This commit add a property to the session object to track its origin, and will close it as soon as possible, i.e., on the first non public page request.

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-02-26 13:42:18 +01:00
Louis Chemineau
cdd00bf803
fix: Report duplicated extra files in integrity check
The `array_diff` is not comparing the array keys. This means that an extra key with an expected hash will not be reported. Using `array_diff_assoc` will report such files.

For example, copying `status.php` to `status 2.php`, will only be reported with the new version.

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-02-26 10:28:39 +01:00
Joas Schilling
095ab4419e
fix(l10n): Improve english source strings
- No leading/trailing whitespace
- Use asci single quote

Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-02-26 09:54:32 +01:00
Nextcloud bot
abf294c383
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-02-26 00:21:46 +00:00
Andy Scherzinger
48d69c727a
fix(lint): correct comment identation
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
2025-02-25 22:35:50 +01:00
Andy Scherzinger
388301275b
Merge pull request #50764 from p1gp1g/patch-1
Update doc comment for prefixTableName
2025-02-25 22:16:04 +01:00
Robin Appelman
0a77ba99a2
feat: support migrating an instance to sharding
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-02-25 17:52:40 +01:00
Julius Knorr
0427d5d207
Merge pull request #50874 from nextcloud/artonge/fix/login_flow_v2_sessions
fix: Initialize lastConnectionCheck after first connection
2025-02-25 08:34:35 +01:00
Nextcloud bot
5d4be44748
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-02-24 20:39:08 +00:00
Côme Chilliet
d189ed3dd9 fix: Remove incorrect @throws annotations and move away from OC_App
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-24 17:48:34 +01:00