Commit graph

24993 commits

Author SHA1 Message Date
Joas Schilling
90fff7d6cc fix(auth): Allow 2FA challenges for Ephemeral sessions
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-03-18 09:16:58 +00:00
Git'Fellow
561775d2fe
Merge pull request #51536 from nextcloud/backport/51333/stable31
[stable31] fix(files): Make sure file pointer exists
2025-03-18 09:10:11 +01:00
Nextcloud bot
b2ff0daab7
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-18 00:24:01 +00:00
Joas Schilling
550bf27a6d
Merge pull request #51371 from nextcloud/backport/51361/stable31
[stable31] fix(base.php): Correct order for booting \OC\Server
2025-03-17 21:11:41 +01:00
Git'Fellow
55f50b485f fix(files): Make sure file pointer exists
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
2025-03-17 16:05:04 +00:00
provokateurin
4f27d82471
fix(RichObjectStrings): Make exception messages for invalid parameters more useful for debugging
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-17 06:46:12 +01:00
Nextcloud bot
2a83070836
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-16 00:23:48 +00:00
Nextcloud bot
7d54ff5398
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-15 00:23:39 +00:00
Nextcloud bot
4f4be6b0ea
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-14 00:23:26 +00:00
Nextcloud bot
3bcecbdaec
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-13 00:23:10 +00:00
Nextcloud bot
aebc0806fc
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-12 00:23:27 +00:00
Ferdinand Thiessen
324582729a
fix(lookup-server): disable lookup server for non-global scale setups
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-11 21:54:06 +01:00
Ferdinand Thiessen
aa7300b53d
fix(lookup-server): do not query data by default
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-11 21:39:33 +01:00
Nextcloud bot
c4a17a6bc8
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-11 00:23:08 +00:00
Joas Schilling
a7cee21ec1 fix(base.php): Correct order for booting \OC\Server
A recent change had broken authentication with an older
FastCGI Apache2 module, because the IRequest object got
initialised before the fix from self::handleAuthHeaders()
copied the authentication headers into the correct $_SERVER
variables.
Since this part is completely independent from any Nextcloud
code it is now done as a first thing within the init() call.

Additionally similar issues could happen when another class
would boot too early and read other global PHP settings like
ini values and default timezone, so those are now also moved
to the beginning.

Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-03-10 11:34:31 +00:00
Nextcloud bot
e24146d000
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-09 00:23:20 +00:00
Nextcloud bot
f68bda0353
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-08 00:22:25 +00:00
skjnldsv
f00d596b8c fix(systemtags): prevent tag edition if restricted
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

[skip ci]
2025-03-06 15:11:51 +00:00
Nextcloud bot
a157b65d22
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-06 08:26:24 +00:00
Nextcloud bot
0721bea606
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-06 00:23:39 +00:00
Louis Chemineau
fb41438db1 fix(login): Properly target public page with attribute
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-05 17:02:26 +00:00
Andy Scherzinger
5c0babe27b
Merge pull request #51251 from nextcloud/backport/50989/stable31
[stable31] fix: Use case insensitive check when validating login name
2025-03-05 17:47:50 +01:00
Marcel Müller
44e89610ed fix: No IFactory in constructor
Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>
2025-03-05 11:34:02 +00:00
Joas Schilling
93f039fb96 fix(files): Don't do session related work in the constructor of the View
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-03-05 11:34:02 +00:00
Cleopatra Enjeck M.
0535716391 fix: use mb_strtolower to convert login name
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 06:20:07 +00:00
Cleopatra Enjeck M.
90f83ac234 fix: Improve string comparison
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 06:20:07 +00:00
Cleopatra Enjeck M.
449676be7c fix: Use case insensitive check when validating login name
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
2025-03-05 06:20:07 +00:00
Nextcloud bot
ea24143154
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-05 00:22:51 +00:00
Robin Appelman
0ae944db2c feat: log query for dbal exceptions
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-03-04 15:33:54 +00:00
Andy Scherzinger
eb250fae02
Merge pull request #51197 from nextcloud/fix/51022/simpler-request-pre-upgrade
[stable31] fix(userconfig): simpler db request pre-upgrade
2025-03-04 13:11:20 +01:00
Kate
b0566ad780
Merge pull request #51203 from nextcloud/backport/51194/stable31
[stable31] refactor(TempManager): Simplify and unify implementations and remove legacy behavior
2025-03-04 10:16:24 +01:00
provokateurin
e8b7ddd14e
fix(Share20\Manager): Propagate user and group deletion to remote share providers
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-04 07:57:00 +01:00
provokateurin
64ed0c05dd
fix(Share20): Convert broken hooks to IEventListener
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-04 07:56:59 +01:00
Nextcloud bot
d3530a1859
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-04 00:23:37 +00:00
Maxence Lange
1fac9cfa14 fix(userconfig): simpler db request before 31 upgrade
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2025-03-03 14:46:41 -01:00
provokateurin
b42d26b42f refactor(TempManager): Simplify and unify implementations and remove legacy behavior
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-03 15:25:00 +00:00
Louis
4e7a3c1f9e
Merge pull request #51090 from nextcloud/backport/51051/stable31
[stable31] feat: Close sessions created for login flow v2
2025-03-03 12:28:48 +01:00
Louis Chemineau
2f71b7e197
fix(login): Support subfolder install for ephemeral sessions
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-03 11:00:29 +01:00
Louis Chemineau
ab01b76a19
fix(login): Also check legacy annotation for ephemeral sessions
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-03 11:00:29 +01:00
Nextcloud bot
c184c3d32a
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-03 00:23:01 +00:00
Joas Schilling
92bbcada49
Merge pull request #51173 from DaleBCooper/fix-a+-rating
Fix A+ rating when checking with Nextcloud Security Scan.
2025-03-02 11:03:42 +01:00
Nextcloud bot
043f0e6040
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-02 00:22:53 +00:00
DaleBCooper
ed15fdf0a3 Fix A+ rating when checking with Nextcloud Security Scan.
Due to commit 33d7019 session.cookie_secure=true is not set when accessing /status.php.
This results in a degration from A+ to A rating due to missing  __Host prefix for nc_sameSiteCookielax and nc_sameSiteCookiestrict cookies.
2025-03-01 23:57:51 +01:00
Nextcloud bot
fe2cf50496
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-03-01 00:45:14 +00:00
Nextcloud bot
52163b4905
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-02-28 00:23:28 +00:00
Joas Schilling
25268f2fdf
Merge pull request #51058 from nextcloud/backport/51049/stable31
[stable31] fix(l10n): Improve english source strings
2025-02-27 16:51:47 +01:00
Louis Chemineau
e840ee72b2 feat: Close sessions created for login flow v2
Sessions created during the login flow v2 should be short lived to not leave an unexpected opened session in the browser.

This commit add a property to the session object to track its origin, and will close it as soon as possible, i.e., on the first non public page request.

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-02-27 07:59:49 +00:00
Nextcloud bot
6e52b55555
Fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-02-27 00:22:29 +00:00
Louis Chemineau
fe56b3ccc2 fix: Report duplicated extra files in integrity check
The `array_diff` is not comparing the array keys. This means that an extra key with an expected hash will not be reported. Using `array_diff_assoc` will report such files.

For example, copying `status.php` to `status 2.php`, will only be reported with the new version.

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-02-26 13:26:38 +00:00
Joas Schilling
1a60bca362 fix(l10n): Improve english source strings
- No leading/trailing whitespace
- Use asci single quote

Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-02-26 13:08:49 +00:00