nextcloud/apps
Peter Ringelmann 10d1cec02d fix(frontend): add strict password confirmation for sensitive admin actions
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.

Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-04-23 15:08:00 +02:00
..
admin_audit fix(l10n): Update translations from Transifex 2025-09-08 00:13:54 +00:00
cloud_federation_api fix(l10n): Update translations from Transifex 2025-07-03 00:12:31 +00:00
comments fix(comments): add inline container size query to comment body 2025-11-02 19:18:15 +00:00
contactsinteraction fix(l10n): Update translations from Transifex 2025-09-27 00:14:00 +00:00
dashboard fix(l10n): Update translations from Transifex 2025-10-05 00:13:34 +00:00
dav fix(dav): Use share initiator to get the share node, because the owner might on another server 2026-04-20 16:28:42 +02:00
encryption fix(l10n): Update translations from Transifex 2025-10-10 00:13:39 +00:00
federatedfilesharing fix(federatedfilesharing): Do not set the share id for an existing share 2026-04-20 16:28:41 +02:00
federation fix(l10n): Update translations from Transifex 2025-09-28 00:13:41 +00:00
files feat(files): add configurations for file grouping 2026-04-16 08:43:13 -03:00
files_external fix(l10n): Update translations from Transifex 2025-10-08 00:13:38 +00:00
files_reminders fix(l10n): Update translations from Transifex 2025-10-03 00:15:07 +00:00
files_sharing chore: update openapi 2026-04-22 15:50:46 +02:00
files_trashbin feat(file-info): encapsulate logic to get last activity in getLastActivity function 2026-03-26 08:05:42 +00:00
files_versions fix(files_versions): Do not assume source exist when migrating versions to new storage 2025-11-06 07:24:26 +00:00
lookup_server_connector fix(l10n): Update translations from Transifex 2025-09-17 00:13:49 +00:00
oauth2 fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 15:08:00 +02:00
provisioning_api fix(l10n): Update translations from Transifex 2025-09-23 00:13:52 +00:00
settings fix(frontend): add strict password confirmation for sensitive admin actions 2026-04-23 15:08:00 +02:00
sharebymail fix(l10n): Update translations from Transifex 2025-09-22 00:13:45 +00:00
systemtags fix(l10n): Update translations from Transifex 2025-10-10 00:13:39 +00:00
testing test(dav): add integration test for principal property search 2025-07-02 15:40:25 +02:00
theming fix(theming): correctly parse CSS colors for user primary color picker 2025-10-14 13:57:19 +02:00
twofactor_backupcodes fix(l10n): Update translations from Transifex 2025-09-22 00:13:45 +00:00
updatenotification fix(l10n): Update translations from Transifex 2025-10-05 00:13:34 +00:00
user_ldap fix: Add missing Attribute and fix parameter type in renewpassword route 2026-03-19 08:46:32 +00:00
user_status fix(l10n): Update translations from Transifex 2025-09-23 00:13:52 +00:00
weather_status fix(l10n): Update translations from Transifex 2025-09-20 00:13:46 +00:00
webhook_listeners fix(l10n): Update translations from Transifex 2025-10-10 00:13:39 +00:00
workflowengine refactor(workflowengine): Check if class is correct 2025-12-10 19:12:53 +01:00