nextcloud/lib
Arthur Schiwon eea5e1cca2
fix(Session): avoid password confirmation on SSO
SSO backends like SAML and OIDC tried a trick to suppress password
confirmations as they are not possible by design. At least for SAML it was
not reliable when existing user backends where used as user repositories.

Now we are setting a special scope with the token, and also make sure that
the scope is taken over when tokens are regenerated.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2024-06-12 19:35:37 +02:00
..
composer Merge pull request #38815 from nextcloud/backport/38490/stable26 2023-10-11 12:10:38 +02:00
l10n Fix(l10n): Update translations from Transifex 2024-03-26 00:19:52 +00:00
private fix(Session): avoid password confirmation on SSO 2024-06-12 19:35:37 +02:00
public Merge pull request #42548 from nextcloud/lock-restore-ttl-26 2024-01-02 16:57:54 +01:00
autoloader.php Add a built-in profiler inside Nextcloud 2022-04-04 10:28:26 +02:00
base.php fix(autoloader): no apcu no side effects 2023-09-08 18:56:19 +00:00
versioncheck.php Allow 8.2 in versioncheck 2023-02-02 12:05:20 +01:00