Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/core/Controller
AgeCommit message (Collapse)Author
2019-09-16Don't send executionContexts for Clear-Site-DataDaniel Kesselberg
There are plans to remove executionContexts from the spec: https://github.com/w3c/webappsec-clear-site-data/issues/59 Firefox already removed it https://bugzilla.mozilla.org/show_bug.cgi?id=1548034 Chromium implementation is not finish: https://bugs.chromium.org/p/chromium/issues/detail?id=898503&q=clear-site-data&sort=-modified&colspec=ID%20Pri%20M%20Stars%20ReleaseBlock%20Component%20Status%20Owner%20Summary%20OS%20Modified Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2019-07-10Return first value from $usersDaniel Kesselberg
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2019-06-26Fall back to black for non-color valuesJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-04-11Block install without CAN_INSTALL fileRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-03-28Make the endpoint more robust against faulty resource providersJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-19Return 200 instead of 404 when asking for collections of a resourceJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-19Use rich objects instead of name, link and iconJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-19Replace the icon-class with an absolute link to an imageJoas Schilling
Otherwise the icon can not be displayed in mobile apps Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-01Also check the access to collections on preparingJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-01Further work on the access cacheJoas Schilling
Searching for all is still a problem Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-01Fix doc blocksJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-01Implement search and rename in backendJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-03-01Implement frontend for search/renameJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net> Move to vuex Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-03-01Add iconClass to resourcesJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-03-01Make sure we query the node before fetching the nameJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-03-01Adjust parameter names on createCollectionOnResourceJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2019-03-01Make names mandatoryJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-01Allow to create collectionsJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-01Provider functionalityJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-03-01Add a controller with the most important methodsJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-02-26Add an event to the Autocomplete Controller to allow to filter the resultsJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2019-02-25Fix typo in info log for autoconfigMorris Jobke
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2019-02-25Login flow V2Roeland Jago Douma
This adds the new login flow. The desktop client will open up a browser and poll a returned endpoint at regular intervals to check if the flow is done. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-02-18Emit event if app password createdDaniel Kesselberg
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2019-02-18Publish activity for app token created by client login flowDaniel Kesselberg
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2019-02-18Publish activity for app token created by ocs apiDaniel Kesselberg
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2019-02-07Merge pull request #13969 from ↵Morris Jobke
nextcloud/enh/additional_scripts_no_on_public_pages No need to emit additonalscript event on public pages
2019-02-07Implement guest avatar endpointMichael Weimann
Signed-off-by: Michael Weimann <mail@michael-weimann.eu>
2019-02-06Do not do redirect handling when loggin outRoeland Jago Douma
Fixes #12568 Since the clearing of the execution context causes another reload. We should not do the redirect_uri handling as this results in redirecting back to the logout page on login. This adds a simple middleware that will just check if the ClearExecutionContext session variable is set. If that is the case it will just redirect back to the login page. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-02-06Add StandaloneTemplateResponseRoeland Jago Douma
This can be used by pages that do not have the full Nextcloud UI. So notifications etc do not load there. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-01-29Merge pull request #13869 from ↵Roeland Jago Douma
nextcloud/enh/clean_pending_2fa_session_on_password_change Clean pending 2FA authentication on password reset
2019-01-29Clean pending 2FA authentication on password resetRoeland Jago Douma
When a password is reste we should make sure that all users are properly logged in. Pending states should be cleared. For example a session where the 2FA code is not entered yet should be cleared. The token is now removed so the session will be killed the next time this is checked (within 5 minutes). Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-01-29Clears the local storage after logoutMichael Weimann
Signed-off-by: Michael Weimann <mail@michael-weimann.eu>
2019-01-23Honor remember_login_cookie_lifetimeRoeland Jago Douma
If the remember_login_cookie_lifetime is set to 0 this means we do not want to use remember me at all. In that case we should also not creatae a remember me cookie and should create a proper temp token. Further this specifies that is not 0 the remember me time should always be larger than the session timeout. Because else the behavior is not really defined. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-01-18Fix template paramterRoeland Jago Douma
Else we get shown an error page instead of the correct 403. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-01-15Generic message on password resetRoeland Jago Douma
There is no need to inform the user if the account existed or not. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-01-09Npmize (vendor) scriptsChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2019-01-04Fix loginflow with apptoken enter on iOSRoeland Jago Douma
It seems iOS doesn't like us to change the location. So now we submit it to the server that geneartes the redirect. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-12-17Fix SAML Client login flow on Apple devicesRoeland Jago Douma
Because the redirect from the SAML/SSO endpoint is a POST the lax/strict cookies are not properly send. Note that it is not strictly requried on this endpoint as we do not need the remember me data. Only the real session info is enough. The endpoint is also already protected by a state token. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-11-29Remove redirect pageJohn Molakvoæ (skjnldsv)
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-11-20Respect the disabled setting for lost_password_linkRoeland Jago Douma
Fixes #11146 As documented when it is set to disabled the user can't request a lost password. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-11-01Use the proper server for the apptoken flow loginRoeland Jago Douma
If a user can't authenticate normally (because they have 2FA that is not available on their devices for example). The redirect that is generated should be of the proper format. This means 1. Include the protocol 2. Include the possible subfolder Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-30added possibility to disable autocomplete in login formRayn0r
Signed-off-by: Rayn0r <Andre.Weidemann@web.de>
2018-10-25Keep list of icons in a separate file for use in the accessibility appJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2018-10-23Merge pull request #11847 from iPaat/Fix/DeleteCookiesThroughClearSiteDataMorris Jobke
Remove cookies from Clear-Site-Data Header
2018-10-17Don't require Same Site Cookies on assetsThomas Citharel
Which can be used for public iframe embeeding See https://github.com/nextcloud/calendar/issues/169 Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2018-10-15Remove cookies from Clear-Site-Data HeaderPatrick Conrad
In https://github.com/nextcloud/server/commit/2f87fb6b456fd109c90a5093c31b7a3f62a32040 this header was introduced. The referenced documentation says: > When delivered with a response from https://example.com/clear, the following header will cause cookies associated with the origin https://example.com to be cleared, as well as cookies on any origin in the same registered domain (e.g. https://www.example.com/ and https://more.subdomains.example.com/). This also applies if `https://nextcloud.example.com/` sends the `Clear-Site-Data: "cookies"` header. This is not the behavior we want at this point! So I removed the deletion of cookies from the header. This has no effect on the logout process as this header is supported only recently and the logout works in old browsers as well. Signed-off-by: Patrick Conrad <conrad@iza.org>
2018-10-08Merge pull request #10898 from ↵Morris Jobke
nextcloud/feature/10684/default-logo-color-theme-colors Switches the default logo color depending on the primary color
2018-10-03Add an endppoint for clients to request an app passwordRoeland Jago Douma
Now that we allow enforcing 2 factor auth it make sense if we also allow and endpoint where the clients can in the background fetch an apppassword if they were configured before the login flow was present. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-02Update all the publickey tokens if needed on web loginRoeland Jago Douma
* On weblogin check if we have invalid public key tokens * If so update them all with the new token This ensures that your marked as invalid tokens work again if you once login on the web. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-03 00:18:55 +0300