github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2021-12-16	Enable strict types for the 2FA middleware	Christoph Wurst
	Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-12-10	Fix setting up 2FA when no providers are set up but backup codes	Christoph Wurst
	2FA set up is allowed when only backup codes are set up but no other provider and no provider is failing. This patch syncs up the login controller check with the challenge controller check 10 lines above. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-11-17	Explicitly allow some routes without 2FA	Christoph Wurst
	Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-10-04	Allow "TwoFactor Nextcloud Notifications" to pull the state of the 2FA again	Joas Schilling
	Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-09-06	Remove 2FA exemption from PublicPage annotation	Lukas Reschke
	Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-07-30	Fix setting up 2FA providers when 2FA is enforced and bc are generated	Christoph Wurst
	When a user has backup codes generated and got their 2FA enforced then they should be able to set up TOTP and similar providers during the login. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-07-21	Improve provider check	Lukas Reschke
	Check if there is a provider missing. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-06-04	Update php licenses	John Molakvoæ (skjnldsv)
	Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2020-04-10	Format control structures, classes, methods and function	Christoph Wurst
	To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2020-04-10	Use elseif instead of else if	Christoph Wurst
	Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2019-12-05	Update license headers	Christoph Wurst
	Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2019-10-25	Harden middleware check	Roeland Jago Douma
	These annotations will allow for extra checks. And thus make it harder to break things. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-05-17	Allow 2FA to be setup on first login	Roeland Jago Douma
	Once 2FA is enforced for a user and they have no 2FA setup yet this will now prompt them with a setup screen. Given that providers are enabled that allow setup then. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2019-02-20	No need to check 2fa state on apptoken logins	Roeland Jago Douma
	If you login with an apptoken there is no need to check 2FA state as this does not apply to apptokens. Not checking saves us a query on each request made from a client. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-11-06	Update license headers	Morris Jobke
	Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2017-08-01	Remove explicit type hints for Controller	Lukas Reschke
	This is public API and breaks the middlewares of existing apps. Since this also requires maintaining two different code paths for 12 and 13 I'm at the moment voting for reverting this change. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-07-31	Fix middleware implementations signatures	Roeland Jago Douma
	Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-05-15	Check whether the $_SERVER['REQUEST_*'] vars exist before using them	Joas Schilling
	Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-08-24	prevent infinite redirect loops if the there is no 2fa provider to pass	Christoph Wurst
	This fixes infinite loops that are caused whenever a user is about to solve a 2FA challenge, but the provider app is disabled at the same time. Since the session value usually indicates that the challenge needs to be solved before we grant access we have to remove that value instead in this special case.
2016-08-12	Throw exception if you don't handle it	Roeland Jago Douma

2016-07-21	Fix others	Joas Schilling

2016-06-07	Allow to cancel 2FA after login	Joas Schilling

2016-06-01	remember redirect_url when solving the 2FA challenge	Christoph Wurst

2016-05-26	Update license headers	Lukas Reschke

2016-05-23	add OCC command to enable/disable 2FA for a user	Christoph Wurst

2016-05-23	Add two factor auth to core	Christoph Wurst