Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-03-23Fix unit testsJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-03-22Add real events for enabled 2fa providers for usersRoeland Jago Douma
* Shiny new events * Listener to still emit the old event Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-01-22Convert 2FA token type to stringChristoph Wurst
The IConfig service is documented to handle its data as strings, hence this changes the code a bit to ensure we store keys as string and convert them back when reading. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2020-10-12Use PSR logger in authenticationJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2020-04-10Use elseif instead of else ifChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2020-03-27Merge pull request #20170 from nextcloud/techdebt/remove-unused-importsChristoph Wurst
Remove unused imports
2020-03-26Use the shorter phpunit syntax for mocked return valuesChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2020-03-26Remove unused importsChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2019-11-27Make phpunit8 compatibleRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-05-17Allow 2FA to be setup on first loginRoeland Jago Douma
Once 2FA is enforced for a user and they have no 2FA setup yet this will now prompt them with a setup screen. Given that providers are enabled that allow setup then. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-10-15Make it possible to enforce mandatory 2FA for groupsChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-09-30Add mandatory 2FA service/classChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-09-25Only allow 2FA state changs if providers support the operationChristoph Wurst
Ref https://github.com/nextcloud/server/issues/11019. Add `twofactorauth:cleanup` command Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-08-10Remove unused importChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-08-10Fix 2FA being enforced if only backup codes provider is activeChristoph Wurst
Fixes https://github.com/nextcloud/server/issues/10634. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-08-08Fix 2FA provider registry population on loginChristoph Wurst
If the 2FA provider registry has not been populated yet, we have to make sure all available providers are loaded and queried on login. Otherwise previously active 2FA providers aren't detected as enabled. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-06-20Make 2FA providers statefulChristoph Wurst
This adds persistence to the Nextcloud server 2FA logic so that the server knows which 2FA providers are enabled for a specific user at any time, even when the provider is not available. The `IStatefulProvider` interface was added as tagging interface for providers that are compatible with this new API. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-01-31Add all parameters to returnValueMapJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2018-01-25Fix testsRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-09-12Fix AppPassword 2FA authRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-09-05Fix login with basic authRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-08-29Improve 2FARoeland Jago Douma
* Store the auth state in the session so we don't have to query it every time. * Added some tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-05-18Fix testsRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-03-22Don't do a recursive searchJoas Schilling
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-12-20fix 2fa activities testsChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2016-11-02bring back remember-meChristoph Wurst
* try to reuse the old session token for remember me login * decrypt/encrypt token password and set the session id accordingly * create remember-me cookies only if checkbox is checked and 2fa solved * adjust db token cleanup to store remembered tokens longer * adjust unit tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2016-10-03Do not use underscores in PSR4 namespaces of the backup codes appChristoph Wurst
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2016-09-06Fix getMock AuthenticationRoeland Jago Douma
2016-09-05add 2fa backup codes appChristoph Wurst
* add backup codes app unit tests * add integration tests for the backup codes app
2016-08-24prevent infinite redirect loops if the there is no 2fa provider to passChristoph Wurst
This fixes infinite loops that are caused whenever a user is about to solve a 2FA challenge, but the provider app is disabled at the same time. Since the session value usually indicates that the challenge needs to be solved before we grant access we have to remove that value instead in this special case.
2016-06-16assert app is loaded in unit testsChristoph Wurst
2016-06-16load 2FA provider apps before querying classesChristoph Wurst
2016-06-13fail hard if 2fa provider can not be loaded (#25061)Christoph Wurst
2016-05-26One more PSR-4 fix (#24852)Joas Schilling