From 53db05a1f67fc974dba904ec158b2d67fa72df95 Mon Sep 17 00:00:00 2001
From: Roeland Jago Douma <roeland@famdouma.nl>
Date: Sun, 9 Feb 2020 20:06:08 +0100
Subject: Start with webauthn

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
---
 core/src/components/login/LoginButton.vue          |  56 ++++++
 core/src/components/login/LoginForm.vue            |  19 +-
 .../src/components/login/PasswordLessLoginForm.vue | 208 +++++++++++++++++++++
 3 files changed, 269 insertions(+), 14 deletions(-)
 create mode 100644 core/src/components/login/LoginButton.vue
 create mode 100644 core/src/components/login/PasswordLessLoginForm.vue

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/LoginButton.vue b/core/src/components/login/LoginButton.vue
new file mode 100644
index 00000000000..f7d426e6c63
--- /dev/null
+++ b/core/src/components/login/LoginButton.vue
@@ -0,0 +1,56 @@
+<!--
+  - @copyright 2020 Christoph Wurst <christoph@winzerhof-wurst.at>
+  -
+  - @author 2020 Christoph Wurst <christoph@winzerhof-wurst.at>
+  -
+  - @license GNU AGPL version 3 or any later version
+  -
+  - This program is free software: you can redistribute it and/or modify
+  - it under the terms of the GNU Affero General Public License as
+  - published by the Free Software Foundation, either version 3 of the
+  - License, or (at your option) any later version.
+  -
+  - This program is distributed in the hope that it will be useful,
+  - but WITHOUT ANY WARRANTY; without even the implied warranty of
+  - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  - GNU Affero General Public License for more details.
+  -
+  - You should have received a copy of the GNU Affero General Public License
+  - along with this program.  If not, see <http://www.gnu.org/licenses/>.
+  -->
+
+<template>
+	<div id="submit-wrapper" @click="$emit('click')">
+		<input id="submit-form"
+			type="submit"
+			class="login primary"
+			title=""
+			:value="!loading ? t('core', 'Log in') : t('core', 'Logging in …')">
+		<div class="submit-icon"
+			:class="{
+				'icon-confirm-white': !loading,
+				'icon-loading-small': loading && invertedColors,
+				'icon-loading-small-dark': loading && !invertedColors,
+			}" />
+	</div>
+</template>
+
+<script>
+export default {
+	name: 'LoginButton',
+	props: {
+		loading: {
+			type: Boolean,
+			required: true,
+		},
+		invertedColors: {
+			type: Boolean,
+			default: false,
+		},
+	},
+}
+</script>
+
+<style scoped>
+
+</style>
diff --git a/core/src/components/login/LoginForm.vue b/core/src/components/login/LoginForm.vue
index 687896ceb54..a20ce6dc4c2 100644
--- a/core/src/components/login/LoginForm.vue
+++ b/core/src/components/login/LoginForm.vue
@@ -20,7 +20,8 @@
   -->
 
 <template>
-	<form method="post"
+	<form ref="loginForm"
+		method="post"
 		name="login"
 		:action="OC.generateUrl('login')"
 		@submit="submit">
@@ -84,19 +85,7 @@
 				</a>
 			</p>
 
-			<div id="submit-wrapper">
-				<input id="submit-form"
-					type="submit"
-					class="login primary"
-					title=""
-					:value="!loading ? t('core', 'Log in') : t('core', 'Logging in …')">
-				<div class="submit-icon"
-					:class="{
-						'icon-confirm-white': !loading,
-						'icon-loading-small': loading && invertedColors,
-						'icon-loading-small-dark': loading && !invertedColors,
-					}" />
-			</div>
+			<LoginButton :loading="loading" :inverted-colors="invertedColors" />
 
 			<p v-if="invalidPassword"
 				class="warning wrongPasswordMsg">
@@ -135,9 +124,11 @@
 
 <script>
 import jstz from 'jstimezonedetect'
+import LoginButton from './LoginButton'
 
 export default {
 	name: 'LoginForm',
+	components: { LoginButton },
 	props: {
 		username: {
 			type: String,
diff --git a/core/src/components/login/PasswordLessLoginForm.vue b/core/src/components/login/PasswordLessLoginForm.vue
new file mode 100644
index 00000000000..028f7d547da
--- /dev/null
+++ b/core/src/components/login/PasswordLessLoginForm.vue
@@ -0,0 +1,208 @@
+<template>
+	<form v-if="isHttps && hasPublicKeyCredential"
+		ref="loginForm"
+		method="post"
+		name="login"
+		@submit.prevent="submit">
+		<fieldset>
+			<p class="grouptop groupbottom">
+				<input id="user"
+					ref="user"
+					v-model="user"
+					type="text"
+					name="user"
+					:autocomplete="autoCompleteAllowed ? 'on' : 'off'"
+					:placeholder="t('core', 'Username or email')"
+					:aria-label="t('core', 'Username or email')"
+					required
+					@change="$emit('update:username', user)">
+				<label for="user" class="infield">{{ t('core', 'Username or	email') }}</label>
+			</p>
+
+			<div v-if="!validCredentials">
+				{{ t('core', 'Your account is not setup for passwordless login.') }}
+			</div>
+
+			<LoginButton v-if="validCredentials"
+				:loading="loading"
+				:inverted-colors="invertedColors"
+				@click="authenticate" />
+		</fieldset>
+	</form>
+	<div v-else-if="!hasPublicKeyCredential">
+		{{ t('core', 'Passwordless authentication is not supported in your browser.')}}
+	</div>
+	<div v-else-if="!isHttps">
+		{{ t('core', 'Passwordless authentication is only available over a secure connection.')}}
+	</div>
+</template>
+
+<script>
+import {
+	startAuthentication,
+	finishAuthentication,
+} from '../../service/WebAuthnAuthenticationService'
+import LoginButton from './LoginButton'
+
+class NoValidCredentials extends Error {
+
+}
+
+export default {
+	name: 'PasswordLessLoginForm',
+	components: {
+		LoginButton,
+	},
+	props: {
+		username: {
+			type: String,
+			default: '',
+		},
+		redirectUrl: {
+			type: String,
+		},
+		invertedColors: {
+			type: Boolean,
+			default: false,
+		},
+		autoCompleteAllowed: {
+			type: Boolean,
+			default: true,
+		},
+		isHttps: {
+			type: Boolean,
+			default: false,
+		},
+		hasPublicKeyCredential: {
+			type: Boolean,
+			default: false,
+		}
+	},
+	data() {
+		return {
+			user: this.username,
+			loading: false,
+			validCredentials: true,
+		}
+	},
+	methods: {
+		authenticate() {
+			console.debug('passwordless login initiated')
+
+			this.getAuthenticationData(this.user)
+				.then(publicKey => {
+					console.debug(publicKey)
+					return publicKey
+				})
+				.then(this.sign)
+				.then(this.completeAuthentication)
+				.catch(error => {
+					if (error instanceof NoValidCredentials) {
+						this.validCredentials = false
+						return
+					}
+					console.debug(error)
+				})
+		},
+		getAuthenticationData(uid) {
+			const base64urlDecode = function(input) {
+				// Replace non-url compatible chars with base64 standard chars
+				input = input
+					.replace(/-/g, '+')
+					.replace(/_/g, '/')
+
+				// Pad out with standard base64 required padding characters
+				const pad = input.length % 4
+				if (pad) {
+					if (pad === 1) {
+						throw new Error('InvalidLengthError: Input base64url string is the wrong length to determine padding')
+					}
+					input += new Array(5 - pad).join('=')
+				}
+
+				return window.atob(input)
+			}
+
+			return startAuthentication(uid)
+				.then(publicKey => {
+					console.debug('Obtained PublicKeyCredentialRequestOptions')
+					console.debug(publicKey)
+
+					if (!Object.prototype.hasOwnProperty.call(publicKey, 'allowCredentials')) {
+						console.debug('No credentials found.')
+						throw new NoValidCredentials()
+					}
+
+					publicKey.challenge = Uint8Array.from(base64urlDecode(publicKey.challenge), c => c.charCodeAt(0))
+					publicKey.allowCredentials = publicKey.allowCredentials.map(function(data) {
+						return {
+							...data,
+							'id': Uint8Array.from(base64urlDecode(data.id), c => c.charCodeAt(0)),
+						}
+					})
+
+					console.debug('Converted PublicKeyCredentialRequestOptions')
+					console.debug(publicKey)
+					return publicKey
+				})
+				.catch(error => {
+					console.debug('Error while obtaining data')
+					throw error
+				})
+		},
+		sign(publicKey) {
+			const arrayToBase64String = function(a) {
+				return window.btoa(String.fromCharCode(...a))
+			}
+
+			return navigator.credentials.get({ publicKey })
+				.then(data => {
+					console.debug(data)
+					console.debug(new Uint8Array(data.rawId))
+					console.debug(arrayToBase64String(new Uint8Array(data.rawId)))
+					return {
+						id: data.id,
+						type: data.type,
+						rawId: arrayToBase64String(new Uint8Array(data.rawId)),
+						response: {
+							authenticatorData: arrayToBase64String(new Uint8Array(data.response.authenticatorData)),
+							clientDataJSON: arrayToBase64String(new Uint8Array(data.response.clientDataJSON)),
+							signature: arrayToBase64String(new Uint8Array(data.response.signature)),
+							userHandle: data.response.userHandle ? arrayToBase64String(new Uint8Array(data.response.userHandle)) : null,
+						},
+					}
+				})
+				.then(challenge => {
+					console.debug(challenge)
+					return challenge
+				})
+				.catch(error => {
+					console.debug('GOT AN ERROR!')
+					console.debug(error) // Example: timeout, interaction refused...
+				})
+		},
+		completeAuthentication(challenge) {
+			console.debug('TIME TO COMPLETE')
+
+			const location = this.redirectUrl
+
+			return finishAuthentication(JSON.stringify(challenge))
+				.then(data => {
+					console.debug('Logged in redirecting')
+					window.location.href = location
+				})
+				.catch(error => {
+					console.debug('GOT AN ERROR WHILE SUBMITTING CHALLENGE!')
+					console.debug(error) // Example: timeout, interaction refused...
+				})
+		},
+		submit() {
+			// noop
+		},
+	},
+}
+</script>
+
+<style scoped>
+
+</style>
-- 
cgit v1.2.3


From 531b1288e44380a4987f4e656f17d22822767b47 Mon Sep 17 00:00:00 2001
From: Daniel Kesselberg <mail@danielkesselberg.de>
Date: Sat, 28 Mar 2020 21:36:16 +0100
Subject: Add fieldset to align arrow

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
---
 core/src/components/login/ResetPassword.vue | 96 +++++++++++++++--------------
 1 file changed, 49 insertions(+), 47 deletions(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/ResetPassword.vue b/core/src/components/login/ResetPassword.vue
index 2d045692285..bf23bbe5aa4 100644
--- a/core/src/components/login/ResetPassword.vue
+++ b/core/src/components/login/ResetPassword.vue
@@ -21,54 +21,56 @@
 
 <template>
 	<form @submit.prevent="submit">
-		<p>
-			<input id="user"
-				v-model="user"
-				type="text"
-				name="user"
-				:placeholder="t('core', 'Username or email')"
-				:aria-label="t('core', 'Username or email')"
-				required
-				@change="updateUsername">
-			<!--<?php p($_['user_autofocus'] ? 'autofocus' : ''); ?>
-			autocomplete="<?php p($_['login_form_autocomplete']); ?>" autocapitalize="none" autocorrect="off"-->
-			<label for="user" class="infield">{{ t('core', 'Username or email') }}</label>
-		</p>
-		<div id="reset-password-wrapper">
-			<input id="reset-password-submit"
-				type="submit"
-				class="login primary"
-				title=""
-				:value="t('core', 'Reset password')">
-			<div class="submit-icon"
-				:class="{
-					'icon-confirm-white': !loading,
-					'icon-loading-small': loading && invertedColors,
-					'icon-loading-small-dark': loading && !invertedColors,
-				}" />
-		</div>
-		<p v-if="message === 'send-success'"
-			class="update">
-			{{ t('core', 'A password reset message has been sent to the e-mail address of this account. If you do not receive it, check your spam/junk folders or ask your local administrator for help.') }}
-			<br>
-			{{ t('core', 'If it is not there ask your local administrator.') }}
-		</p>
-		<p v-else-if="message === 'send-error'"
-			class="update warning">
-			{{ t('core', 'Couldn\'t send reset email. Please contact your administrator.') }}
-		</p>
-		<p v-else-if="message === 'reset-error'"
-			class="update warning">
-			{{ t('core', 'Password can not be changed. Please contact your administrator.') }}
-		</p>
-		<p v-else-if="message"
-			class="update"
-			:class="{warning: error}" />
+		<fieldset>
+			<p>
+				<input id="user"
+					v-model="user"
+					type="text"
+					name="user"
+					:placeholder="t('core', 'Username or email')"
+					:aria-label="t('core', 'Username or email')"
+					required
+					@change="updateUsername">
+				<!--<?php p($_['user_autofocus'] ? 'autofocus' : ''); ?>
+				autocomplete="<?php p($_['login_form_autocomplete']); ?>" autocapitalize="none" autocorrect="off"-->
+				<label for="user" class="infield">{{ t('core', 'Username or email') }}</label>
+			</p>
+			<div id="reset-password-wrapper">
+				<input id="reset-password-submit"
+					type="submit"
+					class="login primary"
+					title=""
+					:value="t('core', 'Reset password')">
+				<div class="submit-icon"
+					:class="{
+						'icon-confirm-white': !loading,
+						'icon-loading-small': loading && invertedColors,
+						'icon-loading-small-dark': loading && !invertedColors,
+					}" />
+			</div>
+			<p v-if="message === 'send-success'"
+				class="update">
+				{{ t('core', 'A password reset message has been sent to the e-mail address of this account. If you do not receive it, check your spam/junk folders or ask your local administrator for help.') }}
+				<br>
+				{{ t('core', 'If it is not there ask your local administrator.') }}
+			</p>
+			<p v-else-if="message === 'send-error'"
+				class="update warning">
+				{{ t('core', 'Couldn\'t send reset email. Please contact your administrator.') }}
+			</p>
+			<p v-else-if="message === 'reset-error'"
+				class="update warning">
+				{{ t('core', 'Password can not be changed. Please contact your administrator.') }}
+			</p>
+			<p v-else-if="message"
+				class="update"
+				:class="{warning: error}" />
 
-		<a href="#"
-			@click.prevent="$emit('abort')">
-			{{ t('core', 'Back to login') }}
-		</a>
+			<a href="#"
+				@click.prevent="$emit('abort')">
+				{{ t('core', 'Back to login') }}
+			</a>
+		</fieldset>
 	</form>
 </template>
 
-- 
cgit v1.2.3


From d71b93235d92ffa1c9b0031c4175811071140dd2 Mon Sep 17 00:00:00 2001
From: Liam JACK <1422590-liamjack@users.noreply.gitlab.com>
Date: Sat, 18 Apr 2020 18:21:08 +0200
Subject: Fix #20551 - Disable autocapitalize for username field on login /
 reset password pages

Signed-off-by: Liam JACK <1422590-liamjack@users.noreply.gitlab.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
---
 core/src/components/login/LoginForm.vue     | 1 +
 core/src/components/login/ResetPassword.vue | 1 +
 2 files changed, 2 insertions(+)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/LoginForm.vue b/core/src/components/login/LoginForm.vue
index a20ce6dc4c2..e37d577b5d5 100644
--- a/core/src/components/login/LoginForm.vue
+++ b/core/src/components/login/LoginForm.vue
@@ -59,6 +59,7 @@
 					v-model="user"
 					type="text"
 					name="user"
+					autocapitalize="off"
 					:autocomplete="autoCompleteAllowed ? 'on' : 'off'"
 					:placeholder="t('core', 'Username or email')"
 					:aria-label="t('core', 'Username or email')"
diff --git a/core/src/components/login/ResetPassword.vue b/core/src/components/login/ResetPassword.vue
index bf23bbe5aa4..21f545435a7 100644
--- a/core/src/components/login/ResetPassword.vue
+++ b/core/src/components/login/ResetPassword.vue
@@ -27,6 +27,7 @@
 					v-model="user"
 					type="text"
 					name="user"
+					autocapitalize="off"
 					:placeholder="t('core', 'Username or email')"
 					:aria-label="t('core', 'Username or email')"
 					required
-- 
cgit v1.2.3


From 94ae04d3032a83a9455c4e2df20942aceea67574 Mon Sep 17 00:00:00 2001
From: Roeland Jago Douma <roeland@famdouma.nl>
Date: Tue, 2 Jun 2020 14:09:27 +0200
Subject: OC.routing is just a @nextcloud/routing proxy

So lets kill the duplicate code!

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
---
 core/src/components/login/ResetPassword.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/ResetPassword.vue b/core/src/components/login/ResetPassword.vue
index 21f545435a7..cba7a89fd88 100644
--- a/core/src/components/login/ResetPassword.vue
+++ b/core/src/components/login/ResetPassword.vue
@@ -78,7 +78,7 @@
 <script>
 import axios from '@nextcloud/axios'
 
-import { generateUrl } from '../../OC/routing'
+import { generateUrl } from '@nextcloud/router'
 
 export default {
 	name: 'ResetPassword',
-- 
cgit v1.2.3


From ed3e03821bab0de471f659c399777217531a4323 Mon Sep 17 00:00:00 2001
From: Joas Schilling <coding@schilljs.com>
Date: Tue, 14 Jul 2020 10:59:11 +0200
Subject: Use space instead of tab inside translation

Signed-off-by: Joas Schilling <coding@schilljs.com>
---
 core/src/components/login/LoginForm.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/LoginForm.vue b/core/src/components/login/LoginForm.vue
index e37d577b5d5..113fe821913 100644
--- a/core/src/components/login/LoginForm.vue
+++ b/core/src/components/login/LoginForm.vue
@@ -65,7 +65,7 @@
 					:aria-label="t('core', 'Username or email')"
 					required
 					@change="updateUsername">
-				<label for="user" class="infield">{{ t('core', 'Username or	email') }}</label>
+				<label for="user" class="infield">{{ t('core', 'Username or email') }}</label>
 			</p>
 
 			<p class="groupbottom"
-- 
cgit v1.2.3


From 2607d2df1aba841e6513a99cfea2ce4eee7b2699 Mon Sep 17 00:00:00 2001
From: Joas Schilling <coding@schilljs.com>
Date: Tue, 14 Jul 2020 11:05:17 +0200
Subject: Use generateUrl and imagePath instead of OC.*

Signed-off-by: Joas Schilling <coding@schilljs.com>
---
 core/src/components/login/LoginForm.vue | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/LoginForm.vue b/core/src/components/login/LoginForm.vue
index 113fe821913..5adf5be0eae 100644
--- a/core/src/components/login/LoginForm.vue
+++ b/core/src/components/login/LoginForm.vue
@@ -23,7 +23,7 @@
 	<form ref="loginForm"
 		method="post"
 		name="login"
-		:action="OC.generateUrl('login')"
+		:action="loginActionUrl"
 		@submit="submit">
 		<fieldset>
 			<div v-if="apacheAuthFailed"
@@ -47,7 +47,7 @@
 				class="hidden">
 				<img class="float-spinner"
 					alt=""
-					:src="OC.imagePath('core', 'loading-dark.gif')">
+					:src="loadingIcon">
 				<span id="messageText" />
 				<!-- the following div ensures that the spinner is always inside the #message div -->
 				<div style="clear: both;" />
@@ -82,7 +82,7 @@
 				<label for="password"
 					class="infield">{{ t('Password') }}</label>
 				<a href="#" class="toggle-password" @click.stop.prevent="togglePassword">
-					<img :src="OC.imagePath('core', 'actions/toggle.svg')">
+					<img :src="toggleIcon">
 				</a>
 			</p>
 
@@ -126,6 +126,10 @@
 <script>
 import jstz from 'jstimezonedetect'
 import LoginButton from './LoginButton'
+import {
+	generateUrl,
+	imagePath,
+} from '@nextcloud/router'
 
 export default {
 	name: 'LoginForm',
@@ -185,6 +189,15 @@ export default {
 		userDisabled() {
 			return this.errors.indexOf('userdisabled') !== -1
 		},
+		toggleIcon() {
+			return imagePath('core', 'actions/toggle.svg')
+		},
+		loadingIcon() {
+			return imagePath('core', 'loading-dark.gif')
+		},
+		loginActionUrl() {
+			return generateUrl('login')
+		},
 	},
 	mounted() {
 		if (this.username === '') {
-- 
cgit v1.2.3


From 6fcd075730dbd63d5dbb69da0ca5983b51a7240e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?John=20Molakvo=C3=A6=20=28skjnldsv=29?=
 <skjnldsv@protonmail.com>
Date: Mon, 20 Jul 2020 12:30:35 +0200
Subject: Use DOMContentLoaded and fix sharebymail loading issue
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
---
 core/src/components/login/PasswordLessLoginForm.vue | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/PasswordLessLoginForm.vue b/core/src/components/login/PasswordLessLoginForm.vue
index 028f7d547da..5326ab7a5f3 100644
--- a/core/src/components/login/PasswordLessLoginForm.vue
+++ b/core/src/components/login/PasswordLessLoginForm.vue
@@ -30,10 +30,10 @@
 		</fieldset>
 	</form>
 	<div v-else-if="!hasPublicKeyCredential">
-		{{ t('core', 'Passwordless authentication is not supported in your browser.')}}
+		{{ t('core', 'Passwordless authentication is not supported in your browser.') }}
 	</div>
 	<div v-else-if="!isHttps">
-		{{ t('core', 'Passwordless authentication is only available over a secure connection.')}}
+		{{ t('core', 'Passwordless authentication is only available over a secure connection.') }}
 	</div>
 </template>
 
@@ -76,7 +76,7 @@ export default {
 		hasPublicKeyCredential: {
 			type: Boolean,
 			default: false,
-		}
+		},
 	},
 	data() {
 		return {
-- 
cgit v1.2.3


From 4c08b1754da4407f2eb905be7580e7cd886cefdd Mon Sep 17 00:00:00 2001
From: Roeland Jago Douma <roeland@famdouma.nl>
Date: Wed, 22 Jul 2020 09:23:11 +0200
Subject: Do not double encode the userid in webauthn login

* Else login fails with webauthn devices that send the userid
  - Like windows hello

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
---
 core/src/components/login/PasswordLessLoginForm.vue | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/PasswordLessLoginForm.vue b/core/src/components/login/PasswordLessLoginForm.vue
index 5326ab7a5f3..87544e0ffff 100644
--- a/core/src/components/login/PasswordLessLoginForm.vue
+++ b/core/src/components/login/PasswordLessLoginForm.vue
@@ -155,6 +155,10 @@ export default {
 				return window.btoa(String.fromCharCode(...a))
 			}
 
+			const arrayToString = function(a) {
+				return String.fromCharCode(...a)
+			}
+
 			return navigator.credentials.get({ publicKey })
 				.then(data => {
 					console.debug(data)
@@ -168,7 +172,7 @@ export default {
 							authenticatorData: arrayToBase64String(new Uint8Array(data.response.authenticatorData)),
 							clientDataJSON: arrayToBase64String(new Uint8Array(data.response.clientDataJSON)),
 							signature: arrayToBase64String(new Uint8Array(data.response.signature)),
-							userHandle: data.response.userHandle ? arrayToBase64String(new Uint8Array(data.response.userHandle)) : null,
+							userHandle: data.response.userHandle ? arrayToString(new Uint8Array(data.response.userHandle)) : null,
 						},
 					}
 				})
-- 
cgit v1.2.3


From a384b4a97a2a4444d8e2c831765dbf35c8da0db2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?John=20Molakvo=C3=A6=20=28skjnldsv=29?=
 <skjnldsv@protonmail.com>
Date: Fri, 31 Jul 2020 09:31:39 +0200
Subject: Bump @nextcloud/eslint-config and peers
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
---
 core/src/components/login/PasswordLessLoginForm.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/PasswordLessLoginForm.vue b/core/src/components/login/PasswordLessLoginForm.vue
index 87544e0ffff..0cd7cb81cfe 100644
--- a/core/src/components/login/PasswordLessLoginForm.vue
+++ b/core/src/components/login/PasswordLessLoginForm.vue
@@ -137,7 +137,7 @@ export default {
 					publicKey.allowCredentials = publicKey.allowCredentials.map(function(data) {
 						return {
 							...data,
-							'id': Uint8Array.from(base64urlDecode(data.id), c => c.charCodeAt(0)),
+							id: Uint8Array.from(base64urlDecode(data.id), c => c.charCodeAt(0)),
 						}
 					})
 
-- 
cgit v1.2.3


From 1a1b3e20e470a945dd9f5fab1d99174b10cbb141 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?John=20Molakvo=C3=A6=20=28skjnldsv=29?=
 <skjnldsv@protonmail.com>
Date: Mon, 3 Aug 2020 12:54:37 +0200
Subject: Fix unified search
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
---
 core/src/components/login/PasswordLessLoginForm.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/PasswordLessLoginForm.vue b/core/src/components/login/PasswordLessLoginForm.vue
index 0cd7cb81cfe..df774599f92 100644
--- a/core/src/components/login/PasswordLessLoginForm.vue
+++ b/core/src/components/login/PasswordLessLoginForm.vue
@@ -41,7 +41,7 @@
 import {
 	startAuthentication,
 	finishAuthentication,
-} from '../../service/WebAuthnAuthenticationService'
+} from '../../services/WebAuthnAuthenticationService'
 import LoginButton from './LoginButton'
 
 class NoValidCredentials extends Error {
-- 
cgit v1.2.3


From 73407d9ee17973e396cf124cc31fa1b5c6be6124 Mon Sep 17 00:00:00 2001
From: Nina Pypchenko <22447785+nina-py@users.noreply.github.com>
Date: Wed, 16 Dec 2020 22:04:41 +1100
Subject: Fix untranslated "User disabled" on login screen

Signed-off-by: Nina Pypchenko <22447785+nina-py@users.noreply.github.com>

Closes #24549.
---
 core/src/components/login/LoginForm.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/LoginForm.vue b/core/src/components/login/LoginForm.vue
index 5adf5be0eae..9f0d4f9ba1c 100644
--- a/core/src/components/login/LoginForm.vue
+++ b/core/src/components/login/LoginForm.vue
@@ -94,7 +94,7 @@
 			</p>
 			<p v-else-if="userDisabled"
 				class="warning userDisabledMsg">
-				{{ t('lib', 'User disabled') }}
+				{{ t('core', 'User disabled') }}
 			</p>
 
 			<p v-if="throttleDelay && throttleDelay > 5000"
-- 
cgit v1.2.3


From 7cbb2bb5957f26e087ff7f56e6ee243f3a8c7913 Mon Sep 17 00:00:00 2001
From: Valdnet <47037905+Valdnet@users.noreply.github.com>
Date: Fri, 9 Apr 2021 12:39:12 +0200
Subject: l10n: Correct spelling

Unify the spelling in applications.

Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>
---
 core/src/components/login/ResetPassword.vue | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/ResetPassword.vue b/core/src/components/login/ResetPassword.vue
index cba7a89fd88..10f1f8269f3 100644
--- a/core/src/components/login/ResetPassword.vue
+++ b/core/src/components/login/ResetPassword.vue
@@ -51,7 +51,7 @@
 			</div>
 			<p v-if="message === 'send-success'"
 				class="update">
-				{{ t('core', 'A password reset message has been sent to the e-mail address of this account. If you do not receive it, check your spam/junk folders or ask your local administrator for help.') }}
+				{{ t('core', 'A password reset message has been sent to the email address of this account. If you do not receive it, check your spam/junk folders or ask your local administrator for help.') }}
 				<br>
 				{{ t('core', 'If it is not there ask your local administrator.') }}
 			</p>
@@ -133,7 +133,7 @@ export default {
 					this.message = 'send-success'
 				})
 				.catch(e => {
-					console.error('could not send reset e-mail request', e)
+					console.error('could not send reset email request', e)
 
 					this.error = true
 					this.message = 'send-error'
-- 
cgit v1.2.3


From dcf044a7a6cbf08fddd3744cb953c8c6cd34f0f5 Mon Sep 17 00:00:00 2001
From: "Jan C. Borchardt" <hey@jancborchardt.net>
Date: Mon, 12 Apr 2021 14:58:26 +0200
Subject: Fix password visibility toggle alt text and hover/focus feedback

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>
---
 core/src/components/login/LoginForm.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/LoginForm.vue b/core/src/components/login/LoginForm.vue
index 9f0d4f9ba1c..c75b6f2c7ea 100644
--- a/core/src/components/login/LoginForm.vue
+++ b/core/src/components/login/LoginForm.vue
@@ -82,7 +82,7 @@
 				<label for="password"
 					class="infield">{{ t('Password') }}</label>
 				<a href="#" class="toggle-password" @click.stop.prevent="togglePassword">
-					<img :src="toggleIcon">
+					<img :src="toggleIcon" :alt="t('core', 'Toggle password visibility')">
 				</a>
 			</p>
 
-- 
cgit v1.2.3


From ddfb081463227db147b33f601e0c1ce508170146 Mon Sep 17 00:00:00 2001
From: Valdnet <47037905+Valdnet@users.noreply.github.com>
Date: Mon, 12 Apr 2021 10:22:20 +0200
Subject: l10n: Unify spelling

Spelling unification in Nextcloud applications.
---
 core/src/components/login/ResetPassword.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/ResetPassword.vue b/core/src/components/login/ResetPassword.vue
index 10f1f8269f3..79589a96aca 100644
--- a/core/src/components/login/ResetPassword.vue
+++ b/core/src/components/login/ResetPassword.vue
@@ -61,7 +61,7 @@
 			</p>
 			<p v-else-if="message === 'reset-error'"
 				class="update warning">
-				{{ t('core', 'Password can not be changed. Please contact your administrator.') }}
+				{{ t('core', 'Password cannot be changed. Please contact your administrator.') }}
 			</p>
 			<p v-else-if="message"
 				class="update"
-- 
cgit v1.2.3


From d27aecebc0750765180020a34a3b33beb676436b Mon Sep 17 00:00:00 2001
From: Valdnet <47037905+Valdnet@users.noreply.github.com>
Date: Mon, 12 Apr 2021 10:23:11 +0200
Subject: l10n: Unify spelling

Spelling unification in Nextcloud applications.
---
 core/src/components/login/UpdatePassword.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/UpdatePassword.vue b/core/src/components/login/UpdatePassword.vue
index 3fa3c60773c..cb615a846d2 100644
--- a/core/src/components/login/UpdatePassword.vue
+++ b/core/src/components/login/UpdatePassword.vue
@@ -125,7 +125,7 @@ export default {
 				}
 			} catch (e) {
 				this.error = true
-				this.message = e.message ? e.message : t('core', 'Password can not be changed. Please contact your administrator.')
+				this.message = e.message ? e.message : t('core', 'Password cannot be changed. Please contact your administrator.')
 			} finally {
 				this.loading = false
 			}
-- 
cgit v1.2.3


From 86080e68b2a23b0759d81509c3bf47ad254f5ce7 Mon Sep 17 00:00:00 2001
From: Morris Jobke <hey@morrisjobke.de>
Date: Thu, 17 Jun 2021 10:01:31 +0200
Subject: Allow WebAuthn on localhost as well

* browsers typically whiteliste this as well - https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API
* for developing purposes see https://developer.chrome.com/docs/devtools/webauthn/

Signed-off-by: Morris Jobke <hey@morrisjobke.de>
Signed-off-by: Louis Chemineau <louis@chmn.me>
---
 core/src/components/login/PasswordLessLoginForm.vue | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to 'core/src/components/login')

diff --git a/core/src/components/login/PasswordLessLoginForm.vue b/core/src/components/login/PasswordLessLoginForm.vue
index df774599f92..0203bd74c48 100644
--- a/core/src/components/login/PasswordLessLoginForm.vue
+++ b/core/src/components/login/PasswordLessLoginForm.vue
@@ -1,5 +1,5 @@
 <template>
-	<form v-if="isHttps && hasPublicKeyCredential"
+	<form v-if="(isHttps || isLocalhost) && hasPublicKeyCredential"
 		ref="loginForm"
 		method="post"
 		name="login"
@@ -32,7 +32,7 @@
 	<div v-else-if="!hasPublicKeyCredential">
 		{{ t('core', 'Passwordless authentication is not supported in your browser.') }}
 	</div>
-	<div v-else-if="!isHttps">
+	<div v-else-if="!isHttps && !isLocalhost">
 		{{ t('core', 'Passwordless authentication is only available over a secure connection.') }}
 	</div>
 </template>
@@ -73,6 +73,10 @@ export default {
 			type: Boolean,
 			default: false,
 		},
+		isLocalhost: {
+			type: Boolean,
+			default: false,
+		},
 		hasPublicKeyCredential: {
 			type: Boolean,
 			default: false,
-- 
cgit v1.2.3