Commit Graph

21658 Commits (2afe26726bb48f78ef80ef1549834160121caaa4)

Author SHA1 Message Date
Joas Schilling 6741b37356
Merge pull request #37198 from nextcloud/bugfix/noid/reference-image-log
fix(references): Do not log errors on 404 responses of opengraph image fetching
2023-03-27 13:56:39 +07:00
Robin Appelman 36835b7fec
Merge pull request #36810 from nextcloud/setup-user-onetime-before-mounts
do onetime user setup before getting any mount from providers
2023-03-24 16:45:08 +07:00
Simon L 825f847ef1
Merge pull request #37234 from cob2p/bugfix/typo
Fix the typo in comments
2023-03-23 15:00:41 +07:00
Simon L 67614150b5
Merge pull request #36636 from nextcloud/fix/oc-image-getimagesize
fix OC_Image: Prevent E_WARNING from getimagesize*
2023-03-23 14:59:57 +07:00
Git'Fellow c81ea3aa98
Fix RedisCluster
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
2023-03-22 17:19:07 +07:00
Git'Fellow fab390f884
Move from DEL to UNLINK
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
2023-03-22 17:10:05 +07:00
Julien Veyssier c838bdb820
Merge pull request #36665 from nextcloud/fix/36539
Always set displayname and display-name for user data
2023-03-22 15:21:29 +07:00
Joas Schilling 014a634635
Merge pull request #37334 from nextcloud/bugfix/noid/mark-recording-servers-as-sensitive-due-to-secret
fix(security): Mark recording_servers key appconfig as private as it …
2023-03-22 10:27:39 +07:00
Julius Härtl 8b4d49cf50
Merge pull request #36057 from nextcloud/feat/esm-js-scripts 2023-03-22 09:17:28 +07:00
Joas Schilling 381ab5f4cb
fix(security): Mark recording_servers key appconfig as private as it contains a secret
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-03-22 09:14:37 +07:00
Julius Härtl c3a39cbc75
Merge pull request #37305 from nextcloud/fix/security/log-failing-strict-cookie-check
fix(security): Log failing strict cookie check
2023-03-21 19:05:39 +07:00
Côme Chilliet c60182065f
Merge pull request #34773 from nextcloud/artonge/feat/dispatch_entry_removed_event_for_all_entries
Dispatch event for all removed entries
2023-03-21 11:42:18 +07:00
Arthur Schiwon fb5c5fffff
Merge pull request #37306 from nextcloud/bugfix/37277/caldav-sync
fix(session): Fix DAVx5 sync problems by partial reverting session changes
2023-03-21 09:55:37 +07:00
Joas Schilling 705165d3d1
fix(session): Fix DAVx5 sync problems by partial reverting session changes
Temporary disabled the short cut again to solve issues with CalDAV/CardDAV
clients like DAVx5 that use cookies and need a session. See
https://github.com/nextcloud/server/issues/37277#issuecomment-1476366147
and the other comments for further information.

Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-03-20 16:30:42 +07:00
Christoph Wurst 0e6fccf9e1
fix(security): Log failing strict cookie check
The error is silent otherwise and makes it very hard to debug on a
production system.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2023-03-20 16:26:41 +07:00
Côme Chilliet 13c71ed24a
Small cleanups for AppManager
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-20 10:21:45 +07:00
Côme Chilliet 78c1716818
Move loadApps to the AppManager
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-20 10:21:45 +07:00
Côme Chilliet 8dc5f82189
Move isType to AppManager
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-20 10:21:45 +07:00
Côme Chilliet a224551132
Avoid calling Server::get more times than necessary in loadApp
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-20 10:21:42 +07:00
Côme Chilliet f0bdf2a4cd
Strong type private properties and methods in AppManager
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-20 10:19:42 +07:00
Côme Chilliet 71ed968e34
Switch away from Server::get for AppManager and logger in loadApp
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-20 10:17:28 +07:00
Côme Chilliet a7c8090dc3
Move loadApp function to the AppManager
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-20 10:01:17 +07:00
Joas Schilling bfc37afed3
Merge pull request #36928 from nextcloud/techdebt/noid/bruteforce-protection-attribute
feat(middleware): Migrate BruteForceProtection annotation to PHP Attribute and allow multiple
2023-03-16 19:33:13 +07:00
Christoph Wurst 416c824c74 perf(autoloader): Drop legacy class autoloader
The documentation says apps should use PSR-4 to get their classes
loaded. The legacy PSR-0 is still in place and has a negative impact on
performance.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2023-03-16 12:02:09 +07:00
Marcel Klehr 4a2accaa27 fix OC_Image: Prevent E_WARNING from getimagesize*
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
2023-03-16 11:10:36 +07:00
Nextcloud bot 15b80b6c1a
Fix(l10n): 🔠 Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2023-03-16 02:28:08 +07:00
Joas Schilling 3ecd85f817
Reduce list
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-03-15 17:33:17 +07:00
Joas Schilling 9821913e75
Extend list
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-03-15 17:08:15 +07:00
Julius Härtl c7c1133c15
Merge pull request #35561 from nextcloud/create-user-transaction 2023-03-15 15:13:50 +07:00
Arthur Schiwon a30d7c51d3
Merge pull request #37227 from nextcloud/h1-dav-brute-force-protection
chore: use local variable for remote address
2023-03-15 15:11:53 +07:00
CRA Yoshihito Nakatani fb9c8e3790 Fix the typo in comments 2023-03-15 23:03:24 +07:00
Thomas Citharel f7e65b1751 Create the database user in a transaction
In OC\User\Manager::createUserFromBackend the newly created user is read
using getUserObject($uid, $backend) but that can cause causal read
issues (wrote in DB primary, not yet in secondary).

In OC\User\Database user backend the user cache is unset after the
insert, so it can't be used by getRealUID() (which is called by
getUserObject()).

To avoid that we make sure the user cache is repopulated in a
transaction.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-15 11:07:07 +07:00
Côme Chilliet 8568c11d24
Merge pull request #36033 from nextcloud/invalidateTokensWhenDeletingOAuthClientMaster
[master] invalidate existing tokens when deleting an oauth client
2023-03-15 11:09:51 +07:00
Nextcloud bot 01d58b6f12
Fix(l10n): 🔠 Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2023-03-15 02:26:39 +07:00
Côme Chilliet 9c3e06c046
Merge pull request #33061 from ibpl/master-IB#1121253
Paths added to messages and message cleanup
2023-03-14 17:28:22 +07:00
Artur Neumann e9f5e796f0
autoloaderchecker
Signed-off-by: Artur Neumann <artur@jankaritech.com>
2023-03-14 17:18:56 +07:00
Artur Neumann 565fad8d8c
added @since tag
Signed-off-by: Artur Neumann <artur@jankaritech.com>
2023-03-14 17:13:30 +07:00
Artur Neumann f634badf12
public interface to invalidate tokens of user
Signed-off-by: Artur Neumann <artur@jankaritech.com>
2023-03-14 17:13:29 +07:00
Simon L 5cba7f0062
Merge pull request #37192 from n0emis/empty-password
Don't try to hash a nonexisting password
2023-03-14 13:14:34 +07:00
Côme Chilliet 71328107da
Merge pull request #37029 from nextcloud/fix/chunk-objectids-in-systemtagobjectmapper
Add chunking in SystemTagObjectMapper::getTagIdsForObjects
2023-03-13 22:10:47 +07:00
Côme Chilliet 9b1d7794a8 Add chunking in SystemTagObjectMapper::getTagIdsForObjects
This avoids crashing on Oracle with more than 1000 objects

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2023-03-13 17:36:10 +07:00
Julius Härtl b6d1154260
fix(references): Do not log errors on 404 responses of opengraph image fetching
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2023-03-13 18:18:04 +07:00
Thomas Citharel f1751c4428
Introduced app enable/disable/update typed events
OCP\App\ManagerEvent is depreciated since 22 without a replacement

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-13 11:52:57 +07:00
Ember 'n0emis' Keske 6881d2f2f1
Don't try to hash a nonexisting password
Allows to log-in via a passwordless authentication provider, eg SSO

Signed-off-by: Ember 'n0emis' Keske <git@n0emis.eu>
2023-03-13 10:32:53 +07:00
Daniel Kesselberg f751d2d891
chore: use local variable for remote address
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-03-10 18:04:34 +07:00
Nextcloud bot 16b68fdb34
Fix(l10n): 🔠 Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2023-03-10 02:27:15 +07:00
Arthur Schiwon 315510df84
Merge pull request #27034 from nextcloud/enh/s3-multipart-upload-api
Use MultipartUpload for uploading chunks to s3
2023-03-09 13:55:57 +07:00
Simon L 691aa8d025
Merge pull request #37140 from nextcloud/enh/35643/fix-heic-previews
imaginary - fix autorotate for heic and improve the logic
2023-03-09 10:25:54 +07:00
Simon L 694f743829
Merge pull request #37070 from nextcloud/enh/noid/add-free-disk-space-check
add a check for disk_free_space in Config.php
2023-03-09 10:24:20 +07:00
Simon L 3dbe108568
Merge pull request #37116 from nextcloud/enh/37114/add-quotes
postgresql installation - add quotes around user names
2023-03-09 10:22:35 +07:00