3a242166f7
fix(FilesDropPlugin): Fix request method and nickname header checks
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-10-16 08:47:28 +07:00
ae0aa175b3
Merge pull request #55661 from nextcloud/fix/55519/ldap-cert-req-handling
2025-10-14 09:42:16 +07:00
d14c96b26d
fix(contacts): Do not expose SAB in `/contactsmenu`
...
When hitting the `/contactsmenu/contacts` endpoint with the `dav.system_addressbook_exposed` config switch set to `"no"`, the system address book content is still listed in the response.
This ensure that we do not expose unexpectedly the system address book.
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-10-10 19:02:40 +07:00
fbd29bcf7f
fix(LDAP): properly disable are require TLS certificate verification
...
- the old approach lead connection issues, as ldap_set_option was called
too late. Specifically it needs to be called before ldap_connect and set
globally!
- The old approach also connected it to the ldapTLS configuration, which
has a misleading naming. It indicates StartTLS usage only, not plain TLS
connections.
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2025-10-09 20:22:37 +07:00
bb6a265c55
build(deps-dev): bump behat/behat in /build/integration
...
Bumps [behat/behat](https://github.com/Behat/Behat ) from 3.24.1 to 3.25.0.
- [Release notes](https://github.com/Behat/Behat/releases )
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Behat/Behat/compare/v3.24.1...v3.25.0 )
---
updated-dependencies:
- dependency-name: behat/behat
dependency-version: 3.25.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 21:13:30 +07:00
bfb4fe8f86
fix(core): Stop abusing the cache for avatar upload
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-09-25 13:08:14 +07:00
fdea3a5290
build(deps-dev): bump behat/behat in /build/integration
...
Bumps [behat/behat](https://github.com/Behat/Behat ) from 3.24.0 to 3.24.1.
- [Release notes](https://github.com/Behat/Behat/releases )
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Behat/Behat/compare/v3.24.0...v3.24.1 )
---
updated-dependencies:
- dependency-name: behat/behat
dependency-version: 3.24.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-09-20 01:13:13 +07:00
fa1dd4a717
fix: make sure default contact exists by default
...
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-09-17 10:57:36 +07:00
1f46274c4b
Merge pull request #55136 from nextcloud/test/integration/ocs-permission-check
2025-09-16 17:56:58 +07:00
0baaebd413
Merge pull request #54916 from nextcloud/artonge/feat/run_integration_tests_as_www-data
2025-09-16 10:35:22 +07:00
4a693208b7
test(integration): Check ocs share permission for correct folder
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-09-16 10:10:43 +07:00
6a731dcce6
build(deps-dev): bump behat/behat in /build/integration
...
Bumps [behat/behat](https://github.com/Behat/Behat ) from 3.23.0 to 3.24.0.
- [Release notes](https://github.com/Behat/Behat/releases )
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Behat/Behat/compare/v3.23.0...v3.24.0 )
---
updated-dependencies:
- dependency-name: behat/behat
dependency-version: 3.24.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-09-13 01:12:58 +07:00
55ad42ad95
feat(encryption): Add integration tests for occ commands
...
Add tests for encrypt-all and decrypt-all.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-09-09 11:46:10 +07:00
4db473c86e
feat(test): Run behat tests as www-data
...
Composer does not like being run as root.
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-09-05 11:59:46 +07:00
9ba4150a18
fix(dav): ensure moving or copying a file is possible
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-09-02 16:23:47 +07:00
3df6d90a4c
Revert "perf(base): Stop setting up the FS for every basic auth request"
2025-08-28 17:11:31 +07:00
d785bcdc6e
Merge pull request #53920 from nextcloud/revert-53918-revert-53141-perf/files/setup-fs-basic-auth-request
2025-08-28 14:12:57 +07:00
5057d5fcc5
fix(core): Stop abusing the cache for avatar upload
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-08-28 09:28:11 +07:00
d5c15d4d2f
test(integration): Check ocs share permission for correct folder
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-08-28 09:28:10 +07:00
025e081530
build(deps-dev): bump guzzlehttp/guzzle in /build/integration
...
Bumps [guzzlehttp/guzzle](https://github.com/guzzle/guzzle ) from 7.9.3 to 7.10.0.
- [Release notes](https://github.com/guzzle/guzzle/releases )
- [Changelog](https://github.com/guzzle/guzzle/blob/7.10/CHANGELOG.md )
- [Commits](https://github.com/guzzle/guzzle/compare/7.9.3...7.10.0 )
---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
dependency-version: 7.10.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-28 08:51:04 +07:00
b7dc720848
feat: calendar federation
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-08-27 17:14:15 +07:00
aa227f1c55
feat: add bluesky to accounts, show the same in profile edit and visibility option, in view profile and also in sharing tab
...
Signed-off-by: yemkareems <yemkareems@gmail.com>
2025-08-08 08:06:45 +07:00
b1a8e01c3f
build(deps-dev): bump behat/behat in /build/integration
...
Bumps [behat/behat](https://github.com/Behat/Behat ) from 3.22.0 to 3.23.0.
- [Release notes](https://github.com/Behat/Behat/releases )
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Behat/Behat/compare/v3.22.0...v3.23.0 )
---
updated-dependencies:
- dependency-name: behat/behat
dependency-version: 3.23.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-19 01:19:00 +07:00
a18e61a1e5
feat(files_sharing): add config option for extending link-share permissions
...
This allows the admin to control the behavior whether link shares with
READ permissions should be extended to also gain SHARE permissions,
allowing users (public share receivers) to add the share to their cloud.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-07-17 16:59:36 +07:00
2b50d9b2c5
Revert "perf(base): Stop setting up the FS for every basic auth request"
2025-07-11 17:07:44 +07:00
6f0255d82a
Merge pull request #53141 from nextcloud/perf/files/setup-fs-basic-auth-request
2025-07-11 15:25:10 +07:00
01766b18f8
fix: Fix theming for disabled accounts
...
The Theming app injects the stylesheets for the different themes in the
"<header>" element of the page, and those stylesheets are then loaded by
the browser from a "Controller" (a plain "Controller", not an
"OCSController"). The stylesheets, in turn, may also get some images
(like the background) also from the "Controller".
When handling a request to "index.php" it is checked whether the user is
logged in and, if not, a login is tried. A disabled user is explicitly
seen as not logged in, so a login is always tried in that case, but
disabled users are also explicitly prevented to log in, so the login
also fails. Due to that trying to get any of the themed stylesheets or
images with a disabled account (to be able to show the "Account
disabled" error page) fails with an HTTP status 401.
To solve that, and to avoid touching this basic logic as much as
possible, the login exception is now ignored (if the user is disabled)
for some specific requests to the Theming app.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2025-07-10 15:19:01 +07:00
24f7a2e680
fix(core): Stop abusing the cache for avatar upload
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-07-08 11:38:59 +07:00
5981b7eb51
chore: apply new CSFixer rules
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
# Conflicts:
# apps/settings/lib/SetupChecks/PhpOpcacheSetup.php
2025-07-01 16:26:50 +07:00
bd00b75b29
Merge pull request #53671 from nextcloud/fix/read-only-share-download
2025-07-01 15:11:06 +07:00
2e5ccc7123
fix(files): Always transfer incoming shares when doing ownership transfer to prevent broken reshares
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-07-01 08:23:53 +07:00
60b8384e48
Merge branch 'master' into remove-x-xss-protection
2025-06-30 21:32:22 +07:00
9806a9830c
feat(files_sharing): allow viewing files with download disabled
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-06-26 11:47:53 +07:00
b6af06d2e0
fix: revive always storing lowercased email addresses
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-06-24 13:53:08 +07:00
35a27b5fd5
fix(FilenameValidator): use `_` as default replacement for invalid chars
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-06-18 09:44:57 +07:00
6254354f27
test(dav): add integration test for principal property search
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-06-17 11:19:24 +07:00
2b58f74cc8
Fix: Remove X-XSS-Protection use, check and recommendation
...
Co-authored-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: invario <67800603+invario@users.noreply.github.com>
2025-06-13 16:12:27 +07:00
04118afdab
Merge pull request #53287 from nextcloud/feat/test-app-routes
...
feat(tests): Test application enabling/disabling and routes
2025-06-06 13:00:02 +07:00
580911dc89
chore: Disable appstore from integration tests
...
This avoids spamming the appstore server and getting banned from CI runs
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-06-05 16:23:07 +07:00
a15c473ae2
feat(tests): Test application enabling/disabling and routes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-06-05 15:12:28 +07:00
e41e8de0e2
fix(dav): file drop nickname
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-06-05 09:09:17 +07:00
9637fe6474
Revert "fix(files_sharing): Filter own shares that are reshares"
2025-05-19 17:16:39 +07:00
7c6602cd8d
fix(files_sharing): Filter own shares that are reshares
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-05-19 08:18:16 +07:00
e693a5d4a5
fix(dav): correctly handle uploading folders with same name as a file
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-05-16 14:38:41 +07:00
1b273b8c2c
chore(IAccountManager): remove deprecated visibility constants
...
Those constants are not used anywhere anymore and are deprecated for
more than ten versions. So its time to cleanup the interface.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-05-14 19:15:24 +07:00
4495794a0b
feat(dav): allow uploading folders to public shares
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2025-05-13 16:03:20 +07:00
70db2a4c9e
build(deps-dev): bump behat/behat in /build/integration
...
Bumps [behat/behat](https://github.com/Behat/Behat ) from 3.21.1 to 3.22.0.
- [Release notes](https://github.com/Behat/Behat/releases )
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Behat/Behat/compare/v3.21.1...v3.22.0 )
---
updated-dependencies:
- dependency-name: behat/behat
dependency-version: 3.22.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-10 01:22:38 +07:00
226ad23a1a
feat(files): add command to automatically rename filenames
...
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-04-30 16:32:07 +07:00
20347c216d
build(deps-dev): bump behat/behat in /build/integration
...
Bumps [behat/behat](https://github.com/Behat/Behat ) from 3.21.0 to 3.21.1.
- [Release notes](https://github.com/Behat/Behat/releases )
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Behat/Behat/compare/v3.21.0...v3.21.1 )
---
updated-dependencies:
- dependency-name: behat/behat
dependency-version: 3.21.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-26 01:42:32 +07:00
9ed33cf6aa
feat(profile): Add an API to get the profile field data
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-04-23 12:38:18 +07:00
provokateurin
Kate
Louis Chemineau
Arthur Schiwon
dependabot[bot]
Hamza
Côme Chilliet
Ferdinand Thiessen
Joas Schilling
John Molakvoæ
Richard Steinmetz
yemkareems
Daniel Calviño Sánchez
skjnldsv
Daniel Kesselberg
invario
Stephan Orbaugh
Joas Schilling