Commit Graph

60124 Commits (a9fe0fc5274fe6190c394fdb201cbb0c9f5c5976)
 

Author SHA1 Message Date
John Molakvoæ a9fe0fc527
Merge pull request #29357 from nextcloud/fix/concurrent-duplicate-auth-token-updates 2021-10-22 10:58:52 +07:00
szaimen 686f293eee
Merge pull request #29375 from nextcloud/bugfix/noid/translate-calendar-schedule-response
Make calendar schedule options translatable
2021-10-22 10:41:11 +07:00
Daniel e75d226fba
Merge pull request #29373 from nextcloud/automated/noid/psalm-baseline-update
[Automated] Update psalm-baseline.xml
2021-10-22 10:23:25 +07:00
Julius Härtl b30f499597
Make calendar schedule options translatable
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2021-10-22 09:33:40 +07:00
Christoph Wurst 7dd7256cfe
Prevent duplicate auth token activity updates
The auth token activity logic works as follows
* Read auth token
* Compare last activity time stamp to current time
* Update auth token activity if it's older than x seconds

This works fine in isolation but with concurrency that means that
occasionally the same token is read simultaneously by two processes and
both of these processes will trigger an update of the same row.
Affectively the second update doesn't add much value. It might set the
time stamp to the exact same time stamp or one a few seconds later. But
the last activity is no precise science, we don't need this accuracy.

This patch changes the UPDATE query to include the expected value in a
comparison with the current data. This results in an affected row when
the data in the DB still has an old time stamp, but won't affect a row
if the time stamp is (nearly) up to date.

This is a micro optimization and will possibly not show any significant
performance improvement. Yet in setups with a DB cluster it means that
the write node has to send fewer changes to the read nodes due to the
lower number of actual changes.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-10-22 09:32:22 +07:00
nextcloud-command 4a3234500c Update psalm baseline
Signed-off-by: GitHub <noreply@github.com>
2021-10-22 04:11:24 +07:00
Nextcloud bot fb18f29148
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2021-10-22 02:21:58 +07:00
Pytal 8a511de8cb
Merge pull request #29345 from nextcloud/fix/profile-preview-card 2021-10-21 15:18:07 +07:00
Christopher Ng 06c9a8d9bf Remove unused click handler
- Handle long lines unbroken by white space
- Cleanup

Signed-off-by: Christopher Ng <chrng8@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2021-10-21 20:54:06 +07:00
Carl Schwan 5d9474d324
Merge pull request #29362 from nextcloud/fix/groupfolder-copy-acl
Fix security issues when copying groupfolder with advanced ACL
2021-10-21 18:12:34 +07:00
Christoph Wurst 9a8bb5e9ed
Merge pull request #29343 from nextcloud/dependachristoph/composer/symfony-4.4.30-and-friends
Bump Symfony family and friends to v4.4.30
2021-10-21 17:45:15 +07:00
John Molakvoæ acea728053
Merge pull request #29332 from nextcloud/sendPasswordByMail 2021-10-21 17:41:18 +07:00
Carl Schwan 9408f8ae69
Fix security issues when copying groupfolder with advanced ACL
Using advanced ACL, it is possible that an user has access to a
directory but not to a subdirectory, so the copying use
Common::copyFromStorage instead of Local::copyFromStorage.

Fix https://github.com/nextcloud/groupfolders/issues/1692

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2021-10-21 17:11:52 +07:00
John Molakvoæ bdf44c7920
Merge pull request #23171 from nextcloud/enh/preview/move_to_bootstrap 2021-10-21 17:07:14 +07:00
Louis 4b8bf7571a
Merge pull request #29355 from nextcloud/fix/carl/loging-button-arrow
Fix login button alignment
2021-10-21 15:14:24 +07:00
Julien Veyssier 0bef570fe9
Merge pull request #29256 from nextcloud/fix/noid/harmonize-appstoreenabled-check
Fix appstoreenabled check
2021-10-21 12:42:14 +07:00
Carl Schwan 6c5152e6ed
Fix login button alignment
Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2021-10-21 12:00:58 +07:00
Louis c5405befcf
Merge pull request #29346 from nextcloud/fix/biography-resize
Allow resize of Biography/About box
2021-10-21 10:57:49 +07:00
Louis 23582089f0
Merge pull request #29351 from nextcloud/automated/noid/psalm-baseline-update
[Automated] Update psalm-baseline.xml
2021-10-21 10:53:49 +07:00
Roeland Jago Douma 8bc25e3324
Move preview provider registration to bootstrap
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-10-21 10:35:18 +07:00
Christoph Wurst 88490ea630
Bump Symfony family and friends to v4.4.30
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-10-21 10:00:48 +07:00
Joas Schilling f24e8212c3
Fix unit tests
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-10-21 09:27:12 +07:00
tobiasKaminsky 5217cb3df4
Adjust test
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
2021-10-21 06:52:31 +07:00
nextcloud-command bd95a77f25 Update psalm baseline
Signed-off-by: GitHub <noreply@github.com>
2021-10-21 04:11:44 +07:00
Nextcloud bot 732a057167
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2021-10-21 02:24:14 +07:00
blizzz 5f95a0636a
Merge pull request #29342 from nextcloud/fix/noid/upgrade-22.2-to-23
allow upgrading from 22.2.x
2021-10-20 19:28:00 +07:00
Christopher Ng 3afe3916cd Allow textarea resize
Signed-off-by: Christopher Ng <chrng8@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2021-10-20 17:15:38 +07:00
John Molakvoæ 4dc226ee91
Merge pull request #27196 from nextcloud/fix/ApiControllerTest-testShowHiddenFiles 2021-10-20 18:48:04 +07:00
blizzz 07863f3de3
Merge pull request #29330 from nextcloud/fix/missing-profile-config-defaults
Populate missing profile config defaults
2021-10-20 18:26:25 +07:00
Arthur Schiwon ed9199495e
allow upgrading from 22.2.x
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2021-10-20 18:01:43 +07:00
John Molakvoæ 49e727fe6a
Merge pull request #29334 from nextcloud/fix/dav-availability-settings-duplicate-slots 2021-10-20 17:38:23 +07:00
Christoph Wurst 1021c89454
Merge pull request #28314 from nextcloud/sharing-ibootstrap
move files_sharing to IBootStrap
2021-10-20 17:32:10 +07:00
Christoph Wurst b98f3f31de
Merge pull request #29320 from nextcloud/bugfix/28261/fix-basic-auth-for-oauth-token-endpoint
Fix basic auth for OAuth token endpoint
2021-10-20 17:31:43 +07:00
Joas Schilling 0e951eb9dc
Merge pull request #29269 from nextcloud/feature/28751/provide-contactsmenu-as-ocs-simple
Add an OCS endpoint for the hovercard contact actions
2021-10-20 16:25:07 +07:00
Carl Schwan cf6bac8d6e
Merge pull request #29313 from nextcloud/fix/status-menu-update
Fix status menu item not listening to status change events
2021-10-20 16:00:38 +07:00
Joas Schilling 7f1dc52a66
Change origin field to appId
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-10-20 14:47:28 +07:00
Joas Schilling 8ae93a7baf
Merge pull request #29260 from nextcloud/fix/user_status_enumeration2
Respect user enumeration settings in user status lists
2021-10-20 12:27:55 +07:00
blizzz 7aeec25960
Merge pull request #29255 from nextcloud/updateAppstoreCrl
update CRL after revocation of twofactor_rcdevsopenotp.crt
2021-10-20 12:22:33 +07:00
Christoph Wurst e23a38e486
Prevent duplicate CalDAV availability slots for recurring slots
If there is the same time slot for more than one day, then we wrote two
recurring AVAILABILITY components before. With this patch equal blocks
are combined into one recurring component. This makes the generated
rules more compact and easier to work with.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-10-20 12:15:56 +07:00
John Molakvoæ 5e23800a95
Do not remove current user on findOne
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
2021-10-20 11:53:45 +07:00
John Molakvoæ 873e8e219c
Add appName to contactsmenu action API
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
2021-10-20 11:53:45 +07:00
Jonas Meurer 65cfe9df46
Add integration tests for user_status API
Signed-off-by: Jonas Meurer <jonas@freesources.org>
2021-10-20 11:33:37 +07:00
Jonas Meurer 3fe267b772
Respect user enumeration settings in user status lists
So far, the functions to find user statuses listed didn't respect user
enumeration settings (`shareapi_allow_share_dialog_user_enumeration`
and `shareapi_restrict_user_enumeration_to_group` core app settings).

Fix this privacy issue by returning an empty list in case
`shareapi_allow_share_dialog_user_enumeration` is unset or
`shareapi_restrict_user_enumeration_to_group` is set.

In the long run, we might want to return users from common groups if
`shareapi_restrict_user_enumeration_to_group` is set. It's complicated
to implement this in a way that scales, though. See the discussion at
https://github.com/nextcloud/server/pull/27879#pullrequestreview-753655308
for details.

Also, don't register the user_status dashboard widget at all if
`shareapi_allow_share_dialog_user_enumeration` is unset or
`shareapi_restrict_user_enumeration_to_group` is set.

Fixes: #27122

Signed-off-by: Jonas Meurer <jonas@freesources.org>
2021-10-20 11:33:23 +07:00
Joas Schilling 3ce3c0f117
Add an OCS endpoint for the hovercard contact actions
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-10-20 10:22:40 +07:00
Carl Schwan 89112e5df9
Fix status menu item not listening to status change events
This makes it so that the status menu item listens to user_status:status.updated
events even when they are triggered outside of the user status modal.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2021-10-20 10:21:23 +07:00
Louis 2083e1ede2
Merge pull request #29331 from nextcloud/automated/noid/psalm-baseline-update
[Automated] Update psalm-baseline.xml
2021-10-20 09:41:36 +07:00
tobiasKaminsky 05c08b7ca2
Expose send_password_by_mail via capabilities
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
2021-10-20 06:18:03 +07:00
nextcloud-command c7be7cfd02 Update psalm baseline
Signed-off-by: GitHub <noreply@github.com>
2021-10-20 04:11:07 +07:00
Nextcloud bot 1d1010de2f
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2021-10-20 02:43:00 +07:00
Nextcloud bot 981d839806
[tx-robot] updated from transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2021-10-20 02:23:10 +07:00