bf1253cb49
Implement guest avatar endpoint
...
Signed-off-by: Michael Weimann <mail@michael-weimann.eu>
2019-02-07 14:23:16 +07:00
e6ac233947
Fix loginflow with apptoken enter on iOS
...
It seems iOS doesn't like us to change the location. So now we submit it
to the server that geneartes the redirect.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-01-04 21:51:36 +07:00
5e4990fadd
Remove redirect page
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-11-29 10:27:22 +07:00
2eba5f9460
Remove unused sg api route
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-11-16 15:39:46 +07:00
5c74423902
Move svg api endpoint
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-10-29 11:45:13 +07:00
78273cb1e6
Add an endppoint for clients to request an app password
...
Now that we allow enforcing 2 factor auth it make sense if we also allow
and endpoint where the clients can in the background fetch an
apppassword if they were configured before the login flow was present.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-03 19:05:20 +07:00
29ff7efe9a
Svg icon api sass function and upgrade of all styles
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-07-19 08:16:57 +07:00
98a0113d40
Svg from app
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-07-19 08:16:30 +07:00
84e90e26c0
Svg color api
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-07-19 08:16:30 +07:00
772bbd99be
Backend work to provide NC whats New info to users
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2018-07-05 14:33:08 +07:00
5cfe20675d
start implementing federated sharing 2.0
...
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-07-02 11:29:27 +07:00
177c8972cc
Improve login flow
...
* Add page explaining you are about to grant access
* Show grant access page after login
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-04-08 13:42:36 +07:00
dabd7291c3
Make the new autocomplete endpoint OCS
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2018-03-21 09:46:52 +07:00
7674e591bd
Move search to proper Controller
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-03-09 14:36:48 +07:00
b9720703e8
Add CSRF token controller to retrieve the current CSRF token
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2018-03-08 16:48:50 +07:00
fb890807c0
Sharing: redirect to download after authentification if requested
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-02-28 17:05:55 +07:00
922cf44c81
Move to OCS endpoint
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2018-02-12 17:22:33 +07:00
96480af159
Add navigation endpoint
...
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2018-02-12 17:22:32 +07:00
0224c61530
Add preview endpoint for the fileid
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-01-24 11:24:18 +07:00
31c5c2a592
Change @georgehrke's email
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2017-11-06 20:38:59 +07:00
0eebff152a
Update license headers
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2017-11-06 16:56:19 +07:00
6ce095b166
Add 204 endpoint
...
Fixes #6967
This allows clients to check for Walled Garden connections.
The endpoint just responds with a 204 (which is very unlikely with such
a connection)
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-11-02 10:30:16 +07:00
fd6daf8d19
AutoCompletion backend
...
* introduce a Controller for requests
* introduce result sorting mechanism
* extend Comments to retrieve commentors (actors) in a tree
* add commenters sorter
* add share recipients sorter
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2017-10-22 14:13:32 +07:00
7d8c5f73f5
Add direct preview link to single shared image files
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-09-25 16:18:50 +07:00
d8ec399454
Run phan over code base
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-07-19 10:28:11 +07:00
60f9ed6241
add contactsmenu popover
...
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2017-04-26 09:26:53 +07:00
241e397326
Merge branch 'master' into contactsmenu
...
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
2017-04-26 00:50:38 +07:00
945420baaf
Use HTTP POST to retrieve the list of contacts
...
We do not want to have sensitive information in the URL and
therefore also not in the access log. Thus the GET request is
replaced by a POST request.
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2017-04-25 20:47:18 +07:00
d091793ceb
Contacts menu
...
* load list of contacts from the server
* show last message of each contact
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2017-04-25 20:47:17 +07:00
6a16df7288
Add new auth flow
...
This implements the basics for the new app-password based authentication flow for our clients.
The current implementation tries to keep it as simple as possible and works the following way:
1. Unauthenticated client opens `/index.php/login/flow`
2. User will be asked whether they want to grant access to the client
3. If accepted the user has the chance to do so using existing App Token or automatically generate an app password.
If the user chooses to use an existing app token then that one will simply be redirected to the `nc://` protocol handler.
While we can improve on that in the future, I think keeping this smaller at the moment has its advantages. Also, in the
near future we have to think about an automatic migration endpoint so there's that anyways :-)
If the user chooses to use the regular login the following happens:
1. A session state token is written to the session
2. User is redirected to the login page
3. If successfully authenticated they will be redirected to a page redirecting to the POST controller
4. The POST controller will check if the CSRF token as well as the state token is correct, if yes the user will be redirected to the `nc://` protocol handler.
This approach is quite simple but also allows to be extended in the future. One could for example allow external websites to consume this authentication endpoint as well.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-04-25 20:18:49 +07:00
dc5ba95469
Merge pull request #4027 from nextcloud/better-spreed-call-urls
...
Better spreed call urls
2017-03-27 16:21:24 +07:00
4174d75f86
Throw a nice HintException when the apps are missing
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2017-03-24 15:02:49 +07:00
bc11c7ba97
Allow to use short URLs for calls
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2017-03-24 11:52:42 +07:00
8e89ad21a2
[PoC] JS Combiner
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-03-24 10:58:10 +07:00
5086335643
unify endpoints form core and the the provisioning api
...
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2017-01-25 11:20:35 +07:00
6380d503af
Css cache folder name fix, route fix and various fixes
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2017-01-06 09:42:13 +07:00
1caaa7f4cd
Appdata integration 2
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2017-01-06 09:42:13 +07:00
6f4cb12be2
Add identity proof
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-11-21 11:30:00 +07:00
d75e35b75e
Introduce the UI for password confirmation
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-18 11:57:16 +07:00
1baa2b8deb
Move OC\OCS\Person to OCSController
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-16 19:21:00 +07:00
02525fd98b
Move preview endpoint to controller
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-03 14:00:33 +07:00
743132650a
Move to AppData
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-03 14:00:32 +07:00
958c1289b1
New preview generator
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-03 14:00:32 +07:00
d5589a15d5
Move oc.js to a proper class
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-25 22:03:02 +07:00
0b1fb180a5
Make AppConfig part of the public API
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-21 09:09:23 +07:00
a1e4b17ff4
Remove unused endpoint
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-09-30 10:21:08 +07:00
68ea287ed7
Remove the core tag routes since they are broken
...
Private internal stuff that nobody *should* be using anyways.
But on top of that already broken for a long time. So nobody could be
using it even.
2016-08-26 15:00:18 +07:00
e0ae67545e
Merge pull request #956 from nextcloud/fix_952
...
When using permalinks don't error out if file id can't be found
2016-08-23 00:58:25 +07:00
3ccd69707e
Merge pull request #865 from nextcloud/ocs_config
...
Move OCS route /config to proper controller
2016-08-19 09:39:05 +07:00
54f79a28f6
When using permalinks don't error out if file id can't be found
...
Fixes #952
* Use only the index route (since it went to showFile anyways)
* Fix tests
* Use getUserFolder to force init of users mounts
2016-08-19 08:15:30 +07:00
532c0dd8ce
Kill ajax/share.php
...
Using this file will insert invalid shares.
OCS has to be used exclusively!
2016-08-18 20:56:02 +07:00
6bc1c6590c
Move /config over to Core OCSController
2016-08-18 09:37:09 +07:00
69da896785
Move /cloud/user to Core app
2016-08-09 20:56:31 +07:00
02449c8336
Move getCapabilities over to Core
2016-08-09 20:56:31 +07:00
ba87db3fcc
Fix others
2016-07-21 18:13:57 +07:00
2791b8f00d
Revert "occ web executor ( #24957 )"
...
This reverts commit 854352d9a0
2016-07-07 12:14:45 +07:00
854352d9a0
occ web executor ( #24957 )
...
* Initial web executor
* Fix PHPDoc
Fix broken integration test
OccControllerTests do not require database access - moch them all!
Kill unused sprintf
2016-06-22 13:12:36 +07:00
aba539703c
Update license headers
2016-05-26 19:57:24 +07:00
dfb4d426c2
Add two factor auth to core
2016-05-23 11:21:10 +07:00
53636c73d6
Add controller to generate client tokens
2016-05-11 13:36:46 +07:00
d8cde414bd
token based auth
...
* Add InvalidTokenException
* add DefaultTokenMapper and use it to check if a auth token exists
* create new token for the browser session if none exists
hash stored token; save user agent
* encrypt login password when creating the token
2016-05-11 13:36:46 +07:00
093e9dd422
Add route to resolve fileid to files app URL
...
The following routes will redirect to the files app and display the
matching folder. If the fileid is a file, it will scroll to it.
- http://localhost/owncloud/index.php/f/$fileid
- http://localhost/owncloud/index.php/files/?dir=somedir&fileid=$fileid
2016-05-06 16:46:59 +07:00
8222ad5157
Move logout to controller
...
Testable code. Yay.
2016-04-18 21:21:52 +07:00
331e4efacb
Move login form into controller
...
First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.
2016-04-15 17:36:23 +07:00
682821c71e
Happy new year!
2016-01-12 15:02:18 +07:00
8f09d5b67c
Update license headers
2015-10-26 14:04:01 +07:00
f63915d0c8
update license headers and authors
2015-06-25 14:13:49 +07:00
1b84a1cd48
Fix routes
...
Fixes public sharing as reported on https://github.com/owncloud/core/issues/15913
2015-04-28 14:41:14 +07:00
b585d87d9d
Update license headers
2015-03-26 11:44:36 +07:00
1a0f9c375b
Avatar controller moved to AppFrameWork
...
* Original avatarcontroller migrated to the appframework
* Added DataDisplayResponse that show data inline in the browser (used
to retrun the image)
* Removed some unneeded code
* Added unit tests for the avatarcontroller
2015-03-11 16:37:42 +07:00
06aef4e8b1
Revert "Updating license headers"
...
This reverts commit 6a1a4880f0
2015-02-26 11:37:37 +07:00
6a1a4880f0
Updating license headers
2015-02-23 12:13:59 +07:00
dc17019536
adjust paths for search
2015-01-14 15:15:39 +07:00
988c85d292
Refactor file sharing public link handling
...
fixes download issue introduced by #10755
Conflicts:
apps/files_sharing/public.php
2014-11-14 16:26:59 +07:00
a589d61b78
in case a translation javascript is not found we no longer bail out
...
remove translation.php
2014-10-29 10:09:12 +07:00
21412559df
remove post setup check
2014-09-22 19:43:55 +07:00
2a4c51389c
Use a route instead of s.php and convert tokens asap
2014-09-04 15:23:55 +07:00
f33312f767
Use AppFramework instead of custom controller
2014-08-25 11:50:19 +07:00
91ba1b345e
add lookup route for displaynames
2014-08-25 11:50:19 +07:00
ab12bd292d
Add update route to core
2014-08-19 15:40:08 +07:00
29ae7f55ef
Remove loadAppScriptFile from the default routes
2014-08-19 15:37:00 +07:00
ed8b7fc101
complete renaming uid to userId
2014-06-13 16:18:21 +07:00
4b359ad20c
Change routes. Update templates
2014-06-13 15:34:52 +07:00
218d0add36
Changes according to review
2014-06-13 15:34:52 +07:00
a7fbd91e53
Use appframework
2014-06-13 15:34:52 +07:00
23ed038a27
Basics
2014-06-13 15:34:51 +07:00
20893cc3b3
Images on public sharing get downscaled to increase use experience - this will speed up loading time
...
- adding keep aspect to core/ajax/preview.php
- remove duplicate method Preview::show()
- no more hard coded mimetype of preview
- remove .png from the preview urls
- keep old route preview.png for backwards compatibility
- aspect preserving previews are now cached
2014-05-02 17:02:57 +07:00
4900ad9119
update type hint in PHPDoc
2014-03-25 22:59:42 +07:00
1291303c5a
Replace OC.Router.generate() with OC.generateUrl()
2014-03-02 22:30:24 +07:00
bf22ed7bdb
kill old minimizer code
2014-02-20 13:10:56 +07:00
988710b0fc
avoid conflict with physical file config.js
2013-12-31 14:34:28 +07:00
6d3bbc5eeb
Fix typo
2013-10-04 19:55:03 +07:00
12bb197028
JS version of the OCP\ITags interface
2013-10-04 17:21:52 +07:00
c9c5e1b97f
Merge branch 'master' into oc_avatars
2013-09-12 07:41:44 +07:00
8fd76e39cf
Use proper controller naming
2013-09-04 22:22:56 +07:00
a1e7614d73
Clean up oc_avatars
2013-09-04 12:56:14 +07:00
5539b9e843
Use the namespaced variation of the classname.
2013-09-02 21:25:32 +07:00
aa88eea9cf
Sanitize displayname, respect data @ $element, fix routename, clean after cropping, updateAvatar with displayname
2013-08-31 18:27:28 +07:00
5d653753bd
Merge branch 'master' into oc_avatars
2013-08-31 12:56:36 +07:00
c533b80682
Use OC_Cache and finish cropper functionality
2013-08-29 16:56:32 +07:00
Michael Weimann
Roeland Jago Douma
John Molakvoæ (skjnldsv)
Arthur Schiwon
Bjoern Schiessle
Joas Schilling
Christoph Wurst
Julius Härtl
Morris Jobke
Lukas Reschke
Georg Ehrke
Jan-Christoph Borchardt
Robin Appelman
VicDeo
Lukas Reschke
Christoph Wurst
Vincent Petry
Thomas Müller
Jenkins for ownCloud
kondou
Jörn Friedrich Dreyer
Victor Dubiniuk
Thomas Tanghus
Bart Visscher