a18e61a1e5
feat(files_sharing): add config option for extending link-share permissions
...
This allows the admin to control the behavior whether link shares with
READ permissions should be extended to also gain SHARE permissions,
allowing users (public share receivers) to add the share to their cloud.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-07-17 16:59:36 +07:00
8c48b82437
fix(security): Update CA certificate bundle
...
Signed-off-by: GitHub <noreply@github.com>
2025-07-16 02:44:58 +07:00
ea6f0a7b19
build: Update psalm baseline
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-07-14 09:54:47 +07:00
2b50d9b2c5
Revert "perf(base): Stop setting up the FS for every basic auth request"
2025-07-11 17:07:44 +07:00
6f0255d82a
Merge pull request #53141 from nextcloud/perf/files/setup-fs-basic-auth-request
2025-07-11 15:25:10 +07:00
b61757a9e7
Merge pull request #53897 from nextcloud/fix/noid/krb-fallback
...
fix(Krb): switch away from deprecated and broken KerberosApacheAuth()
2025-07-11 09:58:47 +07:00
1bc1902476
Merge pull request #53887 from nextcloud/fix/lower-email-case
2025-07-11 09:03:05 +07:00
fd799afc17
fix(Krb): switch away from deprecated and broken KerberosApacheAuth()
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2025-07-10 23:21:16 +07:00
d4e9a8ac33
Merge pull request #53501 from nextcloud/fix-theming-for-disabled-accounts
...
fix: Fix theming for disabled accounts
2025-07-10 20:47:48 +07:00
01766b18f8
fix: Fix theming for disabled accounts
...
The Theming app injects the stylesheets for the different themes in the
"<header>" element of the page, and those stylesheets are then loaded by
the browser from a "Controller" (a plain "Controller", not an
"OCSController"). The stylesheets, in turn, may also get some images
(like the background) also from the "Controller".
When handling a request to "index.php" it is checked whether the user is
logged in and, if not, a login is tried. A disabled user is explicitly
seen as not logged in, so a login is always tried in that case, but
disabled users are also explicitly prevented to log in, so the login
also fails. Due to that trying to get any of the themed stylesheets or
images with a disabled account (to be able to show the "Account
disabled" error page) fails with an HTTP status 401.
To solve that, and to avoid touching this basic logic as much as
possible, the login exception is now ignored (if the user is disabled)
for some specific requests to the Theming app.
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2025-07-10 15:19:01 +07:00
da20bbb44d
chore: update psalm baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-07-10 11:40:27 +07:00
027471b146
fix: force lowercase emails
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-07-10 09:10:01 +07:00
3da74810b5
Merge pull request #53537 from nextcloud/fix/cleanup-dependencyanalyser
2025-07-09 13:16:55 +07:00
d717dd9850
feat(OCP): Consumable vs. Implementable public API
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-07-09 10:24:10 +07:00
adb6f00051
chore: update psalm baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-07-09 10:15:00 +07:00
7bdfd94246
chore: update psalm baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-07-08 13:32:15 +07:00
90705520c7
chore: Remove unused \OC\Cache\CappedMemoryCache
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-07-08 11:39:33 +07:00
24f7a2e680
fix(core): Stop abusing the cache for avatar upload
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-07-08 11:38:59 +07:00
1620a0c051
chore: add rector DataProviderAnnotationToAttributeRector
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-07-01 22:45:06 +07:00
259f1fe9bd
chore: add phpunit StaticDataProviderClassMethodRector rector rule
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-07-01 22:45:01 +07:00
5981b7eb51
chore: apply new CSFixer rules
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
# Conflicts:
# apps/settings/lib/SetupChecks/PhpOpcacheSetup.php
2025-07-01 16:26:50 +07:00
bd00b75b29
Merge pull request #53671 from nextcloud/fix/read-only-share-download
2025-07-01 15:11:06 +07:00
2e5ccc7123
fix(files): Always transfer incoming shares when doing ownership transfer to prevent broken reshares
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-07-01 08:23:53 +07:00
60b8384e48
Merge branch 'master' into remove-x-xss-protection
2025-06-30 21:32:22 +07:00
de54bdb06b
fix: handle ambiguous IResponse.getBody return types
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-06-30 11:50:11 +07:00
3d0fb7e603
docs(http): Update return type for getBody
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-06-30 11:50:10 +07:00
9806a9830c
feat(files_sharing): allow viewing files with download disabled
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-06-26 11:47:53 +07:00
53fb05e2d0
fix(nullcache): make get compliant with the interface
...
The interface defines ICacheEntry|false, thus we should not return null.
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-06-26 09:54:48 +07:00
b6af06d2e0
fix: revive always storing lowercased email addresses
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-06-24 13:53:08 +07:00
960b3ec0eb
refactor(dav): move shared logic to a dedicated example contact service
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-06-19 23:46:00 +07:00
f314d930be
Merge pull request #52916 from nextcloud/fix/cache-ldap-configuration-prefixes
...
fix(user_ldap): Store the list of used configuration prefixed in appconfig
2025-06-19 11:57:15 +07:00
35a27b5fd5
fix(FilenameValidator): use `_` as default replacement for invalid chars
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-06-18 09:44:57 +07:00
6254354f27
test(dav): add integration test for principal property search
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-06-17 11:19:24 +07:00
2b58f74cc8
Fix: Remove X-XSS-Protection use, check and recommendation
...
Co-authored-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: invario <67800603+invario@users.noreply.github.com>
2025-06-13 16:12:27 +07:00
3cc34ac29d
chore: add UseSpecificWillMethodRector to rector configuration
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-06-12 18:33:43 +07:00
de74745ab6
chore: add tests to rector configuration
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-06-12 18:31:40 +07:00
b9949b2381
chore: update psalm baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-06-10 16:08:52 +07:00
55bca1e5db
fix: use logical operator instead of bitwise
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-06-10 13:55:53 +07:00
231916d403
Merge pull request #52538 from nextcloud/feat/use-php84-lazy-objects
...
Use PHP 8.4 lazy ghosts for Dependency injection
2025-06-10 10:45:12 +07:00
04118afdab
Merge pull request #53287 from nextcloud/feat/test-app-routes
...
feat(tests): Test application enabling/disabling and routes
2025-06-06 13:00:02 +07:00
a42ef7d633
fix: Fix psalm issue and update baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-06-05 20:51:18 +07:00
ba53147e10
chore: update psalm baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-06-05 18:20:05 +07:00
580911dc89
chore: Disable appstore from integration tests
...
This avoids spamming the appstore server and getting banned from CI runs
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-06-05 16:23:07 +07:00
a15c473ae2
feat(tests): Test application enabling/disabling and routes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-06-05 15:12:28 +07:00
e41e8de0e2
fix(dav): file drop nickname
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-06-05 09:09:17 +07:00
0a982374ec
refactor(core): migrate core application to `IBootstrap`
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-06-02 15:58:25 +07:00
7599162c7b
feat: move primary object store configuration to a single place
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-28 15:32:31 +07:00
3f36d868ac
fix(security): Update CA certificate bundle
...
Signed-off-by: GitHub <noreply@github.com>
2025-05-21 02:37:29 +07:00
9637fe6474
Revert "fix(files_sharing): Filter own shares that are reshares"
2025-05-19 17:16:39 +07:00
13f23061e8
Merge pull request #52891 from nextcloud/chore/nix-flake
2025-05-19 11:51:22 +07:00
Ferdinand Thiessen
nextcloud-command
provokateurin
John Molakvoæ
Arthur Schiwon
Daniel Calviño Sánchez
Côme Chilliet
skjnldsv
Kate
Joas Schilling
Robin Appelman
Joas Schilling
Daniel Kesselberg
Richard Steinmetz
Côme Chilliet
invario
Stephan Orbaugh