Côme Chilliet
							
						 
						
							
							
							
								
							
								71ee292650 
								
							
								 
							
						 
						
							
							
								
								Add rate limiting on lost password emails  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julien Veyssier
							
						 
						
							
							
								
								
							
							
								
							
								6e03d99ab8 
								
									
								
							
								 
							
						 
						
							
							
								
								fix reference preview endpoint when no server-side cache configured  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julien Veyssier <eneiluj@posteo.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								0642d17e4f 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix URLs on reference resolving  
							
							 
							
							 
							
							
								
 
							
							
							The vue-richtext app currently sends leading spaces if they are in the text.
Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
							
								
							
								f4a2ab137b 
								
							
								 
							
						 
						
							
							
								
								Add cache header for image endpoint if link previews  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								5fa7563bf9 
								
									
								
							
								 
							
						 
						
							
							
								
								Add endpoint to fetch a cachable reference data  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
							
								
							
								66a7a89898 
								
							
								 
							
						 
						
							
							
								
								Add api to load additional section in profile page  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
								
								
							
							
								
							
								bc9a488046 
								
									
								
							
								 
							
						 
						
							
							
								
								Update avatars on update  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
								
								
							
							
								
							
								76d0165330 
								
									
								
							
								 
							
						 
						
							
							
								
								Dark theme for guest avatar  
							
							 
							
							 
							
							
								
 
							
							
							And better caching policy
Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
								
								
							
							
								
							
								f98ae2b5b0 
								
									
								
							
								 
							
						 
						
							
							
								
								Avatar new style  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								f44d2586b1 
								
							
								 
							
						 
						
							
							
								
								Remake profile picture saving with Vue  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								1ab66988bc 
								
									
								
							
								 
							
						 
						
							
							
								
								Inject all dependnencies and increase cache timeout  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								80f6a5834a 
								
									
								
							
								 
							
						 
						
							
							
								
								Refactor cache handling  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								a392235e23 
								
									
								
							
								 
							
						 
						
							
							
								
								Cleanup  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								0ce0d37ac1 
								
									
								
							
								 
							
						 
						
							
							
								
								Implement image caching  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								de3e541fde 
								
									
								
							
								 
							
						 
						
							
							
								
								API for fetching reference metadata  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								85eb3b2920 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix wording of undeliverable push notifications  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								9ba11ecefd 
								
							
								 
							
						 
						
							
							
								
								Improve handling of profile page  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								NoSleep82
							
						 
						
							
							
								
								
							
							
								
							
								b03aedf128 
								
									
								
							
								 
							
						 
						
							
							
								
								Update core/Controller/LostController.php  
							
							 
							
							 
							
							
								
 
							
							
							Co-authored-by: John Molakvoæ <skjnldsv@users.noreply.github.com>
Signed-off-by: NoSleep82 <52562874+NoSleep82@users.noreply.github.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								NoSleep82
							
						 
						
							
							
								
								
							
							
								
							
								61548c520b 
								
									
								
							
								 
							
						 
						
							
							
								
								Update LostController.php  
							
							 
							
							 
							
							
								
 
							
							
							i would be useful to know who is trying to reset the password (misspelled username or email, ex user or some sort of attack)
Signed-off-by: NoSleep82 <52562874+NoSleep82@users.noreply.github.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
							
								
							
								253118298d 
								
							
								 
							
						 
						
							
							
								
								Redesign guest pages for better accessibility  
							
							 
							
							 
							
							
								
 
							
							
							- Use white box and put content on it
- Improve focus indicator
Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								92500e810f 
								
							
								 
							
						 
						
							
							
								
								Identify the login page explicitly by the page title  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Thomas Citharel
							
						 
						
							
							
								
								
							
							
								
							
								abe5ff3654 
								
									
								
							
								 
							
						 
						
							
							
								
								Make LostController use IInitialState and LoggerInterface  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Thomas Citharel <tcit@tcit.fr> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Thomas Citharel
							
						 
						
							
							
								
								
							
							
								
							
								44e13848a1 
								
									
								
							
								 
							
						 
						
							
							
								
								Add password reset typed events  
							
							 
							
							 
							
							
								
 
							
							
							These hooks are only used in the Encryption app from what I can see.
Signed-off-by: Thomas Citharel <tcit@tcit.fr> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								57c66bf7cb 
								
							
								 
							
						 
						
							
							
								
								Use Image class from public API  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						3 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
							
								
							
								b70c6a128f 
								
							
								 
							
						 
						
							
							
								
								Update core to PHP 7.4 standard  
							
							 
							
							 
							
							
								
 
							
							
							- Typed properties
- Port to LoggerInterface
Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								db1813f640 
								
									
								
							
								 
							
						 
						
							
							
								
								Show user account on grant loginflow step  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Thomas Citharel
							
						 
						
							
							
								
								
							
							
								
							
								232322fe06 
								
									
								
							
								 
							
						 
						
							
							
								
								Modernize contacts menu  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Thomas Citharel <tcit@tcit.fr> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								John Molakvoæ
							
						 
						
							
							
								
								
							
							
								
							
								3c6253f965 
								
									
								
							
								 
							
						 
						
							
							
								
								Remove old legacy SvgController and IconsCacher  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								6e4d721278 
								
									
								
							
								 
							
						 
						
							
							
								
								Expose shareWithDisplayNameUnique also on autocomplete endpoint  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Vincent Petry
							
						 
						
							
							
							
								
							
								80388663af 
								
							
								 
							
						 
						
							
							
								
								Add direct arg to login flow  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Vincent Petry <vincent@nextcloud.com>
Co-Authored-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								5f75d2e104 
								
									
								
							
								 
							
						 
						
							
							
								
								Remove old shortening  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								a0c7798c7d 
								
									
								
							
								 
							
						 
						
							
							
								
								Limit the length of app password names  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								1fc0b4320c 
								
							
								 
							
						 
						
							
							
								
								Add global profile toggle config  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
							
								
							
								36721a8d0d 
								
							
								 
							
						 
						
							
							
								
								Fix caching of the user avatar  
							
							 
							
							 
							
							
								
 
							
							
							Now on firefox/safari it is only refetched once a day. On Chrom{e,ium}
we keep the previous behavior of maybe refetching it more often.
This also notify the user about this behavior when they upload an avatar
picture.
Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Carl Schwan
							
						 
						
							
							
							
								
							
								7dddbd0c35 
								
							
								 
							
						 
						
							
							
								
								Improve caching policy  
							
							 
							
							 
							
							
								
 
							
							
							* Cache css with version in url. This makes most js and css requests to
  be cached by the browser
* Force caching previews, the etag is in the url so that if the propfind
  gives a new etag, we will refresh it otherwise it's no use to try to
  fetch the new etag and do tons of DB queries
Tested with firefox and 'debug' => false (important so that the js/css
urls are generated with ?v= parameter)
Signed-off-by: Carl Schwan <carl@carlschwan.eu> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								6dd60b6d30 
								
									
								
							
								 
							
						 
						
							
							
								
								Only allow avatars in 64 and 512 pixel size  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								22768769c3 
								
							
								 
							
						 
						
							
							
								
								Improve installation pages  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								John Molakvoæ (skjnldsv)
							
						 
						
							
							
								
								
							
							
								
							
								b664aad7ab 
								
									
								
							
								 
							
						 
						
							
							
								
								Move bundles to /dist  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								e00173a71b 
								
									
								
							
								 
							
						 
						
							
							
								
								Also pass user on flow v2 landing  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								61dd1d3d97 
								
									
								
							
								 
							
						 
						
							
							
								
								Pass username prefill through unauthenticated request redirects  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Julius Härtl
							
						 
						
							
							
								
								
							
							
								
							
								aa3f4bdf63 
								
									
								
							
								 
							
						 
						
							
							
								
								Allow using an app token to login with v2 flow auth  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Julius Härtl <jus@bitgrid.net> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								be5b9e36cd 
								
							
								 
							
						 
						
							
							
								
								Hide user status from public  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Côme Chilliet
							
						 
						
							
							
								
								
							
							
								
							
								5a20e20e9e 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix errors in AvatarController when data() returns null  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Christoph Wurst
							
						 
						
							
							
								
								
							
							
								
							
								c8caba265f 
								
									
								
							
								 
							
						 
						
							
							
								
								Explicitly allow some routes without 2FA  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								fa036b2001 
								
									
								
							
								 
							
						 
						
							
							
								
								Move common logic to share manager  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								f4307ef4b1 
								
							
								 
							
						 
						
							
							
								
								Respect user enumeration settings on profile  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Vitor Mattos
							
						 
						
							
							
								
								
							
							
								
							
								d613b32045 
								
									
								
							
								 
							
						 
						
							
							
								
								add check isFairUseOfFreePushService on login  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Vitor Mattos <vitor@php.rio> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Joas Schilling
							
						 
						
							
							
								
								
							
							
								
							
								3ce3c0f117 
								
									
								
							
								 
							
						 
						
							
							
								
								Add an OCS endpoint for the hovercard contact actions  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Joas Schilling <coding@schilljs.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Christopher Ng
							
						 
						
							
							
							
								
							
								309354852f 
								
							
								 
							
						 
						
							
							
								
								Profile backend  
							
							 
							
							 
							
							
								
 
							
							
							Signed-off-by: Christopher Ng <chrng8@gmail.com> 
							
						 
						4 years ago  
					 
				
					
						
							
							
								 
								Arthur Schiwon
							
						 
						
							
							
								
								
							
							
								
							
								a843d3c5db 
								
									
								
							
								 
							
						 
						
							
							
								
								allow using of disabled password reset mechanism for special cases  
							
							 
							
							 
							
							
								
 
							
							
							- LostController has three endpoints
- door opener email() still rejects
- resetform(), reachable from mail, checks the token first and may report
  that password reset is disabled
- setPassword() got its check removed as it is behind CSFR anyway and still
  requires a valid token
- this allows special cases like activating a freshly created guest account
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de> 
							
						 
						4 years ago