Commit graph

43690 commits

Author SHA1 Message Date
Georg Ehrke
2a21471c74
make sure force language is reflected in html lang attribute
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
2018-05-22 19:30:25 +02:00
Roeland Jago Douma
57d4a16cfb
Merge pull request #9517 from nextcloud/feature/noid/improve_oauth_handling
Improve OAuth handling
2018-05-22 10:16:45 +02:00
Roeland Jago Douma
6fac639747
Merge pull request #9520 from nextcloud/3rdparty/noid/bump_phpseclib
[3rdparty] Bump phpseclib to 2.0.11
2018-05-22 09:24:53 +02:00
Roeland Jago Douma
461998dd15
Add tests
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-22 09:24:17 +02:00
Roeland Jago Douma
5a97148863
Don't use special chars to avoid confusion
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-22 09:24:17 +02:00
Roeland Jago Douma
f7ecec855b
Rotate token
On a refresh token request:
* rorate
* reset expire

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-22 09:24:17 +02:00
Roeland Jago Douma
c28b25c4f0
Authenticate the clients on requesting a token
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-22 09:24:17 +02:00
Roeland Jago Douma
4e3aef22a1
Fail if the response type is not properly set
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-22 09:24:17 +02:00
Roeland Jago Douma
49795d2006
Set OAuth token expiration
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-22 09:24:17 +02:00
Roeland Jago Douma
bbcb36cd60
Merge pull request #9513 from nextcloud/3rdparty/noid/bump_autosize
Bump autosize to 4.0.2
2018-05-22 09:22:39 +02:00
Roeland Jago Douma
d4464cc3ef
Merge pull request #9515 from nextcloud/bugfix/noid/reset_session_when_auth_against_protected_share
Regenerate session id after public share auth
2018-05-22 09:21:39 +02:00
Nextcloud bot
0d90c5ebc4
[tx-robot] updated from transifex 2018-05-22 00:13:31 +00:00
Nextcloud bot
7161d8eaee
[tx-robot] updated from transifex 2018-05-21 00:13:41 +00:00
Nextcloud bot
ca089b9412
[tx-robot] updated from transifex 2018-05-20 00:13:24 +00:00
Nextcloud bot
e2f1f7b8f5
[tx-robot] updated from transifex 2018-05-19 00:13:41 +00:00
John Molakvoæ
b7fa89800d
Merge pull request #9521 from nextcloud/add-firefox-profile-with-support-for-css-grid-to-acceptance-tests
Add Firefox profile with support for CSS grid to acceptance tests
2018-05-19 00:29:47 +02:00
Roeland Jago Douma
03a6f8e14e
Merge pull request #9490 from marco44/faster_large_filehelper_32bits
Make LargeFileHelper.php faster by avoiding execs as much as possible
2018-05-18 21:09:17 +02:00
Daniel Calviño Sánchez
cb20503341 Add Firefox profile with support for CSS grid to acceptance tests
The acceptance tests are currently run on Firefox 47; in that version
the CSS grid support was not enabled by default, but it could be enabled
through a setting in the Firefox profile.

By default Selenium uses a clean Firefox profile when a new session is
started, but it also allows the customization of the profile through a
zipped "user.js" file. The contents of that file have to be provided in
the "firefox_profile" capability when the Firefox session is created.

In the Mink extension for Behat several Mink sessions can be defined in
the "behat.yml" file. Each Mink session uses a different browser session
in Selenium, and each of those browser sessions is initialized with the
capabilities provided in the "behat.yml" file.

From the point of view of the acceptance tests each Mink session is an
actor, so different actors can use different browsers with different
capabilities.

Due to all this a new actor was introduced, "Rubeus", who uses a Firefox
browser that has CSS grid support; this actor is meant to be used only
in those acceptance tests that require proper support for CSS grids.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2018-05-18 17:44:43 +02:00
Roeland Jago Douma
2cd633f21f
[3rdparty] Bump phpseclib to 2.0.11
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-18 12:55:40 +02:00
Roeland Jago Douma
9cc15bc9b0
Merge pull request #9508 from nextcloud/3rdparty/noid/bump_symfony
[3rdparty] Bump symfony components
2018-05-18 11:40:35 +02:00
Nextcloud bot
514b374923
[tx-robot] updated from transifex 2018-05-18 00:13:45 +00:00
Roeland Jago Douma
d6d0e60136
Regenerate session id after public share auth
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-17 22:07:20 +02:00
Roeland Jago Douma
9236c20a28
Merge pull request #9437 from nextcloud/feature/noid/imprint
allow to specify a link to a legal notice
2018-05-17 21:16:03 +02:00
Roeland Jago Douma
8696651cfb
Merge pull request #9491 from nextcloud/feature/noid/tokens_can_expire
Allow token to expire
2018-05-17 20:07:08 +02:00
Roeland Jago Douma
4a19079b06
Bump autosize to 4.0.2
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-17 16:42:16 +02:00
Roeland Jago Douma
c7ffb66b2c
[3rdparty] Bump symfony components
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-17 16:32:42 +02:00
Roeland Jago Douma
6b7cf46727
Certain tokens can expire
However due to the nature of what we store in the token (encrypted
passwords etc). We can't just delete the tokens because that would make
the oauth refresh useless.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-17 16:10:19 +02:00
Morris Jobke
9f064b08b3
Merge pull request #9507 from nextcloud/dep/noid/update_dompurify_1_0_4
Bump DOMPurify to 1.0.4
2018-05-17 16:02:38 +02:00
Morris Jobke
63d5491a73
Merge pull request #9503 from nextcloud/bugfix/noid/theming-mime-check
Check mime type properly in theming app
2018-05-17 15:48:44 +02:00
marco44
32fd0919c1 Make LargeFileHelper.php faster by avoiding execs as much as possible
Signed-off-by: Marc Cousin <cousinmarc@gmail.com>
2018-05-17 14:28:32 +02:00
Roeland Jago Douma
972bc9491a
Bump DOMPurity to 1.0.4
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-17 13:24:00 +02:00
Julius Härtl
5b3ca8f7c6
Add Content-Disposition header
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2018-05-17 12:21:57 +02:00
Julius Härtl
2bf51c7b9e
Properly check mime type of the uploaded file
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2018-05-17 11:46:01 +02:00
Nextcloud bot
ef665fde42
[tx-robot] updated from transifex 2018-05-17 00:13:46 +00:00
Roeland Jago Douma
81ab924389
Merge pull request #9484 from nextcloud/feature/noid/support_rotating_tokens
Allow the rotation of tokens
2018-05-16 20:03:00 +02:00
Roeland Jago Douma
aba255997a
Allow the rotation of tokens
This for example will allow rotating the apptoken for oauth

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-16 19:27:19 +02:00
Morris Jobke
0011bfb64b
Merge pull request #9475 from nextcloud/bug/9469/delete_preview_on_version_restore
Delete the previews when a version is restored
2018-05-16 11:37:12 +02:00
Arthur Schiwon
feff9f5bd1
Use link not address in labels for URLs
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2018-05-16 00:56:08 +02:00
Roeland Jago Douma
7de6c06c66
Merge pull request #9481 from nextcloud/techdep/noid/make_token_code_strict
Make the Token Auth code strict
2018-05-15 14:03:20 +02:00
Roeland Jago Douma
4ea2daf04d
Refix scope
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-15 11:41:27 +02:00
Roeland Jago Douma
991d9b5c3a
Fix session tests
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-15 11:32:25 +02:00
Roeland Jago Douma
466297829e
Fix tests
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-15 10:56:40 +02:00
Roeland Jago Douma
47388e1cfe
Make the Token Auth code strict
In preparation for #9441

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-15 10:32:30 +02:00
Roeland Jago Douma
497a4facdf
Merge pull request #9444 from nextcloud/techdep/noid/appframework_mapper_to_qb
Add a QueryBuilder based Mapper
2018-05-14 21:12:12 +02:00
Roeland Jago Douma
8657f56418
Merge pull request #9442 from nextcloud/feature/noid/use_composer_apcu
Use APCu caching of composer
2018-05-14 21:05:24 +02:00
Roeland Jago Douma
39bb9c06d1
Delete the previews when a version is restored
Fixes #9469

When a version of a file is restored the previews are no longer valid.
Thus we should remove them so they are regenerated.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-14 19:58:19 +02:00
Roeland Jago Douma
ed7b4839d9
The column is not user input so suppress the phan warning
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-14 14:46:33 +02:00
Morris Jobke
0dcb6b2675
Merge pull request #9420 from nextcloud/feature/5263/cleanup_previes
Cleanup previews in the background
2018-05-14 14:28:55 +02:00
Roeland Jago Douma
4202b68ee2
Bump integration test image
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-05-14 14:20:55 +02:00
Morris Jobke
d2cc48c6dd
Merge pull request #9446 from nextcloud/feature/9416/fileid_trashbin_dav_endpoint
Support fileid propfind on trash endpoint
2018-05-14 14:09:28 +02:00