13ec2bda2d
Properly check X-Requested-With header in case of multiple values
...
Saw this happening in IE8...
2015-12-11 11:22:38 +01:00
1d30f0fcdb
Merge pull request #20760 from owncloud/webdav-authredirectfix
...
Only reject ajax auth if user is really logged out
2015-11-27 13:16:01 +01:00
d02e0eaaf1
Only reject ajax auth if user is really logged out
2015-11-26 17:04:21 +01:00
c25a7cc4da
Users are available under it's own principal resource named 'principals/users' this will allow us to introduce e.g. groups as principals (one day) and system specific principals (needed for federation)
2015-11-25 22:23:34 +01:00
ae36c01b95
Adjust sabre changes in core
2015-11-24 15:11:54 +01:00
055d58bfc3
Do not authenticate over ajax
...
This makes sure that whenever a Webdav call is done through Ajax, if the
session has expired, it will not send back a challenge but a simple 401
response. Without this fix, the default code would send back a challenge
and trigger the browser's basic auth dialog.
2015-11-23 09:44:30 +01:00
5573029485
Scrutinizer Auto-Fixes
...
This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
2015-11-20 15:42:34 +00:00
0f434e0b9b
Implement CSRF protection
2015-11-19 11:34:59 +01:00
cddc9abc06
Add tests for Sabre Auth plugin + make getCurrentUser compatible
2015-10-23 17:30:47 +02:00
f2889dc6e4
Consolidate webdav code - move all to one app
2015-10-16 13:17:12 +02:00
Vincent Petry
Thomas Müller
Scrutinizer Auto-Fixer
Lukas Reschke