dfbc405a45
Prioritise Basic Auth header over Cookie
...
There are a lot of clients that support multiple WebDAV accounts in the same application. However, they resent all the cookies they received from one of the accounts also to the other one. In the case of ownCloud this means that we will always show the user from the session and not the user that is specified in the basic authentication header.
This patch adds a workaround the following way:
1. If the user authenticates via the Sabre Auth Connector add a hint to the session that this was authorized via Basic Auth (this is to prevent logout CSRF)
2. If the request contains this hint and the username specified in the basic auth header differs from the one in the session relogin the user using basic auth
Fixes https://github.com/owncloud/core/issues/11400 and https://github.com/owncloud/core/issues/13245 and probably some other issues as well.
This requires proper testing also considering LDAP / Shibboleth and whatever instances.
2015-01-17 13:29:07 +01:00
60c4cb1dd6
[tx-robot] updated from transifex
2015-01-17 01:54:40 -05:00
744cf713f7
Merge pull request #13319 from owncloud/replace-line-breaks-in-app-description
...
replace line breaks in the app description by spaces - fixes #13315
2015-01-17 01:03:41 +01:00
08d118eab7
Merge pull request #13421 from owncloud/fix-rename
...
Fixes shifted rename field
2015-01-16 19:15:48 +00:00
48ad4ba9a0
Fixes shifted rename field
2015-01-16 17:32:18 +01:00
3465604cf9
Merge pull request #13418 from owncloud/app-icons
...
add icon for Provisioning API
2015-01-16 15:22:44 +01:00
b81c89d400
compress icons of LDAP and WebDAV-Auth
2015-01-16 14:43:27 +01:00
7624b395f2
add icon for Provisioning API
2015-01-16 14:43:14 +01:00
1c4668f808
Merge pull request #13399 from owncloud/trashbin-fixpreviewroute
...
Fix preview route for trashbin
2015-01-16 13:48:02 +01:00
9526acbcc4
Merge pull request #13413 from owncloud/apps-cancelloadonswitch
...
Cancel app list load when switching categories
2015-01-16 13:42:40 +01:00
0f0204ee35
Merge pull request #13160 from owncloud/extstorage-ocbackendnopartfile
...
Disable part files for OC ext storage backend + s2s backend
2015-01-16 13:38:59 +01:00
27c31de8df
Merge pull request #13412 from owncloud/app-management-sort
...
sorting enabled and disabled apps alphabetically - fixes #13404
2015-01-16 13:17:41 +01:00
6e20a408b4
Cancel app list load when switching categories
2015-01-16 12:23:02 +01:00
d3cd2b3e0f
sorting enabled and disabled apps alphabetically - fixes #13404
2015-01-16 12:07:08 +01:00
a65f666834
[tx-robot] updated from transifex
2015-01-16 01:55:51 -05:00
696d9dc98e
Merge pull request #13406 from owncloud/fix-php-doc
...
Fix PHPDoc
2015-01-15 20:35:30 -05:00
a1e92d61b3
Fix PHPDoc
2015-01-15 22:50:42 +01:00
051f626617
Merge pull request #13389 from owncloud/issue/13372-failing-oracle-tests-jenkins
...
Mask table and column names with backticks and add lastInsertID() workar...
2015-01-15 22:41:57 +01:00
0ebcc2d4f9
Merge pull request #13394 from owncloud/cache-remove-folder
...
Remove children from the cache in one query
2015-01-15 22:33:06 +01:00
2426729ad4
Merge pull request #13395 from owncloud/show-readonly-mail
...
Show mail address & display name if it is read only
2015-01-15 22:08:23 +01:00
1b671afa17
Merge pull request #13323 from owncloud/move-search
...
Move search to core/search
2015-01-15 20:41:57 +01:00
9b4d5b502f
Merge pull request #13397 from owncloud/files-greyhighlightondownload
...
Fix for sticky grey highlight / selection in file list
2015-01-15 20:32:42 +01:00
0a3e0a1665
Additional unit test for recursive remove
2015-01-15 18:47:05 +01:00
a76f0a0ba7
Fix preview route for trashbin
2015-01-15 18:45:24 +01:00
7f24e77cfc
Disallow ctrl click to select when selection not allowed
2015-01-15 18:16:27 +01:00
d40301492d
Auto-blur when clicking on file to download
2015-01-15 18:08:36 +01:00
7d81299014
Fixed thumbnal z-index for when no checkbox is there
...
In file lists with no selection checkbox, the CSS selector is different.
The thumbnail also needs position:absolute and a z-index to be displayed
above the row's grey highlight.
2015-01-15 17:53:23 +01:00
022b698475
Show mail address & display name if it is read only
...
* gives the user the chance to verify it's mail address
and display name
* ref #12823
* fixes #13393
2015-01-15 17:51:54 +01:00
2248e465af
Remove children from the cache in one query
2015-01-15 17:26:12 +01:00
36ced1f002
Merge pull request #13388 from owncloud/type-hint-url-params
...
Add PHPDoc for `urlParams`
2015-01-15 16:00:48 +01:00
3ce71b73c8
Merge pull request #13387 from owncloud/fix-urlparameters
...
always set url parameters when they are available in the app dispatch
2015-01-15 15:33:55 +01:00
bb0c88a577
always set url parameters when they are available in the app dispatch
...
prefer url parameters passed into the main method. If they are not present, use the containers urlParameters
add space
2015-01-15 15:22:52 +01:00
6769adcd0d
Mask table and column names with backticks and add lastInsertID() workaround
2015-01-15 14:43:06 +01:00
0da08bdb2c
Add PHPDoc for `urlParams`
2015-01-15 14:42:44 +01:00
2fbe8bbcba
Merge pull request #13370 from Sugaroverdose/fix_#13322
...
Force browser to redraw favorite icon on src change
2015-01-15 11:20:22 +01:00
9b7c1a0093
Merge pull request #13347 from owncloud/share-scanpermissionsfromsource
...
Use source storage permissions when scanning shared storage
2015-01-15 11:15:15 +01:00
8666d1d855
Merge pull request #13375 from owncloud/previews
...
Note in config.sample.php that certain previews are not available in ms ...
2015-01-15 11:07:36 +01:00
2a5cbd7eca
Note in config.sample.php that certain previews are not available in ms windows
2015-01-15 11:07:14 +01:00
b2de3b3d8d
Force browser to redraw favorite icon
...
on src change
2015-01-15 12:26:55 +03:00
4c233fef2a
[tx-robot] updated from transifex
2015-01-15 01:54:41 -05:00
9d0915013b
Merge pull request #13352 from owncloud/hhvm-array-key
...
HHVM: Do not use key() on array as the result depends on the internal array pointer.
2015-01-15 01:06:45 +00:00
b4a52e889a
Do not use key() on array as the result depends on the internal array pointer.
2015-01-15 00:48:10 +01:00
925a680a24
Merge pull request #13354 from owncloud/hhvm-redis
...
HHVM: Prevent E_WARNING messages by Redis test in console output.
2015-01-15 00:23:12 +01:00
337c43ce92
Merge pull request #13317 from owncloud/partfile-fileinfo
...
Return valid fileinfo objects for part files
2015-01-14 22:39:19 +01:00
64d7463ca3
Merge pull request #13344 from owncloud/issue/13334-cleanup-tags-repairstep
...
Add a repair step to clean up orphan tags and tag entries
2015-01-14 20:43:23 +01:00
34d6a1596c
Merge pull request #13367 from owncloud/type-hint-server-method-from-request
...
Add PHPDoc for magic property 'server'
2015-01-14 20:23:52 +01:00
04ae8d2ea0
Add PHPDoc for magic property 'server'
2015-01-14 19:36:22 +01:00
455ad005a0
Merge pull request #13350 from owncloud/autoload-translations
...
Autoload app's js translations
2015-01-14 18:12:05 +01:00
a9f0582e3e
Use source storage permissions when scanning shared storage
2015-01-14 18:11:23 +01:00
a22068cce3
Add a repair step to clean up orphan tags and tag entries
2015-01-14 16:49:25 +01:00
Lukas Reschke
Jenkins for ownCloud
Robin McCorkell
Morris Jobke
Jan-Christoph Borchardt
Vincent Petry
Thomas Müller
Frank Karlitschek
Robin Appelman
Bernhard Posselt
Joas Schilling
Carla Schroder
Sugaroverdose
Andreas Fischer