cde7f535bd
Merge pull request #1738 from nextcloud/comments-provide-displaynames-with-mentions
...
comment mentions: show displayname not uid
2016-10-26 14:02:49 +02:00
89574367bc
Merge pull request #1871 from nextcloud/use-csp-nonces
...
Use CSP nonces
2016-10-25 14:46:00 +02:00
44cf67accd
Storage 503 message improvements
...
"Storage not available" is now "Storage temporarily not available".
Exceptions are now logged in DEBUG level, not FATAL.
2016-10-24 15:43:15 +02:00
9e6634814e
Add support for CSP nonces
...
CSP nonces are a feature available with CSP v2. Basically instead of saying "JS resources from the same domain are ok to be served" we now say "Ressources from everywhere are allowed as long as they add a `nonce` attribute to the script tag with the right nonce.
At the moment the nonce is basically just a `<?php p(base64_encode($_['requesttoken'])) ?>`, we have to decode the requesttoken since `:` is not an allowed value in the nonce. So if somebody does on their own include JS files (instead of using the `addScript` public API, they now must also include that attribute.)
IE does currently not implement CSP v2, thus there is a whitelist included that delivers the new CSP v2 policy to newer browsers. Check http://caniuse.com/#feat=contentsecuritypolicy2 for the current browser support list. An alternative approach would be to just add `'unsafe-inline'` as well as `'unsafe-inline'` is ignored by CSPv2 when a nonce is set. But this would make this security feature unusable at all in IE. Not worth it at the moment IMO.
Implementing this offers the following advantages:
1. **Security:** As we host resources from the same domain by design we don't have to worry about 'self' anymore being in the whitelist
2. **Performance:** We can move oc.js again to inline JS. This makes the loading way quicker as we don't have to load on every load of a new web page a blocking dynamically non-cached JavaScript file.
If you want to toy with CSP see also https://csp-evaluator.withgoogle.com/
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-10-24 12:27:50 +02:00
3a8e75a814
Allow 4byte unicode filenames on supported platforms
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2016-10-20 14:26:09 +02:00
cf2d1b2427
Move federated share notifications to ROS
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-20 12:14:59 +02:00
b35d2fd8f2
Allow rich object subjects for Notifications
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-20 12:14:59 +02:00
2098648850
Add Rich Object Definitions and a validator
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-20 12:14:51 +02:00
5d98ab83e9
resolve displayname via manager and registerable resolvers
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-19 00:34:00 +02:00
fea3e20a80
move mention extraction to (I)Comment and report mentions via DAV
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-19 00:33:55 +02:00
96f8f209b9
Merge pull request #1449 from nextcloud/comments-user-mention
...
Notifications for simple @-mentioning in comments
2016-10-17 09:30:47 +02:00
1bcd2ca8e3
emit pre-update event for comments
...
* notifications can be cleaned up, no polluted DB
* updating comments will re-notify users or remove notifications, depending on the message
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-12 18:06:22 +02:00
0d842e0550
optimize Folder::getById to use less queries
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2016-10-12 16:12:28 +02:00
e1073cf442
Notificacations for simple @-mentioning in comments
...
(WIP) notify user when mentioned in comments
Fix doc, and create absolute URL for as notification link.
PSR-4 compatibility changes
also move notification creation to comments app
Do not notify yourself
unit test for controller and application
smaller fixes
- translatable app name
- remove doubles in mention array
- micro perf optimization
- display name: special label for deleted users, keep user id for users that could not be fetched from userManager
Comment Notification-Listener Unit Test
fix email adresses
remove notification when triggering comment was deleted
add and adjust tests
add missing @license tags
simplify NotificationsController registration
appinfo simplification, php docs
make string easier to translate
adjust test
replace dispatcher-based listeners with a registration method and interface
safer to not pass optional data parameter to setSubject for marking as processed. ID and mention suffices
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
update comment
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-07 17:11:19 +02:00
c77933ca22
Add an icon to the notification API
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-07 17:00:24 +02:00
316db0a97b
add proper exception documentation for ISimpleFS interface
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2016-10-05 23:47:00 +02:00
851769adc8
Deprecate old app folder
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-05 11:00:16 +02:00
6807cb684f
avatar to appdata
...
* Fix AvatarTest
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-05 11:00:16 +02:00
5d8b941fea
Initial AppData
...
* Introduce simpleFS
* Introduce IAppData
* Introduce AppData Factory to get your AppData folder
* Update FileDisplayResponse
* AppData implements a ISimpleRoot but lazy. So only if an apps starts
to access data will stuff get initialized
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-05 11:00:14 +02:00
afe40ac996
write channel to config file when changed
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2016-09-26 13:44:56 +02:00
7c078a81b4
Add trict CSP to OCS responses
...
If a repsonse now explicitly has the Empty CSP set then the middleware
won't touch it.
2016-09-15 13:11:36 +02:00
3c55fe6bab
Split OCS version handling
...
This cleans up a bit the OCSController/Middleware. Since the 2 versions
of OCS differ a bit. Moved a lot of stuff internal since it is of no
concern to the outside.
2016-09-06 11:57:39 +02:00
777c3ee325
Add FileDisplayResponse
...
A lazy implementation of the DisplayResponse that only hits the
filesystem if the etag and mtime do not match.
2016-09-05 15:09:54 +02:00
06fa486706
Merge pull request #1158 from nextcloud/cache_avatars
...
Cache avatars
2016-09-05 15:08:43 +02:00
12736a3592
Merge pull request #1271 from nextcloud/fix-docs-for-notifications
...
Null !== void, those methods are void
2016-09-05 14:16:45 +02:00
fb04c56827
Null !== void, those methods are void
2016-09-05 13:00:56 +02:00
3b2beeaa14
Deprecate OCSRespone
...
The OCSResponse should not be used by apps. They should extend the
OCSController and use normal DataResponses instead.
2016-09-05 10:51:19 +02:00
14136295b7
Cache avatars properly
...
* Set proper caching headers for avatars (15 minutes)
* For our own avatar use some extra logic to invalidate when we update
2016-08-30 09:00:16 +02:00
1c3b1e5797
add stacktrace to query logger
2016-08-24 14:37:15 +02:00
a111181eb3
Validate the operation
2016-08-19 12:23:05 +02:00
a9f36067fd
Fix constant name, copy-pasterino
2016-08-17 10:41:13 +02:00
ce0604bd06
Merge pull request #892 from nextcloud/fix_phpdoc
...
Some scrutinizer phpdoc fixes
2016-08-17 10:38:21 +02:00
0dc22d13a9
Fix IL10N phpdoc
2016-08-16 20:24:50 +02:00
208e551216
check registered sections and settings after an app got updated to garbage collect orphaned classes
2016-08-16 00:56:17 +02:00
9edca39b49
attempt to remove section and settings entries when an app got disabled
2016-08-16 00:56:17 +02:00
8261ccce1b
Merge branch 'master' into implement_712
2016-08-11 19:37:17 +02:00
225eb27bca
Add since tags to class
2016-08-11 19:33:37 +02:00
8f12f5df15
Add missing since annotations
2016-08-11 19:28:24 +02:00
14ddf9d923
rename IAdmin to ISettings, the interface is not bound to a specific settings scope
2016-08-11 14:48:21 +02:00
ba922c9f73
Merge pull request #807 from nextcloud/ocs_dataresponse
...
OCSController requires DataResponse
2016-08-10 22:36:25 +02:00
1eb8b951c2
more admin page splitup improvements
...
* bump version to ensure tables are created
* make updatenotification app use settings api
* change IAdmin::render() to getForm() and change return type from Template to TemplateResponse
* adjust User_LDAP accordingly, as well as built-in forms
* add IDateTimeFormatter to AppFramework/DependencyInjection/DIContainer.php. This is important so that \OC::$server->query() is able to resolve the
constructor parameters. We should ensure that all OCP/* stuff that is available from \OC::$server is available here. Kudos to @LukasReschke
* make sure apps that have settings info in their info.xml are loaded before triggering adding the settings setup method
2016-08-10 15:21:25 +02:00
1f370c97ed
OCSController requires DataResponse
...
The OCS Controller requires a DataResponse object to be returned.
This means that all error handling will have to be done via exceptions
thrown and handling in the middleware.
2016-08-10 12:40:26 +02:00
ceeb44bd04
Initial work on Apps page split:
...
* interfaces for the Admin settings (IAdmin) and section (ISection)
* SettingsManager service
* example setup with LDAP app
2016-08-09 18:05:09 +02:00
a999420c75
get shared storage storage id without setting up the storage
2016-08-09 15:52:13 +02:00
73311091bf
Merge pull request #519 from GitHubUser4234/master
...
New LDAPProvider for user_ldap
2016-07-28 10:14:34 +02:00
bd65a17203
Nextcloud license header for new files
2016-07-28 15:13:00 +08:00
681eebcfe6
Remove php side of check registration
2016-07-27 10:21:26 +02:00
2719dcabed
Merge branch 'master' of https://github.com/nextcloud/server
2016-07-27 15:17:29 +08:00
32fb6beac3
final changes
2016-07-27 15:10:35 +08:00
2f42a3fc31
Add workflowengine
2016-07-26 11:16:34 +02:00
81e103074e
use limit instead of since when listing recent files
2016-07-22 15:20:55 +02:00
e321ecd592
add recent files to node api
2016-07-22 14:39:32 +02:00
02ec8b1726
New LDAPProvider for user_ldap
2016-07-22 16:46:29 +08:00
8c7d7d7746
Merge pull request #507 from nextcloud/run-le-script
...
Update emails and license headers with latest changes
2016-07-21 23:27:15 +02:00
0215b004da
Update with robin
2016-07-21 18:13:58 +02:00
ba87db3fcc
Fix others
2016-07-21 18:13:57 +02:00
e42f2f2650
AppFramework do not get default response
...
The OCSResponse differs from other responses in that it defaults to
XML. However we fell back to json by default.
This makes sure that if nothing is set we don't pass anything.
Which defaults then to the controllers default (which is often 'json')
but in the case of the OCSResponse 'xml'.
2016-07-20 22:05:43 +02:00
020a2a6958
Merge pull request #476 from nextcloud/port-same-site-cookies
...
[master] Port Same-Site Cookies to master
2016-07-20 21:35:02 +02:00
cff5be3d63
Deprecate \OCP\API
2016-07-20 20:03:53 +02:00
ea47974a08
Add OCSMiddleware to catch OCS exceptions
...
* OCSException
* OCSBadRequestException
* OCSForbiddenException
* OCSNotFoundException
2016-07-20 20:03:49 +02:00
a299fa38a9
[master] Port Same-Site Cookies to master
...
Fixes https://github.com/nextcloud/server/issues/50
2016-07-20 18:37:57 +02:00
1264e9644f
Merge pull request #402 from nextcloud/smb-notifications
...
smb update notifications
2016-07-20 16:19:21 +02:00
544c3c1565
Merge pull request #436 from nextcloud/public-regex-to-match-our-clients
...
Copy the regexes to the public interface
2016-07-19 11:35:10 +02:00
0a6d95b126
Merge pull request #394 from nextcloud/tags-for-everything
...
SystemTags for everything not just files
2016-07-19 10:47:12 +02:00
b1d652e8b0
Copy the regexes to the public interface
2016-07-18 15:11:44 +02:00
9795a732ff
Update since version
2016-07-18 10:26:43 +02:00
7c039bcbf6
Allow apps to register SystemTags plugins
2016-07-18 10:26:42 +02:00
d485cfd40d
fix since
2016-07-15 13:58:44 +02:00
2c988ecbf4
Use the themed Defaults everywhere
2016-07-15 09:17:30 +02:00
e1fa314b18
add notify support to smb storage
2016-07-14 14:46:01 +02:00
29eeeb2273
Save the files external mount id in the mount cache table
2016-07-13 16:34:08 +02:00
28d070730d
Fix case with no user
2016-06-14 11:34:41 +02:00
ae3d0d96fe
Optimize isSharingDisabledForuser
2016-06-14 10:17:06 +02:00
52a0c939ab
Merge pull request #24863 from owncloud/propagator-batching
...
Propagator batching for the file scanner
2016-06-10 17:45:52 +02:00
369c3b5d7e
Implement classification migration as repair step
2016-06-09 11:09:14 +02:00
911fd3ead4
Do not allow to store boolean configs, they behave unexpected on postgres
2016-06-06 12:38:20 +02:00
9fb44e34af
add propagator batching
2016-06-02 15:07:47 +02:00
aba539703c
Update license headers
2016-05-26 19:57:24 +02:00
de9b30490e
Move public search namespace to PSR-4
2016-05-24 11:52:44 +02:00
adcf942901
Merge pull request #24750 from owncloud/lenz1111-share_download_range_requests_support
...
Http Range requests support in downloads
2016-05-23 21:01:26 +02:00
87fa86a69a
Merge pull request #24559 from owncloud/2fa
...
two factor auth
2016-05-23 20:50:03 +02:00
6577bbe887
Code style and doc fix
2016-05-23 15:17:00 +02:00
eca57be336
Only recurse into incomplete folders during background scans
2016-05-23 14:40:35 +02:00
dfb4d426c2
Add two factor auth to core
2016-05-23 11:21:10 +02:00
0b831a2bed
Move EntityEvent to PSR-4
2016-05-23 09:06:02 +02:00
c9fda84841
Make the root collection neutral so it does not only work for files
2016-05-23 09:03:48 +02:00
7a6966cdfe
Merge pull request #24732 from owncloud/autoloader_fix
...
Autoloader fix
2016-05-21 19:09:22 +02:00
8646802850
Merge pull request #24696 from owncloud/lock-jobs-while-executing
...
Lock jobs while executing them, to allow multiple executors to run in…
2016-05-21 19:08:15 +02:00
d0a2fa0506
Lock jobs while executing them, to allow multiple executors to run in parallel
2016-05-21 01:59:25 +02:00
7e3ce83526
Add a method to lock a table
2016-05-21 01:59:03 +02:00
9999e05660
Http Range requests support in downloads
...
Http range requests support is required for video preview
2016-05-20 18:16:44 +02:00
8fbb63d316
Some tweaks for systemtagmanager
2016-05-20 17:56:02 +02:00
3cd65fe25d
Add systemtag_group table and get/set methods
...
Added systemtag to group mapping table.
Added methods in ISystemTagManager to get/set the group mappings.
2016-05-20 17:56:02 +02:00
09b3883d9c
Updated canUser* functions in SystemTagManager to accept objects
2016-05-20 17:56:02 +02:00
8343cfb64b
Add interface methods for permission check
...
Instead of checking for admin perm, use interface method
canUserAssignTag and canUserSeeTag to check for permissions.
Allows for more flexible implementation.
2016-05-20 17:56:02 +02:00
edb512bf4d
Move Template to PSR-4
2016-05-20 16:35:07 +02:00
65eae43ab1
Merge pull request #24721 from owncloud/public_psr4
...
Move \OCP to PSR-4
2016-05-19 15:53:03 +02:00
0bbf825f6e
Merge pull request #24722 from owncloud/notification_psr4
...
Move \OCP\Notification to PSR-4
2016-05-19 15:35:45 +02:00
7d2bc47f81
Merge pull request #24724 from owncloud/mail_psr4
...
Move \OCP\Mail to PSR-4
2016-05-19 15:35:09 +02:00
5ba0554974
Merge pull request #24723 from owncloud/migration_psr4
...
Move \OCP\Migration to PSR-4
2016-05-19 15:34:22 +02:00
a4ce528bca
Merge pull request #24720 from owncloud/systemtag_psr4
...
Move \OCP\SystemTag to PSR-4
2016-05-19 15:33:59 +02:00
8425133c7d
Merge pull request #24719 from owncloud/security_psr4
...
Move \OCP\Security to PSR-4
2016-05-19 15:33:05 +02:00
6ace14b6ad
Merge pull request #24718 from owncloud/route_psr4
...
Move \OCP\Route to PSR-4
2016-05-19 10:30:32 +02:00
78732aaf0c
Merge pull request #24717 from owncloud/preview_psr4
...
Move \OCP\Preview to PSR-4
2016-05-19 10:30:21 +02:00
ae7e14b223
Merge pull request #24710 from owncloud/lock_psr4
...
Move \OCP\Lock to PSR-4
2016-05-19 10:28:49 +02:00
d666725fa7
Move \OCP to PSR-4
2016-05-19 09:43:33 +02:00
c05032ff20
Move \OCP\SystemTag to PSR-4
2016-05-18 18:30:49 +02:00
f67f888d50
Move \OCP\Security to PSR-4
2016-05-18 18:28:31 +02:00
2dc8c3a3f2
Move \OCP\Route to PSR-4
2016-05-18 18:23:44 +02:00
dc0e3617dc
Merge pull request #24707 from owncloud/l10n_psr4
...
Move \OCP\L10N to PSR-4
2016-05-18 18:23:44 +02:00
31f6d01606
Move \OCP\Preview to PSR-4
2016-05-18 18:22:34 +02:00
bd27eadf9e
Move \OCP\Notification to PSR-4
2016-05-18 18:21:27 +02:00
1c721771ff
Move \OCP\Migration to PSR-4
2016-05-18 18:19:24 +02:00
babdf8477d
Move \OCP\Mail to PSR-4
2016-05-18 17:42:33 +02:00
12fd87d0a3
Move \OCP\Lock to PSR-4
2016-05-18 17:10:04 +02:00
4a94203492
Merge pull request #24706 from owncloud/http_psr4
...
Move \OCP\Http to PSR-4
2016-05-18 16:50:17 +02:00
40bf0a913f
Move \OCP\L10N to PSR-4
2016-05-18 16:38:44 +02:00
4a53542e45
Move \OCP\Files to PSR-4
2016-05-18 14:35:50 +02:00
1d2c1e60ee
Move \OCP\Http to PSR-4
2016-05-18 09:24:10 +02:00
d5506b605f
Move \OCP\Encryption to PSR-4 ( #24680 )
2016-05-17 23:08:43 +02:00
de5b7609f9
use mount providers to setup home storages ( #24567 )
2016-05-17 21:40:55 +02:00
7dbdf2f7e0
\OCP\DB to PSR-4 ( #24650 )
...
* Move \OCP\DB to PSR-4
* Fix PHP doc
2016-05-17 17:38:25 +02:00
90a290afd8
Move \OCP\Diagnostics to PSR-4 ( #24667 )
2016-05-17 15:53:49 +02:00
499f0e487d
Move \OCP\Authentication to PSR-4 ( #24632 )
2016-05-17 10:29:23 +02:00
cbff3e0de7
Move \OCP\Console to PSR-4 ( #24636 )
2016-05-17 10:28:58 +02:00
15fdd36617
Move \OCP\Contacts to PSR-4 ( #24645 )
2016-05-17 10:22:21 +02:00
5e03e9a843
Merge pull request #24083 from owncloud/fix-race-condition
...
Read only once
2016-05-17 09:03:57 +02:00
56f4c4bed9
Move \OCP\Comments to PSR-4 ( #24565 )
2016-05-12 09:48:11 +02:00
73b8158519
Move \OCP\Command to PSR-4
2016-05-10 20:14:04 +02:00
e74323ca90
Fix phpdoc
2016-05-10 12:43:35 +02:00
b6b35b55c7
Move \OCP\Capabilities to PSR-4
2016-05-09 07:30:56 +02:00
fd371700a2
Move \OCP\BackgroundJob to PSR-4
2016-05-07 12:15:59 +02:00
e47b186d51
Move \OCP\AppFramework to PSR-4
2016-05-06 20:38:34 +02:00
ec8298c493
Move \OCP\App to PSR-4
2016-05-06 13:32:46 +02:00
9185517bf0
Move \OCP\Activity to PSR-4
2016-05-05 20:25:08 +02:00
4b2544925f
Merge pull request #23844 from owncloud/disable-user
...
Add occ commands to enable and disable a user + a disabled user can n…
2016-05-03 15:22:41 +02:00
df2eb96cc4
Merge pull request #24389 from owncloud/login-by-email
...
Allow login by email address
2016-05-03 13:44:38 +02:00
61ce4f4ef3
Add methods to public interface
2016-05-03 10:30:15 +02:00
b84825f030
Merge pull request #24229 from owncloud/session-id-wrapper
...
add ISession::getId() wrapper for session_id
2016-05-02 16:49:38 +02:00
b10dcfc3b7
Fixing local event delivery for calendar events based on the email address
2016-05-02 14:20:59 +02:00
f81b57bc45
Read only once
...
This can lead to race conditions otherwise. Also depracted hasKey
2016-05-02 11:31:57 +02:00
9c9fec36dd
Add occ commands to enable and disable a user + a disabled user can no longer login - fixes #23838
2016-05-02 09:31:22 +02:00
821d8736c8
Adding progress to web upgrade
2016-04-28 13:52:01 +02:00
e93bf80b29
throw SessionNotAvailableException if session_id returns empty string
2016-04-26 14:51:21 +02:00
6d62a74d7e
Merge pull request #24199 from owncloud/ocp-repair
...
Introduce OCP\Migration\IRepairStep and adopt all repair steps to thi…
2016-04-26 08:47:04 +02:00
f6e1b43a38
Merge pull request #22648 from owncloud/propagate-single
...
do propagation in a single query
2016-04-25 23:01:45 +02:00
dbfdc6282a
do propagation in a single query
2016-04-25 16:18:59 +02:00
a18c8a7da0
Fix the syntax and methods in the sample
2016-04-25 16:03:20 +02:00
c7542c02db
Introduce OCP\Migration\IRepairStep and adopt all repair steps to this new interface - refs #24198
2016-04-25 15:01:13 +02:00
0d53e86421
add ISession::getId() wrapper for session_id
2016-04-25 10:36:24 +02:00
Morris Jobke
Vincent Petry
Lukas Reschke
Robin Appelman
Joas Schilling
Arthur Schiwon
Arthur Schiwon
Roeland Jago Douma
Roeland Jago Douma
root
root
Robin Appelman
Roeland Jago Douma
Thomas Müller
Joas Schilling
Lukas Reschke
Piotr Filiciak
Christoph Wurst
Jörn Friedrich Dreyer
Thomas Müller