Commit Graph

177 Commits (master)

Author SHA1 Message Date
John Molakvoæ (skjnldsv) 2eba5f9460
Remove unused sg api route
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
6 years ago
John Molakvoæ (skjnldsv) 5c74423902
Move svg api endpoint
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
6 years ago
Roeland Jago Douma 78273cb1e6
Add an endppoint for clients to request an app password
Now that we allow enforcing 2 factor auth it make sense if we also allow
and endpoint where the clients can in the background fetch an
apppassword if they were configured before the login flow was present.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
6 years ago
John Molakvoæ (skjnldsv) 29ff7efe9a
Svg icon api sass function and upgrade of all styles
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
6 years ago
John Molakvoæ (skjnldsv) 98a0113d40
Svg from app
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
6 years ago
John Molakvoæ (skjnldsv) 84e90e26c0
Svg color api
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
6 years ago
Arthur Schiwon 772bbd99be
Backend work to provide NC whats New info to users
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
6 years ago
Bjoern Schiessle 5cfe20675d
start implementing federated sharing 2.0
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
6 years ago
Roeland Jago Douma 177c8972cc
Improve login flow
* Add page explaining you are about to grant access
* Show grant access page after login

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
6 years ago
Joas Schilling dabd7291c3
Make the new autocomplete endpoint OCS
Signed-off-by: Joas Schilling <coding@schilljs.com>
6 years ago
Roeland Jago Douma 7674e591bd
Move search to proper Controller
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
6 years ago
Christoph Wurst b9720703e8 Add CSRF token controller to retrieve the current CSRF token
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
6 years ago
John Molakvoæ (skjnldsv) fb890807c0
Sharing: redirect to download after authentification if requested
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
6 years ago
Julius Härtl 922cf44c81
Move to OCS endpoint
Signed-off-by: Julius Härtl <jus@bitgrid.net>
6 years ago
Julius Härtl 96480af159
Add navigation endpoint
Signed-off-by: Julius Härtl <jus@bitgrid.net>
6 years ago
Roeland Jago Douma 0224c61530
Add preview endpoint for the fileid
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
6 years ago
Morris Jobke 31c5c2a592
Change @georgehrke's email
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
7 years ago
Morris Jobke 0eebff152a
Update license headers
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
7 years ago
Roeland Jago Douma 6ce095b166
Add 204 endpoint
Fixes #6967

This allows clients to check for Walled Garden connections.
The endpoint just responds with a 204 (which is very unlikely with such
a connection)

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
7 years ago
Arthur Schiwon fd6daf8d19
AutoCompletion backend
* introduce a Controller for requests
* introduce result sorting mechanism
* extend Comments to retrieve commentors (actors) in a tree
* add commenters sorter
* add share recipients sorter

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
7 years ago
Roeland Jago Douma 7d8c5f73f5
Add direct preview link to single shared image files
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
7 years ago
Lukas Reschke d8ec399454
Run phan over code base
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
7 years ago
Georg Ehrke 60f9ed6241
add contactsmenu popover
Signed-off-by: Georg Ehrke <developer@georgehrke.com>
7 years ago
Jan-Christoph Borchardt 241e397326 Merge branch 'master' into contactsmenu
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
7 years ago
Christoph Wurst 945420baaf Use HTTP POST to retrieve the list of contacts
We do not want to have sensitive information in the URL and
therefore also not in the access log. Thus the GET request is
replaced by a POST request.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
7 years ago
Christoph Wurst d091793ceb Contacts menu
* load list of contacts from the server
* show last message of each contact

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
7 years ago
Lukas Reschke 6a16df7288
Add new auth flow
This implements the basics for the new app-password based authentication flow for our clients.
The current implementation tries to keep it as simple as possible and works the following way:

1. Unauthenticated client opens `/index.php/login/flow`
2. User will be asked whether they want to grant access to the client
3. If accepted the user has the chance to do so using existing App Token or automatically generate an app password.

If the user chooses to use an existing app token then that one will simply be redirected to the `nc://` protocol handler.
While we can improve on that in the future, I think keeping this smaller at the moment has its advantages. Also, in the
near future we have to think about an automatic migration endpoint so there's that anyways :-)

If the user chooses to use the regular login the following happens:

1. A session state token is written to the session
2. User is redirected to the login page
3. If successfully authenticated they will be redirected to a page redirecting to the POST controller
4. The POST controller will check if the CSRF token as well as the state token is correct, if yes the user will be redirected to the `nc://` protocol handler.

This approach is quite simple but also allows to be extended in the future. One could for example allow external websites to consume this authentication endpoint as well.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
7 years ago
Robin Appelman dc5ba95469 Merge pull request #4027 from nextcloud/better-spreed-call-urls
Better spreed call urls
7 years ago
Joas Schilling 4174d75f86
Throw a nice HintException when the apps are missing
Signed-off-by: Joas Schilling <coding@schilljs.com>
7 years ago
Joas Schilling bc11c7ba97
Allow to use short URLs for calls
Signed-off-by: Joas Schilling <coding@schilljs.com>
7 years ago
Roeland Jago Douma 8e89ad21a2
[PoC] JS Combiner
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
7 years ago
Bjoern Schiessle 5086335643
unify endpoints form core and the the provisioning api
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
7 years ago
John Molakvoæ (skjnldsv) 6380d503af
Css cache folder name fix, route fix and various fixes
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
8 years ago
John Molakvoæ (skjnldsv) 1caaa7f4cd
Appdata integration 2
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
8 years ago
Lukas Reschke 6f4cb12be2
Add identity proof
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
8 years ago
Joas Schilling d75e35b75e
Introduce the UI for password confirmation
Signed-off-by: Joas Schilling <coding@schilljs.com>
8 years ago
Roeland Jago Douma 1baa2b8deb
Move OC\OCS\Person to OCSController
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
8 years ago
Roeland Jago Douma 02525fd98b
Move preview endpoint to controller
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
8 years ago
Roeland Jago Douma 743132650a
Move to AppData
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
8 years ago
Roeland Jago Douma 958c1289b1
New preview generator
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
8 years ago
Roeland Jago Douma d5589a15d5
Move oc.js to a proper class
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
8 years ago
Joas Schilling 0b1fb180a5
Make AppConfig part of the public API
Signed-off-by: Joas Schilling <coding@schilljs.com>
8 years ago
Joas Schilling a1e4b17ff4
Remove unused endpoint
Signed-off-by: Joas Schilling <coding@schilljs.com>
8 years ago
Roeland Jago Douma 68ea287ed7
Remove the core tag routes since they are broken
Private internal stuff that nobody *should* be using anyways.
But on top of that already broken for a long time. So nobody could be
using it even.
8 years ago
Lukas Reschke e0ae67545e Merge pull request #956 from nextcloud/fix_952
When using permalinks don't error out if file id can't be found
8 years ago
Morris Jobke 3ccd69707e Merge pull request #865 from nextcloud/ocs_config
Move OCS route /config to proper controller
8 years ago
Roeland Jago Douma 54f79a28f6
When using permalinks don't error out if file id can't be found
Fixes #952

* Use only the index route (since it went to showFile anyways)
* Fix tests
* Use getUserFolder to force init of users mounts
8 years ago
Roeland Jago Douma 532c0dd8ce
Kill ajax/share.php
Using this file will insert invalid shares.
OCS has to be used exclusively!
8 years ago
Roeland Jago Douma 6bc1c6590c
Move /config over to Core OCSController 8 years ago
Roeland Jago Douma 69da896785
Move /cloud/user to Core app 8 years ago
Roeland Jago Douma 02449c8336
Move getCapabilities over to Core 8 years ago
Joas Schilling ba87db3fcc
Fix others 8 years ago
Morris Jobke 2791b8f00d Revert "occ web executor (#24957)"
This reverts commit 854352d9a0.
8 years ago
VicDeo 854352d9a0 occ web executor (#24957)
* Initial web executor

* Fix PHPDoc

Fix broken integration test

OccControllerTests do not require database access - moch them all!

Kill unused sprintf
8 years ago
Lukas Reschke aba539703c
Update license headers 8 years ago
Christoph Wurst dfb4d426c2
Add two factor auth to core 8 years ago
Christoph Wurst 53636c73d6
Add controller to generate client tokens 8 years ago
Christoph Wurst d8cde414bd
token based auth
* Add InvalidTokenException
* add DefaultTokenMapper and use it to check if a auth token exists
* create new token for the browser session if none exists
hash stored token; save user agent
* encrypt login password when creating the token
8 years ago
Vincent Petry 093e9dd422
Add route to resolve fileid to files app URL
The following routes will redirect to the files app and display the
matching folder. If the fileid is a file, it will scroll to it.
- http://localhost/owncloud/index.php/f/$fileid
- http://localhost/owncloud/index.php/files/?dir=somedir&fileid=$fileid
8 years ago
Lukas Reschke 8222ad5157
Move logout to controller
Testable code. Yay.
8 years ago
Lukas Reschke 331e4efacb
Move login form into controller
First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.
8 years ago
Thomas Müller 682821c71e Happy new year! 9 years ago
Lukas Reschke 8f09d5b67c Update license headers 9 years ago
Morris Jobke f63915d0c8 update license headers and authors 9 years ago
Lukas Reschke 1b84a1cd48 Fix routes
Fixes public sharing as reported on https://github.com/owncloud/core/issues/15913
9 years ago
Jenkins for ownCloud b585d87d9d Update license headers 9 years ago
Roeland Jago Douma 1a0f9c375b Avatar controller moved to AppFrameWork
* Original avatarcontroller migrated to the appframework
* Added DataDisplayResponse that show data inline in the browser (used
  to retrun the image)
* Removed some unneeded code
* Added unit tests for the avatarcontroller
9 years ago
Morris Jobke 06aef4e8b1 Revert "Updating license headers"
This reverts commit 6a1a4880f0.
9 years ago
Jenkins for ownCloud 6a1a4880f0 Updating license headers 9 years ago
Morris Jobke dc17019536 adjust paths for search 10 years ago
Lukas Reschke 988c85d292 Refactor file sharing public link handling
fixes download issue introduced by #10755

Conflicts:
	apps/files_sharing/public.php
10 years ago
Thomas Müller a589d61b78 in case a translation javascript is not found we no longer bail out
remove translation.php
10 years ago
Thomas Müller 21412559df remove post setup check 10 years ago
kondou 2a4c51389c Use a route instead of s.php and convert tokens asap 10 years ago
Lukas Reschke f33312f767 Use AppFramework instead of custom controller 10 years ago
Jörn Friedrich Dreyer 91ba1b345e add lookup route for displaynames 10 years ago
Lukas Reschke ab12bd292d Add update route to core 10 years ago
Lukas Reschke 29ae7f55ef Remove loadAppScriptFile from the default routes 10 years ago
Morris Jobke ed8b7fc101 complete renaming uid to userId 10 years ago
Victor Dubiniuk 4b359ad20c Change routes. Update templates 10 years ago
Victor Dubiniuk 218d0add36 Changes according to review 10 years ago
Victor Dubiniuk a7fbd91e53 Use appframework 10 years ago
Victor Dubiniuk 23ed038a27 Basics 10 years ago
Thomas Müller 20893cc3b3 Images on public sharing get downscaled to increase use experience - this will speed up loading time
- adding keep aspect to core/ajax/preview.php
- remove duplicate method Preview::show()
- no more hard coded mimetype of preview
- remove .png from the preview urls
- keep old route preview.png for backwards compatibility
- aspect preserving previews are now cached
10 years ago
Thomas Müller 4900ad9119 update type hint in PHPDoc 10 years ago
Thomas Müller 1291303c5a Replace OC.Router.generate() with OC.generateUrl() 10 years ago
Thomas Müller bf22ed7bdb kill old minimizer code 10 years ago
Thomas Müller 988710b0fc avoid conflict with physical file config.js 11 years ago
Thomas Tanghus 6d3bbc5eeb Fix typo 11 years ago
Thomas Tanghus 12bb197028 JS version of the OCP\ITags interface 11 years ago
kondou c9c5e1b97f Merge branch 'master' into oc_avatars 11 years ago
kondou 8fd76e39cf Use proper controller naming 11 years ago
kondou a1e7614d73 Clean up oc_avatars 11 years ago
Bart Visscher 5539b9e843 Use the namespaced variation of the classname. 11 years ago
kondou aa88eea9cf Sanitize displayname, respect data @ $element, fix routename, clean after cropping, updateAvatar with displayname 11 years ago
kondou 5d653753bd Merge branch 'master' into oc_avatars 11 years ago
kondou c533b80682 Use OC_Cache and finish cropper functionality 11 years ago
kondou 8d8a57de7f Continue work on cropper 11 years ago
kondou 1b45683168 Translate "Permission denied" & use class-autoloader 11 years ago
kondou 31736a1df3 Have a controller instead ofo avatar.php and fix some cropper-design 11 years ago