Commit Graph

226 Commits

Author SHA1 Message Date
Ralf Haferkamp 29f52515e1 graph: Fix Status code when updating the password
Up to now the /me/changePassword endpoint return a 500 Status when
issue a password change with the old password set to the wrong password.
This changes the code to return 400 (Bad Request) with an additional
message that the old password is wrong. This does not seem to weaken the
security of /me/changePassword (i.e. for allowing easier brute-force
attacks) as the endpoint is only available to already authenticated
users (and only for changing their own passwords)

See #4480
2022-09-05 15:57:46 +02:00
Jannik Stehle 213a68ec69 Fix translations on login page 2022-09-02 15:07:54 +02:00
jkoberg 3f5585628d adjust REPORT to PROPFIND endpoint
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-09-02 15:02:06 +02:00
Jannik Stehle 123ae47fe1 Merge pull request #4500 from owncloud/login-screen-design
Improve login screen design
2022-09-02 14:58:19 +02:00
David Christofas 2051f0d1e1 Merge pull request #4447 from dragonchaser/delete_userspace
Delete userspace
2022-09-02 14:41:57 +02:00
Jannik Stehle a9fd209da8 Use cv11 as font feature setting 2022-09-02 13:51:59 +02:00
Jannik Stehle 99255c1cdd Add 'Inter' font, change placeholder color to grey 2022-09-02 13:47:52 +02:00
David Christofas e36cd4fa7f add returns after rendering errors and simplify loop condition 2022-09-02 11:54:17 +02:00
Jannik Stehle 52b58cd1d9 Move background-size after the background css prop 2022-09-02 09:56:53 +02:00
Jannik Stehle dff588a621 Improve login screen design 2022-09-02 09:46:32 +02:00
Ralf Haferkamp fed62d4a1e Evaluate routing rules ordered by path-length
This is a quickfix for #4497. Before evaluating, we now sort the rules
of a specific type by the length of the endpoints and start evaluation
with the most specific endpoint first. There's obviously quite a bit
room for optimization here and this will only fix the issue for routes
of type `PrefixRoute`. But it should solve the immediate issue.
2022-09-01 17:07:17 +02:00
David Christofas bfb26cc660 update tests 2022-09-01 12:43:32 +02:00
David Christofas e20b2b1536 fix default policy and add changelog 2022-09-01 12:43:32 +02:00
David Christofas 69de4616b5 fix linting issues 2022-09-01 12:43:32 +02:00
David Christofas 90574268d9 add missing unprotected flag and fix proxy test 2022-09-01 12:43:32 +02:00
David Christofas 69ba80562e add unprotected flag to the proxy routes
I added an unprotected flag to the proxy routes which is evaluated by
the authentication middleware. This way we won't have to maintain a
hardcoded list of unprotected paths and path prefixes and we will
hopefully reduce the times we encounter the basic auth prompt by web
browsers.
2022-09-01 12:43:32 +02:00
David Christofas 4d4f3a16e1 refactor proxy code
I refactored the proxy so that we execute the routing before the
authentication middleware. This is necessary so that we can determine
which routes are considered unprotected i.e. which routes don't need
authentication.
2022-09-01 12:43:32 +02:00
Benedikt Kulmann 0341097430 fix: disable misconfigured default expiration date public links 2022-08-31 08:23:28 +02:00
Ralf Haferkamp a26b16c41d graph: Add $expand=memberOf support to /me
Fixes: #4283
2022-08-31 07:43:27 +02:00
Christian Richter 6a9d4efef6 add delete home space permission to admin role
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-08-30 11:09:05 +02:00
Christian Richter 05a60fd3a5 add home space deletion on user delete
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-08-26 15:00:55 +02:00
Phil Davis b79de5f356 Merge pull request #4462 from owncloud/fix-typo-2022-08-26
[docs-only] Fix typo 2022-08-26
2022-08-26 18:33:53 +05:45
Jan a999dd1d61 Add previewFileMimeTypes to defaultconfig.go (#4414)
* Add previewFileMimeTypes to defaultconfig.go

* Add changelog item

* Format

* Remove obsolete hideSearchBar config setting
2022-08-26 11:51:33 +02:00
Benedikt Kulmann 6fc87613d5 fix: add index.html to unprotected paths 2022-08-26 10:37:46 +02:00
Phil Davis d8dddc8891 Fix typo of 'defines' 2022-08-26 10:34:23 +05:45
Benedikt Kulmann 9d67ab3292 fix: set /external path prefix to unprotected 2022-08-25 10:47:46 +02:00
Benedikt Kulmann 9c9a81026c fix: add index.html to unprotected paths in auth middleware 2022-08-25 10:39:55 +02:00
David Christofas 0d2b7e350b add missing unprotected paths 2022-08-24 16:32:25 +02:00
Benedikt Kulmann 335567ed65 Merge pull request #4439 from owncloud/update-web-v5.7.0-rc.10
[full-ci] update web to v5.7.0-rc.10
2022-08-24 12:08:22 +02:00
David Christofas e65eb15f2c add the settings path to the unprotected paths 2022-08-24 11:04:18 +02:00
David Christofas 28a9bf357e end unprotected path prefixes with a slash 2022-08-24 10:12:34 +05:45
David Christofas 6043e019f4 add the fonts path to the unprotected path prefixes 2022-08-24 10:12:34 +05:45
Benedikt Kulmann 992c19d26a chore: update web to v5.7.0-rc.10 2022-08-24 10:12:33 +05:45
Willy Kloucek faa7d3b647 add config options for mail encryption and authentication 2022-08-23 14:39:32 +02:00
David Christofas c4881f5736 Merge pull request #4374 from owncloud/rewrite-auth-middleware
[full-ci] Rewrite of the authentication middleware
2022-08-22 16:39:03 +02:00
David Christofas dfe703291f replace strings.Title with cases.Title 2022-08-22 15:26:00 +02:00
David Christofas 12d42e0074 add missing comments 2022-08-22 14:24:12 +02:00
Willy Kloucek 15c1a99ddc Merge pull request #4405 from wkloucek/config-validation-line-break-and-help
ensure a linebreak after config validation errors and do not parse config for help
2022-08-22 11:12:22 +02:00
Willy Kloucek 9f2be9f4f9 remove Log prefix from configlog functions 2022-08-22 08:08:18 +02:00
Martin 6d54377447 Merge pull request #4411 from wkloucek/fix-app-registry-default-mimetypes
fix configuration of mimetypes for the app registry
2022-08-20 09:58:32 +02:00
Willy Kloucek e58eaabdeb move config parse error logging into function to ensure new lines and don't parse config for help 2022-08-18 15:27:28 +02:00
Willy Kloucek 46706fff32 Merge pull request #4407 from wkloucek/rename-extensions-to-services-reloaded
rename extensions to services (leftover occurences)
2022-08-18 14:03:20 +02:00
Willy Kloucek d93fd7ab4d fix configuration of mimetypes for the app registry 2022-08-18 11:58:10 +02:00
Willy Kloucek 60689c9c1a improve unsupervised description 2022-08-18 10:59:35 +02:00
Willy Kloucek dbcd78e6ef Merge pull request #4403 from wkloucek/storage-users-uploads-category
restructure storage-users upload command
2022-08-18 10:56:47 +02:00
Willy Kloucek ef8c600cf7 Merge pull request #4376 from wkloucek/open-with-web-endpoitn
[full-ci] add open-with-web endpoint
2022-08-18 10:21:01 +02:00
Willy Kloucek 70bce6b3f0 remove leading slash 2022-08-18 09:35:48 +02:00
Willy Kloucek 08c7743df9 add header to clean up and rename purge to clean in leftover places 2022-08-18 09:20:58 +02:00
Willy Kloucek 6154466bbc rename extensions to services (leftover occurences) 2022-08-17 15:36:52 +02:00
Willy Kloucek 12204e4d91 remove category from uploads section 2022-08-17 15:05:26 +02:00