2c54011789
feat(dav): accept bearer access tokens on webdav endpoints
...
Signed-off-by: Micke Nordin <kano@sunet.se >
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net >
2026-06-17 10:44:53 +02:00
43ee64495d
fix: use correct permissions mark for non-home storage public links
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2026-06-08 15:42:16 +02:00
1ab09ec753
chore: Apply new coding standard to all files
...
The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines
To see only the changes not related to blank lines.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2026-06-01 13:46:39 +02:00
820f2145a1
chore: Bump app versions and requirements
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2026-05-15 09:31:33 +02:00
06f0765e19
fix: Fix permission issue when uploading a chunked file
...
Follow up from #59511
Signed-off-by: Carl Schwan <carlschwan@kde.org >
2026-05-08 11:47:16 +02:00
585ca98367
Merge pull request #59517 from nextcloud/feat/part-full-day-default-alarm
...
feat: default full / part day alarm
2026-04-30 12:42:58 -04:00
3e8b8784fd
refactor: migrate app repair steps to new interface
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2026-04-27 20:03:44 +02:00
f9a96c150f
feat: default full / part day alarm
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com >
2026-04-14 18:24:48 -04:00
3cd3c6dd90
fix: only mask the permissions for the users home directory for public shares
...
this ensures that versions/trashbin/etc is still usable
Signed-off-by: Robin Appelman <robin@icewind.nl >
2026-04-09 16:19:10 +02:00
ddf79066b9
Merge pull request #58689 from nextcloud/fix/federated-reshare
2026-03-12 12:01:24 +01:00
5dbbe2ccf9
fix(dav): Use share initiator to get the share node, because the owner might on another server
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2026-03-12 10:31:25 +01:00
e3c2920c18
feat: add default reminder setting caldav
...
Signed-off-by: Grigory Vodyanov <scratchx@gmx.com >
2026-03-11 12:45:04 -04:00
663018455e
refactor: Apply rector changes
...
Signed-off-by: GitHub <noreply@github.com >
2026-03-01 14:43:11 +00:00
f12cecb684
feat(rector): Enable SafeDeclareStrictTypesRector
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2026-02-09 10:59:31 +01:00
1d78386806
chore: Bump app versions and requirements
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2026-01-22 08:59:28 +01:00
3555e00754
refactor(dav): fix psalm for dav endpoints
...
Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com >
2025-12-17 15:09:48 +01:00
31af870ef0
Merge pull request #55147 from nextcloud/fixPublicShares
...
Reflect public shares in `isPublic` flag and fix permission check
2025-12-03 16:37:33 +01:00
54e23aeac9
feat(CalDAV): Increase Calendar Object UID field size
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com >
2025-12-02 12:54:00 -05:00
631318f86f
style: apply cs-fixer to publicwebdav.php
...
Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com >
2025-12-01 18:09:25 +01:00
38f8423cd6
fix: isPublicShare =true when share is public
...
The isPublicShare was set to false in one instance where it should have
been true. Flipping the value to true, would break the functionality for
PROPFIND /public.php/webdav/ which returns properties of files in a
share identified by the username being the share token.
Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com >
2025-12-01 18:09:25 +01:00
5fa4c3d8fd
fix(publicremote): Always grant read and delete permission for chunked uploads to a share
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2025-10-15 23:37:58 +02:00
6a12fbc4f3
refactor: Run rector
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2025-09-27 18:52:58 +02:00
cab9a5deea
fix: automatically disable sab
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com >
2025-09-18 11:00:59 -04:00
e37dbc1487
chore: Bump app versions and requirements
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2025-09-04 09:11:05 +02:00
ffd2b3bde0
fix(dav): Mark removal of dav object properties as expensive
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2025-09-02 10:49:13 +02:00
e8986db7a4
perf(caldav): preload publish statuses for a whole calendar home at once
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud >
2025-08-28 14:00:18 +02:00
b7dc720848
feat: calendar federation
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud >
2025-08-27 17:14:15 +02:00
46e624a089
feat: Calendar Import
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com >
2025-08-27 08:30:33 -04:00
7c0ffc0759
perf: delete commonly used custom properties instead of setting the default value
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud >
2025-08-13 20:07:43 +02:00
36d9fcbb4d
feat(cardav): support result truncation for addressbook federation
...
Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com >
2025-08-06 14:04:55 +02:00
ee00d166cd
feat(dav): add occ commands to get and set absences
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2025-07-30 22:22:22 +02:00
2b50d9b2c5
Revert "perf(base): Stop setting up the FS for every basic auth request"
2025-07-11 17:07:44 +02:00
689a853dc6
fix(dav): Initialize the FS for the user right after authenticating
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2025-07-08 11:38:58 +02:00
5981b7eb51
chore: apply new CSFixer rules
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
# Conflicts:
# apps/settings/lib/SetupChecks/PhpOpcacheSetup.php
2025-07-01 16:26:50 +02:00
960b3ec0eb
refactor(dav): move shared logic to a dedicated example contact service
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud >
2025-06-19 23:46:00 +02:00
b640c161ae
fix: harmonize design of default content settings section
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud >
2025-06-16 11:59:34 +02:00
a48bc55e2a
Merge pull request #52810 from nextcloud/artonge/feat/do_not_require_samesite_strict_cookie_on_public.php
2025-05-22 10:30:16 +02:00
009d0c550c
fix: Move CSRF check from base to PublicAuth for public.php
...
This currently prevent directly accessing a ressource when clicking on a link on a third party site. Example, clicking on `https://example.com/public.php/dav/files/pqLWcA269zfzXez/?accept=zip ` in a GitHub comment.
Skipping the check is an issue with password protected shares, as it allows third party sites to request the ressource when the user already entered the password, aka CSRF. So after removing the check from `base.php`, we need to add the it again in the `PublicAuth` plugin.
We also add a redirect to be helpful to the user.
**Warning**: this adds the limitation that clicking on a direct download link for password protected shares will redirect you to the password form, and then to the main share view.
Fix #52482
Signed-off-by: Louis Chemineau <louis@chmn.me >
2025-05-21 16:01:36 +02:00
80b21cdc6e
Merge pull request #52879 from nextcloud/bug/noid/clear-dav-photo-cache
...
Add command to clear dav's photo cache
2025-05-19 18:10:07 +02:00
3d113ab6cc
refactor(dav): use Node API instead of private files view for filedrop plugin
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
2025-05-16 14:37:30 +02:00
3699eed678
Merge pull request #52708 from nextcloud/fix/dav/update-rooms-resources-background-job
...
fix(dav): add repair step to queue job to update rooms and resources
2025-05-16 12:39:51 +02:00
3d1de793b1
refactor(dav): replace IAppData with IAppDataFactory for PhotoCache
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2025-05-15 18:28:45 +02:00
8a1ae0934e
feat: add command to clear contacts photo cache
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2025-05-15 17:20:57 +02:00
c05d3fdb2e
fix(caldav): prevent unshare entry creation for owner unsharing
...
- Introduces a `unshare` method in `CalDavBackend` to handle user unshares.
- Implements check to determine if unshare entry is needed based on group/circle membership.
- Ensures `updateShares` is only used when the calendar owner manages shares.
- Resolves issue where unsharing a calendar as owner created an unshare entry in `oc_dav_shares`.
Related PRs:
- https://github.com/nextcloud/server/pull/43117
- https://github.com/nextcloud/server/pull/47737
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2025-05-14 09:03:32 +02:00
cef60f9fd1
fix(dav): add repair step to queue job to update rooms and resources
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud >
2025-05-09 17:19:43 +02:00
24c6a1ff0b
Merge pull request #52182 from nextcloud/feat/dav/public-share-chunked-upload
2025-05-06 14:25:28 +02:00
a2d4f8d3f1
feat: Calendar Export
...
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com >
2025-05-06 11:09:33 +02:00
46f5b07322
feat(dav): Enable chunked upload for public shares
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2025-05-05 13:23:11 +02:00
7f0953d520
refactor(dav): Replace baseuri manipulation with RootCollection for public shares
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2025-05-05 13:23:11 +02:00
a42563f9ed
Merge pull request #51715 from nextcloud/allowUnderCustLink
...
fix(dav): Allow underscores on custom links
2025-04-07 09:48:15 +02:00
Enrique Pérez Arnaud
Robin Appelman
Côme Chilliet
Joas Schilling
Carl Schwan
Sebastian Krupinski
Ferdinand Thiessen
SebastianKrupinski
Kate
provokateurin
Grigory Vodyanov
nextcloud-command
Carl Schwan
Salvatore Martire
Christoph Wurst
Richard Steinmetz
Hamza Mahjoubi
John Molakvoæ
Louis
Christoph Wurst
Daniel Kesselberg