d49df488a1
fix: Make the IProvideUserSecretBackend usable
...
When implementing this for user_saml, I noticed that we do need to make
the return value nullable as otherwise there are no way for this feature
to be optional for the admin.
Signed-off-by: Carl Schwan <carlschwan@kde.org >
2026-06-22 14:07:48 -04:00
ac2f9816a6
feat(auth): support permanent OCM refresh tokens and bearer login
...
Co-authored-by: Micke Nordin <kano@sunet.se >
Signed-off-by: Micke Nordin <kano@sunet.se >
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net >
2026-06-17 10:44:51 +02:00
996fcfe443
Merge pull request #57216 from Roszakos/2fa-stateless-provider-interface
...
feat (2fa): Add IStatelessProvider interface
2026-06-11 11:01:23 +02:00
87e907592a
chore: update since from 34.0.0 to 35.0.0
...
Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com >
2026-06-11 10:53:49 +02:00
1ab09ec753
chore: Apply new coding standard to all files
...
The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines
To see only the changes not related to blank lines.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2026-06-01 13:46:39 +02:00
c42bc0cf09
feat (2fa): Add IStatelessProvider interface
...
Signed-off-by: michal.roszak@put.poznan.pl <michal.roszak@put.poznan.pl >
2026-05-06 23:03:08 +02:00
f4cae8c222
feat(auth): Add IAlternativeLoginProvider
...
IAlternativeLogin has a fatal flaw in that it is not possible to
register multiple alternative login dynamically but only statically.
IAlternativeLoginProvider fixes this limitation as the provider can then
provider multiple IAlternativeLogin.
Signed-off-by: Carl Schwan <carlschwan@kde.org >
2026-04-14 20:21:58 +02:00
3979c493f9
refactor: Apply second batch of comments
...
Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com >
2026-02-06 13:52:51 +01:00
927bea2b4d
fix(psalm): Satisfy psalm
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2026-01-09 19:07:07 +01:00
6b121c37da
feat: Allow to create one-time app passwords that only allow loading an app-password
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2026-01-09 19:07:07 +01:00
3d36834284
feat(auth): include the token entity in TokenInvalidatedEvent
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2025-08-21 12:42:44 +02:00
8ffd30bbf9
feat(auth): dispatch new TokenInvalidatedEvent when PublicKeyTokenProvider::invalidateTokenById is called
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2025-08-21 12:42:43 +02:00
5981b7eb51
chore: apply new CSFixer rules
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
# Conflicts:
# apps/settings/lib/SetupChecks/PhpOpcacheSetup.php
2025-07-01 16:26:50 +02:00
f033ef7c18
fix: Migrate all uses of OCP\Template to OCP\Template\ITemplateManager
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2025-03-06 15:49:25 +01:00
5750d2afd0
feat(admin_audit): write admin audit log for AnyLoginFailedEvent
...
Signed-off-by: Luka Trovic <luka@nextcloud.com >
2025-02-06 15:39:14 +01:00
9836e9b164
chore(deps): Update nextcloud/coding-standard to v1.3.1
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2024-09-19 14:21:20 +02:00
af6de04e9e
style: update codestyle for coding-standard 1.2.3
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de >
2024-08-25 19:34:58 +02:00
f6d6efef3a
refactor(Token): introduce scope constants
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de >
2024-06-05 19:01:14 +02:00
dae7c159f7
chore: Add SPDX header
...
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de >
2024-05-24 13:11:22 +02:00
42be7a5d74
fix(OCP): Add since tag for all constants
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2024-02-14 20:50:08 +01:00
33a24134a7
Improve docblock annotations for tokens and their exceptions
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-10-23 15:20:04 +02:00
1bdf952fde
Make sure that OC interfaces returns OC interfaces for backward compatibility
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-10-23 11:08:23 +02:00
b82e25ea7a
Move Exceptions used in OCP to OCP
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-10-23 10:26:25 +02:00
f94fb33062
Move IToken and IProvider::getToken to OCP
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-10-20 17:51:33 +02:00
dac31ad101
fix!: Remove legacy event dispatching Symfony's GenericEvent from 2FA Manager
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2023-07-27 09:57:52 +02:00
05aa39d777
Fix event names of 2FA related typed events
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2023-07-03 14:25:01 +02:00
565fad8d8c
added @since tag
...
Signed-off-by: Artur Neumann <artur@jankaritech.com >
2023-03-14 17:13:30 +01:00
f634badf12
public interface to invalidate tokens of user
...
Signed-off-by: Artur Neumann <artur@jankaritech.com >
2023-03-14 17:13:29 +01:00
f5c361cf44
composer run cs:fix
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2023-01-20 11:45:08 +01:00
77df92cabf
feat: add event for failed logins
...
Apps might also like to know about failed logins.
This adds that event.
The private interface changes are backwards compatible so all should be fine.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2022-11-24 21:24:21 +01:00
bfd2b74c68
Fix wrong types in phpdoc for twofactor registry
...
Signed-off-by: Carl Schwan <carl@carlschwan.eu >
2022-10-12 11:40:41 +02:00
21b3e87c77
Allow SSO authentication to provide a user secret
...
Implementing PR #24837 from immerda
Signed-off-by: MichaIng <micha@dietpi.com >
2022-07-12 19:19:00 +02:00
f68028e85e
Specify string as nullable for credentials password
...
Signed-off-by: Anna Larch <anna@nextcloud.com >
2022-02-28 11:08:48 +01:00
215aef3cbd
Update php licenses
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com >
2021-06-04 22:02:41 +02:00
3c5cf825b3
Add real events for enabled 2fa providers for users
...
* Shiny new events
* Listener to still emit the old event
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2021-03-22 20:57:10 +01:00
4fc0b2c639
Deprecate all remaining event constants
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2021-02-09 13:53:41 +01:00
d9015a8c94
Format code to a single space around binary operators
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-10-05 20:25:24 +02:00
b5e9f7e846
Merge pull request #22432 from nextcloud/enh/phpdoc
...
Add php docs build script
2020-08-26 21:18:11 +02:00
45a474071e
Remove @package annotations from public namespace
...
Signed-off-by: Julius Härtl <jus@bitgrid.net >
2020-08-26 16:59:40 +02:00
2a054e6c04
Update the license headers for Nextcloud 20
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-08-24 14:54:25 +02:00
725fecee34
Merge pull request #21344 from nextcloud/fix/twofactor-cleanup-event
...
Emit an event for every disabled 2FA provider during cleanup
2020-08-13 07:25:01 +02:00
782a2df392
Add PHP doc for events
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de >
2020-08-10 14:24:24 +02:00
0dfcc132ca
Allow to register AlternativeLogin on RegistrationContext
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2020-07-16 14:20:24 +02:00
68794ebc92
Emit an event for every disabled 2FA provider during cleanup
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-06-16 14:38:33 +02:00
cb057829f7
Update license headers for 19
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-04-29 11:57:22 +02:00
28f8eb5dba
Add visibility to all constants
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-04-10 16:54:27 +02:00
caff1023ea
Format control structures, classes, methods and function
...
To continue this formatting madness, here's a tiny patch that adds
unified formatting for control structures like if and loops as well as
classes, their methods and anonymous functions. This basically forces
the constructs to start on the same line. This is not exactly what PSR2
wants, but I think we can have a few exceptions with "our" style. The
starting of braces on the same line is pracrically standard for our
code.
This also removes and empty lines from method/function bodies at the
beginning and end.
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-04-10 14:19:56 +02:00
a8a06a82d2
Remove trailing whitespaces from comments
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-04-09 16:09:23 +02:00
2a529e453a
Use a blank line after the opening tag
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-04-09 11:50:14 +02:00
84f3d2ddeb
[POC] Event for failed login attempts
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2020-03-31 21:41:02 +02:00
Carl Schwan
Enrique Pérez Arnaud
Louis
Salvatore Martire
Côme Chilliet
michal.roszak@put.poznan.pl
Carl Schwan
Joas Schilling
Julien Veyssier
Ferdinand Thiessen
Luka Trovic
provokateurin
Daniel Kesselberg
Arthur Schiwon
Andy Scherzinger
Artur Neumann
Roeland Jago Douma
Carl Schwan
MichaIng
Anna Larch
John Molakvoæ (skjnldsv)
Christoph Wurst
Roeland Jago Douma
Julius Härtl
Morris Jobke