1ab09ec753
chore: Apply new coding standard to all files
...
The diff can be checked using: git diff --ignore-all-space --ignore-blank-lines
To see only the changes not related to blank lines.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2026-06-01 13:46:39 +02:00
59b3d7a5b2
fix(oauth): rotate the auth token only if the access token rotation was successful
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2026-04-22 11:23:47 +02:00
c639dfdbfc
fix(oauth): make the throttling reason more specific
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2026-04-22 11:23:47 +02:00
72c4d0f72a
fix(oauth): wrap token rotation in a transaction, only rotate if the token hasn't been modified since we have read it
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2026-04-22 11:23:47 +02:00
5c1b58c380
fix(oauth2): Do not store the code in throttle metadata
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2026-03-19 14:40:12 +01:00
11cf69d8ba
fix(psalm): Fix static analysis issues in apps/*/tests
...
There are still 1200 more to fix before we can enable static analysis
for the tests.
Signed-off-by: Carl Schwan <carlschwan@kde.org >
2026-01-16 12:00:51 +01:00
aa15f9d16d
chore: run rector
...
Signed-off-by: Robin Appelman <robin@icewind.nl >
2025-07-01 22:45:52 +02:00
5981b7eb51
chore: apply new CSFixer rules
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de >
# Conflicts:
# apps/settings/lib/SetupChecks/PhpOpcacheSetup.php
2025-07-01 16:26:50 +02:00
9836e9b164
chore(deps): Update nextcloud/coding-standard to v1.3.1
...
Signed-off-by: provokateurin <kate@provokateurin.de >
2024-09-19 14:21:20 +02:00
49dd79eabb
refactor: Add void return type to PHPUnit test methods
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2024-09-15 22:32:31 +02:00
120e7e838c
fix(oauth2): fix tests
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2024-09-02 14:38:39 +02:00
034917b790
fix(oauth2): store hashed secret instead of encrypted
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2024-09-02 14:38:39 +02:00
cc1686dba9
chore: Add SPDX header
...
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de >
2024-05-31 10:38:47 +02:00
c6da99474e
rename oauth2_access_token's created_at to code_created_at
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2023-10-05 14:24:02 +02:00
ddfc124767
add test for refusing to get an oauth token from a code when we're not in authorization state
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2023-10-05 14:24:02 +02:00
2995b0948f
add tests for oauth2 authorization code expiration
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2023-10-05 14:24:02 +02:00
807f173dec
make oauth2 authorization code expire after 10 minutes
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2023-10-05 14:24:02 +02:00
25309bcb45
techdebt(DI): Use public IThrottler interface which exists since Nextcloud 25
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2023-08-28 15:50:45 +02:00
629adc318f
add bruteforce protection in OauthApiController
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2023-06-19 11:18:06 +02:00
808819a4d0
fix oauth2 tests
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2023-06-08 13:02:40 +02:00
18c742a901
encrypt oauth2 client secrets
...
Signed-off-by: Julien Veyssier <julien-nc@posteo.net >
2023-06-07 11:36:08 +02:00
9b26c4a277
Fix PHP error on PHP >= 8.2 about dynamic property use in tests
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com >
2022-12-19 15:58:46 +01:00
617528312a
Fix last tests
...
Signed-off-by: Joas Schilling <coding@schilljs.com >
2021-12-02 10:39:49 +01:00
215aef3cbd
Update php licenses
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com >
2021-06-04 22:02:41 +02:00
2a054e6c04
Update the license headers for Nextcloud 20
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-08-24 14:54:25 +02:00
234b510652
Change PHPDoc type hint from PHPUnit_Framework_MockObject_MockObject to \PHPUnit\Framework\MockObject\MockObject
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de >
2020-08-12 13:55:19 +02:00
1a9330cd69
Update the license headers for Nextcloud 19
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-03-31 14:52:54 +02:00
2ee65f177e
Use the shorter phpunit syntax for mocked return values
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2020-03-25 22:21:27 +01:00
5bf3d1bb38
Update license headers
...
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at >
2019-12-05 15:38:45 +01:00
3a7cf40aaa
Mode to modern phpunit
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2019-11-27 15:27:18 +01:00
c007ca624f
Make phpunit8 compatible
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2019-11-27 13:34:41 +01:00
68748d4f85
Some php-cs fixes
...
* Order the imports
* No leading slash on imports
* Empty line before namespace
* One line per import
* Empty after imports
* Emmpty line at bottom of file
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2019-11-22 20:52:10 +01:00
674930da7f
Move ExpiredTokenException to the correct namespace
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2018-10-30 19:30:45 +01:00
75456b057d
Reset bruteforce on token refresh OAuth
...
When using atoken obtained via OAuth the token expires. Resulting in
brute force attempts hitting the requesting IP.
This resets the brute force attempts for that UID on a valid refresh of
the token.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2018-10-30 11:21:27 +01:00
3556e78c25
The OAuth endpoint needs to support Basic Auth
...
* Add test
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2018-05-29 15:17:54 +02:00
461998dd15
Add tests
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl >
2018-05-22 09:24:17 +02:00
691646bdae
Add tests for OAuth2 app
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch >
2017-05-18 20:49:10 +02:00
Côme Chilliet
Julien Veyssier
Carl Schwan
Robin Appelman
Ferdinand Thiessen
provokateurin
Christoph Wurst
Andy Scherzinger
Joas Schilling
John Molakvoæ (skjnldsv)
Morris Jobke
Roeland Jago Douma
Lukas Reschke