averello/nextcloud-server-mirror
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-29 12:24:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
594e8a1aaa571c287dab91e54e45f76ef86703ce
nextcloud-server-mirror/lib/private
T
History
Ferdinand Thiessen 77dc78855f fix(SecurityMiddleware): return header to distinguish error type 
Currently we return a 403 (Forbidden) when the password confirmation
failed - which itself seems to be inappropriate as its basically a login
failing so a 401 (not authorized) is more appropriate.

This is especially a problem because APIs might return 403 internally
for good reason (e.g. user missing permission) but 401 would not be a
problem.

But as this is a breaking change so my solution to be able to
distinguish API error from password confirmation error is:

Add a header inside the response that marks failed password confirmation
`X-NC-Auth-NotConfirmed`.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-03-12 08:54:39 +00:00
..
Accounts
fix: Use strict array comparisons in lib/
2026-01-18 18:45:07 +01:00
Activity
…
App
…
AppFramework
fix(SecurityMiddleware): return header to distinguish error type
2026-03-12 08:54:39 +00:00
Archive
…
Authentication
feat: Add SetupCheck to warn about missing second factor provider
2026-02-05 15:25:52 +00:00
Avatar
…
BackgroundJob
…
Blurhash/Listener
…
Broadcast/Events
…
Cache
…
Calendar
…
Collaboration
feat(UserPlugin): Also full match on additional email addresses
2026-01-21 16:02:03 +01:00
Command
…
Comments
…
Config
fix: Add missing @throws annotations in UserConfig
2026-02-04 23:22:28 +01:00
Console
…
Contacts/ContactsMenu
fix: Unify handling of exclude groups in contacts menu and sharing
2026-01-07 17:05:52 +00:00
ContextChat
…
Dashboard
…
DB
fix(propagator): Improve lock behavior of propagator
2026-02-17 10:39:11 +01:00
Diagnostics
refactor: extract slow operation logging into trait
2026-01-08 13:07:04 +00:00
DirectEditing
…
Encryption
…
EventDispatcher
…
Federation
…
Files
Merge pull request #58847 from nextcloud/backport/53733/stable32
2026-03-12 09:45:05 +01:00
FilesMetadata
…
FullTextSearch
…
GlobalScale
…
Group
…
Hooks
…
Http
perf: log slow DNS operations
2026-01-08 13:07:04 +00:00
IntegrityCheck
…
KnownUser
…
L10N
fix(L10N): stop stripping _ from language codes
2026-02-25 15:55:06 +00:00
LDAP
…
legacy
…
Lock
…
Lockdown
…
Log
feat(log): Add script name and occ command to log details
2025-12-15 16:57:16 +01:00
Mail
…
Memcache
…
Migration
…
Net
…
Notification
…
OCM
…
OCS
…
Preview
test(preview): properly test postscript preview provider
2026-03-03 02:19:02 +01:00
Profile
…
Profiler
…
Remote
…
Repair
…
RichObjectStrings
…
Route
fix: Fix caching routes by users with an active session
2025-12-15 09:53:32 +00:00
Search
…
Security
fix(IpNormalizer): Added inet_pton() check before bitwise operations
2025-12-17 15:29:28 +00:00
Session
fix(session): handle null logger
2026-01-09 16:51:14 +00:00
Settings
…
Setup
…
SetupCheck
…
Share
…
Share20
fix(shares): Fix infinite loop when hide_disabled_user_shares is yes
2025-12-15 19:18:36 +00:00
SpeechToText
…
Support
…
SystemTag
…
Tagging
…
Talk
…
TaskProcessing
fix: Use ProcessingException
2026-02-05 17:31:17 +01:00
Teams
fix(team-manager): team is already teamid
2026-01-06 15:01:39 +00:00
Template
fix(lib): include headers from OC\Template\Template as well in produced HTML
2025-12-18 11:00:50 +00:00
TextProcessing
…
TextToImage
…
Translation
…
Updater
test(Updater): Harden flaky test
2026-02-04 10:04:34 +00:00
User
…
UserStatus
…
AllConfig.php
…
AppConfig.php
…
AppScriptDependency.php
…
AppScriptSort.php
…
BinaryFinder.php
…
CapabilitiesManager.php
…
Color.php
…
Config.php
feat(Config.php): change array_merge to array_replace_recursive when merging configs
2026-01-07 11:05:27 +00:00
ContactsManager.php
…
DatabaseException.php
…
DatabaseSetupException.php
…
DateTimeFormatter.php
…
DateTimeZone.php
…
EmojiHelper.php
…
EventSource.php
…
EventSourceFactory.php
…
ForbiddenException.php
…
HintException.php
…
Image.php
…
InitialStateService.php
…
Installer.php
…
LargeFileHelper.php
…
Log.php
fix: Use configured loglevel even when log.condition matches is set
2026-02-27 15:02:30 +00:00
MemoryInfo.php
…
NaturalSort_DefaultCollator.php
…
NaturalSort.php
…
NavigationManager.php
fix(NavigationManager): Remove break to return all defaultEntryIds
2026-01-18 17:36:03 +01:00
NeedsUpdateException.php
…
NotSquareException.php
…
PhoneNumberUtil.php
…
PreviewManager.php
…
PreviewNotAvailableException.php
…
RedisFactory.php
…
Repair.php
…
RepairException.php
…
Server.php
feat(files): Add appconfig value to disable fixed userfolder permissions optimization
2026-01-14 14:31:12 +01:00
ServerContainer.php
…
ServerNotAvailableException.php
…
ServiceUnavailableException.php
…
Setup.php
feat(install): dispatch InstallationCompletedEvent in Setup
2026-02-03 09:47:51 +01:00
Streamer.php
…
StreamImage.php
…
SubAdmin.php
…
SystemConfig.php
…
TagManager.php
…
Tags.php
fix: Use strict array comparisons in lib/
2026-01-18 18:45:07 +01:00
TemplateLayout.php
…
TempManager.php
…
Updater.php
…
URLGenerator.php
…