Nextcloud Server
Go to file
Lukas Reschke 1c75b73239 Verify authentication before initializing apps and routing
The current behaviour of the authenticion logic in base.php prevents REST APIs in ownCloud applications to work.

Because `!self::$CLI` is usually always a true statement the previously above block was entered which returned, thus the authentication logic for this part does not trigger in.

This can be reproduced by installing apps such as the News app and issuing the following command:

`curl -u admin:admin http://localhost/index.php/apps/news/api/v1-2/feeds`

The following parts needs to get throughly tested:

- [ ] OCS
- [ ] remote.php's DAV features
- [ ] Regular login features

This bug affects master and stable7. I'd propose that we merge this for 8.0 since this has the potential to break every component that relies on Basic Auth features. A backport would also be very nice.

Remark to myself: We really need to move out the authentication code for 8.1 out of base.php - I already have a local branch that does that somewhere which I will get in shape for 8.1... - This untested code is a night-mare.

Fixes itself.
2015-01-09 21:07:29 +01:00
.idea
3rdparty@3c5c49860e
apps Merge pull request #13204 from owncloud/enc_fix_key_lost 2015-01-09 18:40:51 +01:00
build
config Merge pull request #12984 from owncloud/ldap-user-cleanup-master 2015-01-09 10:47:02 +01:00
core Merge pull request #13195 from owncloud/resharepermfix 2015-01-09 18:05:05 +01:00
l10n
lib Verify authentication before initializing apps and routing 2015-01-09 21:07:29 +01:00
ocs
search
settings Fix js error in personal settings if there is no password field 2015-01-09 15:38:39 +01:00
tests Merge pull request #13208 from owncloud/hhvm-streamwrapper-exception 2015-01-09 18:02:28 +01:00
themes
.bowerrc
.gitignore
.gitmodules
.htaccess Add version to .htaccess 2015-01-08 12:49:02 +01:00
.jshintrc
.scrutinizer.yml
.user.ini
AUTHORS
autotest-external.sh
autotest-hhvm.sh
autotest-js.sh
autotest.cmd
autotest.sh
bower.json
buildjsdocs.sh
console.php
CONTRIBUTING.md
COPYING-AGPL
COPYING-README
cron.php
db_structure.xml
index.html
index.php
indie.json
issue_template.md
occ
public.php
README.md
remote.php
robots.txt
status.php
version.php

ownCloud

ownCloud gives you freedom and control over your own data. A personal cloud which runs on your own server.

Build Status on Jenkins CI

Git master: Build Status

Quality:

  • Scrutinizer: Scrutinizer Quality Score
  • CodeClimate: Code Climate

Installation instructions

http://doc.owncloud.org/server/7.0/developer_manual/app/index.html

Contribution Guidelines

http://owncloud.org/contribute/

Get in touch

Important notice on translations

Please submit translations via Transifex: https://www.transifex.com/projects/p/owncloud/

Transifex

For more detailed information about translations: http://doc.owncloud.org/server/7.0/developer_manual/core/translation.html