mirror of https://github.com/nextcloud/server.git synced 2025-10-26 19:21:34 +00:00

Nextcloud Server

Go to file

Lukas Reschke dfbc405a45 Prioritise Basic Auth header over Cookie There are a lot of clients that support multiple WebDAV accounts in the same application. However, they resent all the cookies they received from one of the accounts also to the other one. In the case of ownCloud this means that we will always show the user from the session and not the user that is specified in the basic authentication header. This patch adds a workaround the following way: 1. If the user authenticates via the Sabre Auth Connector add a hint to the session that this was authorized via Basic Auth (this is to prevent logout CSRF) 2. If the request contains this hint and the username specified in the basic auth header differs from the one in the session relogin the user using basic auth Fixes https://github.com/owncloud/core/issues/11400 and https://github.com/owncloud/core/issues/13245 and probably some other issues as well. This requires proper testing also considering LDAP / Shibboleth and whatever instances.		2015-01-17 13:29:07 +01:00
.idea
3rdparty@3c5c49860e	update dbal to 2.5.0	2014-12-30 16:47:30 +01:00
apps	Prioritise Basic Auth header over Cookie	2015-01-17 13:29:07 +01:00
build
config	Note in config.sample.php that certain previews are not available in ms windows	2015-01-15 11:07:14 +01:00
core	[tx-robot] updated from transifex	2015-01-17 01:54:40 -05:00
l10n
lib	Prioritise Basic Auth header over Cookie	2015-01-17 13:29:07 +01:00
ocs
settings	[tx-robot] updated from transifex	2015-01-17 01:54:40 -05:00
tests	Merge pull request #13319 from owncloud/replace-line-breaks-in-app-description	2015-01-17 01:03:41 +01:00
themes
.bowerrc
.gitignore	Add provisioning_api app	2014-12-24 22:15:20 +01:00
.gitmodules
.htaccess	Add version to .htaccess	2015-01-08 12:49:02 +01:00
.jshintrc
.scrutinizer.yml
.user.ini
AUTHORS
autotest-external.sh	Setup a docker container that holds a webdav instance to test files_external	2014-12-17 21:50:35 +01:00
autotest-hhvm.sh	Adding autotest-hhvm.sh	2014-12-18 10:21:15 +01:00
autotest-js.sh
autotest.cmd
autotest.sh
bower.json	bump jquery.strengthify to 0.4.1	2015-01-06 13:48:58 +01:00
buildjsdocs.sh
console.php	Check for the posix extension - refs https://github.com/owncloud/core/pull/13282#issuecomment-69602645	2015-01-12 20:17:02 +01:00
CONTRIBUTING.md	Fix URL to developer manual	2015-01-10 00:54:38 +01:00
COPYING-AGPL
COPYING-README
cron.php
db_structure.xml
index.html
index.php
indie.json
issue_template.md	Also add secret	2014-12-19 10:57:46 +01:00
occ
public.php
README.md	version up	2015-01-11 16:17:57 +01:00
remote.php
robots.txt
status.php
version.php	8.0.0 alpha 2	2015-01-11 04:37:15 +01:00