@@ -50,7 +50,7 @@ |
||
| 50 | 50 | ->setFlag(DefinitionParameter::FLAG_OPTIONAL), |
| 51 | 51 | ]) |
| 52 | 52 | ->addAuthScheme(AuthMechanism::SCHEME_OPENSTACK) |
| 53 | - ->setLegacyAuthMechanismCallback(function (array $params) use ($openstackAuth, $rackspaceAuth) { |
|
| 53 | + ->setLegacyAuthMechanismCallback(function(array $params) use ($openstackAuth, $rackspaceAuth) { |
|
| 54 | 54 | if (isset($params['options']['key']) && $params['options']['key']) { |
| 55 | 55 | return $rackspaceAuth; |
| 56 | 56 | } |
@@ -33,29 +33,29 @@ |
||
| 33 | 33 | use OCP\IL10N; |
| 34 | 34 | |
| 35 | 35 | class Swift extends Backend { |
| 36 | - use LegacyDependencyCheckPolyfill; |
|
| 36 | + use LegacyDependencyCheckPolyfill; |
|
| 37 | 37 | |
| 38 | - public function __construct(IL10N $l, OpenStackV2 $openstackAuth, Rackspace $rackspaceAuth) { |
|
| 39 | - $this |
|
| 40 | - ->setIdentifier('swift') |
|
| 41 | - ->addIdentifierAlias('\OC\Files\Storage\Swift') // legacy compat |
|
| 42 | - ->setStorageClass('\OCA\Files_External\Lib\Storage\Swift') |
|
| 43 | - ->setText($l->t('OpenStack Object Storage')) |
|
| 44 | - ->addParameters([ |
|
| 45 | - (new DefinitionParameter('service_name', $l->t('Service name'))) |
|
| 46 | - ->setFlag(DefinitionParameter::FLAG_OPTIONAL), |
|
| 47 | - new DefinitionParameter('region', $l->t('Region')), |
|
| 48 | - new DefinitionParameter('bucket', $l->t('Bucket')), |
|
| 49 | - (new DefinitionParameter('timeout', $l->t('Request timeout (seconds)'))) |
|
| 50 | - ->setFlag(DefinitionParameter::FLAG_OPTIONAL), |
|
| 51 | - ]) |
|
| 52 | - ->addAuthScheme(AuthMechanism::SCHEME_OPENSTACK) |
|
| 53 | - ->setLegacyAuthMechanismCallback(function (array $params) use ($openstackAuth, $rackspaceAuth) { |
|
| 54 | - if (isset($params['options']['key']) && $params['options']['key']) { |
|
| 55 | - return $rackspaceAuth; |
|
| 56 | - } |
|
| 57 | - return $openstackAuth; |
|
| 58 | - }) |
|
| 59 | - ; |
|
| 60 | - } |
|
| 38 | + public function __construct(IL10N $l, OpenStackV2 $openstackAuth, Rackspace $rackspaceAuth) { |
|
| 39 | + $this |
|
| 40 | + ->setIdentifier('swift') |
|
| 41 | + ->addIdentifierAlias('\OC\Files\Storage\Swift') // legacy compat |
|
| 42 | + ->setStorageClass('\OCA\Files_External\Lib\Storage\Swift') |
|
| 43 | + ->setText($l->t('OpenStack Object Storage')) |
|
| 44 | + ->addParameters([ |
|
| 45 | + (new DefinitionParameter('service_name', $l->t('Service name'))) |
|
| 46 | + ->setFlag(DefinitionParameter::FLAG_OPTIONAL), |
|
| 47 | + new DefinitionParameter('region', $l->t('Region')), |
|
| 48 | + new DefinitionParameter('bucket', $l->t('Bucket')), |
|
| 49 | + (new DefinitionParameter('timeout', $l->t('Request timeout (seconds)'))) |
|
| 50 | + ->setFlag(DefinitionParameter::FLAG_OPTIONAL), |
|
| 51 | + ]) |
|
| 52 | + ->addAuthScheme(AuthMechanism::SCHEME_OPENSTACK) |
|
| 53 | + ->setLegacyAuthMechanismCallback(function (array $params) use ($openstackAuth, $rackspaceAuth) { |
|
| 54 | + if (isset($params['options']['key']) && $params['options']['key']) { |
|
| 55 | + return $rackspaceAuth; |
|
| 56 | + } |
|
| 57 | + return $openstackAuth; |
|
| 58 | + }) |
|
| 59 | + ; |
|
| 60 | + } |
|
| 61 | 61 | } |
@@ -36,101 +36,101 @@ |
||
| 36 | 36 | */ |
| 37 | 37 | trait VisibilityTrait { |
| 38 | 38 | |
| 39 | - /** @var int visibility */ |
|
| 40 | - protected $visibility = BackendService::VISIBILITY_DEFAULT; |
|
| 39 | + /** @var int visibility */ |
|
| 40 | + protected $visibility = BackendService::VISIBILITY_DEFAULT; |
|
| 41 | 41 | |
| 42 | - /** @var int allowed visibilities */ |
|
| 43 | - protected $allowedVisibility = BackendService::VISIBILITY_DEFAULT; |
|
| 42 | + /** @var int allowed visibilities */ |
|
| 43 | + protected $allowedVisibility = BackendService::VISIBILITY_DEFAULT; |
|
| 44 | 44 | |
| 45 | - /** |
|
| 46 | - * @return int |
|
| 47 | - */ |
|
| 48 | - public function getVisibility() { |
|
| 49 | - return $this->visibility; |
|
| 50 | - } |
|
| 45 | + /** |
|
| 46 | + * @return int |
|
| 47 | + */ |
|
| 48 | + public function getVisibility() { |
|
| 49 | + return $this->visibility; |
|
| 50 | + } |
|
| 51 | 51 | |
| 52 | - /** |
|
| 53 | - * Check if the backend is visible for a user type |
|
| 54 | - * |
|
| 55 | - * @param int $visibility |
|
| 56 | - * @return bool |
|
| 57 | - */ |
|
| 58 | - public function isVisibleFor($visibility) { |
|
| 59 | - if ($this->visibility & $visibility) { |
|
| 60 | - return true; |
|
| 61 | - } |
|
| 62 | - return false; |
|
| 63 | - } |
|
| 52 | + /** |
|
| 53 | + * Check if the backend is visible for a user type |
|
| 54 | + * |
|
| 55 | + * @param int $visibility |
|
| 56 | + * @return bool |
|
| 57 | + */ |
|
| 58 | + public function isVisibleFor($visibility) { |
|
| 59 | + if ($this->visibility & $visibility) { |
|
| 60 | + return true; |
|
| 61 | + } |
|
| 62 | + return false; |
|
| 63 | + } |
|
| 64 | 64 | |
| 65 | - /** |
|
| 66 | - * @param int $visibility |
|
| 67 | - * @return self |
|
| 68 | - */ |
|
| 69 | - public function setVisibility($visibility) { |
|
| 70 | - $this->visibility = $visibility; |
|
| 71 | - $this->allowedVisibility |= $visibility; |
|
| 72 | - return $this; |
|
| 73 | - } |
|
| 65 | + /** |
|
| 66 | + * @param int $visibility |
|
| 67 | + * @return self |
|
| 68 | + */ |
|
| 69 | + public function setVisibility($visibility) { |
|
| 70 | + $this->visibility = $visibility; |
|
| 71 | + $this->allowedVisibility |= $visibility; |
|
| 72 | + return $this; |
|
| 73 | + } |
|
| 74 | 74 | |
| 75 | - /** |
|
| 76 | - * @param int $visibility |
|
| 77 | - * @return self |
|
| 78 | - */ |
|
| 79 | - public function addVisibility($visibility) { |
|
| 80 | - return $this->setVisibility($this->visibility | $visibility); |
|
| 81 | - } |
|
| 75 | + /** |
|
| 76 | + * @param int $visibility |
|
| 77 | + * @return self |
|
| 78 | + */ |
|
| 79 | + public function addVisibility($visibility) { |
|
| 80 | + return $this->setVisibility($this->visibility | $visibility); |
|
| 81 | + } |
|
| 82 | 82 | |
| 83 | - /** |
|
| 84 | - * @param int $visibility |
|
| 85 | - * @return self |
|
| 86 | - */ |
|
| 87 | - public function removeVisibility($visibility) { |
|
| 88 | - return $this->setVisibility($this->visibility & ~$visibility); |
|
| 89 | - } |
|
| 83 | + /** |
|
| 84 | + * @param int $visibility |
|
| 85 | + * @return self |
|
| 86 | + */ |
|
| 87 | + public function removeVisibility($visibility) { |
|
| 88 | + return $this->setVisibility($this->visibility & ~$visibility); |
|
| 89 | + } |
|
| 90 | 90 | |
| 91 | - /** |
|
| 92 | - * @return int |
|
| 93 | - */ |
|
| 94 | - public function getAllowedVisibility() { |
|
| 95 | - return $this->allowedVisibility; |
|
| 96 | - } |
|
| 91 | + /** |
|
| 92 | + * @return int |
|
| 93 | + */ |
|
| 94 | + public function getAllowedVisibility() { |
|
| 95 | + return $this->allowedVisibility; |
|
| 96 | + } |
|
| 97 | 97 | |
| 98 | - /** |
|
| 99 | - * Check if the backend is allowed to be visible for a user type |
|
| 100 | - * |
|
| 101 | - * @param int $allowedVisibility |
|
| 102 | - * @return bool |
|
| 103 | - */ |
|
| 104 | - public function isAllowedVisibleFor($allowedVisibility) { |
|
| 105 | - if ($this->allowedVisibility & $allowedVisibility) { |
|
| 106 | - return true; |
|
| 107 | - } |
|
| 108 | - return false; |
|
| 109 | - } |
|
| 98 | + /** |
|
| 99 | + * Check if the backend is allowed to be visible for a user type |
|
| 100 | + * |
|
| 101 | + * @param int $allowedVisibility |
|
| 102 | + * @return bool |
|
| 103 | + */ |
|
| 104 | + public function isAllowedVisibleFor($allowedVisibility) { |
|
| 105 | + if ($this->allowedVisibility & $allowedVisibility) { |
|
| 106 | + return true; |
|
| 107 | + } |
|
| 108 | + return false; |
|
| 109 | + } |
|
| 110 | 110 | |
| 111 | - /** |
|
| 112 | - * @param int $allowedVisibility |
|
| 113 | - * @return self |
|
| 114 | - */ |
|
| 115 | - public function setAllowedVisibility($allowedVisibility) { |
|
| 116 | - $this->allowedVisibility = $allowedVisibility; |
|
| 117 | - $this->visibility &= $allowedVisibility; |
|
| 118 | - return $this; |
|
| 119 | - } |
|
| 111 | + /** |
|
| 112 | + * @param int $allowedVisibility |
|
| 113 | + * @return self |
|
| 114 | + */ |
|
| 115 | + public function setAllowedVisibility($allowedVisibility) { |
|
| 116 | + $this->allowedVisibility = $allowedVisibility; |
|
| 117 | + $this->visibility &= $allowedVisibility; |
|
| 118 | + return $this; |
|
| 119 | + } |
|
| 120 | 120 | |
| 121 | - /** |
|
| 122 | - * @param int $allowedVisibility |
|
| 123 | - * @return self |
|
| 124 | - */ |
|
| 125 | - public function addAllowedVisibility($allowedVisibility) { |
|
| 126 | - return $this->setAllowedVisibility($this->allowedVisibility | $allowedVisibility); |
|
| 127 | - } |
|
| 121 | + /** |
|
| 122 | + * @param int $allowedVisibility |
|
| 123 | + * @return self |
|
| 124 | + */ |
|
| 125 | + public function addAllowedVisibility($allowedVisibility) { |
|
| 126 | + return $this->setAllowedVisibility($this->allowedVisibility | $allowedVisibility); |
|
| 127 | + } |
|
| 128 | 128 | |
| 129 | - /** |
|
| 130 | - * @param int $allowedVisibility |
|
| 131 | - * @return self |
|
| 132 | - */ |
|
| 133 | - public function removeAllowedVisibility($allowedVisibility) { |
|
| 134 | - return $this->setAllowedVisibility($this->allowedVisibility & ~$allowedVisibility); |
|
| 135 | - } |
|
| 129 | + /** |
|
| 130 | + * @param int $allowedVisibility |
|
| 131 | + * @return self |
|
| 132 | + */ |
|
| 133 | + public function removeAllowedVisibility($allowedVisibility) { |
|
| 134 | + return $this->setAllowedVisibility($this->allowedVisibility & ~$allowedVisibility); |
|
| 135 | + } |
|
| 136 | 136 | } |
@@ -28,11 +28,11 @@ |
||
| 28 | 28 | * Builtin authentication mechanism, for legacy backends |
| 29 | 29 | */ |
| 30 | 30 | class Builtin extends AuthMechanism { |
| 31 | - public function __construct(IL10N $l) { |
|
| 32 | - $this |
|
| 33 | - ->setIdentifier('builtin::builtin') |
|
| 34 | - ->setScheme(self::SCHEME_BUILTIN) |
|
| 35 | - ->setText($l->t('Builtin')) |
|
| 36 | - ; |
|
| 37 | - } |
|
| 31 | + public function __construct(IL10N $l) { |
|
| 32 | + $this |
|
| 33 | + ->setIdentifier('builtin::builtin') |
|
| 34 | + ->setScheme(self::SCHEME_BUILTIN) |
|
| 35 | + ->setText($l->t('Builtin')) |
|
| 36 | + ; |
|
| 37 | + } |
|
| 38 | 38 | } |
@@ -28,11 +28,11 @@ |
||
| 28 | 28 | * Null authentication mechanism |
| 29 | 29 | */ |
| 30 | 30 | class NullMechanism extends AuthMechanism { |
| 31 | - public function __construct(IL10N $l) { |
|
| 32 | - $this |
|
| 33 | - ->setIdentifier('null::null') |
|
| 34 | - ->setScheme(self::SCHEME_NULL) |
|
| 35 | - ->setText($l->t('None')) |
|
| 36 | - ; |
|
| 37 | - } |
|
| 31 | + public function __construct(IL10N $l) { |
|
| 32 | + $this |
|
| 33 | + ->setIdentifier('null::null') |
|
| 34 | + ->setScheme(self::SCHEME_NULL) |
|
| 35 | + ->setText($l->t('None')) |
|
| 36 | + ; |
|
| 37 | + } |
|
| 38 | 38 | } |
@@ -41,48 +41,48 @@ |
||
| 41 | 41 | $is_optional = $parameter->isFlagSet(DefinitionParameter::FLAG_OPTIONAL); |
| 42 | 42 | |
| 43 | 43 | switch ($parameter->getType()) { |
| 44 | - case DefinitionParameter::VALUE_PASSWORD: ?> |
|
| 45 | - <?php if ($is_optional) { |
|
| 46 | - $classes[] = 'optional'; |
|
| 47 | - } ?> |
|
| 48 | - <input type="password" |
|
| 44 | + case DefinitionParameter::VALUE_PASSWORD: ?> |
|
| 45 | + <?php if ($is_optional) { |
|
| 46 | + $classes[] = 'optional'; |
|
| 47 | + } ?> |
|
| 48 | + <input type="password" |
|
| 49 | 49 | <?php if (!empty($classes)): ?> class="<?php p(implode(' ', $classes)); ?>"<?php endif; ?> |
| 50 | - data-parameter="<?php p($parameter->getName()); ?>" |
|
| 50 | + data-parameter="<?php p($parameter->getName()); ?>" |
|
| 51 | 51 | value="<?php p($value); ?>" |
| 52 | 52 | placeholder="<?php p($placeholder); ?>" |
| 53 | 53 | /> |
| 54 | 54 | <?php |
| 55 | - break; |
|
| 56 | - case DefinitionParameter::VALUE_BOOLEAN: ?> |
|
| 57 | - <?php $checkboxId = uniqid("checkbox_"); ?> |
|
| 55 | + break; |
|
| 56 | + case DefinitionParameter::VALUE_BOOLEAN: ?> |
|
| 57 | + <?php $checkboxId = uniqid("checkbox_"); ?> |
|
| 58 | 58 | <div> |
| 59 | 59 | <label> |
| 60 | 60 | <input type="checkbox" |
| 61 | 61 | id="<?php p($checkboxId); ?>" |
| 62 | 62 | <?php if (!empty($classes)): ?> class="checkbox <?php p(implode(' ', $classes)); ?>"<?php endif; ?> |
| 63 | - data-parameter="<?php p($parameter->getName()); ?>" |
|
| 63 | + data-parameter="<?php p($parameter->getName()); ?>" |
|
| 64 | 64 | <?php if ($value === true): ?> checked="checked"<?php endif; ?> |
| 65 | - /> |
|
| 65 | + /> |
|
| 66 | 66 | <?php p($placeholder); ?> |
| 67 | 67 | </label> |
| 68 | 68 | </div> |
| 69 | 69 | <?php |
| 70 | - break; |
|
| 71 | - case DefinitionParameter::VALUE_HIDDEN: ?> |
|
| 72 | - <input type="hidden" |
|
| 70 | + break; |
|
| 71 | + case DefinitionParameter::VALUE_HIDDEN: ?> |
|
| 72 | + <input type="hidden" |
|
| 73 | 73 | <?php if (!empty($classes)): ?> class="<?php p(implode(' ', $classes)); ?>"<?php endif; ?> |
| 74 | - data-parameter="<?php p($parameter->getName()); ?>" |
|
| 74 | + data-parameter="<?php p($parameter->getName()); ?>" |
|
| 75 | 75 | value="<?php p($value); ?>" |
| 76 | 76 | /> |
| 77 | 77 | <?php |
| 78 | - break; |
|
| 79 | - default: ?> |
|
| 80 | - <?php if ($is_optional) { |
|
| 81 | - $classes[] = 'optional'; |
|
| 82 | - } ?> |
|
| 83 | - <input type="text" |
|
| 78 | + break; |
|
| 79 | + default: ?> |
|
| 80 | + <?php if ($is_optional) { |
|
| 81 | + $classes[] = 'optional'; |
|
| 82 | + } ?> |
|
| 83 | + <input type="text" |
|
| 84 | 84 | <?php if (!empty($classes)): ?> class="<?php p(implode(' ', $classes)); ?>"<?php endif; ?> |
| 85 | - data-parameter="<?php p($parameter->getName()); ?>" |
|
| 85 | + data-parameter="<?php p($parameter->getName()); ?>" |
|
| 86 | 86 | value="<?php p($value); ?>" |
| 87 | 87 | placeholder="<?php p($placeholder); ?>" |
| 88 | 88 | /> |
@@ -194,8 +194,11 @@ |
||
| 194 | 194 | <?php $i = 0; foreach ($userBackends as $backend): ?> |
| 195 | 195 | <?php if ($deprecateTo = $backend->getDeprecateTo()): ?> |
| 196 | 196 | <input type="hidden" id="allowUserMountingBackends<?php p($i); ?>" name="allowUserMountingBackends[]" value="<?php p($backend->getIdentifier()); ?>" data-deprecate-to="<?php p($deprecateTo->getIdentifier()); ?>" /> |
| 197 | - <?php else: ?> |
|
| 198 | - <input type="checkbox" id="allowUserMountingBackends<?php p($i); ?>" class="checkbox" name="allowUserMountingBackends[]" value="<?php p($backend->getIdentifier()); ?>" <?php if ($backend->isVisibleFor(BackendService::VISIBILITY_PERSONAL)) { |
|
| 197 | + <?php else { |
|
| 198 | + : ?> |
|
| 199 | + <input type="checkbox" id="allowUserMountingBackends<?php p($i); |
|
| 200 | +} |
|
| 201 | +?>" class="checkbox" name="allowUserMountingBackends[]" value="<?php p($backend->getIdentifier()); ?>" <?php if ($backend->isVisibleFor(BackendService::VISIBILITY_PERSONAL)) { |
|
| 199 | 202 | print_unescaped(' checked="checked"'); |
| 200 | 203 | } ?> /> |
| 201 | 204 | <label for="allowUserMountingBackends<?php p($i); ?>"><?php p($backend->getText()); ?></label> <br /> |
@@ -1,54 +1,54 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | - use \OCA\Files_External\Lib\Backend\Backend; |
|
| 2 | + use \OCA\Files_External\Lib\Backend\Backend; |
|
| 3 | 3 | use \OCA\Files_External\Lib\Auth\AuthMechanism; |
| 4 | 4 | use \OCA\Files_External\Lib\DefinitionParameter; |
| 5 | 5 | use \OCA\Files_External\Service\BackendService; |
| 6 | 6 | |
| 7 | 7 | $canCreateMounts = $_['visibilityType'] === BackendService::VISIBILITY_ADMIN || $_['allowUserMounting']; |
| 8 | 8 | |
| 9 | - $l->t("Enable encryption"); |
|
| 10 | - $l->t("Enable previews"); |
|
| 11 | - $l->t("Enable sharing"); |
|
| 12 | - $l->t("Check for changes"); |
|
| 13 | - $l->t("Never"); |
|
| 14 | - $l->t("Once every direct access"); |
|
| 15 | - $l->t('Read only'); |
|
| 9 | + $l->t("Enable encryption"); |
|
| 10 | + $l->t("Enable previews"); |
|
| 11 | + $l->t("Enable sharing"); |
|
| 12 | + $l->t("Check for changes"); |
|
| 13 | + $l->t("Never"); |
|
| 14 | + $l->t("Once every direct access"); |
|
| 15 | + $l->t('Read only'); |
|
| 16 | 16 | |
| 17 | - script('files_external', [ |
|
| 18 | - 'settings', |
|
| 19 | - 'templates' |
|
| 20 | - ]); |
|
| 21 | - style('files_external', 'settings'); |
|
| 17 | + script('files_external', [ |
|
| 18 | + 'settings', |
|
| 19 | + 'templates' |
|
| 20 | + ]); |
|
| 21 | + style('files_external', 'settings'); |
|
| 22 | 22 | |
| 23 | - // load custom JS |
|
| 24 | - foreach ($_['backends'] as $backend) { |
|
| 25 | - /** @var Backend $backend */ |
|
| 26 | - $scripts = $backend->getCustomJs(); |
|
| 27 | - foreach ($scripts as $script) { |
|
| 28 | - script('files_external', $script); |
|
| 29 | - } |
|
| 30 | - } |
|
| 31 | - foreach ($_['authMechanisms'] as $authMechanism) { |
|
| 32 | - /** @var AuthMechanism $authMechanism */ |
|
| 33 | - $scripts = $authMechanism->getCustomJs(); |
|
| 34 | - foreach ($scripts as $script) { |
|
| 35 | - script('files_external', $script); |
|
| 36 | - } |
|
| 37 | - } |
|
| 23 | + // load custom JS |
|
| 24 | + foreach ($_['backends'] as $backend) { |
|
| 25 | + /** @var Backend $backend */ |
|
| 26 | + $scripts = $backend->getCustomJs(); |
|
| 27 | + foreach ($scripts as $script) { |
|
| 28 | + script('files_external', $script); |
|
| 29 | + } |
|
| 30 | + } |
|
| 31 | + foreach ($_['authMechanisms'] as $authMechanism) { |
|
| 32 | + /** @var AuthMechanism $authMechanism */ |
|
| 33 | + $scripts = $authMechanism->getCustomJs(); |
|
| 34 | + foreach ($scripts as $script) { |
|
| 35 | + script('files_external', $script); |
|
| 36 | + } |
|
| 37 | + } |
|
| 38 | 38 | |
| 39 | - function writeParameterInput($parameter, $options, $classes = []) { |
|
| 40 | - $value = ''; |
|
| 41 | - if (isset($options[$parameter->getName()])) { |
|
| 42 | - $value = $options[$parameter->getName()]; |
|
| 43 | - } |
|
| 44 | - $placeholder = $parameter->getText(); |
|
| 45 | - $is_optional = $parameter->isFlagSet(DefinitionParameter::FLAG_OPTIONAL); |
|
| 39 | + function writeParameterInput($parameter, $options, $classes = []) { |
|
| 40 | + $value = ''; |
|
| 41 | + if (isset($options[$parameter->getName()])) { |
|
| 42 | + $value = $options[$parameter->getName()]; |
|
| 43 | + } |
|
| 44 | + $placeholder = $parameter->getText(); |
|
| 45 | + $is_optional = $parameter->isFlagSet(DefinitionParameter::FLAG_OPTIONAL); |
|
| 46 | 46 | |
| 47 | - switch ($parameter->getType()) { |
|
| 48 | - case DefinitionParameter::VALUE_PASSWORD: ?> |
|
| 47 | + switch ($parameter->getType()) { |
|
| 48 | + case DefinitionParameter::VALUE_PASSWORD: ?> |
|
| 49 | 49 | <?php if ($is_optional) { |
| 50 | - $classes[] = 'optional'; |
|
| 51 | - } ?> |
|
| 50 | + $classes[] = 'optional'; |
|
| 51 | + } ?> |
|
| 52 | 52 | <input type="password" |
| 53 | 53 | <?php if (!empty($classes)): ?> class="<?php p(implode(' ', $classes)); ?>"<?php endif; ?> |
| 54 | 54 | data-parameter="<?php p($parameter->getName()); ?>" |
@@ -56,8 +56,8 @@ discard block |
||
| 56 | 56 | placeholder="<?php p($placeholder); ?>" |
| 57 | 57 | /> |
| 58 | 58 | <?php |
| 59 | - break; |
|
| 60 | - case DefinitionParameter::VALUE_BOOLEAN: ?> |
|
| 59 | + break; |
|
| 60 | + case DefinitionParameter::VALUE_BOOLEAN: ?> |
|
| 61 | 61 | <?php $checkboxId = uniqid("checkbox_"); ?> |
| 62 | 62 | <div> |
| 63 | 63 | <label> |
@@ -71,19 +71,19 @@ discard block |
||
| 71 | 71 | </label> |
| 72 | 72 | </div> |
| 73 | 73 | <?php |
| 74 | - break; |
|
| 75 | - case DefinitionParameter::VALUE_HIDDEN: ?> |
|
| 74 | + break; |
|
| 75 | + case DefinitionParameter::VALUE_HIDDEN: ?> |
|
| 76 | 76 | <input type="hidden" |
| 77 | 77 | <?php if (!empty($classes)): ?> class="<?php p(implode(' ', $classes)); ?>"<?php endif; ?> |
| 78 | 78 | data-parameter="<?php p($parameter->getName()); ?>" |
| 79 | 79 | value="<?php p($value); ?>" |
| 80 | 80 | /> |
| 81 | 81 | <?php |
| 82 | - break; |
|
| 83 | - default: ?> |
|
| 82 | + break; |
|
| 83 | + default: ?> |
|
| 84 | 84 | <?php if ($is_optional) { |
| 85 | - $classes[] = 'optional'; |
|
| 86 | - } ?> |
|
| 85 | + $classes[] = 'optional'; |
|
| 86 | + } ?> |
|
| 87 | 87 | <input type="text" |
| 88 | 88 | <?php if (!empty($classes)): ?> class="<?php p(implode(' ', $classes)); ?>"<?php endif; ?> |
| 89 | 89 | data-parameter="<?php p($parameter->getName()); ?>" |
@@ -91,8 +91,8 @@ discard block |
||
| 91 | 91 | placeholder="<?php p($placeholder); ?>" |
| 92 | 92 | /> |
| 93 | 93 | <?php |
| 94 | - } |
|
| 95 | - } |
|
| 94 | + } |
|
| 95 | + } |
|
| 96 | 96 | ?> |
| 97 | 97 | |
| 98 | 98 | <div id="emptycontent" class="hidden"> |
@@ -105,7 +105,7 @@ discard block |
||
| 105 | 105 | <a target="_blank" rel="noreferrer" class="icon-info" title="<?php p($l->t('Open documentation'));?>" href="<?php p(link_to_docs('admin-external-storage')); ?>"></a> |
| 106 | 106 | <p class="settings-hint"><?php p($l->t('External storage enables you to mount external storage services and devices as secondary Nextcloud storage devices. You may also allow users to mount their own external storage services.')); ?></p> |
| 107 | 107 | <?php if (isset($_['dependencies']) and ($_['dependencies'] !== '') and $canCreateMounts) { |
| 108 | - print_unescaped(''.$_['dependencies'].''); |
|
| 108 | + print_unescaped(''.$_['dependencies'].''); |
|
| 109 | 109 | } ?> |
| 110 | 110 | <table id="externalStorage" class="grid" data-admin='<?php print_unescaped(json_encode($_['visibilityType'] === BackendService::VISIBILITY_ADMIN)); ?>'> |
| 111 | 111 | <thead> |
@@ -116,7 +116,7 @@ discard block |
||
| 116 | 116 | <th><?php p($l->t('Authentication')); ?></th> |
| 117 | 117 | <th><?php p($l->t('Configuration')); ?></th> |
| 118 | 118 | <?php if ($_['visibilityType'] === BackendService::VISIBILITY_ADMIN) { |
| 119 | - print_unescaped('<th>'.$l->t('Available for').'</th>'); |
|
| 119 | + print_unescaped('<th>'.$l->t('Available for').'</th>'); |
|
| 120 | 120 | } ?> |
| 121 | 121 | <th> </th> |
| 122 | 122 | <th> </th> |
@@ -142,17 +142,17 @@ discard block |
||
| 142 | 142 | <?php p($l->t('Add storage')); ?> |
| 143 | 143 | </option> |
| 144 | 144 | <?php |
| 145 | - $sortedBackends = array_filter($_['backends'], function ($backend) use ($_) { |
|
| 146 | - return $backend->isVisibleFor($_['visibilityType']); |
|
| 147 | - }); |
|
| 148 | - uasort($sortedBackends, function ($a, $b) { |
|
| 149 | - return strcasecmp($a->getText(), $b->getText()); |
|
| 150 | - }); |
|
| 151 | - ?> |
|
| 145 | + $sortedBackends = array_filter($_['backends'], function ($backend) use ($_) { |
|
| 146 | + return $backend->isVisibleFor($_['visibilityType']); |
|
| 147 | + }); |
|
| 148 | + uasort($sortedBackends, function ($a, $b) { |
|
| 149 | + return strcasecmp($a->getText(), $b->getText()); |
|
| 150 | + }); |
|
| 151 | + ?> |
|
| 152 | 152 | <?php foreach ($sortedBackends as $backend): ?> |
| 153 | 153 | <?php if ($backend->getDeprecateTo()) { |
| 154 | - continue; |
|
| 155 | - } // ignore deprecated backends?> |
|
| 154 | + continue; |
|
| 155 | + } // ignore deprecated backends?> |
|
| 156 | 156 | <option value="<?php p($backend->getIdentifier()); ?>"><?php p($backend->getText()); ?></option> |
| 157 | 157 | <?php endforeach; ?> |
| 158 | 158 | </select> |
@@ -178,23 +178,23 @@ discard block |
||
| 178 | 178 | <?php if ($_['visibilityType'] === BackendService::VISIBILITY_ADMIN): ?> |
| 179 | 179 | <input type="checkbox" name="allowUserMounting" id="allowUserMounting" class="checkbox" |
| 180 | 180 | value="1" <?php if ($_['allowUserMounting']) { |
| 181 | - print_unescaped(' checked="checked"'); |
|
| 182 | - } ?> /> |
|
| 181 | + print_unescaped(' checked="checked"'); |
|
| 182 | + } ?> /> |
|
| 183 | 183 | <label for="allowUserMounting"><?php p($l->t('Allow users to mount external storage')); ?></label> <span id="userMountingMsg" class="msg"></span> |
| 184 | 184 | |
| 185 | 185 | <p id="userMountingBackends"<?php if (!$_['allowUserMounting']): ?> class="hidden"<?php endif; ?>> |
| 186 | 186 | <?php |
| 187 | - $userBackends = array_filter($_['backends'], function ($backend) { |
|
| 188 | - return $backend->isAllowedVisibleFor(BackendService::VISIBILITY_PERSONAL); |
|
| 189 | - }); |
|
| 190 | - ?> |
|
| 187 | + $userBackends = array_filter($_['backends'], function ($backend) { |
|
| 188 | + return $backend->isAllowedVisibleFor(BackendService::VISIBILITY_PERSONAL); |
|
| 189 | + }); |
|
| 190 | + ?> |
|
| 191 | 191 | <?php $i = 0; foreach ($userBackends as $backend): ?> |
| 192 | 192 | <?php if ($deprecateTo = $backend->getDeprecateTo()): ?> |
| 193 | 193 | <input type="hidden" id="allowUserMountingBackends<?php p($i); ?>" name="allowUserMountingBackends[]" value="<?php p($backend->getIdentifier()); ?>" data-deprecate-to="<?php p($deprecateTo->getIdentifier()); ?>" /> |
| 194 | 194 | <?php else: ?> |
| 195 | 195 | <input type="checkbox" id="allowUserMountingBackends<?php p($i); ?>" class="checkbox" name="allowUserMountingBackends[]" value="<?php p($backend->getIdentifier()); ?>" <?php if ($backend->isVisibleFor(BackendService::VISIBILITY_PERSONAL)) { |
| 196 | - print_unescaped(' checked="checked"'); |
|
| 197 | - } ?> /> |
|
| 196 | + print_unescaped(' checked="checked"'); |
|
| 197 | + } ?> /> |
|
| 198 | 198 | <label for="allowUserMountingBackends<?php p($i); ?>"><?php p($backend->getText()); ?></label> <br /> |
| 199 | 199 | <?php endif; ?> |
| 200 | 200 | <?php $i++; ?> |
@@ -100,9 +100,9 @@ discard block |
||
| 100 | 100 | <h2><?php p($l->t('No external storage configured or you don\'t have the permission to configure them')); ?></h2> |
| 101 | 101 | </div> |
| 102 | 102 | |
| 103 | -<form data-can-create="<?php echo $canCreateMounts?'true':'false' ?>" id="files_external" class="section" data-encryption-enabled="<?php echo $_['encryptionEnabled']?'true': 'false'; ?>"> |
|
| 103 | +<form data-can-create="<?php echo $canCreateMounts ? 'true' : 'false' ?>" id="files_external" class="section" data-encryption-enabled="<?php echo $_['encryptionEnabled'] ? 'true' : 'false'; ?>"> |
|
| 104 | 104 | <h2 class="inlineblock" data-anchor-name="external-storage"><?php p($l->t('External storage')); ?></h2> |
| 105 | - <a target="_blank" rel="noreferrer" class="icon-info" title="<?php p($l->t('Open documentation'));?>" href="<?php p(link_to_docs('admin-external-storage')); ?>"></a> |
|
| 105 | + <a target="_blank" rel="noreferrer" class="icon-info" title="<?php p($l->t('Open documentation')); ?>" href="<?php p(link_to_docs('admin-external-storage')); ?>"></a> |
|
| 106 | 106 | <p class="settings-hint"><?php p($l->t('External storage enables you to mount external storage services and devices as secondary Nextcloud storage devices. You may also allow users to mount their own external storage services.')); ?></p> |
| 107 | 107 | <?php if (isset($_['dependencies']) and ($_['dependencies'] !== '') and $canCreateMounts) { |
| 108 | 108 | print_unescaped(''.$_['dependencies'].''); |
@@ -142,10 +142,10 @@ discard block |
||
| 142 | 142 | <?php p($l->t('Add storage')); ?> |
| 143 | 143 | </option> |
| 144 | 144 | <?php |
| 145 | - $sortedBackends = array_filter($_['backends'], function ($backend) use ($_) { |
|
| 145 | + $sortedBackends = array_filter($_['backends'], function($backend) use ($_) { |
|
| 146 | 146 | return $backend->isVisibleFor($_['visibilityType']); |
| 147 | 147 | }); |
| 148 | - uasort($sortedBackends, function ($a, $b) { |
|
| 148 | + uasort($sortedBackends, function($a, $b) { |
|
| 149 | 149 | return strcasecmp($a->getText(), $b->getText()); |
| 150 | 150 | }); |
| 151 | 151 | ?> |
@@ -184,7 +184,7 @@ discard block |
||
| 184 | 184 | |
| 185 | 185 | <p id="userMountingBackends"<?php if (!$_['allowUserMounting']): ?> class="hidden"<?php endif; ?>> |
| 186 | 186 | <?php |
| 187 | - $userBackends = array_filter($_['backends'], function ($backend) { |
|
| 187 | + $userBackends = array_filter($_['backends'], function($backend) { |
|
| 188 | 188 | return $backend->isAllowedVisibleFor(BackendService::VISIBILITY_PERSONAL); |
| 189 | 189 | }); |
| 190 | 190 | ?> |
@@ -29,40 +29,40 @@ |
||
| 29 | 29 | |
| 30 | 30 | class FedAuth extends AbstractBasic { |
| 31 | 31 | |
| 32 | - /** @var DbHandler */ |
|
| 33 | - private $db; |
|
| 32 | + /** @var DbHandler */ |
|
| 33 | + private $db; |
|
| 34 | 34 | |
| 35 | - /** |
|
| 36 | - * FedAuth constructor. |
|
| 37 | - * |
|
| 38 | - * @param DbHandler $db |
|
| 39 | - */ |
|
| 40 | - public function __construct(DbHandler $db) { |
|
| 41 | - $this->db = $db; |
|
| 42 | - $this->principalPrefix = 'principals/system/'; |
|
| 35 | + /** |
|
| 36 | + * FedAuth constructor. |
|
| 37 | + * |
|
| 38 | + * @param DbHandler $db |
|
| 39 | + */ |
|
| 40 | + public function __construct(DbHandler $db) { |
|
| 41 | + $this->db = $db; |
|
| 42 | + $this->principalPrefix = 'principals/system/'; |
|
| 43 | 43 | |
| 44 | - // setup realm |
|
| 45 | - $defaults = new \OCP\Defaults(); |
|
| 46 | - $this->realm = $defaults->getName(); |
|
| 47 | - } |
|
| 44 | + // setup realm |
|
| 45 | + $defaults = new \OCP\Defaults(); |
|
| 46 | + $this->realm = $defaults->getName(); |
|
| 47 | + } |
|
| 48 | 48 | |
| 49 | - /** |
|
| 50 | - * Validates a username and password |
|
| 51 | - * |
|
| 52 | - * This method should return true or false depending on if login |
|
| 53 | - * succeeded. |
|
| 54 | - * |
|
| 55 | - * @param string $username |
|
| 56 | - * @param string $password |
|
| 57 | - * @return bool |
|
| 58 | - */ |
|
| 59 | - protected function validateUserPass($username, $password) { |
|
| 60 | - return $this->db->auth($username, $password); |
|
| 61 | - } |
|
| 49 | + /** |
|
| 50 | + * Validates a username and password |
|
| 51 | + * |
|
| 52 | + * This method should return true or false depending on if login |
|
| 53 | + * succeeded. |
|
| 54 | + * |
|
| 55 | + * @param string $username |
|
| 56 | + * @param string $password |
|
| 57 | + * @return bool |
|
| 58 | + */ |
|
| 59 | + protected function validateUserPass($username, $password) { |
|
| 60 | + return $this->db->auth($username, $password); |
|
| 61 | + } |
|
| 62 | 62 | |
| 63 | - /** |
|
| 64 | - * @inheritdoc |
|
| 65 | - */ |
|
| 66 | - public function challenge(RequestInterface $request, ResponseInterface $response) { |
|
| 67 | - } |
|
| 63 | + /** |
|
| 64 | + * @inheritdoc |
|
| 65 | + */ |
|
| 66 | + public function challenge(RequestInterface $request, ResponseInterface $response) { |
|
| 67 | + } |
|
| 68 | 68 | } |
@@ -134,7 +134,7 @@ discard block |
||
| 134 | 134 | */ |
| 135 | 135 | public function requestSharedSecret($url, $token) { |
| 136 | 136 | if ($this->trustedServers->isTrustedServer($url) === false) { |
| 137 | - $this->logger->error('remote server not trusted (' . $url . ') while requesting shared secret', ['app' => 'federation']); |
|
| 137 | + $this->logger->error('remote server not trusted ('.$url.') while requesting shared secret', ['app' => 'federation']); |
|
| 138 | 138 | throw new OCSForbiddenException(); |
| 139 | 139 | } |
| 140 | 140 | |
@@ -143,7 +143,7 @@ discard block |
||
| 143 | 143 | $localToken = $this->dbHandler->getToken($url); |
| 144 | 144 | if (strcmp($localToken, $token) > 0) { |
| 145 | 145 | $this->logger->info( |
| 146 | - 'remote server (' . $url . ') presented lower token. We will initiate the exchange of the shared secret.', |
|
| 146 | + 'remote server ('.$url.') presented lower token. We will initiate the exchange of the shared secret.', |
|
| 147 | 147 | ['app' => 'federation'] |
| 148 | 148 | ); |
| 149 | 149 | throw new OCSForbiddenException(); |
@@ -183,14 +183,14 @@ discard block |
||
| 183 | 183 | */ |
| 184 | 184 | public function getSharedSecret($url, $token) { |
| 185 | 185 | if ($this->trustedServers->isTrustedServer($url) === false) { |
| 186 | - $this->logger->error('remote server not trusted (' . $url . ') while getting shared secret', ['app' => 'federation']); |
|
| 186 | + $this->logger->error('remote server not trusted ('.$url.') while getting shared secret', ['app' => 'federation']); |
|
| 187 | 187 | throw new OCSForbiddenException(); |
| 188 | 188 | } |
| 189 | 189 | |
| 190 | 190 | if ($this->isValidToken($url, $token) === false) { |
| 191 | 191 | $expectedToken = $this->dbHandler->getToken($url); |
| 192 | 192 | $this->logger->error( |
| 193 | - 'remote server (' . $url . ') didn\'t send a valid token (got "' . $token . '" but expected "'. $expectedToken . '") while getting shared secret', |
|
| 193 | + 'remote server ('.$url.') didn\'t send a valid token (got "'.$token.'" but expected "'.$expectedToken.'") while getting shared secret', |
|
| 194 | 194 | ['app' => 'federation'] |
| 195 | 195 | ); |
| 196 | 196 | throw new OCSForbiddenException(); |
@@ -48,164 +48,164 @@ |
||
| 48 | 48 | */ |
| 49 | 49 | class OCSAuthAPIController extends OCSController { |
| 50 | 50 | |
| 51 | - /** @var ISecureRandom */ |
|
| 52 | - private $secureRandom; |
|
| 53 | - |
|
| 54 | - /** @var IJobList */ |
|
| 55 | - private $jobList; |
|
| 56 | - |
|
| 57 | - /** @var TrustedServers */ |
|
| 58 | - private $trustedServers; |
|
| 59 | - |
|
| 60 | - /** @var DbHandler */ |
|
| 61 | - private $dbHandler; |
|
| 62 | - |
|
| 63 | - /** @var ILogger */ |
|
| 64 | - private $logger; |
|
| 65 | - |
|
| 66 | - /** @var ITimeFactory */ |
|
| 67 | - private $timeFactory; |
|
| 68 | - |
|
| 69 | - /** |
|
| 70 | - * OCSAuthAPI constructor. |
|
| 71 | - * |
|
| 72 | - * @param string $appName |
|
| 73 | - * @param IRequest $request |
|
| 74 | - * @param ISecureRandom $secureRandom |
|
| 75 | - * @param IJobList $jobList |
|
| 76 | - * @param TrustedServers $trustedServers |
|
| 77 | - * @param DbHandler $dbHandler |
|
| 78 | - * @param ILogger $logger |
|
| 79 | - * @param ITimeFactory $timeFactory |
|
| 80 | - */ |
|
| 81 | - public function __construct( |
|
| 82 | - $appName, |
|
| 83 | - IRequest $request, |
|
| 84 | - ISecureRandom $secureRandom, |
|
| 85 | - IJobList $jobList, |
|
| 86 | - TrustedServers $trustedServers, |
|
| 87 | - DbHandler $dbHandler, |
|
| 88 | - ILogger $logger, |
|
| 89 | - ITimeFactory $timeFactory |
|
| 90 | - ) { |
|
| 91 | - parent::__construct($appName, $request); |
|
| 92 | - |
|
| 93 | - $this->secureRandom = $secureRandom; |
|
| 94 | - $this->jobList = $jobList; |
|
| 95 | - $this->trustedServers = $trustedServers; |
|
| 96 | - $this->dbHandler = $dbHandler; |
|
| 97 | - $this->logger = $logger; |
|
| 98 | - $this->timeFactory = $timeFactory; |
|
| 99 | - } |
|
| 100 | - |
|
| 101 | - /** |
|
| 102 | - * @NoCSRFRequired |
|
| 103 | - * @PublicPage |
|
| 104 | - * |
|
| 105 | - * request received to ask remote server for a shared secret, for legacy end-points |
|
| 106 | - * |
|
| 107 | - * @param string $url |
|
| 108 | - * @param string $token |
|
| 109 | - * @return Http\DataResponse |
|
| 110 | - * @throws OCSForbiddenException |
|
| 111 | - */ |
|
| 112 | - public function requestSharedSecretLegacy($url, $token) { |
|
| 113 | - return $this->requestSharedSecret($url, $token); |
|
| 114 | - } |
|
| 115 | - |
|
| 116 | - |
|
| 117 | - /** |
|
| 118 | - * @NoCSRFRequired |
|
| 119 | - * @PublicPage |
|
| 120 | - * |
|
| 121 | - * create shared secret and return it, for legacy end-points |
|
| 122 | - * |
|
| 123 | - * @param string $url |
|
| 124 | - * @param string $token |
|
| 125 | - * @return Http\DataResponse |
|
| 126 | - * @throws OCSForbiddenException |
|
| 127 | - */ |
|
| 128 | - public function getSharedSecretLegacy($url, $token) { |
|
| 129 | - return $this->getSharedSecret($url, $token); |
|
| 130 | - } |
|
| 131 | - |
|
| 132 | - /** |
|
| 133 | - * @NoCSRFRequired |
|
| 134 | - * @PublicPage |
|
| 135 | - * |
|
| 136 | - * request received to ask remote server for a shared secret |
|
| 137 | - * |
|
| 138 | - * @param string $url |
|
| 139 | - * @param string $token |
|
| 140 | - * @return Http\DataResponse |
|
| 141 | - * @throws OCSForbiddenException |
|
| 142 | - */ |
|
| 143 | - public function requestSharedSecret($url, $token) { |
|
| 144 | - if ($this->trustedServers->isTrustedServer($url) === false) { |
|
| 145 | - $this->logger->error('remote server not trusted (' . $url . ') while requesting shared secret', ['app' => 'federation']); |
|
| 146 | - throw new OCSForbiddenException(); |
|
| 147 | - } |
|
| 148 | - |
|
| 149 | - // if both server initiated the exchange of the shared secret the greater |
|
| 150 | - // token wins |
|
| 151 | - $localToken = $this->dbHandler->getToken($url); |
|
| 152 | - if (strcmp($localToken, $token) > 0) { |
|
| 153 | - $this->logger->info( |
|
| 154 | - 'remote server (' . $url . ') presented lower token. We will initiate the exchange of the shared secret.', |
|
| 155 | - ['app' => 'federation'] |
|
| 156 | - ); |
|
| 157 | - throw new OCSForbiddenException(); |
|
| 158 | - } |
|
| 159 | - |
|
| 160 | - $this->jobList->add( |
|
| 161 | - 'OCA\Federation\BackgroundJob\GetSharedSecret', |
|
| 162 | - [ |
|
| 163 | - 'url' => $url, |
|
| 164 | - 'token' => $token, |
|
| 165 | - 'created' => $this->timeFactory->getTime() |
|
| 166 | - ] |
|
| 167 | - ); |
|
| 168 | - |
|
| 169 | - return new Http\DataResponse(); |
|
| 170 | - } |
|
| 171 | - |
|
| 172 | - /** |
|
| 173 | - * @NoCSRFRequired |
|
| 174 | - * @PublicPage |
|
| 175 | - * |
|
| 176 | - * create shared secret and return it |
|
| 177 | - * |
|
| 178 | - * @param string $url |
|
| 179 | - * @param string $token |
|
| 180 | - * @return Http\DataResponse |
|
| 181 | - * @throws OCSForbiddenException |
|
| 182 | - */ |
|
| 183 | - public function getSharedSecret($url, $token) { |
|
| 184 | - if ($this->trustedServers->isTrustedServer($url) === false) { |
|
| 185 | - $this->logger->error('remote server not trusted (' . $url . ') while getting shared secret', ['app' => 'federation']); |
|
| 186 | - throw new OCSForbiddenException(); |
|
| 187 | - } |
|
| 188 | - |
|
| 189 | - if ($this->isValidToken($url, $token) === false) { |
|
| 190 | - $expectedToken = $this->dbHandler->getToken($url); |
|
| 191 | - $this->logger->error( |
|
| 192 | - 'remote server (' . $url . ') didn\'t send a valid token (got "' . $token . '" but expected "'. $expectedToken . '") while getting shared secret', |
|
| 193 | - ['app' => 'federation'] |
|
| 194 | - ); |
|
| 195 | - throw new OCSForbiddenException(); |
|
| 196 | - } |
|
| 197 | - |
|
| 198 | - $sharedSecret = $this->secureRandom->generate(32); |
|
| 199 | - |
|
| 200 | - $this->trustedServers->addSharedSecret($url, $sharedSecret); |
|
| 201 | - |
|
| 202 | - return new Http\DataResponse([ |
|
| 203 | - 'sharedSecret' => $sharedSecret |
|
| 204 | - ]); |
|
| 205 | - } |
|
| 206 | - |
|
| 207 | - protected function isValidToken($url, $token) { |
|
| 208 | - $storedToken = $this->dbHandler->getToken($url); |
|
| 209 | - return hash_equals($storedToken, $token); |
|
| 210 | - } |
|
| 51 | + /** @var ISecureRandom */ |
|
| 52 | + private $secureRandom; |
|
| 53 | + |
|
| 54 | + /** @var IJobList */ |
|
| 55 | + private $jobList; |
|
| 56 | + |
|
| 57 | + /** @var TrustedServers */ |
|
| 58 | + private $trustedServers; |
|
| 59 | + |
|
| 60 | + /** @var DbHandler */ |
|
| 61 | + private $dbHandler; |
|
| 62 | + |
|
| 63 | + /** @var ILogger */ |
|
| 64 | + private $logger; |
|
| 65 | + |
|
| 66 | + /** @var ITimeFactory */ |
|
| 67 | + private $timeFactory; |
|
| 68 | + |
|
| 69 | + /** |
|
| 70 | + * OCSAuthAPI constructor. |
|
| 71 | + * |
|
| 72 | + * @param string $appName |
|
| 73 | + * @param IRequest $request |
|
| 74 | + * @param ISecureRandom $secureRandom |
|
| 75 | + * @param IJobList $jobList |
|
| 76 | + * @param TrustedServers $trustedServers |
|
| 77 | + * @param DbHandler $dbHandler |
|
| 78 | + * @param ILogger $logger |
|
| 79 | + * @param ITimeFactory $timeFactory |
|
| 80 | + */ |
|
| 81 | + public function __construct( |
|
| 82 | + $appName, |
|
| 83 | + IRequest $request, |
|
| 84 | + ISecureRandom $secureRandom, |
|
| 85 | + IJobList $jobList, |
|
| 86 | + TrustedServers $trustedServers, |
|
| 87 | + DbHandler $dbHandler, |
|
| 88 | + ILogger $logger, |
|
| 89 | + ITimeFactory $timeFactory |
|
| 90 | + ) { |
|
| 91 | + parent::__construct($appName, $request); |
|
| 92 | + |
|
| 93 | + $this->secureRandom = $secureRandom; |
|
| 94 | + $this->jobList = $jobList; |
|
| 95 | + $this->trustedServers = $trustedServers; |
|
| 96 | + $this->dbHandler = $dbHandler; |
|
| 97 | + $this->logger = $logger; |
|
| 98 | + $this->timeFactory = $timeFactory; |
|
| 99 | + } |
|
| 100 | + |
|
| 101 | + /** |
|
| 102 | + * @NoCSRFRequired |
|
| 103 | + * @PublicPage |
|
| 104 | + * |
|
| 105 | + * request received to ask remote server for a shared secret, for legacy end-points |
|
| 106 | + * |
|
| 107 | + * @param string $url |
|
| 108 | + * @param string $token |
|
| 109 | + * @return Http\DataResponse |
|
| 110 | + * @throws OCSForbiddenException |
|
| 111 | + */ |
|
| 112 | + public function requestSharedSecretLegacy($url, $token) { |
|
| 113 | + return $this->requestSharedSecret($url, $token); |
|
| 114 | + } |
|
| 115 | + |
|
| 116 | + |
|
| 117 | + /** |
|
| 118 | + * @NoCSRFRequired |
|
| 119 | + * @PublicPage |
|
| 120 | + * |
|
| 121 | + * create shared secret and return it, for legacy end-points |
|
| 122 | + * |
|
| 123 | + * @param string $url |
|
| 124 | + * @param string $token |
|
| 125 | + * @return Http\DataResponse |
|
| 126 | + * @throws OCSForbiddenException |
|
| 127 | + */ |
|
| 128 | + public function getSharedSecretLegacy($url, $token) { |
|
| 129 | + return $this->getSharedSecret($url, $token); |
|
| 130 | + } |
|
| 131 | + |
|
| 132 | + /** |
|
| 133 | + * @NoCSRFRequired |
|
| 134 | + * @PublicPage |
|
| 135 | + * |
|
| 136 | + * request received to ask remote server for a shared secret |
|
| 137 | + * |
|
| 138 | + * @param string $url |
|
| 139 | + * @param string $token |
|
| 140 | + * @return Http\DataResponse |
|
| 141 | + * @throws OCSForbiddenException |
|
| 142 | + */ |
|
| 143 | + public function requestSharedSecret($url, $token) { |
|
| 144 | + if ($this->trustedServers->isTrustedServer($url) === false) { |
|
| 145 | + $this->logger->error('remote server not trusted (' . $url . ') while requesting shared secret', ['app' => 'federation']); |
|
| 146 | + throw new OCSForbiddenException(); |
|
| 147 | + } |
|
| 148 | + |
|
| 149 | + // if both server initiated the exchange of the shared secret the greater |
|
| 150 | + // token wins |
|
| 151 | + $localToken = $this->dbHandler->getToken($url); |
|
| 152 | + if (strcmp($localToken, $token) > 0) { |
|
| 153 | + $this->logger->info( |
|
| 154 | + 'remote server (' . $url . ') presented lower token. We will initiate the exchange of the shared secret.', |
|
| 155 | + ['app' => 'federation'] |
|
| 156 | + ); |
|
| 157 | + throw new OCSForbiddenException(); |
|
| 158 | + } |
|
| 159 | + |
|
| 160 | + $this->jobList->add( |
|
| 161 | + 'OCA\Federation\BackgroundJob\GetSharedSecret', |
|
| 162 | + [ |
|
| 163 | + 'url' => $url, |
|
| 164 | + 'token' => $token, |
|
| 165 | + 'created' => $this->timeFactory->getTime() |
|
| 166 | + ] |
|
| 167 | + ); |
|
| 168 | + |
|
| 169 | + return new Http\DataResponse(); |
|
| 170 | + } |
|
| 171 | + |
|
| 172 | + /** |
|
| 173 | + * @NoCSRFRequired |
|
| 174 | + * @PublicPage |
|
| 175 | + * |
|
| 176 | + * create shared secret and return it |
|
| 177 | + * |
|
| 178 | + * @param string $url |
|
| 179 | + * @param string $token |
|
| 180 | + * @return Http\DataResponse |
|
| 181 | + * @throws OCSForbiddenException |
|
| 182 | + */ |
|
| 183 | + public function getSharedSecret($url, $token) { |
|
| 184 | + if ($this->trustedServers->isTrustedServer($url) === false) { |
|
| 185 | + $this->logger->error('remote server not trusted (' . $url . ') while getting shared secret', ['app' => 'federation']); |
|
| 186 | + throw new OCSForbiddenException(); |
|
| 187 | + } |
|
| 188 | + |
|
| 189 | + if ($this->isValidToken($url, $token) === false) { |
|
| 190 | + $expectedToken = $this->dbHandler->getToken($url); |
|
| 191 | + $this->logger->error( |
|
| 192 | + 'remote server (' . $url . ') didn\'t send a valid token (got "' . $token . '" but expected "'. $expectedToken . '") while getting shared secret', |
|
| 193 | + ['app' => 'federation'] |
|
| 194 | + ); |
|
| 195 | + throw new OCSForbiddenException(); |
|
| 196 | + } |
|
| 197 | + |
|
| 198 | + $sharedSecret = $this->secureRandom->generate(32); |
|
| 199 | + |
|
| 200 | + $this->trustedServers->addSharedSecret($url, $sharedSecret); |
|
| 201 | + |
|
| 202 | + return new Http\DataResponse([ |
|
| 203 | + 'sharedSecret' => $sharedSecret |
|
| 204 | + ]); |
|
| 205 | + } |
|
| 206 | + |
|
| 207 | + protected function isValidToken($url, $token) { |
|
| 208 | + $storedToken = $this->dbHandler->getToken($url); |
|
| 209 | + return hash_equals($storedToken, $token); |
|
| 210 | + } |
|
| 211 | 211 | } |
@@ -29,32 +29,32 @@ |
||
| 29 | 29 | |
| 30 | 30 | class LastUsedController extends Controller { |
| 31 | 31 | |
| 32 | - /** @var IConfig */ |
|
| 33 | - protected $config; |
|
| 32 | + /** @var IConfig */ |
|
| 33 | + protected $config; |
|
| 34 | 34 | |
| 35 | - /** @var IUserSession */ |
|
| 36 | - protected $userSession; |
|
| 35 | + /** @var IUserSession */ |
|
| 36 | + protected $userSession; |
|
| 37 | 37 | |
| 38 | - /** |
|
| 39 | - * @param string $appName |
|
| 40 | - * @param IRequest $request |
|
| 41 | - * @param IConfig $config |
|
| 42 | - * @param IUserSession $userSession |
|
| 43 | - */ |
|
| 44 | - public function __construct($appName, IRequest $request, IConfig $config, IUserSession $userSession) { |
|
| 45 | - parent::__construct($appName, $request); |
|
| 46 | - $this->config = $config; |
|
| 47 | - $this->userSession = $userSession; |
|
| 48 | - } |
|
| 38 | + /** |
|
| 39 | + * @param string $appName |
|
| 40 | + * @param IRequest $request |
|
| 41 | + * @param IConfig $config |
|
| 42 | + * @param IUserSession $userSession |
|
| 43 | + */ |
|
| 44 | + public function __construct($appName, IRequest $request, IConfig $config, IUserSession $userSession) { |
|
| 45 | + parent::__construct($appName, $request); |
|
| 46 | + $this->config = $config; |
|
| 47 | + $this->userSession = $userSession; |
|
| 48 | + } |
|
| 49 | 49 | |
| 50 | - /** |
|
| 51 | - * @NoAdminRequired |
|
| 52 | - */ |
|
| 53 | - public function getLastUsedTagIds() { |
|
| 54 | - $lastUsed = $this->config->getUserValue($this->userSession->getUser()->getUID(), 'systemtags', 'last_used', '[]'); |
|
| 55 | - $tagIds = json_decode($lastUsed, true); |
|
| 56 | - return new DataResponse(array_map(function ($id) { |
|
| 57 | - return (string) $id; |
|
| 58 | - }, $tagIds)); |
|
| 59 | - } |
|
| 50 | + /** |
|
| 51 | + * @NoAdminRequired |
|
| 52 | + */ |
|
| 53 | + public function getLastUsedTagIds() { |
|
| 54 | + $lastUsed = $this->config->getUserValue($this->userSession->getUser()->getUID(), 'systemtags', 'last_used', '[]'); |
|
| 55 | + $tagIds = json_decode($lastUsed, true); |
|
| 56 | + return new DataResponse(array_map(function ($id) { |
|
| 57 | + return (string) $id; |
|
| 58 | + }, $tagIds)); |
|
| 59 | + } |
|
| 60 | 60 | } |
@@ -53,7 +53,7 @@ |
||
| 53 | 53 | public function getLastUsedTagIds() { |
| 54 | 54 | $lastUsed = $this->config->getUserValue($this->userSession->getUser()->getUID(), 'systemtags', 'last_used', '[]'); |
| 55 | 55 | $tagIds = json_decode($lastUsed, true); |
| 56 | - return new DataResponse(array_map(function ($id) { |
|
| 56 | + return new DataResponse(array_map(function($id) { |
|
| 57 | 57 | return (string) $id; |
| 58 | 58 | }, $tagIds)); |
| 59 | 59 | } |
@@ -31,30 +31,30 @@ |
||
| 31 | 31 | use OCP\Command\ICommand; |
| 32 | 32 | |
| 33 | 33 | class Expire implements ICommand { |
| 34 | - use FileAccess; |
|
| 34 | + use FileAccess; |
|
| 35 | 35 | |
| 36 | - /** |
|
| 37 | - * @var string |
|
| 38 | - */ |
|
| 39 | - private $user; |
|
| 36 | + /** |
|
| 37 | + * @var string |
|
| 38 | + */ |
|
| 39 | + private $user; |
|
| 40 | 40 | |
| 41 | - /** |
|
| 42 | - * @param string $user |
|
| 43 | - */ |
|
| 44 | - public function __construct($user) { |
|
| 45 | - $this->user = $user; |
|
| 46 | - } |
|
| 41 | + /** |
|
| 42 | + * @param string $user |
|
| 43 | + */ |
|
| 44 | + public function __construct($user) { |
|
| 45 | + $this->user = $user; |
|
| 46 | + } |
|
| 47 | 47 | |
| 48 | - public function handle() { |
|
| 49 | - $userManager = \OC::$server->getUserManager(); |
|
| 50 | - if (!$userManager->userExists($this->user)) { |
|
| 51 | - // User has been deleted already |
|
| 52 | - return; |
|
| 53 | - } |
|
| 48 | + public function handle() { |
|
| 49 | + $userManager = \OC::$server->getUserManager(); |
|
| 50 | + if (!$userManager->userExists($this->user)) { |
|
| 51 | + // User has been deleted already |
|
| 52 | + return; |
|
| 53 | + } |
|
| 54 | 54 | |
| 55 | - \OC_Util::tearDownFS(); |
|
| 56 | - \OC_Util::setupFS($this->user); |
|
| 57 | - Trashbin::expire($this->user); |
|
| 58 | - \OC_Util::tearDownFS(); |
|
| 59 | - } |
|
| 55 | + \OC_Util::tearDownFS(); |
|
| 56 | + \OC_Util::setupFS($this->user); |
|
| 57 | + Trashbin::expire($this->user); |
|
| 58 | + \OC_Util::tearDownFS(); |
|
| 59 | + } |
|
| 60 | 60 | } |