1. 30 Apr, 2016 1 commit
  2. 24 Apr, 2016 1 commit
  3. 18 Apr, 2016 2 commits
  4. 31 Mar, 2016 1 commit
  5. 29 Mar, 2016 1 commit
  6. 28 Mar, 2016 1 commit
  7. 24 Mar, 2016 1 commit
  8. 23 Mar, 2016 1 commit
  9. 22 Mar, 2016 1 commit
  10. 21 Mar, 2016 1 commit
  11. 17 Mar, 2016 1 commit
  12. 15 Mar, 2016 1 commit
  13. 14 Mar, 2016 1 commit
  14. 12 Mar, 2016 1 commit
  15. 11 Mar, 2016 1 commit
  16. 10 Mar, 2016 1 commit
  17. 09 Mar, 2016 2 commits
  18. 08 Mar, 2016 1 commit
  19. 07 Mar, 2016 1 commit
  20. 06 Mar, 2016 1 commit
  21. 05 Mar, 2016 3 commits
  22. 04 Mar, 2016 1 commit
  23. 02 Mar, 2016 2 commits
  24. 28 Feb, 2016 1 commit
  25. 25 Feb, 2016 1 commit
  26. 17 Feb, 2016 1 commit
  27. 16 Feb, 2016 2 commits
  28. 12 Feb, 2016 1 commit
  29. 10 Feb, 2016 1 commit
    • Lukas Reschke's avatar
      Harden updater authentication · 5680743c
      Lukas Reschke authored
      - Reset tokens after 2 hours as discussed at https://github.com/owncloud/updater/issues/220#issuecomment-182033453
      - Used BCrypt for storing the password in the config.php. This makes it substantially harder in case of a leakage of the token to bruteforce it. In the future we can evaluate also an HMAC including the IP. That's a bit tricker though at the moment considering that we support reverse proxies. Didn't feel brave enough to touch that dragon now as well ;)
      5680743c
  30. 09 Feb, 2016 2 commits
    • Lukas Reschke's avatar
      Add SSO for updater application · b9e3ed14
      Lukas Reschke authored
      Allows logging-in into the updater application by visiting the admin panel and pressing "Open updater".
      b9e3ed14
    • Lukas Reschke's avatar
      Move update notification code into app · abc675d8
      Lukas Reschke authored
      Moves the update notification code in a single app. This is required since we want to use SSO for the new updater and for this have some code running in ownCloud as well (and we don't want that in core neccessarily). This app can provide that in the future, right now it's only the update notification itself. Will continue working on the SSO right away but wanted to keep the PR small.
      
      Furthermore also makes some more code unit-testable...
      abc675d8