Distinguish 'done' from 'configuring' in 2FA#35555
Distinguish 'done' from 'configuring' in 2FA#35555michielbdejong wants to merge 12 commits intonextcloud:masterfrom
Conversation
|
Test need to be fixed: |
|
Failures seem to be unrelated. Please fix DCO and we should be good to go. |
8bec328 to
681fae0
Compare
|
DCO fixed |
|
Drone failure is |
|
Something is wrong with the submodule 3rd party reference hash. can you rebase on the current master? |
681fae0 to
0b507ae
Compare
|
/rebase |
|
Any news on getting this merged? |
|
I think the rebase was successful and now all we're waiting for is for someone to actually click "merge", right? |
|
Unfortunately the rebase wasn't successful. Can you do it @michielbdejong or do you need some help? |
fff6ec5 to
81ba258
Compare
|
@miaulalala Tests passing now. |
…rrent implementation uses php 7.4, which is no longer compatible with the required PHP version of the server. I upped this to PHP 8.1 List of changes: - Upped PHP Version to 8.1 - Added Apache Webserver so the Container works "out of the box" after docker-compose up -d - Mounting whole project as volume to /var/www/html in docker-compose.yml (and set WORKDIR to /var/www/html) Tested in a Docker for Windows environment. Signed-off-by: MohammadReza vahedi <[email protected]>
* Autostart apache2 * Apply occ installation on start * Autostart Xdebug on request * Add DevContainer Xdebug profile Signed-off-by: GitHub <[email protected]> Signed-off-by: MohammadReza vahedi <[email protected]>
Signed-off-by: GitHub <[email protected]> Signed-off-by: MohammadReza vahedi <[email protected]>
* Add gnupg2 to be able to sign commits * Make sure /var/www/html always belongs to www-data * Add Git-History plugin * Introduce dedicated entrypoint script * Store Postgres database data in volume to be persistent * Cleaner check if NC is already installed in setup.sh * Add composer to DevContainer Signed-off-by: GitHub <[email protected]> Signed-off-by: MohammadReza vahedi <[email protected]>
* Use dedicated DevContainer user to run Apache (ensure file permissions) * Install NVM for node Signed-off-by: GitHub <[email protected]> Signed-off-by: MohammadReza vahedi <[email protected]>
Signed-off-by: GitHub <[email protected]> Signed-off-by: MohammadReza vahedi <[email protected]>
Signed-off-by: GitHub <[email protected]> Signed-off-by: MohammadReza vahedi <[email protected]>
Signed-off-by: MohammadReza vahedi <[email protected]>
Signed-off-by: MohammadReza vahedi <[email protected]>
Signed-off-by: MohammadReza vahedi <[email protected]>
When there is a token in the session for which the user is still [setting up 2FA](https://raw.githubusercontent.com/nextcloud/twofactor_totp/master/screenshots/settings.png), setting `self::SESSION_UID_DONE` ("two_factor_auth_passed") is a misnomer. AFAICT, everything works fine if you set nothing into the session and just return 'false' from this if-statement, but in case there is some code (now or in the future) that needs to know if the user is configuring 2FA, to play it safe I would suggest storing `self::SESSION_UID_CONFIGURING` ("two_factor_auth_configuring") into the session. Signed-off-by: Michiel de Jong <[email protected]> Signed-off-by: MohammadReza vahedi <[email protected]>
Signed-off-by: MohammadReza vahedi <[email protected]>
|
@miaulalala what is the status of this PR, is it going to be merged now? |
Just checking if the changes to the .devcontainer can stay, otherwise looks good. in the meantime, can you update your branch to the latest master? |
miaulalala
left a comment
There was a problem hiding this comment.
Unfortunately the .devconatiner changes have to go to keep everything tidy.
If you would like to keep the changes, you can open a second PR to update the devcontainer to 8.1 - would be nice to have that in, but not in this PR :)
|
superseded by #39411 |
Summary
When there is a token in the session for which the user is still setting up 2FA, setting
self::SESSION_UID_DONE("two_factor_auth_passed") is a misnomer.AFAICT, everything works fine if you set nothing into the session and just return 'false' from this if-statement, but in case there is some code (now or in the future) that needs to know if the user is configuring 2FA, to play it safe I would suggest storing
self::SESSION_UID_CONFIGURING("two_factor_auth_configuring") into the session.TODO
Checklist