Skip to content

[stable32] fix: Add missing PasswordConfirmationRequired attributes#59788

Merged
come-nc merged 5 commits intostable32from
backport/59764/stable32
Apr 21, 2026
Merged

[stable32] fix: Add missing PasswordConfirmationRequired attributes#59788
come-nc merged 5 commits intostable32from
backport/59764/stable32

Conversation

@backportbot
Copy link
Copy Markdown

@backportbot backportbot Bot commented Apr 21, 2026

Backport of #59764

come-nc added 3 commits April 21, 2026 13:41
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
chore(cypress): Add handling for added password confirmation dialog

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

[skip ci]
@backportbot backportbot Bot added the 3. to review Waiting for reviews label Apr 21, 2026
@backportbot backportbot Bot added this to the Nextcloud 32.0.9 milestone Apr 21, 2026
Copy link
Copy Markdown
Contributor

@szaimen szaimen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐘

…ctions

Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.

Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
@come-nc come-nc marked this pull request as ready for review April 21, 2026 15:11
@come-nc come-nc requested review from a team as code owners April 21, 2026 15:11
@come-nc come-nc requested review from artonge, leftybournes, nfebe, salmart-dev, sorbaugh and susnux and removed request for a team April 21, 2026 15:11
@come-nc
Copy link
Copy Markdown
Contributor

come-nc commented Apr 21, 2026

/backport to stable31

@come-nc come-nc merged commit fa5e37e into stable32 Apr 21, 2026
225 of 236 checks passed
@come-nc come-nc deleted the backport/59764/stable32 branch April 21, 2026 19:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants