Skip to content

[stable30] fix: Add missing PasswordConfirmationRequired attributes - #59871

Merged
sorbaugh merged 3 commits into
stable30from
backport/59812/stable30
Apr 27, 2026
Merged

[stable30] fix: Add missing PasswordConfirmationRequired attributes#59871
sorbaugh merged 3 commits into
stable30from
backport/59812/stable30

Conversation

@backportbot

@backportbotbackportbotBot commented Apr 23, 2026

Copy link
Copy Markdown

Backport of #59812

@backportbot
backportbotBot requested review from come-nc and szaimenApril 23, 2026 09:49
@backportbotbackportbotBot added the 3. to review Waiting for reviews label Apr 23, 2026
@backportbotbackportbotBot self-assigned this Apr 23, 2026

@szaimenszaimen left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐘

@github-actionsgithub-actionsBot changed the title [stable30] [stable31] fix: Add missing PasswordConfirmationRequired attributes[stable30] fix: Add missing PasswordConfirmationRequired attributesApr 23, 2026
…ctions
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
@pringelmann
pringelmannforce-pushed the backport/59812/stable30 branch from d366b98 to 10d1cecCompareApril 23, 2026 13:10
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
@come-nc

Copy link
Copy Markdown
Contributor

/compile /

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@come-nc
come-nc marked this pull request as ready for review April 23, 2026 15:12
@come-nc

Copy link
Copy Markdown
Contributor

/backport! to stable29

@come-nccome-nc added 4. to release Ready to be released and/or waiting for tests to finish and removed 3. to review Waiting for reviews labels Apr 27, 2026
@come-nccome-nc self-assigned this Apr 27, 2026
@sorbaugh
sorbaugh merged commit 207bd9e into stable30Apr 27, 2026
229 of 253 checks passed
@sorbaugh
sorbaugh deleted the backport/59812/stable30 branch April 27, 2026 13:08
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to releaseReady to be released and/or waiting for tests to finish

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@come-nc@szaimen@sorbaugh@pringelmann@nextcloud-command