malek/SpiceManagementSystem
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
111 Commits 1 Branch 0 Tags
0500cab160eca67da1bd2333bbd7f67586ace0c5
Commit Graph
3 Commits
Author SHA1 Message Date
Malek TellissiandClaude Sonnet 4.6 4b99ffea15 Fix account-takeover: bind users to nextcloud_id, not email
Deploy / deploy (push) Successful in 16s
Details 
Matching users by email alone allows an attacker with a self-registered
Nextcloud account to hijack any Filament user. Now we look up by
nextcloud_id first; email is only used when creating a brand-new account,
and nextcloud_id is immediately written to the row so future logins
use the stable Nextcloud user ID.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:54:19 +02:00
Malek TellissiandClaude Sonnet 4.6 2937004118 Roles via Nextcloud groups: sms-admin/manager/viewer + fix OAuth instance_uri
Deploy / deploy (push) Successful in 29s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:48:24 +02:00
Malek TellissiandClaude Sonnet 4.6 fc4579c47d Add Nextcloud OAuth 2.0 login via laravel/socialite
Deploy / deploy (push) Successful in 28s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:40:46 +02:00