Jürgen Weigert

We'll do a release this week, it seems... Dependabots has onen critical issue: * https://github.com/owncloud/contacts/security/dependabot/7 The build reports several security issues, and deprecated dependencies: ``` found 37 vulnerabilities (2 low,...

Re-tested with 1.5.1-rc1 and hsmdaemon-0.0.8 enabled: * Same diagnostics. * The move back fails. The file is not re-encrypted. It remains unencrypted in the SFTP storage. BAD.

@DeepDiver1975 This branch now has conflicts. We cannot re-run drone -- afaik the node14 issue is fixed.

We ship 3 copies of the pure php code already with owncloud core: ``` find . -name phpseclib | xargs du -sh 3.0M ./lib/composer/phpseclib 1.4M ./apps/openidconnect/vendor/phpseclib 3.0M ./apps/files_external/3rdparty/phpseclib ``` So...

These messages do not show up in the logfile configured in /etc/hsmdaemon/hsmdaemon.toml -- only in the syslog accessible via journalctl.

https://github.com/owncloud/encryption/releases/download/v1.6.1-rc.1/encryption-1.6.1-rc.1.tar.gz https://github.com/owncloud/encryption/releases/download/v1.6.1-rc.2/encryption-1.6.1-rc.2.tar.gz

The error happens only when actually switching user duing the oauth flow. All fresh logins or authorizations of already logged in users work fine.

Not a 100% regression in oauth2-0.5.1-rc1: * https://github.com/owncloud/client/issues/9141 reproduces the same with demo.owncloud.com where oauth2-0.5.0 is running. * Also reproduced with 0.5.0 using the steps described here. But not reproducable...

@michaelstingl ## Without user change ### 1) https://oc1080-oauth2-051-rc1-20211012.jw-qa.owncloud.works/index.php/apps/oauth2/authorize?response_type=code&client_id=xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69&redirect_uri=http://localhost:33883&code_challenge=oAR2P54YPVtLAzfkvV6jo6sjVEaveOntbffTVC4jsG8&code_challenge_method=S256&scope=openid%20offline_access%20email%20profile&prompt=select_account%20consent&state=dQ7OwFr8-8C3WiyNYsyBCNQ5ADuzFXwaXSanyO8HVw4%3D ### 2) ``` curl 'https://oc1080-oauth2-051-rc1-20211012.jw-qa.owncloud.works/index.php/apps/oauth2/authorize?response_type=code&client_id=xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69&redirect_uri=http://localhost:33883&code_challenge=oAR2P54YPVtLAzfkvV6jo6sjVEaveOntbffTVC4jsG8&code_challenge_method=S256&scope=openid%20offline_access%20email%20profile&prompt=select_account%20consent&state=dQ7OwFr8-8C3WiyNYsyBCNQ5ADuzFXwaXSanyO8HVw4%3D' -H 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8' -H 'Accept-Language: en-US,en;q=0.5' --compressed...

## Connecting to the same server using android app 2.18.2 Same steps as above, first connect with the phone's browser as admin, then connect with the app and switch user...