Skip to content

feat(auth): let app passwords be limited to whole apps - #65940

Open
pringelmann wants to merge 2 commits into
feat/noid/app-password-shared-servicesfrom
feat/noid/app-password-app-grants
Open

pringelmann wants to merge 2 commits into
feat/noid/app-password-shared-servicesfrom
feat/noid/app-password-app-grants

Conversation

@pringelmann

@pringelmann pringelmann commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Limited app passwords can now get a whole app scaope, stored as the app ID (spreed, deck). That opens all of the app's routes and DAV collections and nothing else.

app-list-final

Checklist

AI (if applicable)

  • The content of this PR was partly or fully generated using AI

Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
@pringelmann
pringelmann added this pull request to stack #65341 October 26, 2026 16:24
@pringelmann pringelmann self-assigned this Oct 26, 2026
@pringelmann pringelmann added the 3. to review Waiting for reviews label Oct 26, 2026
@pringelmann pringelmann added this to the Nextcloud 36 milestone Oct 26, 2026
@pringelmann
pringelmann marked this pull request as ready for review October 26, 2026 16:27
@pringelmann
pringelmann requested review from a team as code owners October 26, 2026 16:27
@pringelmann
pringelmann requested review from Altahrim, icewind1991, kristian-zendato, leftybournes, skjnldsv, sorbaugh and susnux and removed request for a team October 26, 2026 16:27

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant