Merge pull request #55021 from nextcloud/backport/55013/stable30

AndyScherzinger · web-flow · commit a181276f5d4c · 2025-09-11T15:50:05.000+02:00
[stable30] fix(auth): allow access to dynamic js files during 2FA
diff --git a/core/Controller/JsController.php b/core/Controller/JsController.php
@@ -42,6 +42,7 @@ public function __construct(
 
 	/**
 	 * @NoSameSiteCookieRequired
+	 * @NoTwoFactorRequired
 	 *
 	 * @param string $fileName js filename with extension
 	 * @param string $appName js folder name
@@ -75,6 +76,8 @@ public function getJs(string $fileName, string $appName): Response {
 	}
 
 	/**
+	 * @NoTwoFactorRequired
+	 *
 	 * @param ISimpleFolder $folder
 	 * @param string $fileName
 	 * @param bool $gzip is set to true if we use the gzip file

Original file line number	Diff line number	Diff line change
`@@ -42,6 +42,7 @@ public function __construct(`
`42`	`42`
`43`	`43`	`/**`
`44`	`44`	`* @NoSameSiteCookieRequired`
	`45`	`+ * @NoTwoFactorRequired`
`45`	`46`	`*`
`46`	`47`	`* @param string $fileName js filename with extension`
`47`	`48`	`* @param string $appName js folder name`
`@@ -75,6 +76,8 @@ public function getJs(string $fileName, string $appName): Response {`
`75`	`76`	`}`
`76`	`77`
`77`	`78`	`/**`
	`79`	`+ * @NoTwoFactorRequired`
	`80`	`+ *`
`78`	`81`	`* @param ISimpleFolder $folder`
`79`	`82`	`* @param string $fileName`
`80`	`83`	`* @param bool $gzip is set to true if we use the gzip file`