Skip to content

Conversation

@Darianisak
Copy link

Summary

A previous MR(54055) resulted in the NcActionInput component responsible for creating file shares discarding user provided passwords, in favor of the system generated one.

This was caused by drift between the component and the underlying Share model, resulting in the component calling .sync on a non-existent attribute, which meant the password was never updated.

To reproduce (with password_policy enabled):

  • Under a files "External Shares", click "Create public link"
  • Supply a password to the password field, e.g., "testing-password_123"
  • Click "Create share"
  • Attempt to navigate to the generated share link and access the shared file with the password you provided at the time of creating the share.
  • The provided password will be rejected, as it was never updated from the system generated one.

TODO

N/A

Checklist

A previous MR(54055) resulted in the NcActionInput component responsible
for creating file shares discarding user provided passwords, in favor of
the system generated one.

This was caused by drift between the component and the underlying Share
model, resulting in the component calling .sync on a non-existent
attribute, which meant the password was never updated.

To reproduce (with password_policy enabled):
* Under a files "External Shares", click "Create public link"
* Supply a password to the password field, e.g., "testing-password_123"
* Click "Create share"
* Attempt to navigate to the generated share link and access the shared
  file with the password you provided at the time of creating the share.
* The provided password will be rejected, as it was never updated from
  the system generated one.

Signed-off-by: Darian Culver <darian.culver@catalyst.net.nz>
@Darianisak Darianisak requested a review from a team as a code owner August 13, 2025 03:25
@Darianisak Darianisak requested review from skjnldsv, susnux and szaimen and removed request for a team August 13, 2025 03:25
@skjnldsv skjnldsv requested a review from nfebe August 13, 2025 05:53
@skjnldsv skjnldsv added this to the Nextcloud 32 milestone Aug 13, 2025
@Darianisak
Copy link
Author

/backport to stable31

@Darianisak
Copy link
Author

/backport to stable30

This was referenced Aug 22, 2025
@github-actions
Copy link
Contributor

Hello there,
Thank you so much for taking the time and effort to create a pull request to our Nextcloud project.

We hope that the review process is going smooth and is helpful for you. We want to ensure your pull request is reviewed to your satisfaction. If you have a moment, our community management team would very much appreciate your feedback on your experience with this PR review process.

Your feedback is valuable to us as we continuously strive to improve our community developer experience. Please take a moment to complete our short survey by clicking on the following link: https://cloud.nextcloud.com/apps/forms/s/i9Ago4EQRZ7TWxjfmeEpPkf6

Thank you for contributing to Nextcloud and we hope to hear from you soon!

(If you believe you should not receive this message, you can add yourself to the blocklist.)

@skjnldsv
Copy link
Member

@nfebe :)

This was referenced Sep 2, 2025
@Jeveze Jeveze mentioned this pull request Sep 9, 2025
8 tasks
@AndyScherzinger
Copy link
Member

/backport to stable32

@hamza221
Copy link
Contributor

/compile

@susnux
Copy link
Contributor

susnux commented Sep 11, 2025

@hamza221 needs to be compiled manually.
Also for CI it needs to be moved into this repo - some CI is disabled on forks.

@hamza221
Copy link
Contributor

I'll create a new Pr @susnux ?

class="share-link-password"
:label="t('files_sharing', 'Enter a password')"
:value.sync="share.newPassword"
:value.sync="share.password"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This needs to be tested deeply!
I did this so that you can rollback changes if the share update fails.

@szaimen szaimen removed their request for review September 11, 2025 11:57
@hamza221
Copy link
Contributor

new pr #55026

@hamza221
Copy link
Contributor

fixed in #55073

@hamza221 hamza221 closed this Sep 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: External file shares are not created with user provided passwords.

5 participants