Skip to content

[v1.19] Update for HumHub 1.19#697

Open
yurabakhtin wants to merge 27 commits into
masterfrom
develop
Open

[v1.19] Update for HumHub 1.19#697
yurabakhtin wants to merge 27 commits into
masterfrom
develop

Conversation

@yurabakhtin

Copy link
Copy Markdown
Collaborator

@yurabakhtin yurabakhtin requested a review from luke- May 25, 2026 07:25
HumHub Translations and others added 19 commits May 30, 2026 18:25
Add aria-label attribute for icon-only buttons
# Conflicts:
#	docs/CHANGELOG.md
#	models/CalendarEntry.php
#	module.json
CalDAV authenticates statelessly per request (HTTP Basic / token). Since
the twofa module moved to the core user gate system, the former
twofa.beforeCheck opt-out no longer exists, and a CalDAV request kept the
session enabled — so the gate dispatcher classified it as a full-page
request and could intercept the sync for affected users (e.g. 2FA
enforced).

CalDavController::beforeAction now sets enableSession = false, so the
request is classified as a stateless API request and the gates leave it
untouched (consistent with the REST module). The dead twofa.beforeCheck
listener is removed. Requires core >= 1.19.
Exempt CalDAV from the core user gates by disabling the session
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants