block DAV if 2FA challenge needs to be solved first

Add keepUnicode value in the cache key of normalizedPathCache

block OCS if 2FA challenge needs to be solved first

Do not show the hint when it's the same as the message

remember redirect_url when solving the 2FA challenge

Merge pull request #24949 from owncloud/ee-1325-internal-server-error-in-sync-client-on-forbidden-directurl

Catch the ForbiddenException to make sure it gets handled

Fix URL for client downloads

Create session tokens for apache auth users

Use a capped memory cache for the user/group cache

Hack to prevent infinite loop with LDAP + logging

Properly check for mbstring extension

Forward port of a50619200c6a08929dbe802118a6afadb376b866 to 9.1/master

Fix SMB backend registration

fixes size of the download spinner

Only show message in the UI when the checker is enabled

Add bzip2 to known mimetypes

Add a warning when the transaction isolation level is not READ_COMMITED

Allow opening the password reset link in a new window when its a URL

[decrypt_all] Check if file needs to decrypted or not for speed up large oc setups.

Add morrisjobke/webdav docker container for external storage tests

mb_detect_encoding is in the fallback we ship in the polyfill library, mb_strcut is not. Thus this lead to a false positive and ownCloud would just break.

ownCloud as remote DAV always accepts the mtime on touch, but other
servers like Apache's DAV server doesn't. The latter doesn't give any
visible hint in its response to detect this case, so this fix does a
subsequent PROPFIND to check whether the mtime was actually set.

Since a touch() operation seldom happens (only on uploads), the minor
performance loss should hopefully be acceptable.