Add command to list available routes

[PVince81]

Can be useful for debugging or for setting up firewalls or gateways.

From owncloud/core#28901 and owncloud/core#28642

Tested manually with occ security:routes and occ security:routes -d

[nickvergessen]

see comments

[PVince81]

thanks. seems this file was quite old already

[nickvergessen]

It lists /ocsapp/ should we string replace that with /ocs/v{version}.php/?

[PVince81]

adjusted and squashed

[ChristophWurst]

why is this in security?

[PVince81]

mostly because useful to evaluate what routes are available for firewalls/gateways/..., knowing what routes could be accessible

[ChristophWurst]

if this is for debugging we should maybe only add it when debud mode is on, no?

[PVince81]

same comment as above: an admin can use it to find out what routes are exposed for firewall/gateway/... setup. sometimes there are strict firewalls in place and one needs to know what to add to the "allowed lists"

[faily-bot]

🤖 beep boop beep 🤖

Here are the logs for the failed build:

Status of 33801: failure

checkers

Show full log

The autoloaders are not up to date
Please run: bash build/autoloaderchecker.sh
And commit the result

mysql8.0-php7.4

• cancelled - typically means that the tests took longer than the drone CI allows them to run

[MorrisJobke]

• bug: -d option causes an exception for me:

php occ security:routes -d                                                                                                                                                       1 ↵
Nextcloud or one of the apps require upgrade - only a limited number of commands are available
You may use your browser or the occ upgrade command to do the upgrade
An unhandled exception has been thrown:
TypeError: preg_match_all() expects parameter 2 to be string, bool given in /Users/morris/Projects/nextcloud/server/core/Command/Security/ListRoutes.php:149
Stack trace:
#0 /Users/morris/Projects/nextcloud/server/core/Command/Security/ListRoutes.php(149): preg_match_all('/@([A-Z]\\w+)/', false, NULL)
#1 /Users/morris/Projects/nextcloud/server/core/Command/Security/ListRoutes.php(76): OC\Core\Command\Security\ListRoutes->buildController('logreader.log.g...')
#2 /Users/morris/Projects/nextcloud/server/apps2/deck/vendor/symfony/console/Command/Command.php(258): OC\Core\Command\Security\ListRoutes->execute(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
#3 /Users/morris/Projects/nextcloud/server/core/Command/Base.php(169): Symfony\Component\Console\Command\Command->run(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
#4 /Users/morris/Projects/nextcloud/server/apps2/deck/vendor/symfony/console/Application.php(920): OC\Core\Command\Base->run(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
#5 /Users/morris/Projects/nextcloud/server/apps2/deck/vendor/symfony/console/Application.php(266): Symfony\Component\Console\Application->doRunCommand(Object(OC\Core\Command\Security\ListRoutes), Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
#6 /Users/morris/Projects/nextcloud/server/apps2/deck/vendor/symfony/console/Application.php(142): Symfony\Component\Console\Application->doRun(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
#7 /Users/morris/Projects/nextcloud/server/lib/private/Console/Application.php(215): Symfony\Component\Console\Application->run(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
#8 /Users/morris/Projects/nextcloud/server/console.php(100): OC\Console\Application->run()
#9 /Users/morris/Projects/nextcloud/server/occ(11): require_once('/Users/morris/P...')
#10 {main}% 

[MorrisJobke]

@PVince81 🏓

[PVince81]

I have the feeling that there is no real use or interest for this feature, so I'll close it