debug

Signed-off-by: Benjamin Gaussorgues <[email protected]>

core/Controller/LoginController.php

@@ -43,6 +43,7 @@
 use OCP\Security\Bruteforce\IThrottler;
 use OCP\Security\ITrustedDomainHelper;
 use OCP\Util;
+use Psr\Log\LoggerInterface;
 
 class LoginController extends Controller {
 	public const LOGIN_MSG_INVALIDPASSWORD = 'invalidpassword';
@@ -294,6 +295,7 @@ public function tryLogin(
 		$origin = $this->request->getHeader('Origin');
 		$throttle = true;
 		if ($origin === '' || !$trustedDomainHelper->isTrustedUrl($origin)) {
+			\OC::$server->get(LoggerInterface::class)->error('Origin ' . $origin . ' isnt trusted', ['trusted' => \OC::$server->get(IConfig::class)->getSystemValue('trusted_domains')]);
 			// Login attempt not from the same origin,
 			// We only allow this on the login flow but not on the UI login page.
 			// This could have come from someone malicious who tries to block a user by triggering the bruteforce protection.
@@ -308,6 +310,7 @@ public function tryLogin(
 			}
 			$error = self::LOGIN_MSG_CSRFCHECKFAILED;
 		}
+		\OC::$server->get(LoggerInterface::class)->error('Origin ' . $origin . ' is trusted!', ['trusted' => \OC::$server->get(IConfig::class)->getSystemValue('trusted_domains')]);
 
 		if ($error !== '') {
 			// Clear any auth remnants like cookies to ensure a clean login

cypress/dockerNode.ts

@@ -277,7 +277,7 @@ export const waitOnNextcloud = async function(ip: string) {
 const runExec = async function(
 	container: Docker.Container,
 	command: string[],
-	verbose = false,
+	verbose = true,
 	user = 'www-data',
 	workdir?: string,
 ): Promise<string> {