feat: implement configurable SQL queries and CI/CD infrastructure

[vitormattos]

Overview

This PR implements comprehensive configuration system for SQL queries and establishes complete CI/CD infrastructure for the WordPress Login Backend app.

[Copilot]

Pull request overview

This PR introduces a configurable SQL query layer for the WordPress-backed authentication flow and adds a baseline CI setup (linting, PHPUnit, REUSE, dependabot) for the app.

Changes:

• Added QueryConfig to resolve WordPress SQL queries from system config with sane defaults.
• Updated the authentication backend and password-sync listener to use QueryConfig queries.
• Added PHPUnit test scaffolding (bootstrap + config) and unit tests, plus GitHub Actions workflows and REUSE metadata.

Reviewed changes

Copilot reviewed 23 out of 25 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
lib/Config/QueryConfig.php	New resolver for default vs overridden SQL queries via wordpress_queries.
lib/Backend/UserBackend.php	Switched user lookup + disabled-user query sources to QueryConfig.
lib/Listener/BeforePasswordUpdatedListener.php	Switched password update query to QueryConfig and adjusted parameter binding.
lib/Helper/HashPassword.php	Added SPDX header.
tests/Unit/Config/QueryConfigTest.php	Unit tests for defaults/overrides and empty-config behavior.
tests/Unit/Helper/HashPasswordTest.php	Unit tests covering hashing prefix, validate behavior, and long-password behavior.
tests/bootstrap.php	PHPUnit bootstrap with minimal OCP\IConfig stub for unit tests.
tests/phpunit.xml	PHPUnit configuration (strict settings, unit suite discovery).
composer.json	Added PHPUnit dev dependency, test/lint scripts, and dev autoload mapping for tests.
composer.lock	Locked PHPUnit and related dev dependencies.
.github/workflows/phpunit.yml	CI job to run PHPUnit across PHP 8.2/8.3.
.github/workflows/lint-php.yml	CI job for composer validation + PHP lint across PHP 8.2/8.3.
.github/workflows/lint-info-xml.yml	CI job to validate appinfo/info.xml against Nextcloud schema.
.github/workflows/reuse.yml	CI job to enforce REUSE/SPDX compliance.
.github/dependabot.yml	Dependabot configuration for composer + GitHub Actions updates.
.github/FUNDING.yml	Funding metadata.
.github/CODEOWNERS	CODEOWNERS entry for appinfo/info.xml.
REUSE.toml	REUSE project metadata and annotations.
LICENSES/AGPL-3.0-or-later.txt	Added SPDX license text file.
LICENSES/MIT.txt	Added SPDX license text file.
LICENSES/CC0-1.0.txt	Added SPDX license text file.
README.md	Added SPDX header + documentation for configuring custom SQL queries and support info.
appinfo/info.xml	Updated Nextcloud dependency range.
.gitignore	Ignored build artifacts and PHPUnit cache.

Comments suppressed due to low confidence (1)

lib/Backend/UserBackend.php:198

• With configurable disabled-user queries, $db->prepare($sql) may return false (e.g., invalid custom SQL, trailing semicolon combined with appended LIMIT, etc.). The code assumes a PDOStatement and will fatal on subsequent bindParam(...) calls. Consider enabling PDO exceptions and/or checking the prepare result before binding.

		$sql = $this->queryConfig->getDisabledUsersQuery();

		$limit = $this->fixLimit($limit);
		if (!is_null($limit) && $limit > 0) {
			$sql.= ' LIMIT :offset,:limit';
		}
		$statement = $db->prepare($sql);
		if (!is_null($limit) && $limit > 0) {
			$statement->bindParam(':limit', $limit, PDO::PARAM_INT);
			$statement->bindParam(':offset', $offset, PDO::PARAM_INT);
		}

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.