Merge pull request #7576 from nextcloud/backport/7546/stable32

Author: provokateurin

lib/Db/SessionMapper.php

@@ -34,7 +34,7 @@ public function find(int $boardId, string $userId, string $token): Session {
 			throw new DoesNotExistException('Session is invalid');
 		}
 		$session = Session::fromRow($data);
-		if ($session->getUserId() != $userId || $session->getBoardId() != $boardId) {
+		if ($session->getUserId() !== $userId || $session->getBoardId() !== $boardId) {
 			throw new DoesNotExistException('Session is invalid');
 		}
 		return $session;

lib/Service/AssignmentService.php

@@ -121,7 +121,7 @@ public function assignUser($cardId, $userId, int $type = Assignment::TYPE_USER)
 		$groups = array_filter($this->aclMapper->findAll($boardId), function (Acl $acl) use ($userId) {
 			return $acl->getType() === Acl::PERMISSION_TYPE_GROUP && $acl->getParticipant() === $userId;
 		});
-		if (!in_array($userId, $boardUsers) && count($groups) !== 1) {
+		if (!in_array($userId, $boardUsers, true) && count($groups) !== 1) {
 			throw new BadRequestException('The user is not part of the board');
 		}
 

lib/Service/SessionService.php

@@ -71,7 +71,7 @@ public function closeSession(int $boardId, string $token): void {
 		}
 		$this->eventDispatcher->dispatchTyped(new SessionClosedEvent($boardId, $this->userId));
 	}
-	
+
 	public function removeInactiveSessions(): int {
 		return $this->sessionMapper->deleteInactive();
 	}
@@ -90,7 +90,7 @@ public function notifyAllSessions(IQueue $queue, int $boardId, $event, $body, $c
 			}
 
 			// don't notify the same user multiple times
-			if (!in_array($session->getUserId(), $userIds)) {
+			if (!in_array($session->getUserId(), $userIds, true)) {
 				$userIds[] = $session->getUserId();
 			}
 		}