Merge pull request #606 from nextcloud/fix/wopi-session-user

chore: Switch to new API to set volatile user to prevent persisting it in any case

Author: juliusknorr

lib/Controller/WopiController.php

@@ -295,8 +295,7 @@ public function getFile($fileId,
 
 		try {
 			/** @var File $file */
-			$userFolder = $this->rootFolder->getUserFolder($wopi->getOwnerUid());
-			$file = $userFolder->getById($fileId)[0];
+			$file = $this->getFileForWopiToken($wopi);
 			\OC_User::setIncognitoMode(true);
 			if ($version !== '0') {
 				$view = new View('/' . $wopi->getOwnerUid() . '/files');

lib/Service/UserScopeService.php

@@ -31,7 +31,12 @@ public function setUserScope(?string $uid = null) {
 		if ($user === null) {
 			throw new \InvalidArgumentException('No user found for the uid ' . $uid);
 		}
-		$this->userSession->setUser($user);
+
+		if (method_exists($this->userSession, 'setVolatileActiveUser')) {
+			$this->userSession->setVolatileActiveUser($user);
+		} else {
+			$this->userSession->setUser($user);
+		}
 	}
 
 	/**