5 commits

Author	SHA1	Message	Date
Nicola Murino	e9dd4ecdf0	web admin: add CSRF	2021-02-03 08:55:28 +01:00
Nicola Murino	f863530653	JWT: only accepts tokens from the expected header or cookie	2021-02-02 13:11:47 +01:00
Nicola Murino	4f609cfa30	JWT: add token audience ... a token released for API audience cannot be used for web pages and vice-versa	2021-02-02 09:14:10 +01:00
Nicola Murino	c2bbd468c4	REST API: add logout and store invalidated token	2021-01-26 22:35:36 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00