beenull/sftpgo-mirror
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2024-11-22 07:30:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
1579 commits 8 branches 49 tags 49 MiB
Commit graph

514 commits

Author SHA1 Message Date
Nicola Murino
184b99d500
user: add a field to indicate whether the password is set 
A structure similar to the one used for secrets would be better,
but we don't want to break backwards compatibility.

Also document that omitting the password field in the request body
will preserve the current password when updating a user using the
REST API. Added a test case for this.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-06 18:22:09 +02:00
Nicola Murino
74f05e5305
EventManager: check the parent directory before creating a zip 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-03 18:53:13 +02:00
Nicola Murino
aefa7f77c2
add a link to the Terraform provider 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-02 18:48:56 +02:00
Nicola Murino
084d4109b8
WebAdmin: ensure to sanitize data before rendering 
Thanks to Polina Zvorykina, VK for reporting this issue

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-28 12:28:38 +02:00
Nicola Murino
b60d3f680e
user as JSON: rename 2fa_protocols to two_factor_protocols 
This is a breaking change, but it is necessary to make JSON serialization of
users more compatible.
For example, Terraform does not allow JSON fields starting with numbers

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-26 15:57:53 +02:00
Nicola Murino
ee90bfb506
add unixcrypt build tag 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-26 10:33:30 +02:00
Nicola Murino
e17068a76f
postgres provider: add support for load balancing 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-25 09:29:13 +01:00
Nicola Murino
354fc9b3d6
OIDC: allow to extract custom fields from sub-structs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-23 18:15:07 +01:00
Nicola Murino
e29f6857db
EventManager: add IDP login trigger and check account action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-22 19:02:54 +01:00
Nicola Murino
2710207779
update jquery, go deps, actions/setup-go to v4 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-15 18:44:08 +01:00
Nicola Murino
b719d03ebe
WebAdmin: improve fs config layout 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-12 15:08:32 +01:00
Nicola Murino
14242b59a2
oidc docs: add env vars config 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-09 18:58:36 +01:00
Nicola Murino
dad346cee8
add codeql 
update deps

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-05 16:38:29 +01:00
Nicola Murino
0423e8f157
httpd: generate defender events for failed 2fa and password resets 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-04 13:55:48 +01:00
Nicola Murino
4ba3ae876d
allow to set password strength at user/group level 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-02 09:11:30 +01:00
Nicola Murino
662164c7ff
smtp: require templates only if a server is configured or in service mode 
This regression was introduced after recent changes to allow setting the SMTP
settings from the WebAdmin UI.

Fixes #1217

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-01 18:31:02 +01:00
Nicola Murino
fad6af11e5
don't expose error messages from pre-actions and post connect hooks 
always return a generic error instead to avoid leaking internal info

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-28 18:01:09 +01:00
Nicola Murino
a23fdea9e3
ftpd: allow hostnames as passive IP 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-27 19:19:50 +01:00
Nicola Murino
561976bcd0
WebClient: return proper status code for http.MaxBytesError 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-27 11:03:05 +01:00
Nicola Murino
874776bd12
also capture logs for pre-login and check-password commands 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-26 15:15:34 +01:00
Nicola Murino
df9d47900a
eventmanager: add user/folders as comma separated string in errors 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-25 15:26:38 +01:00
Nicola Murino
7bcd79a70a
telemetry: improve test cases 
remove an unnecessary nil check in tlsutils added as workaround
to make telemetry test cases work

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-24 11:05:46 +01:00
Nicola Murino
8805d85377
configs: add ACME section 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-23 19:25:20 +01:00
Nicola Murino
fcf9a8c673
scheduler: disable verbose logs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-21 18:18:24 +01:00
Nicola Murino
2c1319985d
sql providers: remove unnecessary []byte to string conversion 
always check affected rows for updates

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-20 18:14:02 +01:00
Nicola Murino
a3fff56da5
WebAdmin: add configs section 
Setting configurations is an experimental feature and is not currently
supported in the REST API

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-19 19:03:45 +01:00
Nicola Murino
78cd5d8eba
groups: add expiration date override 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-13 19:32:36 +01:00
Nicola Murino
2df2803a37
ipfilter plugin: add protocol 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-13 13:45:45 +01:00
Nicola Murino
157d1db0b1
fs events: add elapsed field to notifications 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-12 18:56:53 +01:00
Nicola Murino
7e85356325
WebClient shares: replace basic auth with a login form 
basic auth will continue to work for REST API

Fixes #1166

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-12 08:29:53 +01:00
Nicola Murino
04ab8e72f6
WebUI: make error messages user dismissible 
Fixes #1171

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-10 18:07:23 +01:00
Nicola Murino
e0c3a13ac5
azblob: update to the latest SDK 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-09 13:04:12 +01:00
Nicola Murino
1b1745b7f7
move IP/Network lists to the data provider 
this is a backward incompatible change, all previous file based IP/network
lists will not work anymore

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-09 09:33:33 +01:00
Nicola Murino
1e14d006b1
defender: set score_no_auth to 0 as default 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-29 18:00:27 +01:00
Nicola Murino
c0fe08b597
defender: allow to set a different score for "no auth tried" events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-25 18:49:03 +01:00
Nicola Murino
5550a5d2c0
update users: also disconnect users from remote nodes when requested 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-24 18:53:34 +01:00
Nicola Murino
2066ad7c83
WebDAV: allow to define custom MIME type mappings 
Fixes #1154

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-23 18:43:25 +01:00
Nicola Murino
3ce4d04b27
EventManager: support placeholders within URL paths 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-22 08:46:58 +01:00
Nicola Murino
7b5bebc588
EventManager: add "on-demand" trigger 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-21 15:41:24 +01:00
Nicola Murino
53f17b5715
allow to disable event rules 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-19 18:33:04 +01:00
Nicola Murino
f2618e7de6
switch from go-simple-mail to go-mail 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-15 15:28:31 +01:00
Nicola Murino
09dea57850
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-07 13:07:41 +01:00
Nicola Murino
8cad436421
conditional support for recursive renaming for cloud providers 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-06 12:33:50 +01:00
Nicola Murino
f0dedbfabf
eventmanager: auto-create destination folder for renames 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-03 18:13:01 +01:00
Nicola Murino
7fa0959af4
eventmanager: add support for global star path matching 
This introduce a backward incompatible change for filesystem path matching
in the Event Manager, now patterns like "*.txt" will no longer match any
file with the "txt" suffix, you need to change them to "/**/*.txt".

Also change pre-delete behaviour, now if an error is returned the client
will get a permission denied error. This is the same as the other pre-*
action. Previously it was not possible to deny deletion of a file.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-02 15:59:00 +01:00
Nicola Murino
2611dd2c98
eventmanager: add support for pre-* actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-01 17:59:41 +01:00
Nicola Murino
6cebc037a0
eventmanager: check disk quota before executing the compress action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-31 16:41:32 +01:00
Nicola Murino
15ad31da54
WebClient: add copy action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-30 19:30:16 +01:00
Nicola Murino
fe9904a54d
docs full-configuration: improve formatting 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-28 18:51:25 +01:00
Nicola Murino
ea4c4dd57f
eventmanager: add copy action 
refactor sftpgo-copy and sftpgo-remove commands

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-27 18:51:53 +01:00
Nicola Murino
0841c7d7bd
REST API: remove merging of fields on updates 
we use PUT verb not PATCH. We keep merging only to allow to preserve
hidden/encrypted fields.

This is a backward incompatible change, but is necessary to avoid unexpected
issues.
You have to pass complete objects on updates.

Fixes #1088

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-23 09:36:20 +01:00
Nicola Murino
e17975ed7d
dataprovider: include port in node name and make it a hash 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-20 16:40:32 +01:00
Nicola Murino
0296e0cafa
gcsfs: allow to customize upload part size/time 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-18 11:51:46 +01:00
Nicola Murino
2da3eabc12
eventmanager: add password notification check action 
this action allow to send an email notification to users whose
password is about to expire

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-16 18:51:29 +01:00
Nicola Murino
ad5d657a1a
add support for password policies 
you can now set a password expiration and the password change requirement

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-11 17:15:34 +01:00
Nicola Murino
e2bebc99d1
AzureBlobs: update SDK to v0.6.1 
Remove path escape for blob names, this issue is now fixed within
the SDK

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-10 09:44:14 +01:00
Nicola Murino
926dcbbc63
add a CLI command to reset admin passwords 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-09 18:28:16 +01:00
Nicola Murino
a7f9581d99
provider events: add support for omit_object_data search param 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-08 10:02:12 +01:00
Nicola Murino
75d911f29e
WebAdmin: allow to search and export event logs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-07 18:47:38 +01:00
Nicola Murino
91e4a54385
fix build with some features disabled 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-04 08:44:45 +01:00
Nicola Murino
2ea43647ed
ftpd: check the TYPE parameter in a case-insensitive manner 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-03 13:09:25 +01:00
Nicola Murino
1f9cf194fe
add role to events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-03 11:45:27 +01:00
Nicola Murino
e87118d2a8
allow WebClient login with multi-step auth enabled 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-29 18:43:48 +01:00
Nicola Murino
fe888729f9
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-27 12:15:56 +01:00
Nicola Murino
ba9fe38b8b
azblob: handle dirs metadata 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-24 18:14:24 +01:00
Nicola Murino
2290137868
WebDAV: add support for X-OC-Mtime header 
it is used by Nextcloud compatible clients to set the modification time

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-19 19:39:28 +01:00
Nicola Murino
2017cb60e9
Per-directory permissions: add wildcards support 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-18 18:12:04 +01:00
Nicola Murino
a22282f275
add support for DHGEX 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-17 18:15:53 +01:00
Nicola Murino
5a222807b7
add roles 
Fixes #837

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-16 19:04:50 +01:00
Nicola Murino
37ffa3b55a
portable mode: remove support for services discovery via multicast DNS 
The library used for mDNS doesn't seem well maintained and I think this
feature is rarely used

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-05 18:32:36 +01:00
Nicola Murino
048591553a
allow to set a default expiration for newly created users 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-05 18:01:24 +01:00
Nicola Murino
33bfd61a0c
plugins: fix hash check 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-04 20:25:01 +01:00
Nicola Murino
965d059400
WebUI: try harder to prevent browsers from auto-filling in password fields 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-03 19:57:43 +01:00
Nicola Murino
676286182a
webdav: always open files for reading in lazy mode 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-03 08:31:40 +01:00
Nicola Murino
e3e85867b1
sftpfs: reuse connections 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-01 12:22:54 +01:00
Nicola Murino
80244bd83b
eventmanager: allow to access the backup file 
so it can be used in email and other actions

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-29 14:04:31 +02:00
Nicola Murino
9a9e7d1a7f
squash database migrations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-28 14:28:37 +02:00
Nicola Murino
6f422c3d8b
WebClient: make folder deletion recursive 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-27 08:27:44 +02:00
Nicola Murino
63bf8eb1a1
set version to 2.4.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-23 04:47:41 +02:00
Nicola Murino
db0e58ae7e
Add support for graceful shutdown 
Fixes #1014

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-22 11:56:41 +02:00
Nicola Murino
87045284cc
make connections lookups constant time 
Performance improves if there are many active connections.
For a few connections there is a small (unnoticeable) performance
degradation

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-20 18:17:13 +02:00
Nicola Murino
f3ee20980a
fix build in bundle mode 
added bunlde mode build to CI to prevent this from happening again
in the future

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-20 07:58:34 +02:00
Nicola Murino
54f1946aba
OIDC: allow to skip JWT signature validation 
It's intended for special cases where providers,such as Azure,
use the "none" algorithm

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-19 18:38:09 +02:00
Nicola Murino
47842ae614
script based hooks: don't propagate global env vars 
env vars must be explicitly set

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-19 09:29:40 +02:00
Nicola Murino
7e0b62b703
update swagger-ui, codemirror, video-js 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-16 18:29:42 +02:00
Nicola Murino
5a199acbb2
howto: add event manager 
add groups section in the getting started guide.
Suggest to prefer configuration with env vars instead of modifying
the default configuration file

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-16 08:26:03 +02:00
Nicola Murino
07b3f2f4d6
config: fix for slices with default values 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-14 16:45:20 +02:00
Nicola Murino
13ee236884
Allow to read env vars from files inside the "env.d" directory 
This makes it easier to set environment variables on some operating systems.
Setting configuration options from environment variables is recommended if
you want to avoid the time-consuming task of merging your changes with the
default configuration file after upgrading SFTPGo

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-13 18:43:58 +02:00
Nicola Murino
3822b7d3f7
workflows: replace deprecated set-output command 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-13 13:11:22 +02:00
Nicola Murino
2b2b69fb23
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-12 22:03:47 +02:00
Nicola Murino
aa1e73326f
FTPD: fix APPE to new files 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-12 11:37:31 +02:00
Nicola Murino
07012aa812
WebDAV: allow to set last modification time 
This commit add a minimal dead properties implementation

Fixes #1018

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-11 19:20:58 +02:00
Nicola Murino
0e54fa5655
cryptfs: fix quota for overwrites if upload fails 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-10 19:34:15 +02:00
Nicola Murino
3e44a1dd2d
eventmanager: add support for file/directory compression 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-10 18:53:58 +02:00
Nicola Murino
a417df60b3
azblob: use UUIDs as block IDs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-07 06:54:26 +02:00
Nicola Murino
8a43486730
postgres driver: add multi hosts support 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-02 12:43:26 +02:00
Nicola Murino
a42e9ffa6b
azblob: add support for the latest SDK 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-01 14:04:53 +02:00
Nicola Murino
0e8c41bbd1
sftpd: fix relative symlinks handling 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-30 19:23:54 +02:00
Nicola Murino
f9eadd7f04
API data retention check: send CSV reports for email notifications 
replace the HTML email with the same CSV report used in the
event manager

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-28 18:37:32 +02:00
Nicola Murino
04dc97072b
eventmanager: add metadata check 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-26 19:00:34 +02:00