58 commits

Author	SHA1	Message	Date
Nicola Murino	5d3288c37d	TLS: allow to configure cipher suites ... Fixes #316	2021-02-25 19:58:50 +01:00
Nicola Murino	be9230e85b	micro optimizations spotted using the go-critic linter	2021-02-16 19:11:36 +01:00
Nicola Murino	46176a54b4	minor doc fixes	2021-02-14 22:08:08 +01:00
Nicola Murino	a21ccad174	web hooks: add mutual TLS support	2021-02-13 14:41:37 +01:00
Nicola Murino	51f110bc7b	sftpd: add statvfs@openssh.com support	2021-02-11 19:45:52 +01:00
Nicola Murino	267d9f1831	web ui: allow to create folders from a template	2021-02-04 19:09:43 +01:00
Nicola Murino	17a42a0c11	webdav: add compression support ... Fixes #295	2021-02-04 09:06:41 +01:00
Nicola Murino	ce731020a7	webdav: remove the username path prefix ... so we have the same URIs for all protocols Fixes #293	2021-02-04 07:12:04 +01:00
Nicola Murino	fc9082c422	webdav: try to handle HEAD for collection too ... The underlying golang webdav library returns Method Not Allowed for HEAD requests on directories: https://github.com/golang/net/blob/master/webdav/webdav.go#L210 let's see if we can workaround this inside SFTPGo itself in a similar way as we do for GET. The HEAD response will not return a Content-Length, we cannot handle this inside SFTPGo. Fixes #294	2021-02-03 22:36:13 +01:00
Nicola Murino	78bf808322	virtual folders: change dataprovider structure ... This way we no longer depend on the local file system path and so we can add support for cloud backends in future updates	2021-02-01 19:04:15 +01:00
Nicola Murino	46ab8f8d78	post-login hook: add the full user JSON serialized ... Fixes #284	2021-01-26 18:05:44 +01:00
Nicola Murino	57976b4085	httpd: add mTLS and multiple bindings support	2021-01-19 18:59:41 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00
Nicola Murino	daac90c4e1	fix a potential race condition for pre-login and ext auth ... hooks doing something like this: err = provider.updateUser(u) ... return provider.userExists(username) could be racy if another update happen before provider.userExists(username) also pass a pointer to updateUser so if the user is modified inside "validateUser" we can just return the modified user without do a new query	2021-01-05 09:50:22 +01:00
Nicola Murino	684f4ba1a6	mutal TLS: add support for revocation lists	2021-01-03 17:03:04 +01:00
Nicola Murino	6d84c5b9e3	capture http servers error logs ... otherwise they will be printed to stdout	2021-01-03 10:38:28 +01:00
Nicola Murino	4b522a2455	webdav: refactor server initialization	2021-01-03 09:51:54 +01:00
Nicola Murino	037d89a320	add support for a basic built-in defender ... It can help to prevent DoS and brute force password guessing	2021-01-02 14:05:09 +01:00
Nicola Murino	141ca6777c	webdav: add support for client certificate authentication ... Fixes #263	2020-12-28 19:48:23 +01:00
Nicola Murino	1dce1eff48	improve FTP support ... - allow to disable active mode - allow to disable SITE commands - add optional support for calculating hash value of files - add optional support for the non standard COMB command	2020-12-24 18:48:06 +01:00
Nicola Murino	187a5b1908	sftpd: properly handle listener accept errors ... continue on temporary errors and exit from the serve loop for the other ones	2020-12-23 19:53:07 +01:00
Nicola Murino	c69d63c1f8	add support for multiple bindings ... Fixes #253	2020-12-23 16:12:30 +01:00
Nicola Murino	143df87fee	add some docs for telemetry server ... move pprof to the telemetry server only	2020-12-18 09:47:22 +01:00
Nicola Murino	f34462e3c3	add support for limiting max concurrent client connections	2020-12-15 19:29:30 +01:00
Nicola Murino	a6985075b9	add sftpfs storage backend ... Fixes #224	2020-12-12 10:31:09 +01:00
Nicola Murino	50982229e1	REST API: add a method to get the status of the services ... added a status page to the built-in web admin	2020-12-08 11:18:34 +01:00
Nicola Murino	034d89876d	webdav: fix proppatch handling ... also respect login delay for cached webdav users and check the home dir as soon as the user authenticates Fixes #239	2020-12-06 08:19:41 +01:00
Nicola Murino	4a88ea5c03	add Data At Rest Encryption support	2020-12-05 13:48:13 +01:00
Nicola Murino	634b723b5d	add KMS support ... Fixes #226	2020-11-30 21:46:34 +01:00
Nicola Murino	0609188d3f	allow to disable SFTP service ... Fixes #228	2020-11-24 13:44:57 +01:00
Nicola Murino	dccc583b5d	add a dedicated struct to store encrypted credentials ... also gcs credentials are now encrypted, both on disk and inside the provider. Data provider is automatically migrated and load data will accept old format too but you should upgrade to the new format to avoid future issues	2020-11-22 21:53:04 +01:00
Nicola Murino	ca0ff0d630	add a File interface so we can avoid to use os.File directly	2020-11-17 19:36:39 +01:00
Nicola Murino	a6355e298e	add support for limit files using shell like patterns ... Fixes #209	2020-11-15 22:04:48 +01:00
Nicola Murino	dc845fa2f4	webdav: fix permission errors if the client try to read multiple times	2020-11-14 19:19:41 +01:00
Nicola Murino	1d5d184720	webdav file: ensure to close the reader only once	2020-11-05 09:30:38 +01:00
Nicola Murino	0119fd03a6	webdav: user caching is now mandatory ... we cache the lock system with the user, without user caching we cannot support locks for resource	2020-11-04 22:29:25 +01:00
Nicola Murino	0a14297b48	webdav: performance improvements and bug fixes ... we need my custom golang/x/net/webdav fork for now https://github.com/drakkan/net/tree/sftpgo	2020-11-04 19:11:40 +01:00
Nicola Murino	950a5ad9ea	add a recoverer where appropriate ... I have never seen this, but a malformed packet can easily crash pkg/sftp	2020-10-31 11:02:04 +01:00
Nicola Murino	ac3bae00fc	add support for SFTP subsystem mode ... Fixes #204	2020-10-29 19:23:33 +01:00
Nicola Murino	975a2f3632	sftpd: fix the max upload file size check for overwrites ... improved test case too	2020-10-25 08:52:31 +01:00
Nicola Murino	5ff8f75917	add Azure Blob support	2020-10-25 08:18:48 +01:00
Sean Hildebrand	db7e81e9d0	add prefer_database_credentials configuration parameter ... When true, users' Google Cloud Storage credentials will be written to the data provider instead of disk. Pre-existing credentials on disk will be used as a fallback Fixes #201	2020-10-22 10:42:40 +02:00
Mark Sagi-Kazar	5e2db77ef9	refactor: add an enum for filesystem providers ... Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	2020-10-05 21:40:21 +02:00
Nicola Murino	d1f0e9ae9f	CGS: implement MimeTyper interface	2020-09-28 22:12:46 +02:00
Nicola Murino	2df0dd1f70	sshd: map each channel with a new connection ... Fixes #169	2020-09-18 10:52:53 +02:00
Nicola Murino	3925c7ff95	REST API/Web admin: add a parameter to disconnect a user after an update ... This way you can force the user to login again and so to use the updated configuration. A deleted user will be automatically disconnected. Fixes #163 Improved some docs too.	2020-09-01 16:10:26 +02:00
Nicola Murino	dbed110d02	WebDAV: add caching for authenticated users ... In this way we get a big performance boost	2020-08-31 19:25:17 +02:00
Nicola Murino	2746c0b0f1	move stat to base connection and differentiate between Stat and Lstat ... we will use Lstat once it will be exposed in pkg/sftp	2020-08-25 18:23:00 +02:00
Nicola Murino	02e35ee002	sftpd: add Readlink support	2020-08-22 14:52:17 +02:00
Nicola Murino	5208e4a4ca	sftpd: improve truncate ... quota usage and max allowed write size are now properly updated after a truncate	2020-08-22 10:12:00 +02:00