64 commits

Author	SHA1	Message	Date
Nicola Murino	a38fd26cf6	minor refactor to memory provider initialization ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-20 16:45:20 +02:00
Nicola Murino	950cf67e4c	dataprovider: small refactor for password check ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-18 18:23:16 +02:00
Nicola Murino	cc9a0d4dc2	add time-based access restrictions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-17 11:30:03 +01:00
Nicola Murino	92911bda2b	require at least 2048 bits for RSA certificates/keys ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-25 11:12:57 +01:00
Nicola Murino	9a6a65931e	two-factor auth: fixed validation of conflicting settings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-22 18:20:51 +01:00
Nicola Murino	51ae2d7301	add copy permission ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-20 18:19:09 +01:00
Nicola Murino	c49553abd0	keyboard interactive: ask only the passcode if it is the second step ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-05 19:02:01 +01:00
Nicola Murino	8180b75ef1	WIP new WebAdmin: IP lists pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-24 19:23:15 +01:00
Nicola Murino	87451560e3	normalize common database errors ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-17 17:36:35 +01:00
Nicola Murino	d939a82225	user: add TLS certificates ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 21:36:23 +01:00
Nicola Murino	5c8214e121	WIP new WebAdmin: groups page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-11 19:26:13 +01:00
Nicola Murino	e1b5d2fe39	WebAdmin: use the new UI for user pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-09 19:54:08 +01:00
Nicola Murino	784b7585c1	remove end year from Copyright notice in files ... so we don't have to update all the files every year Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-01 11:31:45 +01:00
Nicola Murino	c71f0426ae	WebClient WIP: add support for localizations ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-10 16:40:13 +01:00
Nicola Murino	6175acb572	add support for reading more secrets from files ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-24 20:43:50 +01:00
patrickap	a91cf22e0f	provider: support for username and password file (#1455) ... Signed-off-by: patrickap <patrick.schlageter@web.de>	2023-11-24 20:28:51 +01:00
Nicola Murino	bfa17314c6	keyboard interactive auth: respect hook disabled setting ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-18 11:28:15 +01:00
Nicola Murino	6282f95bd3	improve temp dirs handling an some logs ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-17 18:06:52 +02:00
Nicola Murino	5ef0a2ed4b	External/plugin auth: check for password change after empty response ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-26 12:04:41 +02:00
Nicola Murino	830116bcf2	shares: allow to force an expiration date ... this is a soft requirement, users can reactivate expired shares by updating the expiration date Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-07 19:07:20 +02:00
Nicola Murino	ea96fe9a26	postgres provider: add support for "allow" and "prefer" SSL modes ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-05 20:01:14 +02:00
Nicola Murino	af0d7b48ad	sftpd: refactor multi-step authentication ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-04 20:56:23 +02:00
Nicola Murino	0413c0471c	add a specific permission to manage folders ... creating/updating folders embedded in users is no longer supported. Fixes #1349 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-07-23 18:48:49 +02:00
Nicola Murino	76964a6b85	check second factor after plugin authentication ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-25 07:16:26 +02:00
Nicola Murino	a38ce460bb	WebClient: show user quota ... Also remove per-source data transfer limits. This was an oversight Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-16 21:06:21 +02:00
Nicola Murino	9470cd6e69	multi-node installations: use a different backup path for each node ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 17:54:24 +02:00
Nicola Murino	74e5999c63	added support for verifying sha256/sha512 passwords hash ... this simplifies the migration of users from some proprietary products Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 16:58:45 +02:00
Nicola Murino	d28a53a6cf	webdav: fix caching with external auth/plugins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-20 12:39:07 +02:00
Nicola Murino	adad8e658b	osfs: add optional buffering ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-16 18:08:14 +02:00
Nicola Murino	4eded56d5f	add support for log events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-12 18:34:59 +02:00
Nicola Murino	712f2053a4	REST API dumpdata: allow to specify the resources to dump ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-18 18:11:23 +02:00
Nicola Murino	3cb53b2c33	fix cross folder copy ... also update css/js deps and other minor changes Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-13 18:23:42 +02:00
Nicola Murino	184b99d500	user: add a field to indicate whether the password is set ... A structure similar to the one used for secrets would be better, but we don't want to break backwards compatibility. Also document that omitting the password field in the request body will preserve the current password when updating a user using the REST API. Added a test case for this. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-06 18:22:09 +02:00
Nicola Murino	ee90bfb506	add unixcrypt build tag ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-26 10:33:30 +02:00
Nicola Murino	4ba3ae876d	allow to set password strength at user/group level ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-02 09:11:30 +01:00
Nicola Murino	874776bd12	also capture logs for pre-login and check-password commands ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-26 15:15:34 +01:00
Felix Eckhofer	ec67b67e9e	Send output from external_auth_hook to logs ... Signed-off-by: Felix Eckhofer <felix@eckhofer.com>	2023-02-26 07:39:34 +01:00
Nicola Murino	a3fff56da5	WebAdmin: add configs section ... Setting configurations is an experimental feature and is not currently supported in the REST API Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-19 19:03:45 +01:00
Nicola Murino	1b1745b7f7	move IP/Network lists to the data provider ... this is a backward incompatible change, all previous file based IP/network lists will not work anymore Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-09 09:33:33 +01:00
Nicola Murino	c0fe08b597	defender: allow to set a different score for "no auth tried" events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-25 18:49:03 +01:00
Nicola Murino	53f17b5715	allow to disable event rules ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-19 18:33:04 +01:00
Nicola Murino	0190d0b849	update Copyright year ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-03 10:18:30 +01:00
Nicola Murino	ea4c4dd57f	eventmanager: add copy action ... refactor sftpgo-copy and sftpgo-remove commands Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-27 18:51:53 +01:00
Nicola Murino	ad5d657a1a	add support for password policies ... you can now set a password expiration and the password change requirement Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-11 17:15:34 +01:00
Nicola Murino	926dcbbc63	add a CLI command to reset admin passwords ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-09 18:28:16 +01:00
Nicola Murino	1f9cf194fe	add role to events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-03 11:45:27 +01:00
Nicola Murino	5a222807b7	add roles ... Fixes #837 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-16 19:04:50 +01:00
Nicola Murino	80244bd83b	eventmanager: allow to access the backup file ... so it can be used in email and other actions Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-29 14:04:31 +02:00
Nicola Murino	4b4edef0ad	disable self connections by default ... now that the event manager can create files, self connections may create even more issues than before Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-12 18:12:12 +02:00
Nicola Murino	8a43486730	postgres driver: add multi hosts support ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-02 12:43:26 +02:00