84 commits

Author	SHA1	Message	Date
Nicola Murino	46998252e5	use bcrypt as default password hashing algo ... argon2id has a high memory cost and, if not properly tuned, it can lead to resource starvation. Advanced users can still configure and use argon2id. Passwords stored as argon2id will continue to work	2021-04-25 09:38:33 +02:00
Nicola Murino	0823928f98	allow to disable login filesystem checks ... SFTPGo requires that the user's home directory, virtual folder root, and intermediate paths to virtual folders exist to work properly. If you already know that the required directories exist, disabling these checks will speed up login.	2021-04-05 17:57:30 +02:00
Nicola Murino	fdf3f23df5	allow to disable some hooks on a per-user basis ... This way you can, for example, mix external and internal users	2021-04-04 22:32:25 +02:00
Nicola Murino	ea26d7786c	sftpfs: add buffering support ... this way we improve performance over high latency networks	2021-04-03 16:00:55 +02:00
Nicola Murino	2f56375121	improve SFTP loop detection	2021-04-01 18:53:48 +02:00
Nicola Murino	183bedd6ed	webui: add responsive extension	2021-03-28 11:02:11 +02:00
Nicola Murino	2a89a8f664	webui: minor improvements	2021-03-27 22:23:01 +01:00
Nicola Murino	9ad750da54	WebDAV: try to preserve the lock fs as much as possible	2021-03-27 19:10:27 +01:00
Nicola Murino	0e50310a66	add a test case for UID/GID limits	2021-03-25 17:30:39 +01:00
Mike Unitskyi	5939ac4801	Increase uid:gid limits (#362) ... Fixes #361	2021-03-25 17:11:42 +01:00
Nicola Murino	5e375f56dd	kms: add a lock, secrets could be modified concurrently for cached users ... also reduce the size of the JSON payload omitting empty secrets	2021-03-22 19:03:25 +01:00
Nicola Murino	d6dc3a507e	extend virtual folders support to all storage backends ... Fixes #241	2021-03-21 19:15:47 +01:00
Nicola Murino	055506e518	sftpfs: add an option to disable concurrent reads	2021-03-06 15:41:40 +01:00
Nicola Murino	a6e36e7cad	FTP: improve TLS certificate authentication ... For each user you can now configure: - TLS certificate auth - TLS certificate auth and password - Password auth For TLS auth, the certificate common name must match the name provided using the "USER" FTP command	2021-02-28 12:10:40 +01:00
Nicola Murino	2146b83343	data providers: add filesystem to folder ... ... ... and some descriptive fields. The filesystem support for virtual folders will be implemented in future commits	2021-02-24 19:40:29 +01:00
Nicola Murino	b1ce6eb85b	web admin: allow to set an empty password for SFTPGo users	2021-02-15 19:38:53 +01:00
Nicola Murino	46176a54b4	minor doc fixes	2021-02-14 22:08:08 +01:00
Nicola Murino	1ac66d27b6	Use IEC units for byte counting everywhere	2021-02-12 22:16:35 +01:00
Nicola Murino	51f110bc7b	sftpd: add statvfs@openssh.com support	2021-02-11 19:45:52 +01:00
Nicola Murino	46ab8f8d78	post-login hook: add the full user JSON serialized ... Fixes #284	2021-01-26 18:05:44 +01:00
Nicola Murino	54321c5240	web ui: allow to create multiple users from a template	2021-01-25 21:31:33 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00
Nicola Murino	e536a638c9	web UI: improve user cloning	2020-12-26 15:11:38 +01:00
Nicola Murino	72e3d464b8	sftpfs: fix fingerprints copy for memory provider	2020-12-12 10:56:02 +01:00
Nicola Murino	a6985075b9	add sftpfs storage backend ... Fixes #224	2020-12-12 10:31:09 +01:00
Nicola Murino	4a88ea5c03	add Data At Rest Encryption support	2020-12-05 13:48:13 +01:00
Nicola Murino	634b723b5d	add KMS support ... Fixes #226	2020-11-30 21:46:34 +01:00
Nicola Murino	4bb9d07dde	user: add a free text field ... Fixes #230	2020-11-25 22:26:34 +01:00
Nicola Murino	dccc583b5d	add a dedicated struct to store encrypted credentials ... also gcs credentials are now encrypted, both on disk and inside the provider. Data provider is automatically migrated and load data will accept old format too but you should upgrade to the new format to avoid future issues	2020-11-22 21:53:04 +01:00
Nicola Murino	a6355e298e	add support for limit files using shell like patterns ... Fixes #209	2020-11-15 22:04:48 +01:00
Nicola Murino	0a14297b48	webdav: performance improvements and bug fixes ... we need my custom golang/x/net/webdav fork for now https://github.com/drakkan/net/tree/sftpgo	2020-11-04 19:11:40 +01:00
Nicola Murino	e54828a7b8	add metrics for Azure Blob storage	2020-10-26 19:01:17 +01:00
Nicola Murino	5ff8f75917	add Azure Blob support	2020-10-25 08:18:48 +01:00
Sean Hildebrand	db7e81e9d0	add prefer_database_credentials configuration parameter ... When true, users' Google Cloud Storage credentials will be written to the data provider instead of disk. Pre-existing credentials on disk will be used as a fallback Fixes #201	2020-10-22 10:42:40 +02:00
Nicola Murino	ce9387f1ab	update dependencies and some docs	2020-10-09 20:25:42 +02:00
Mark Sagi-Kazar	5e2db77ef9	refactor: add an enum for filesystem providers ... Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	2020-10-05 21:40:21 +02:00
Nicola Murino	a59163e56c	multi-step auth: don't advertise password method if it is disabled ... also rename the settings to password_authentication so it is more like OpenSSH, add some test cases and improve documentation	2020-09-01 19:34:40 +02:00
Nicola Murino	dbed110d02	WebDAV: add caching for authenticated users ... In this way we get a big performance boost	2020-08-31 19:25:17 +02:00
Nicola Murino	02e35ee002	sftpd: add Readlink support	2020-08-22 14:52:17 +02:00
Nicola Murino	f3228713bc	Allow individual protocols to be enabled per user ... Fixes #154	2020-08-17 12:49:20 +02:00
Nicola Murino	fa5333784b	add a maximum allowed size for a single upload	2020-08-16 20:17:02 +02:00
Nicola Murino	aa0ed5dbd0	add post-login hook ... a login scope is supported too so you can get notifications for failed logins, successful logins or both	2020-08-12 16:15:12 +02:00
Nicola Murino	a9e21c282a	add WebDAV support ... Fixes #147	2020-08-11 23:56:10 +02:00
Nicola Murino	93ce96d011	add support for the venerable FTP protocol ... Fixes #46	2020-07-29 21:56:56 +02:00
Nicola Murino	cf541d62ea	recursive permissions check before renaming/copying directories	2020-06-26 23:38:29 +02:00
Nicola Murino	3ceba7a147	sftpgo-copy: add quota limits check	2020-06-16 22:49:18 +02:00
Nicola Murino	37418a7630	SSH system commands: allow git and rsync inside virtual folders	2020-06-15 23:32:12 +02:00
Nicola Murino	8e22dd1b13	virtual folders: allow overlapped mapped paths if quota is disabled ... See #95	2020-06-10 09:11:32 +02:00
Nicola Murino	8306b6bde6	refactor virtual folders ... The same virtual folder can now be shared among users and different folder quota limits for each user are supported. Fixes #120	2020-06-07 23:30:18 +02:00
Nicola Murino	3f75d46a16	sftpd: add support for excluding virtual folders from user quota limit ... Fixes #110	2020-05-01 15:27:53 +02:00