140 commits

Author	SHA1	Message	Date
Nicola Murino	d7d7b0bbf0	dataprovider: fix sql for CockroachDB ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-10 15:32:51 +02:00
Nicola Murino	99424bfa58	squash database migrations ... SQLite: remove AUTOINCREMENT from primary keys. It is not needed. Postgres: switch from serial to identity for primary keys. This means Postgres < 10 will not work in v2.6.x Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-10 13:06:24 +02:00
Nicola Murino	9470cd6e69	multi-node installations: use a different backup path for each node ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 17:54:24 +02:00
Nicola Murino	74e5999c63	added support for verifying sha256/sha512 passwords hash ... this simplifies the migration of users from some proprietary products Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 16:58:45 +02:00
Nicola Murino	48939b2b4f	add XOAUTH2 ... start the countdown, let's see how long it takes for your favorite Go-based proprietary SFTP server to notice this change, copy the SFTPGo code and thus violate its license, and announce the same feature :) Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 16:17:32 +02:00
Nicola Murino	8339fee69d	smtp: add debug option ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-30 19:11:28 +02:00
Nicola Murino	8f934f7c82	email action: allow to configure Bcc ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-25 19:55:27 +02:00
Nicola Murino	255985b7b0	Windows: start the service in a goroutine ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-23 12:59:27 +02:00
Nicola Murino	d28a53a6cf	webdav: fix caching with external auth/plugins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-20 12:39:07 +02:00
Nicola Murino	bbaca578cd	EventManager: add content type option for email config ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-17 19:28:13 +02:00
Nicola Murino	adad8e658b	osfs: add optional buffering ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-16 18:08:14 +02:00
Nicola Murino	4eded56d5f	add support for log events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-12 18:34:59 +02:00
Nicola Murino	712f2053a4	REST API dumpdata: allow to specify the resources to dump ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-18 18:11:23 +02:00
Nicola Murino	3cb53b2c33	fix cross folder copy ... also update css/js deps and other minor changes Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-13 18:23:42 +02:00
Nicola Murino	184b99d500	user: add a field to indicate whether the password is set ... A structure similar to the one used for secrets would be better, but we don't want to break backwards compatibility. Also document that omitting the password field in the request body will preserve the current password when updating a user using the REST API. Added a test case for this. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-06 18:22:09 +02:00
Nicola Murino	ee90bfb506	add unixcrypt build tag ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-26 10:33:30 +02:00
Nicola Murino	e17068a76f	postgres provider: add support for load balancing ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-25 09:29:13 +01:00
Nicola Murino	e29f6857db	EventManager: add IDP login trigger and check account action ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-22 19:02:54 +01:00
Nicola Murino	0423e8f157	httpd: generate defender events for failed 2fa and password resets ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-04 13:55:48 +01:00
Nicola Murino	4ba3ae876d	allow to set password strength at user/group level ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-02 09:11:30 +01:00
Nicola Murino	dba088daed	printf: replace %#v with the more explicit %q ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-27 19:19:57 +01:00
Nicola Murino	874776bd12	also capture logs for pre-login and check-password commands ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-26 15:15:34 +01:00
Felix Eckhofer	ec67b67e9e	Send output from external_auth_hook to logs ... Signed-off-by: Felix Eckhofer <felix@eckhofer.com>	2023-02-26 07:39:34 +01:00
Nicola Murino	b8496c4d6e	eventmanager: add user expiration check ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-25 13:06:09 +01:00
Nicola Murino	8805d85377	configs: add ACME section ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-23 19:25:20 +01:00
Nicola Murino	fcf9a8c673	scheduler: disable verbose logs ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-21 18:18:24 +01:00
Nicola Murino	2c1319985d	sql providers: remove unnecessary []byte to string conversion ... always check affected rows for updates Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-20 18:14:02 +01:00
Nicola Murino	a3fff56da5	WebAdmin: add configs section ... Setting configurations is an experimental feature and is not currently supported in the REST API Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-19 19:03:45 +01:00
Nicola Murino	78cd5d8eba	groups: add expiration date override ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-13 19:32:36 +01:00
Nicola Murino	7e85356325	WebClient shares: replace basic auth with a login form ... basic auth will continue to work for REST API Fixes #1166 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-12 08:29:53 +01:00
Nicola Murino	1b1745b7f7	move IP/Network lists to the data provider ... this is a backward incompatible change, all previous file based IP/network lists will not work anymore Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-09 09:33:33 +01:00
Nicola Murino	c0fe08b597	defender: allow to set a different score for "no auth tried" events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-25 18:49:03 +01:00
Nicola Murino	7b5bebc588	EventManager: add "on-demand" trigger ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-21 15:41:24 +01:00
Nicola Murino	53f17b5715	allow to disable event rules ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-19 18:33:04 +01:00
Nicola Murino	0190d0b849	update Copyright year ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-03 10:18:30 +01:00
Nicola Murino	2611dd2c98	eventmanager: add support for pre-* actions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-01 17:59:41 +01:00
Nicola Murino	ea4c4dd57f	eventmanager: add copy action ... refactor sftpgo-copy and sftpgo-remove commands Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-27 18:51:53 +01:00
Nicola Murino	e17975ed7d	dataprovider: include port in node name and make it a hash ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-20 16:40:32 +01:00
Nicola Murino	2da3eabc12	eventmanager: add password notification check action ... this action allow to send an email notification to users whose password is about to expire Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-16 18:51:29 +01:00
Nicola Murino	ad5d657a1a	add support for password policies ... you can now set a password expiration and the password change requirement Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-11 17:15:34 +01:00
Nicola Murino	926dcbbc63	add a CLI command to reset admin passwords ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-09 18:28:16 +01:00
Nicola Murino	221a4878aa	eventmanager: allow to filter based on role name ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-03 17:47:43 +01:00
Nicola Murino	1f9cf194fe	add role to events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-03 11:45:27 +01:00
Nicola Murino	e87118d2a8	allow WebClient login with multi-step auth enabled ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-29 18:43:48 +01:00
Nicola Murino	2017cb60e9	Per-directory permissions: add wildcards support ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-18 18:12:04 +01:00
Nicola Murino	5a222807b7	add roles ... Fixes #837 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-16 19:04:50 +01:00
Nicola Murino	048591553a	allow to set a default expiration for newly created users ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-05 18:01:24 +01:00
Nicola Murino	676286182a	webdav: always open files for reading in lazy mode ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-03 08:31:40 +01:00
Nicola Murino	3b2002d9ef	shared providers: allow to immediately re-add soft-deleted event rules ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-01 17:39:53 +01:00
Nicola Murino	91fae5c4d4	shared providers: allow to immediately re-add soft-deleted users ... there is no need to wait for cache updates Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-01 12:53:08 +01:00
Nicola Murino	e3e85867b1	sftpfs: reuse connections ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-01 12:22:54 +01:00
Nicola Murino	80244bd83b	eventmanager: allow to access the backup file ... so it can be used in email and other actions Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-29 14:04:31 +02:00
Nicola Murino	9a9e7d1a7f	squash database migrations ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-28 14:28:37 +02:00
Nicola Murino	15b4194e8f	event rules: allow to set min/max file size using "human" notation ... 10MB or 1GB instead of the size in bytes Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-16 15:28:47 +02:00
Nicola Murino	4b4edef0ad	disable self connections by default ... now that the event manager can create files, self connections may create even more issues than before Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-12 18:12:12 +02:00
Nicola Murino	07012aa812	WebDAV: allow to set last modification time ... This commit add a minimal dead properties implementation Fixes #1018 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-11 19:20:58 +02:00
Nicola Murino	0e54fa5655	cryptfs: fix quota for overwrites if upload fails ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-10 19:34:15 +02:00
Nicola Murino	3e44a1dd2d	eventmanager: add support for file/directory compression ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-10 18:53:58 +02:00
Nicola Murino	8a43486730	postgres driver: add multi hosts support ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-02 12:43:26 +02:00
Nicola Murino	2636fedce8	node token: add/pars admin username ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-02 09:51:47 +02:00
Nicola Murino	1e21aa9453	add support for checking sha256crypt passwords ... they will be converted to the configured password hashing algorithm after the first user login Fixes #1000 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-28 19:15:02 +02:00
Nicola Murino	04dc97072b	eventmanager: add metadata check ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-26 19:00:34 +02:00
Nicola Murino	ddda0b5ece	SQLite provider: remove code only used for shared providers ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-25 20:29:43 +02:00
Nicola Murino	76e89d07d4	add support for inter-node communications ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-25 19:48:55 +02:00
Nicola Murino	bd294bb3cf	WebAdmin: allow to simplify the user page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-21 19:36:08 +02:00
Nicola Murino	7349598b19	command hooks: allow to pass custom arguments ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-20 13:58:44 +02:00
Nicola Murino	e54237ff70	allow a client if its IP is both allowed and denied ... this allows you to define a group deny policy that can be overridden on a per-user basis. This is a backward incompatible change Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-15 19:51:17 +02:00
Nicola Murino	ea3c1d7a3b	WebAdmin: allow to pre-select groups on add user page ... The admin will still be able to choose different groups Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-13 18:04:27 +02:00
Nicola Murino	63e3891808	WebClient/HTTP API: ensure to check home dir, when needed, in multi-node setups ... Behind a load balancer with no sticky sessions enabled is not enough to check the home dir only when the client logs in Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-07 16:23:56 +02:00
Nicola Murino	3ebdfa9b2d	data providers: allow to disable SNI for TLS connections ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-07 14:31:50 +02:00
Nicola Murino	3e5cf56460	eventmanager: add data retention reports ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-06 19:09:23 +02:00
Nicola Murino	f264b005ff	event rules: allow filtering based on group names ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-04 17:48:09 +02:00
Nicola Murino	c2a65a9a74	http actions: add multipart support ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-03 16:29:07 +02:00
Nicola Murino	95e9106902	use the new atomic types introduced in Go 1.19 ... we depend on Go 1.19 anyway Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-30 15:47:41 +02:00
Nicola Murino	da03f6c4e3	eventmanager commands: allow to pass custom arguments ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-30 12:37:18 +02:00
Nicola Murino	37d98ca290	users: add a setting to set the default expiration for shares ... Fixes #960 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-28 14:41:42 +02:00
Nicola Murino	6777008aec	eventmanager: allow to add attachments to email actions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-22 19:04:17 +02:00
Nicola Murino	3e8254e398	fs actions: add first upload/download ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-21 19:01:08 +02:00
Nicola Murino	9ddd2d3588	eventmanager: add path exists filesystem action ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-20 14:13:43 +02:00
Nicola Murino	57935f585c	eventmanager: allow to execute fs actions based on schedules ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-19 15:04:00 +02:00
Nicola Murino	2b463d61e3	use epoch timestamp instead of current timestamp for unknown modification times ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-16 17:59:13 +02:00
Nicola Murino	ced4206c5f	allow cross folder renaming if the underlying resource is the same ... this was only allowed for the local filesystem before this change Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-15 21:39:04 +02:00
Nicola Murino	c86db09cd8	event manager: add Certificate renewal trigger ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-12 17:37:29 +02:00
Nicola Murino	194c3c13ac	event manager: add IP blocked trigger ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-11 20:09:53 +02:00
Nicola Murino	4cd340e07f	eventmanager: add support for filesystem actions ... Fixes #931 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-10 18:41:59 +02:00
Nicola Murino	b1efe8d0b5	eventmanager: add support for data retention checks ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-04 21:50:38 +02:00
Nicola Murino	9d2b5dc07d	refactor: move eventmanager to common package ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-08-01 18:48:54 +02:00
Nicola Murino	ef0a3bc571	add support for anonymous users ... Fixes #935 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-27 18:54:25 +02:00
Nicola Murino	ec5da8b4a5	ftpd: allow to require TLS on a per-user basis ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-26 18:51:39 +02:00
Nicola Murino	c8158e14e0	move SFTPGo package to the internal folder ... SFTPGo is a daemon and command line tool, not a library. The public API are provided by the SDK Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-24 16:18:54 +02:00