513 commits

Author	SHA1	Message	Date
Nicola Murino	64a2f7aa4f	oidc refresh token: validate nonce only if set ... As clarified in OpenID core spec errata 2, section 12.2 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-01 19:06:11 +02:00
Nicola Murino	55be9f0b9c	EventManager: allow to configure the timezone to use for the scheduler ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-30 18:52:59 +02:00
Nicola Murino	97ffa0394f	update deps ... adapt smtp configuration to changes in upstream library Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-30 09:18:04 +02:00
Nicola Murino	356795f8b0	add a test case for listing files with long names ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-22 19:23:02 +02:00
Nicola Murino	37845c2936	smtp: hide commit hash in user agent ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-21 18:31:42 +02:00
Nicola Murino	1d60505629	fix test case failure on macOS with bolt provider ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-19 10:45:14 +02:00
Nicola Murino	363770ab84	WebClient shares: add a logout button ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-18 19:10:32 +02:00
Nicola Murino	8bc08b25dc	sftp: limit max file list ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-17 19:24:03 +02:00
Nicola Murino	e0c1b974c9	add cgo to build constraints ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-16 09:46:17 +02:00
Nicola Murino	d650defa08	remove duplicated jwt tokens validation ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-15 16:19:37 +02:00
Nicola Murino	c5c42f072b	squash database migrations ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-15 16:02:09 +02:00
Nicola Murino	bd5b32101f	csrf: reuse the cookie in reset password ... no need to generate a new cookie each time. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-15 15:18:17 +02:00
Nicola Murino	01b666a78f	WebUIs: check login conditions before allowing password reset ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-14 19:34:42 +02:00
Nicola Murino	8294952474	WebUIs: refactor CSRF ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-14 18:09:32 +02:00
Nicola Murino	7fb5b1b996	reduce share token duration ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-08 12:13:38 +02:00
Nicola Murino	08526da153	REST API: fix token invalidation after password change ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-07 18:19:05 +02:00
Nicola Murino	8269adf176	Windows: allow to override most of the "serve" flags from env files ... The Windows specific code path was missing in 07710ad98 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-05 17:34:28 +02:00
Nicola Murino	0cddcba5a7	EventManager: add an action to rotate the log file ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-04 19:51:52 +02:00
Nicola Murino	3bd1eeacc1	make sure to return a fully populated user after plugin auth ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-04 18:14:09 +02:00
Nicola Murino	1698ec2eb3	EventManager: fix adding ObjectDataString for provider events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-31 20:01:38 +02:00
Nicola Murino	07710ad98d	allow to override most of the "serve" flags from env files ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-31 18:49:23 +02:00
Nicola Murino	f63bf7093c	logs: redact plugin arguments ... may contain sensitive data Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-30 18:10:12 +02:00
Nicola Murino	5bde4b92a2	fix test cases ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-29 19:35:42 +02:00
Nicola Murino	68cc1a8e2c	fix proxy protocol policy ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-28 19:40:37 +02:00
Nicola Murino	9c775e2213	transfer logs: add error field ... Fixes #1638 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-27 19:35:48 +02:00
Nicola Murino	6c94173ca1	WebUI branding: remove unused login_image_path from config ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-27 18:43:44 +02:00
Nicola Murino	3f2604d33f	ssh: use 3072-bits for the auto-generated RSA key ... This is the same as ssh-keygen Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-24 18:22:36 +02:00
Nicola Murino	0127fc188b	SSH: allow to configure minimum key size for DHGEX ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-23 18:08:16 +02:00
Nicola Murino	3c7a651d27	plugin: don't consider file extension for env prefix ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-18 13:10:16 +02:00
Nicola Murino	50a3c0d911	defender: allow to impose a delay between login attempts ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-18 10:35:54 +02:00
Nicola Murino	61bc0065f9	back to development ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-16 04:54:46 +02:00
Nicola Murino	19e9857fea	set version to 2.6.0 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-15 17:36:10 +02:00
Nicola Murino	665a980d62	improve error wrapping ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-14 19:10:36 +02:00
Nicola Murino	eb0c6549c4	micro optimization ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-12 18:10:03 +02:00
Nicola Murino	e7627bfcd3	fix test cases after the change in the previous commit ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-10 15:58:07 +02:00
Nicola Murino	62f5d4cb89	fix the error message for errors that occur during file transfers ... we should special case path errors and replace the fs path with the virtual path. Thanks to @nezzzumi for reporting this issue Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-10 15:12:05 +02:00
Nicola Murino	4502509c2d	pgsql: validate target_session_attrs ... silently ignore invalid values Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-09 19:55:12 +02:00
Nicola Murino	2f577c9884	fix lint warnings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-08 19:11:03 +02:00
Nicola Murino	5d24d665bd	add an util method to convert []byte to string ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-08 19:01:58 +02:00
Nicola Murino	ea898ed104	silence lint warning ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-04 09:52:27 +02:00
Nicola Murino	0da12ef47b	ftp login: log is TLS is enabled ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-03 18:47:01 +02:00
Nicola Murino	a1af33c6aa	WebClient: allow to set TLS certificates ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-03 18:30:03 +02:00
Nicola Murino	58a8b2b860	S3: add support for STS temporary credentials ... Fixes #1558 Co-authored-by: Nazarii Mediukh <nazar.medykh@gmail.com> Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-02 20:01:30 +02:00
Nicola Murino	acfd4c3e55	ftpd: allow to ignore ASCII transfer types ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-02 19:00:29 +02:00
Nicola Murino	d3f42e39db	move server version setting to common section ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-01 19:42:09 +02:00
Nicola Murino	8edce2055d	ftpd: fix random test cases failure on FreeBSD ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-30 19:50:52 +02:00
Nicola Murino	aa4a7aa6f6	update some descriptions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-27 14:01:33 +02:00
Nicola Murino	dd9b0b151f	sftpfs: simplify client creation ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-27 12:03:38 +02:00
Nicola Murino	0a8a0ee771	revert #450 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-27 10:50:25 +02:00
Nicola Murino	2bcf05ca45	refactor for secrets management in API and private key handling in SFTPFs ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-26 16:17:24 +02:00
Nicola Murino	aa426016f2	sftpd: remove folder_prefix ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-26 11:43:25 +02:00
Nicola Murino	1fc0f21506	hooks: remove logging output from external programs ... This reverts #1208 because the contributor did not respond to our request to sign the CLA Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-26 11:13:16 +02:00
Nicola Murino	e1fdc10ef8	remove robots.txt endpoint ... This reverts #833 because the contributor did not respond to our request to sign the CLA Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-26 11:00:55 +02:00
Nicola Murino	26d19abf61	remove reading data provider username and password from file ... This reverts #1455 because the contributor cannot sign the CLA Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-26 10:57:38 +02:00
Nicola Murino	ad7dcdb628	ssh: remove the ability to fully customize the software version ... many clients rely on the version string to enable/disable some features. We only allow to hide the version number, clients must be able to reliably identify SFTPGo Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-20 17:15:15 +02:00
Nicola Murino	a38fd26cf6	minor refactor to memory provider initialization ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-20 16:45:20 +02:00
Nicola Murino	950cf67e4c	dataprovider: small refactor for password check ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-18 18:23:16 +02:00
Nicola Murino	d8341509e7	micro optimization for external process wrapping ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-16 18:34:40 +02:00
JK	2bbd8b3a5f	fix using rsync if running sftpgo as non-root user (#1535) ... Signed-off-by: Jerome Küttner <j.kuettner@mittwald.de>	2024-04-15 12:52:08 +02:00
Nicola Murino	150a338166	removed unused methods ... these methods were used in the old UIs Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-14 09:23:57 +02:00
Nicola Murino	a957474740	SMTP: document why we always load templates in service mode ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-13 14:27:59 +02:00
oftenoccur	019edf38f3	chore: fix function name in comment (#1586) ... Signed-off-by: oftenoccur <ezc5@sina.com>	2024-04-12 19:51:51 +02:00
Nicola Murino	456517af87	notifier plugin: add support for login succeeded events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-10 18:39:08 +02:00
Nicola Murino	ff48386cc8	store used data transfer as big integer ... we originally stored these values as MB but since we use bytes now, an integer field is not enough. Fixes #1575 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-02 18:38:22 +02:00
Nicola Murino	1196727448	dataretention: remove ignore_user_permissions ... Required permissions are now automatically granted as for any other filesystem action Fixes #1564 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-01 15:07:03 +02:00
Nicola Murino	aaae191710	WebAPI: ensure to check rootfs before creating directories ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-01 12:40:35 +02:00
Nicola Murino	db577b154e	webclient: add more test cases for shares ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-01 11:42:22 +02:00
Nicola Murino	fc023748c1	WebClient: improve file uploads ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-31 20:42:28 +02:00
Nicola Murino	cb3bc3f604	update OpenAPI definition ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-18 19:32:01 +01:00
Nicola Murino	cc9a0d4dc2	add time-based access restrictions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-17 11:30:03 +01:00
Nicola Murino	74dd2a3b9a	update deps ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-16 10:30:46 +01:00
Nicola Murino	55c8677443	restored the log if retrieving directory entries fails ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-12 18:31:01 +01:00
Nicola Murino	26d3105f54	groups: add role placeholder ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-12 18:21:50 +01:00
Nicola Murino	ca2757d41e	copy: fix quota for FsFileCopier ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-12 08:43:23 +01:00
Nicola Murino	f38966c6ac	WebClient: refactor long-running tasks to improve browser compatibility ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-11 18:19:57 +01:00
Nicola Murino	4d357a6a57	EventManager: allow to check for inactive users ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-04 19:48:10 +01:00
Nicola Murino	8b2188fcb6	remove some useless nil checks ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-02 18:49:07 +01:00
Nicola Murino	799fdd7098	allow IPs in defender safe list to exceed max per-host connections ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-27 18:22:21 +01:00
Nicola Murino	12f599fd65	WebUI: skip checks for static resource ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-25 18:19:21 +01:00
Nicola Murino	be2ed1089c	ssh: add username to sftp auth errors ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-25 15:45:50 +01:00
Nicola Murino	92911bda2b	require at least 2048 bits for RSA certificates/keys ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-25 11:12:57 +01:00
Nicola Murino	f7d9e56cac	ssh: remove moduli, log negotiated algorithms ... Fixes #1324 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-24 20:35:09 +01:00
Nicola Murino	a577d8b3cd	WebAdmin: allow to disable 2FA ... Before it was only possible using REST API Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-23 18:24:07 +01:00
Nicola Murino	76ffa107dd	check admins' two-factor requirements in the disable API as well ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-22 19:05:16 +01:00
Nicola Murino	9a6a65931e	two-factor auth: fixed validation of conflicting settings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-22 18:20:51 +01:00
Nicola Murino	de089e51fd	Web: allow to require password change and two-factor for admins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-21 20:45:10 +01:00
Nicola Murino	51ae2d7301	add copy permission ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-20 18:19:09 +01:00
Nicola Murino	b4afdac8a0	fix test cases on Windows (again) ... in Go 1.22 Readdir now works on Windows in the same way as on other platforms Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-18 12:17:51 +01:00
Nicola Murino	d92f85d1dd	WebClient: improve error message when trying to move non-empty folder ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-18 11:22:41 +01:00
Nicola Murino	162376fd74	add a nil check for attributes ... just defensive code Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-18 10:14:05 +01:00
Nicola Murino	d413775060	vfs: log progress after each page iteration ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-18 10:13:51 +01:00
Nicola Murino	db0a467d33	refactor metadata support ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-18 10:13:46 +01:00
Nicola Murino	e2ff12c589	fix test cases on Windows ... on Windows f.Readdir returns no error if f is closed Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-17 13:41:40 +01:00
Nicola Murino	e61fb42cbc	remove metadata plugin ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-17 12:30:47 +01:00
Nicola Murino	410b7cd512	fix remaining lint warnings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-16 18:55:58 +01:00
Nicola Murino	ad75543172	fix some new lint warnings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-15 21:13:45 +01:00
Nicola Murino	1ff55bbfa7	add DirLister interface ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-15 20:53:56 +01:00
Nicola Murino	c49553abd0	keyboard interactive: ask only the passcode if it is the second step ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-05 19:02:01 +01:00
Nicola Murino	ae309d64c4	WebClient: disable indicator if we redirect from the login page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-04 21:13:04 +01:00
Nicola Murino	8385acd0e3	Redirect to two-factor auth page after creating the first admin ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-04 20:58:29 +01:00