beenull/sftpgo-mirror
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2024-11-25 09:00:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
2035 commits 8 branches 49 tags 49 MiB
Commit graph

666 commits

Author SHA1 Message Date
Nicola Murino
f03f1b0156
improve test cases coverage 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-08 10:01:48 +02:00
Nicola Murino
184b99d500
user: add a field to indicate whether the password is set 
A structure similar to the one used for secrets would be better,
but we don't want to break backwards compatibility.

Also document that omitting the password field in the request body
will preserve the current password when updating a user using the
REST API. Added a test case for this.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-06 18:22:09 +02:00
Nicola Murino
74f05e5305
EventManager: check the parent directory before creating a zip 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-03 18:53:13 +02:00
Nicola Murino
aefa7f77c2
add a link to the Terraform provider 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-02 18:48:56 +02:00
Nicola Murino
084d4109b8
WebAdmin: ensure to sanitize data before rendering 
Thanks to Polina Zvorykina, VK for reporting this issue

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-28 12:28:38 +02:00
Nicola Murino
b60d3f680e
user as JSON: rename 2fa_protocols to two_factor_protocols 
This is a breaking change, but it is necessary to make JSON serialization of
users more compatible.
For example, Terraform does not allow JSON fields starting with numbers

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-26 15:57:53 +02:00
Nicola Murino
ee90bfb506
add unixcrypt build tag 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-26 10:33:30 +02:00
Nicola Murino
e17068a76f
postgres provider: add support for load balancing 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-25 09:29:13 +01:00
Nicola Murino
354fc9b3d6
OIDC: allow to extract custom fields from sub-structs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-23 18:15:07 +01:00
Nicola Murino
e29f6857db
EventManager: add IDP login trigger and check account action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-22 19:02:54 +01:00
Nicola Murino
2710207779
update jquery, go deps, actions/setup-go to v4 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-15 18:44:08 +01:00
Nicola Murino
b719d03ebe
WebAdmin: improve fs config layout 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-12 15:08:32 +01:00
Nicola Murino
14242b59a2
oidc docs: add env vars config 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-09 18:58:36 +01:00
Nicola Murino
dad346cee8
add codeql 
update deps

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-05 16:38:29 +01:00
Nicola Murino
0423e8f157
httpd: generate defender events for failed 2fa and password resets 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-04 13:55:48 +01:00
Nicola Murino
4ba3ae876d
allow to set password strength at user/group level 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-02 09:11:30 +01:00
Nicola Murino
662164c7ff
smtp: require templates only if a server is configured or in service mode 
This regression was introduced after recent changes to allow setting the SMTP
settings from the WebAdmin UI.

Fixes #1217

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-01 18:31:02 +01:00
Nicola Murino
fad6af11e5
don't expose error messages from pre-actions and post connect hooks 
always return a generic error instead to avoid leaking internal info

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-28 18:01:09 +01:00
Nicola Murino
a23fdea9e3
ftpd: allow hostnames as passive IP 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-27 19:19:50 +01:00
Nicola Murino
561976bcd0
WebClient: return proper status code for http.MaxBytesError 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-27 11:03:05 +01:00
Nicola Murino
874776bd12
also capture logs for pre-login and check-password commands 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-26 15:15:34 +01:00
Nicola Murino
df9d47900a
eventmanager: add user/folders as comma separated string in errors 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-25 15:26:38 +01:00
Nicola Murino
7bcd79a70a
telemetry: improve test cases 
remove an unnecessary nil check in tlsutils added as workaround
to make telemetry test cases work

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-24 11:05:46 +01:00
Nicola Murino
8805d85377
configs: add ACME section 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-23 19:25:20 +01:00
Nicola Murino
fcf9a8c673
scheduler: disable verbose logs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-21 18:18:24 +01:00
Nicola Murino
2c1319985d
sql providers: remove unnecessary []byte to string conversion 
always check affected rows for updates

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-20 18:14:02 +01:00
Nicola Murino
a3fff56da5
WebAdmin: add configs section 
Setting configurations is an experimental feature and is not currently
supported in the REST API

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-19 19:03:45 +01:00
Nicola Murino
78cd5d8eba
groups: add expiration date override 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-13 19:32:36 +01:00
Nicola Murino
2df2803a37
ipfilter plugin: add protocol 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-13 13:45:45 +01:00
Nicola Murino
157d1db0b1
fs events: add elapsed field to notifications 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-12 18:56:53 +01:00
Nicola Murino
7e85356325
WebClient shares: replace basic auth with a login form 
basic auth will continue to work for REST API

Fixes #1166

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-12 08:29:53 +01:00
Nicola Murino
04ab8e72f6
WebUI: make error messages user dismissible 
Fixes #1171

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-10 18:07:23 +01:00
Nicola Murino
e0c3a13ac5
azblob: update to the latest SDK 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-09 13:04:12 +01:00
Nicola Murino
1b1745b7f7
move IP/Network lists to the data provider 
this is a backward incompatible change, all previous file based IP/network
lists will not work anymore

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-09 09:33:33 +01:00
Nicola Murino
1e14d006b1
defender: set score_no_auth to 0 as default 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-29 18:00:27 +01:00
Nicola Murino
c0fe08b597
defender: allow to set a different score for "no auth tried" events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-25 18:49:03 +01:00
Nicola Murino
5550a5d2c0
update users: also disconnect users from remote nodes when requested 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-24 18:53:34 +01:00
Nicola Murino
2066ad7c83
WebDAV: allow to define custom MIME type mappings 
Fixes #1154

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-23 18:43:25 +01:00
Nicola Murino
3ce4d04b27
EventManager: support placeholders within URL paths 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-22 08:46:58 +01:00
Nicola Murino
7b5bebc588
EventManager: add "on-demand" trigger 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-21 15:41:24 +01:00
Nicola Murino
53f17b5715
allow to disable event rules 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-19 18:33:04 +01:00
Nicola Murino
f2618e7de6
switch from go-simple-mail to go-mail 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-15 15:28:31 +01:00
Nicola Murino
09dea57850
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-07 13:07:41 +01:00
Nicola Murino
8cad436421
conditional support for recursive renaming for cloud providers 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-06 12:33:50 +01:00
Nicola Murino
f0dedbfabf
eventmanager: auto-create destination folder for renames 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-03 18:13:01 +01:00
Nicola Murino
7fa0959af4
eventmanager: add support for global star path matching 
This introduce a backward incompatible change for filesystem path matching
in the Event Manager, now patterns like "*.txt" will no longer match any
file with the "txt" suffix, you need to change them to "/**/*.txt".

Also change pre-delete behaviour, now if an error is returned the client
will get a permission denied error. This is the same as the other pre-*
action. Previously it was not possible to deny deletion of a file.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-02 15:59:00 +01:00
Nicola Murino
2611dd2c98
eventmanager: add support for pre-* actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-01-01 17:59:41 +01:00
Nicola Murino
6cebc037a0
eventmanager: check disk quota before executing the compress action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-31 16:41:32 +01:00
Nicola Murino
15ad31da54
WebClient: add copy action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-30 19:30:16 +01:00
Nicola Murino
fe9904a54d
docs full-configuration: improve formatting 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-28 18:51:25 +01:00
Nicola Murino
ea4c4dd57f
eventmanager: add copy action 
refactor sftpgo-copy and sftpgo-remove commands

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-27 18:51:53 +01:00
Nicola Murino
0841c7d7bd
REST API: remove merging of fields on updates 
we use PUT verb not PATCH. We keep merging only to allow to preserve
hidden/encrypted fields.

This is a backward incompatible change, but is necessary to avoid unexpected
issues.
You have to pass complete objects on updates.

Fixes #1088

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-23 09:36:20 +01:00
Nicola Murino
e17975ed7d
dataprovider: include port in node name and make it a hash 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-20 16:40:32 +01:00
Nicola Murino
0296e0cafa
gcsfs: allow to customize upload part size/time 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-18 11:51:46 +01:00
Nicola Murino
2da3eabc12
eventmanager: add password notification check action 
this action allow to send an email notification to users whose
password is about to expire

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-16 18:51:29 +01:00
Nicola Murino
ad5d657a1a
add support for password policies 
you can now set a password expiration and the password change requirement

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-11 17:15:34 +01:00
Nicola Murino
e2bebc99d1
AzureBlobs: update SDK to v0.6.1 
Remove path escape for blob names, this issue is now fixed within
the SDK

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-10 09:44:14 +01:00
Nicola Murino
926dcbbc63
add a CLI command to reset admin passwords 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-09 18:28:16 +01:00
Nicola Murino
a7f9581d99
provider events: add support for omit_object_data search param 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-08 10:02:12 +01:00
Nicola Murino
75d911f29e
WebAdmin: allow to search and export event logs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-07 18:47:38 +01:00
Nicola Murino
91e4a54385
fix build with some features disabled 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-04 08:44:45 +01:00
Nicola Murino
2ea43647ed
ftpd: check the TYPE parameter in a case-insensitive manner 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-03 13:09:25 +01:00
Nicola Murino
1f9cf194fe
add role to events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-12-03 11:45:27 +01:00
Nicola Murino
e87118d2a8
allow WebClient login with multi-step auth enabled 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-29 18:43:48 +01:00
Nicola Murino
fe888729f9
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-27 12:15:56 +01:00
Nicola Murino
ba9fe38b8b
azblob: handle dirs metadata 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-24 18:14:24 +01:00
Nicola Murino
2290137868
WebDAV: add support for X-OC-Mtime header 
it is used by Nextcloud compatible clients to set the modification time

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-19 19:39:28 +01:00
Nicola Murino
2017cb60e9
Per-directory permissions: add wildcards support 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-18 18:12:04 +01:00
Nicola Murino
a22282f275
add support for DHGEX 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-17 18:15:53 +01:00
Nicola Murino
5a222807b7
add roles 
Fixes #837

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-16 19:04:50 +01:00
Nicola Murino
37ffa3b55a
portable mode: remove support for services discovery via multicast DNS 
The library used for mDNS doesn't seem well maintained and I think this
feature is rarely used

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-05 18:32:36 +01:00
Nicola Murino
048591553a
allow to set a default expiration for newly created users 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-05 18:01:24 +01:00
Nicola Murino
33bfd61a0c
plugins: fix hash check 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-04 20:25:01 +01:00
Nicola Murino
965d059400
WebUI: try harder to prevent browsers from auto-filling in password fields 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-03 19:57:43 +01:00
Nicola Murino
676286182a
webdav: always open files for reading in lazy mode 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-03 08:31:40 +01:00
Nicola Murino
e3e85867b1
sftpfs: reuse connections 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-11-01 12:22:54 +01:00
Nicola Murino
80244bd83b
eventmanager: allow to access the backup file 
so it can be used in email and other actions

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-29 14:04:31 +02:00
Nicola Murino
9a9e7d1a7f
squash database migrations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-28 14:28:37 +02:00
Nicola Murino
6f422c3d8b
WebClient: make folder deletion recursive 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-27 08:27:44 +02:00
Nicola Murino
63bf8eb1a1
set version to 2.4.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-23 04:47:41 +02:00
Nicola Murino
db0e58ae7e
Add support for graceful shutdown 
Fixes #1014

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-22 11:56:41 +02:00
Nicola Murino
87045284cc
make connections lookups constant time 
Performance improves if there are many active connections.
For a few connections there is a small (unnoticeable) performance
degradation

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-20 18:17:13 +02:00
Nicola Murino
f3ee20980a
fix build in bundle mode 
added bunlde mode build to CI to prevent this from happening again
in the future

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-20 07:58:34 +02:00
Nicola Murino
54f1946aba
OIDC: allow to skip JWT signature validation 
It's intended for special cases where providers,such as Azure,
use the "none" algorithm

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-19 18:38:09 +02:00
Nicola Murino
47842ae614
script based hooks: don't propagate global env vars 
env vars must be explicitly set

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-19 09:29:40 +02:00
Nicola Murino
7e0b62b703
update swagger-ui, codemirror, video-js 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-16 18:29:42 +02:00
Nicola Murino
5a199acbb2
howto: add event manager 
add groups section in the getting started guide.
Suggest to prefer configuration with env vars instead of modifying
the default configuration file

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-16 08:26:03 +02:00
Nicola Murino
07b3f2f4d6
config: fix for slices with default values 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-14 16:45:20 +02:00
Nicola Murino
3822b7d3f7
workflows: replace deprecated set-output command 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-13 13:11:22 +02:00
Nicola Murino
2b2b69fb23
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-12 22:03:47 +02:00
Nicola Murino
aa1e73326f
FTPD: fix APPE to new files 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-12 11:37:31 +02:00
Nicola Murino
07012aa812
WebDAV: allow to set last modification time 
This commit add a minimal dead properties implementation

Fixes #1018

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-11 19:20:58 +02:00
Nicola Murino
0e54fa5655
cryptfs: fix quota for overwrites if upload fails 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-10 19:34:15 +02:00
Nicola Murino
3e44a1dd2d
eventmanager: add support for file/directory compression 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-10 18:53:58 +02:00
Nicola Murino
a417df60b3
azblob: use UUIDs as block IDs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-07 06:54:26 +02:00
Nicola Murino
8a43486730
postgres driver: add multi hosts support 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-02 12:43:26 +02:00
Nicola Murino
a42e9ffa6b
azblob: add support for the latest SDK 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-10-01 14:04:53 +02:00
Nicola Murino
0e8c41bbd1
sftpd: fix relative symlinks handling 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-30 19:23:54 +02:00
Nicola Murino
f9eadd7f04
API data retention check: send CSV reports for email notifications 
replace the HTML email with the same CSV report used in the
event manager

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-28 18:37:32 +02:00
Nicola Murino
04dc97072b
eventmanager: add metadata check 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-26 19:00:34 +02:00
Nicola Murino
ddda0b5ece
SQLite provider: remove code only used for shared providers 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-25 20:29:43 +02:00
Nicola Murino
76e89d07d4
add support for inter-node communications 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-25 19:48:55 +02:00
Nicola Murino
a538255034
httpclient: add leaf certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-23 17:49:42 +02:00
Nicola Murino
6c7b3ac5bb
oidc: update user after token refresh 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-22 08:30:22 +02:00
Nicola Murino
bd294bb3cf
WebAdmin: allow to simplify the user page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-21 19:36:08 +02:00
Nicola Murino
7349598b19
command hooks: allow to pass custom arguments 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-20 13:58:44 +02:00
Nicola Murino
f19691250d
zip downloads: make zip entries relative to the current dir when possible 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-19 17:06:42 +02:00
Nicola Murino
554a1cb1f4
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-18 13:08:48 +02:00
Nicola Murino
e58709c822
WebAdmin: allow to specify quota and upload size in human format 
For example 1 GB

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-14 21:18:32 +02:00
Nicola Murino
5eca73a399
give some hints if we fail to load HTML templates 
Fixes #986

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-14 12:25:19 +02:00
Nicola Murino
ea3c1d7a3b
WebAdmin: allow to pre-select groups on add user page 
The admin will still be able to choose different groups

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-13 18:04:27 +02:00
Nicola Murino
a40fa93d7b
CI: use the shortened 8-digit commit hash everywhere 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-08 13:44:14 +02:00
Nicola Murino
4498bbf2e4
CI: use Docker to build x86_64 Linux packages 
therefore Linux packages are compiled with Docker for all supported
architectures

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-08 09:42:36 +02:00
Nicola Murino
3ebdfa9b2d
data providers: allow to disable SNI for TLS connections 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-07 14:31:50 +02:00
Nicola Murino
3e5cf56460
eventmanager: add data retention reports 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-06 19:09:23 +02:00
Nicola Murino
c2a65a9a74
http actions: add multipart support 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-09-03 16:29:07 +02:00
Nicola Murino
3267a50ae3
MFA: allow recovery codes only if two-factor auth is enabled 
Fixes #965

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-31 09:29:39 +02:00
Nicola Murino
da03f6c4e3
eventmanager commands: allow to pass custom arguments 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-30 12:37:18 +02:00
Nicola Murino
56bf51277c
eventmanager placeholders: add StatusString and ErrorString 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-29 19:03:31 +02:00
Nicola Murino
37d98ca290
users: add a setting to set the default expiration for shares 
Fixes #960

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-28 14:41:42 +02:00
Nicola Murino
9473dc3937
WebAdmin: fix saving email event actions without attachments 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-22 20:17:45 +02:00
Nicola Murino
6777008aec
eventmanager: allow to add attachments to email actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-22 19:04:17 +02:00
Nicola Murino
3e8254e398
fs actions: add first upload/download 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-21 19:01:08 +02:00
Nicola Murino
9ddd2d3588
eventmanager: add path exists filesystem action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-20 14:13:43 +02:00
Nicola Murino
57935f585c
eventmanager: allow to execute fs actions based on schedules 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-19 15:04:00 +02:00
Nicola Murino
2b463d61e3
use epoch timestamp instead of current timestamp for unknown modification times 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-16 17:59:13 +02:00
Nicola Murino
ced4206c5f
allow cross folder renaming if the underlying resource is the same 
this was only allowed for the local filesystem before this change

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-15 21:39:04 +02:00
Nicola Murino
c86db09cd8
event manager: add Certificate renewal trigger 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-12 17:37:29 +02:00
Nicola Murino
194c3c13ac
event manager: add IP blocked trigger 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-11 20:09:53 +02:00
Nicola Murino
526f6e0f6b
cloud storage providers: remove head bucket requests 
let's just assume the bucket exists on "stat" requests for the "/" path

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-11 08:31:51 +02:00
Nicola Murino
a61211d32c
OIDC: allow to get the role field from a sub-struct 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-10 21:42:58 +02:00
Nicola Murino
4cd340e07f
eventmanager: add support for filesystem actions 
Fixes #931

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-10 18:41:59 +02:00
Nicola Murino
890dde0e00
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-05 18:48:58 +02:00
Nicola Murino
b1efe8d0b5
eventmanager: add support for data retention checks 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-04 21:50:38 +02:00
Nicola Murino
fdc10aa6c7
CORS: add support for more parameters 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-02 18:44:34 +02:00
Nicola Murino
455bb550ee
azblob: fix SAS URL with embedded container name 
Fixes #944

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-01 21:32:40 +02:00
Nicola Murino
9d2b5dc07d
refactor: move eventmanager to common package 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-08-01 18:48:54 +02:00
Nicola Murino
3ca62d76d7
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-30 10:07:09 +02:00
Nicola Murino
ef0a3bc571
add support for anonymous users 
Fixes #935

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-27 18:54:25 +02:00
Nicola Murino
ec5da8b4a5
ftpd: allow to require TLS on a per-user basis 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-26 18:51:39 +02:00
Nicola Murino
a2e73228d2
initprovider: don't execute actions 
we are not running as service here

Fixes #932

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-23 19:38:15 +02:00
Nicola Murino
1470018054
web UI: allow to enable OIDC login and/or login forms 
any combination is now supported

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-22 20:55:33 +02:00
Nicola Murino
e6bfbcd489
OIDC: allow to debug the received id_token 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-22 11:11:35 +02:00
Nicola Murino
a0bbcf6ebb
web client: add HTML5 player 
See #914

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-21 18:42:22 +02:00
Nicola Murino
d5946da1e2
OIDC: allow to enable only OIDC login for Web UIs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-19 22:25:00 +02:00
Nicola Murino
21682d1c1d
add license header to source files 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-17 20:16:00 +02:00
Nicola Murino
55b47cf741
sftp realpath: resolve symlinks 
Fixes #890

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-17 16:02:45 +02:00
Nicola Murino
e0ce2e2e8a
allow to customize the log level 
The old log-verbose flag is not appropriate anymore.
You should now use the log-level flag to set your preferred log level.
The default level is "debug" as before, you can also set "info", "warn",
"error"

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-13 10:40:24 +02:00
Nicola Murino
20e8cb898a
always check root dir in multi node setups 
Fixes #920

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-12 08:32:31 +02:00
Nicola Murino
1b8f94c08f
add event manager 
auto backup removed from setting. You can now schedule backups with
the event manager

Fixes #762

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-07-11 08:17:36 +02:00
Nicola Murino
e46051299f
s3: improve rename performance 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-30 18:22:58 +02:00
Nicola Murino
101783ee86
config: fix replace from env vars for some sub list 
ensure to merge configuration from files with configuration from env for
all the sub lists

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-28 19:44:12 +02:00
Nicola Murino
9a6b1a1315
Fix issues found in PR #887 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-25 10:42:17 +02:00
Nicola Murino
8762628481
backup: include folders set on group 
also fix sql tables prefix handling and add the sql prefix to CI

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-24 13:16:45 +02:00
Nicola Murino
a5e41c9336
S3: allow empty region 
the region may be embedded within the endpoint for some S3 compatible
object storage

Fixes #884

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-20 19:55:01 +02:00
Nicola Murino
729f30aebf
allow to refuse an upload from a sync upload hook 
Fixes #880

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-16 18:42:17 +02:00
Nicola Murino
1da213a6e3
CI: test resetprovider 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-15 20:08:31 +02:00
Nicola Murino
2b0b19da9e
add metrics for httpgs and sftpfs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-14 19:37:25 +02:00
Nicola Murino
686166f2ce
remove deprecated APIs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-14 18:30:57 +02:00
Nicola Murino
93ce593ed0
squash database migrations and remove the credentials_path setting 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-13 20:08:49 +02:00
Nicola Murino
6f4475ff72
httpfs: add support for UNIX domain sockets 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-12 18:29:49 +02:00
Nicola Murino
7ab30099dd
add httpfs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-11 10:41:34 +02:00
Nicola Murino
9ae473fcdc
set version to 2.3.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-04 05:01:48 +02:00
Nicola Murino
ecf715880f
update docs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-03 14:36:38 +02:00
Nicola Murino
b2e28fe3a2
groups: apply placeholders to the fs config of virtual folders 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-06-02 09:45:01 +02:00
Nicola Murino
cc2f23bd89
trim values for string lists which can be set as env vars 
See #857

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-31 18:22:18 +02:00
Nicola Murino
7329cd804b
Fixes #855 
update OpenAPI definition, add test cases, fix lint

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-30 19:01:12 +02:00
Nicola Murino
32da923dfe
httpd: add a setting to customize tokens validation 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-28 13:28:50 +02:00
Nicola Murino
7c724e18fe
add support for ACME compliant certificate authorities 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-27 07:39:55 +02:00
Nicola Murino
302f83c7a4
CI: fix for cockroach 22 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-24 11:31:49 +02:00
Nicola Murino
984ca1fb7e
web UIs: update js and css deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-23 19:14:39 +02:00
Nicola Murino
1a33b5bb53
allow different TLS certificates for each binding 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-21 16:34:47 +02:00
Nicola Murino
751946f47a
allow to customize timeout and env vars for program based hooks 
Fixes #847

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-20 19:30:54 +02:00
Nicola Murino
796ea1dde9
allow to store temporary sessions within the data provider 
so we can persist password reset codes, OIDC auth sessions and tokens.
These features will also work in multi-node setups without sicky
sessions now

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-19 19:49:51 +02:00
Nicola Murino
67abf03fe3
web UIs: move common css to a separate template file 
so we can reuse it instead of copying the same CSS every time

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-14 11:54:55 +02:00
Nicola Murino
4995cf1b02
defender: allow to load blocklist/safelist also from config/env vars 
Fixes #831

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-13 14:46:07 +02:00
Nicola Murino
164621289c
awscontainer: add a flag to disable the installation code 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-07 12:50:49 +02:00
Nicola Murino
737109b2b8
sftpfs: add more ciphers, KEXs and MACs 
they are negotiated according to the order.
Restrictions are generally configured server side.
I want to avoid to expose other settings for now.

Fixes #817

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-06 09:21:57 +02:00
Nicola Murino
80da2dc722
try to automatically find shared data dirs in system-wide paths 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-05 11:27:19 +02:00
Nicola Murino
61947e67ae
ftpd: add basic wildcard support 
this is the minimal implementation to allow mget and similar commands with
wildcards.

We only support wildcard for the last path level, for example:

- mget *.xml is supported
- mget dir/*.xml is supported
- mget */*.xml is not supported

Removed . and .. from FTP directory listing

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-04 19:32:02 +02:00
Nicola Murino
9a37e3d159
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-05-01 21:51:58 +02:00
Nicola Murino
14fb6c4038
always check recently updated users 
also fix the query to get users for quota check for sql based providers

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-30 11:59:36 +02:00
Nicola Murino
ecd488a840
data provider: remove prefer_database_credentials 
Google Cloud Storage credentials are now always stored within the data
provider.

Added a migration to read credentials from disk and store them inside the
data provider.

After v2.3 we can also remove credentials_path

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-28 12:55:01 +02:00
Nicola Murino
4a44a7dfe1
improved readlink handling 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-27 18:38:46 +02:00
Nicola Murino
97f8142b1e
azblobfs: update to the latest sdk and fix compatibility 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-25 17:34:52 +02:00
Nicola Murino
504cd3efda
add groups support 
Using groups simplifies the administration of multiple accounts by
letting you assign settings once to a group, instead of multiple
times to each individual user.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-25 15:49:11 +02:00
Nicola Murino
002a06629e
refactoring of user session counters 
Fixes #792

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-14 19:07:41 +02:00
Nicola Murino
cacfffc5bf
OIDC: add support for custom fields 
These fields can be used in the pre-login hook to implement custom
logics

Fixes #787

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-12 19:31:25 +02:00
Nicola Murino
a3f50029ba
update moment.js to v2.29.2 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-09 10:05:15 +02:00
Nicola Murino
f9d8b83c2a
sshd: disable by default ssh-rsa host key algo 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-04 18:52:19 +02:00
Nicola Murino
254b2ae87f
add support for AWS container 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-03 08:52:36 +02:00
Nicola Murino
77f3400161
allow to mount virtual folders on root (/) path 
Fixes #783

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-04-02 18:32:46 +02:00
Nicola Murino
e079444e8a
update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-31 09:54:59 +02:00
Nicola Murino
3cb23ac956
be sure to close an SSH connection if all channels are idle 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-30 10:59:25 +02:00
Nicola Murino
8fb256ac91
add link to an external Traefik tutorial 
update deps

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-29 18:13:43 +02:00
Nicola Murino
ca32cd5e0e
allow placeholders for add/update users and folders 
remove session token for S3, a temporary token is useless for our usage

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-27 16:32:21 +02:00
Nicola Murino
e0defafa26
azblob: fix the error returned in fs.Stat 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-26 11:47:12 +01:00
Nicola Murino
d955ddcef9
check that the jwt token is used by the same IP for which it 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-24 22:03:17 +01:00
Nicola Murino
4bbb195711
plugin: reload IP filter plugin on demand 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-24 10:21:13 +01:00
Nicola Murino
9bfdc10172
add support for ipfilter plugins 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-23 10:58:01 +01:00
Nicola Murino
b062b38ef4
docker: add rsync to "full" images 
there are better alternatives and rsync will only work on local
filesystem, but it can still be useful to some people

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-22 17:29:14 +01:00
Nicola Murino
a31a9dc32c
update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-21 17:52:18 +01:00
Nicola Murino
93b9c1617e
web UI: allow to load custom css 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-19 21:44:27 +01:00
Nicola Murino
4c710d731f
update to Go 1.18 
temporarily disabled docker image for ppcle64 as alpine image
is not yet available

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-18 21:52:00 +01:00
Nicola Murino
03da7f696c
SFTPGo is now listed on Azure Marketplace 
Fixes #684

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-17 14:59:02 +01:00
Nicola Murino
883a3dceaf
db defender: fix getHost query and add more test cases 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-16 18:22:08 +01:00
Nicola Murino
8502d7b051
improve transfer quota limits test case 
ReadAll can read more bytes than the effective size, for this test
io.Copy is better

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-15 22:13:07 +01:00
Nicola Murino
6f8b71b89f
s3fs: migrate to AWS SDK V2 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-15 19:16:50 +01:00
Nicola Murino
5582f5c811
data provider: add automatic backups 
Automatic backup are enabled by default, a new backup will be saved
each day at midnight.

The backups_path setting was moved from the httpd section to the
data_provider one, please adjust your configuration file and or your
env vars

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-13 13:45:07 +01:00
Nicola Murino
48ed3dab1f
update docs and deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-11 17:11:49 +01:00
Nicola Murino
d8de0faef5
allow to require two-factor auth for users 
Fixes #721

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-06 16:57:13 +01:00
Nicola Murino
df828b6021
gcsfs: use pagers when listing bucket objects 
Hopefully fixes #746

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-04 18:46:17 +01:00
Nicola Murino
056daaddfc
always execute fs checks for users not logged in after an update 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-03 19:31:54 +01:00
Nicola Murino
5c2fd8d52a
add support for a start directory 
Fixes #705

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-03-03 12:44:56 +01:00
Nicola Murino
4519bffa39
S3: add support for assume role 
Fixes #736

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-28 20:19:13 +01:00
Nicola Murino
1ea7429921
initprovider: add load data options 
Fixes #741

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-28 17:05:18 +01:00
dependabot[bot]
816c174036 Bump github.com/mattn/go-sqlite3 from 1.14.11 to 1.14.12 
Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.11 to 1.14.12.
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.11...v1.14.12)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-28 09:26:17 +01:00
Nicola Murino
b64d3c2fbf
simplify rename permission 
before this patch we allow a rename in the following cases:

- the user has rename permission on both source and target path
- the user has delete permission on source path and create/upload on
  target path

we now check only the rename/rename_files/rename_dirs permissions.
This is what SFTPGo users expect.

This is a backward incompatible change and it will not backported to
the 2.2.x branch

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-26 12:19:09 +01:00
Nicola Murino
e18ad55067
S3: add support for session tokens 
Fixes #736

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-25 15:30:04 +01:00
Nicola Murino
4e9dae6fa4
allow to cache external authentications 
Fixes #733

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-25 11:51:10 +01:00
Nicola Murino
f5a0559be6
don't execute fs check if the user has recent activity 
The check could be expensive with some backends and is generally
only required the first time that a user logs in

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-24 16:11:35 +01:00
Nicola Murino
8bbf54d2b6
azure blobs: add support for multipart downloads 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-21 19:01:31 +01:00
Nicola Murino
d31cccf85f
azblob: switch to the new azure-go-sdk 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-20 14:43:24 +01:00
Nicola Murino
c19b03a3f7
shares: add permission to deny sharing without password 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-19 13:31:58 +01:00
Nicola Murino
c6b8644828
OIDC: execute pre-login hook after IDP authentication 
so the SFTPGo users can be auto-created using the hook

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-19 10:53:35 +01:00
Nicola Murino
f1a255aa6c
httpd: allow to restrict allowed hosts ... 
... and to add security headers to the responses

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-17 18:22:27 +01:00
Nicola Murino
900e519ff1
SFTP: respect file open flags also for file creation 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-16 16:05:56 +01:00
Nicola Murino
f1832d4478
shares: add an upload form for shares with write scope 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-15 19:19:25 +01:00
Nicola Murino
66945c0a02
Web UIs: add OpenID Connect support 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-13 14:30:20 +01:00
Nicola Murino
fa0ca8fe89
quota summary and docs improvements 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-08 12:43:08 +01:00
Nicola Murino
9382db751c
make HTTP shares browsable 
if you share a single folder with read scope, you can now browse the share
and download single files

Fixes #674
See #677

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-06 16:46:43 +01:00
Nicola Murino
7e2a8e70c9
update zerolog deps 
The updated version avoid to always create a socket connected to the
journald on application start.

Now the socket is only created if we log to the journald

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-03 17:55:36 +01:00
Nicola Murino
cd35636939
S3: add a timeout for single part uploads 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-02-01 12:15:56 +01:00
Nicola Murino
1df1225eed
add support for data transfer bandwidth limits 
with total limit or separate settings for uploads and downloads and
overrides based on the client's IP address.

Limits can be reset using the REST API

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-30 11:42:36 +01:00
Nicola Murino
d2a4178846
check quota usage between ongoing transfers 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-20 18:19:20 +01:00
Nicola Murino
c3831de94e
add hide policy to pattern filters 
Disallowed files/dirs can be completly hidden. This may cause performance
issues for large directories

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-15 17:16:49 +01:00
Nicola Murino
64d1ea2d89
update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-13 18:48:08 +01:00
Nicola Murino
51c15de892
web admin: simplify user page 
The page to add/edit users should be less less intimidating now.
All the advanced settings are hidden by default. Permissions are set
to any, so if you also have a users base dir set, to add a user
you have to simply set username, password or public key and save

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-10 19:44:16 +01:00
Nicola Murino
b8efb1b8ec
squash database migrations. 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-09 12:25:53 +01:00
Nicola Murino
ec1d20f46f
sshd: improve docs about supported ciphers, KEX and MACs 
also added a check to ensure that the configured values are valid

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-06 18:09:49 +01:00
Nicola Murino
1f619d5ea6
make the sdk a separate module 
The SFTPGo SDK now is at the following URL

https://github.com/sftpgo/sdk

Fixes #657

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-06 11:54:43 +01:00
Nicola Murino
2912b2e92e
sdk: add a logger interface 
we are now ready to make the sdk a separate module

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-04 16:07:41 +01:00
Nicola Murino
ad483b7581
httpd: switch back to chi Recoverer now that the required patch is merged 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-04 09:48:16 +01:00
Nicola Murino
00ec426a80
notifier plugins: add provider, bucket and endpoint to nottifier params 
Fixes #656

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-02 19:22:44 +01:00
Nicola Murino
222db53410
notifiers plugin: replace params with a struct 
Fixes #658

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2022-01-02 15:16:35 +01:00
Nicola Murino
e3f3997c5e
set version to 2.2.1 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2021-12-31 13:42:03 +01:00
Nicola Murino
f78090e47f
update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2021-12-29 18:11:00 +01:00
Nicola Murino
4d7a4aa99a
check rename source and target 2021-12-28 12:03:52 +01:00
Nicola Murino
7d8823307f
defender: add provider driver 
Fixes #616
 2021-12-25 12:08:07 +01:00
Nicola Murino
8174349032
console logger: enable colors on Windows too ... 
... now that zerolog supports this feature
 2021-12-20 18:47:18 +01:00