84 commits

Author	SHA1	Message	Date
Nicola Murino	67abf03fe3	web UIs: move common css to a separate template file ... so we can reuse it instead of copying the same CSS every time Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-14 11:54:55 +02:00
Nicola Murino	14fb6c4038	always check recently updated users ... also fix the query to get users for quota check for sql based providers Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-30 11:59:36 +02:00
Nicola Murino	dd9c5b2149	sql provider: enhanced folder mapping query using an upsert ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-28 14:49:57 +02:00
Nicola Murino	ecd488a840	data provider: remove prefer_database_credentials ... Google Cloud Storage credentials are now always stored within the data provider. Added a migration to read credentials from disk and store them inside the data provider. After v2.3 we can also remove credentials_path Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-28 12:55:01 +02:00
Nicola Murino	504cd3efda	add groups support ... Using groups simplifies the administration of multiple accounts by letting you assign settings once to a group, instead of multiple times to each individual user. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-25 15:49:11 +02:00
Nicola Murino	5a40f998ae	check and update the password hashing algorithm on user login ... also add ldap md5 variant as per-user request Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-02 22:20:21 +02:00
Nicola Murino	5c114b28e3	sshd: we don't need the user certificate ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-31 18:16:50 +02:00
Nicola Murino	1df1225eed	add support for data transfer bandwidth limits ... with total limit or separate settings for uploads and downloads and overrides based on the client's IP address. Limits can be reset using the REST API Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-30 11:42:36 +01:00
Nicola Murino	d2a4178846	check quota usage between ongoing transfers ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-20 18:19:20 +01:00
Nicola Murino	d73be7aee5	remove the use of some unnecessary pointers ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-16 12:09:17 +01:00
Nicola Murino	6d3d94a01f	move kms implementation outside the sdk package ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-06 10:11:47 +01:00
Nicola Murino	7d8823307f	defender: add provider driver ... Fixes #616	2021-12-25 12:08:07 +01:00
Nicola Murino	cc73bb811b	change log level from warn to error where appropriate ... Fixes #649	2021-12-16 19:53:00 +01:00
Nicola Murino	015aa36c56	loaddata: improve shares restore ... usage and timestamps are now preserved	2021-11-27 11:12:51 +01:00
Nicola Murino	e29a3efd39	add resetprovider sub-command ... Fixes #608	2021-11-15 18:40:31 +01:00
Nicola Murino	3bc58f5988	WebClient/REST API: add sharing support	2021-11-06 14:13:20 +01:00
Maharanjan	0661876e99	Added email field for user account	2021-09-25 19:06:13 +02:00
Nicola Murino	8a4c21b64a	add builtin two-factor auth support ... The builtin two-factor authentication is based on time-based one time passwords (RFC 6238) which works with Authy, Google Authenticator and other compatible apps.	2021-09-04 12:11:04 +02:00
Nicola Murino	bcf088f586	data provider: update internal caches if the data provider is shared	2021-08-20 09:35:06 +02:00
Nicola Murino	be3857d572	dataprovider: add timestamp fields for users and admins	2021-08-19 15:51:43 +02:00
Nicola Murino	fe953d6b38	REST API: add support for API key authentication	2021-08-17 18:08:32 +02:00
Nicola Murino	bd5191dfc5	add experimental plugin system	2021-07-11 15:26:51 +02:00
Nicola Murino	076b2f0ee0	modules: add v2 support	2021-06-26 07:31:41 +02:00
Nicola Murino	c1b862394d	move other errors to utils package	2021-06-19 13:06:01 +02:00
Nicola Murino	d5b42f72e2	squash database migrations, remove compat data provider code	2021-06-19 09:03:20 +02:00
Nicola Murino	9d3d7db29c	azblob: store SAS URL as kms.Secret	2021-06-11 22:27:36 +02:00
Nicola Murino	23d9ebfc91	add a basic front-end web interface for end-users ... Fixes #339 #321 #398	2021-05-06 21:35:43 +02:00
Nicola Murino	1275328fdf	Authentication errors: try to avoid user enumeration ... Fixes #395	2021-04-26 19:48:21 +02:00
Nicola Murino	bc88503f25	sql providers: reuse the same context where appropriate	2021-04-19 18:58:53 +02:00
Nicola Murino	db274f1093	crdb: fix transactions handling	2021-03-25 09:07:56 +01:00
Nicola Murino	70e035315e	data provider: add CockroachDB support	2021-03-23 19:14:15 +01:00
Nicola Murino	5e375f56dd	kms: add a lock, secrets could be modified concurrently for cached users ... also reduce the size of the JSON payload omitting empty secrets	2021-03-22 19:03:25 +01:00
Nicola Murino	d6dc3a507e	extend virtual folders support to all storage backends ... Fixes #241	2021-03-21 19:15:47 +01:00
Nicola Murino	a6e36e7cad	FTP: improve TLS certificate authentication ... For each user you can now configure: - TLS certificate auth - TLS certificate auth and password - Password auth For TLS auth, the certificate common name must match the name provided using the "USER" FTP command	2021-02-28 12:10:40 +01:00
Nicola Murino	2146b83343	data providers: add filesystem to folder ... ... ... and some descriptive fields. The filesystem support for virtual folders will be implemented in future commits	2021-02-24 19:40:29 +01:00
Nicola Murino	49830516be	squash database migrations and remove compat code	2021-02-22 08:37:50 +01:00
Nicola Murino	be9230e85b	micro optimizations spotted using the go-critic linter	2021-02-16 19:11:36 +01:00
Nicola Murino	267d9f1831	web ui: allow to create folders from a template	2021-02-04 19:09:43 +01:00
Nicola Murino	78bf808322	virtual folders: change dataprovider structure ... This way we no longer depend on the local file system path and so we can add support for cloud backends in future updates	2021-02-01 19:04:15 +01:00
Nicola Murino	54321c5240	web ui: allow to create multiple users from a template	2021-01-25 21:31:33 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00
Nicola Murino	daac90c4e1	fix a potential race condition for pre-login and ext auth ... hooks doing something like this: err = provider.updateUser(u) ... return provider.userExists(username) could be racy if another update happen before provider.userExists(username) also pass a pointer to updateUser so if the user is modified inside "validateUser" we can just return the modified user without do a new query	2021-01-05 09:50:22 +01:00
Nicola Murino	72b2c83392	defender: allow hot-reloading for safe and block lists	2021-01-04 17:52:14 +01:00
Nicola Murino	634b723b5d	add KMS support ... Fixes #226	2020-11-30 21:46:34 +01:00
Nicola Murino	224ce5fe81	add revertprovider subcommand ... Fixes #233	2020-11-26 22:08:33 +01:00
Nicola Murino	4bb9d07dde	user: add a free text field ... Fixes #230	2020-11-25 22:26:34 +01:00
Nicola Murino	dccc583b5d	add a dedicated struct to store encrypted credentials ... also gcs credentials are now encrypted, both on disk and inside the provider. Data provider is automatically migrated and load data will accept old format too but you should upgrade to the new format to avoid future issues	2020-11-22 21:53:04 +01:00
Nicola Murino	c992072286	data provider: add a setting to prevent auto-update	2020-10-05 19:42:33 +02:00
Nicola Murino	600a107699	initprovider: check if the provider is already initialized ... exit with code 0 if no initialization is required	2020-08-30 13:50:43 +02:00
Nicola Murino	8b0a1817b3	add check password hook ... its main use case is to allow to easily support things like password+OTP for protocols without keyboard interactive support such as FTP and WebDAV	2020-08-19 19:36:12 +02:00