Nicola Murino
|
cb3bc3f604
|
update OpenAPI definition
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-03-18 19:32:01 +01:00 |
|
Nicola Murino
|
cc9a0d4dc2
|
add time-based access restrictions
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-03-17 11:30:03 +01:00 |
|
Nicola Murino
|
26d3105f54
|
groups: add role placeholder
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-03-12 18:21:50 +01:00 |
|
Nicola Murino
|
f38966c6ac
|
WebClient: refactor long-running tasks to improve browser compatibility
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-03-11 18:19:57 +01:00 |
|
Nicola Murino
|
4d357a6a57
|
EventManager: allow to check for inactive users
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-03-04 19:48:10 +01:00 |
|
Nicola Murino
|
12f599fd65
|
WebUI: skip checks for static resource
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-25 18:19:21 +01:00 |
|
Nicola Murino
|
92911bda2b
|
require at least 2048 bits for RSA certificates/keys
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-25 11:12:57 +01:00 |
|
Nicola Murino
|
f7d9e56cac
|
ssh: remove moduli, log negotiated algorithms
Fixes #1324
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-24 20:35:09 +01:00 |
|
Nicola Murino
|
a577d8b3cd
|
WebAdmin: allow to disable 2FA
Before it was only possible using REST API
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-23 18:24:07 +01:00 |
|
Nicola Murino
|
76ffa107dd
|
check admins' two-factor requirements in the disable API as well
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-22 19:05:16 +01:00 |
|
Nicola Murino
|
9a6a65931e
|
two-factor auth: fixed validation of conflicting settings
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-22 18:20:51 +01:00 |
|
Nicola Murino
|
de089e51fd
|
Web: allow to require password change and two-factor for admins
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-21 20:45:10 +01:00 |
|
Nicola Murino
|
51ae2d7301
|
add copy permission
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-20 18:19:09 +01:00 |
|
Nicola Murino
|
e61fb42cbc
|
remove metadata plugin
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-17 12:30:47 +01:00 |
|
Nicola Murino
|
ad75543172
|
fix some new lint warnings
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-15 21:13:45 +01:00 |
|
Nicola Murino
|
1ff55bbfa7
|
add DirLister interface
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-15 20:53:56 +01:00 |
|
Nicola Murino
|
8385acd0e3
|
Redirect to two-factor auth page after creating the first admin
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-04 20:58:29 +01:00 |
|
Nicola Murino
|
e5836c8118
|
WebUI: add a JSON helper function
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-04 18:16:10 +01:00 |
|
Nicola Murino
|
c23d779280
|
WebClient: load shares using an async request
instead of rendering them directly within the template
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-04 14:33:51 +01:00 |
|
Nicola Murino
|
3158190945
|
WebClient: respect second factor requirements enforced at group level
Fixes #1506
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-04 12:09:47 +01:00 |
|
Nicola Murino
|
6074ed21f7
|
dataproviders: return an uniform error for foreign key violations
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-03 14:24:50 +01:00 |
|
Nicola Murino
|
71e01ab26d
|
new WebAdmin: add test cases
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-02-03 12:42:05 +01:00 |
|
Nicola Murino
|
69da5c10c6
|
WIP new WebAdmin: configs page
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-01-27 12:48:15 +01:00 |
|
Nicola Murino
|
87451560e3
|
normalize common database errors
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-01-17 17:36:35 +01:00 |
|
Nicola Murino
|
d939a82225
|
user: add TLS certificates
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-01-14 21:36:23 +01:00 |
|
Nicola Murino
|
784b7585c1
|
remove end year from Copyright notice in files
so we don't have to update all the files every year
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-01-01 11:31:45 +01:00 |
|
Nicola Murino
|
3121c35437
|
WebClient: do not silently overwrite files/directories
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-12-28 18:43:07 +01:00 |
|
Nicola Murino
|
f721cf5c40
|
WebClient: fix test cases
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-12-12 19:04:32 +01:00 |
|
Nicola Murino
|
691133d7c8
|
WebClient: improve test coverage
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-12-10 18:34:09 +01:00 |
|
Nicola Murino
|
c71f0426ae
|
WebClient WIP: add support for localizations
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-12-10 16:40:13 +01:00 |
|
Nicola Murino
|
6175acb572
|
add support for reading more secrets from files
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-24 20:43:50 +01:00 |
|
Nicola Murino
|
ac309cf9a3
|
WebClient: remove data schema usage from mfa page
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-18 20:06:31 +01:00 |
|
Nicola Murino
|
1a765c7ff7
|
WebClient share: add a download page
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-17 19:10:03 +01:00 |
|
Nicola Murino
|
c5c5860012
|
ssh: allow to configure public key auth algorithms
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-09 20:03:04 +01:00 |
|
Nicola Murino
|
a1346aa071
|
httpd: fixed logging of refused requests due to rate limiting/blocklisting
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-08 19:11:00 +01:00 |
|
Nicola Murino
|
6295be786f
|
WebClient: add a ping URL
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-06 19:58:39 +01:00 |
|
Nicola Murino
|
654ce2e349
|
s3: allow to skip TLS verification
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-05 19:27:11 +01:00 |
|
Nicola Murino
|
b872c423ee
|
Remove external integrations, they are not supported in the new WIP WebClient
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-05 17:30:21 +01:00 |
|
Nicola Murino
|
2ee2098a48
|
WebClient: add test cases for new backend code
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-05 17:30:17 +01:00 |
|
Nicola Murino
|
0671178e29
|
WebClient: fix test cases
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-05 17:30:06 +01:00 |
|
Nicola Murino
|
87b12af932
|
static files: refactor neutered http.FileSystem
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-03 17:22:28 +01:00 |
|
Nicola Murino
|
379f87f571
|
loaddata: do not reveal the existence of the files in error messages
return a generic error message
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-01 10:54:20 +01:00 |
|
Nicola Murino
|
ba9df51b2e
|
fix or suppress lint warnings detected by golangci-lint 1.55.0
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-10-20 20:31:17 +02:00 |
|
Nicola Murino
|
63972edb96
|
httpd: add a test case for StripSlash middleware
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-10-08 10:46:17 +02:00 |
|
Nicola Murino
|
da0eb5037e
|
httpd: skip StripSlash middleware for URL ending with multiple slashes
Fixes #1434
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-10-08 10:40:08 +02:00 |
|
Nicola Murino
|
4b685b21a2
|
configs: fix backward compatibility
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-10-07 22:02:10 +02:00 |
|
Nicola Murino
|
fac022090d
|
httpd: disable directory index for static files
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-09-08 19:55:45 +02:00 |
|
Nicola Murino
|
aefcea034a
|
validate API key scope
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-09-08 18:54:11 +02:00 |
|
Nicola Murino
|
25450d9efc
|
fix event validation test case
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-08-09 19:00:59 +02:00 |
|
Nicola Murino
|
830116bcf2
|
shares: allow to force an expiration date
this is a soft requirement, users can reactivate expired shares by
updating the expiration date
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-08-07 19:07:20 +02:00 |
|