90 commits

Author	SHA1	Message	Date
Nicola Murino	8a4c21b64a	add builtin two-factor auth support ... The builtin two-factor authentication is based on time-based one time passwords (RFC 6238) which works with Authy, Google Authenticator and other compatible apps.	2021-09-04 12:11:04 +02:00
Nicola Murino	be3857d572	dataprovider: add timestamp fields for users and admins	2021-08-19 15:51:43 +02:00
Nicola Murino	fe953d6b38	REST API: add support for API key authentication	2021-08-17 18:08:32 +02:00
Nicola Murino	1e9a19e326	add a howto to use SFTPGo as OpenSSH's SFTP subsystem	2021-07-31 19:09:09 +02:00
Nicola Murino	bd5191dfc5	add experimental plugin system	2021-07-11 15:26:51 +02:00
Nicola Murino	076b2f0ee0	modules: add v2 support	2021-06-26 07:31:41 +02:00
Nicola Murino	9d3d7db29c	azblob: store SAS URL as kms.Secret	2021-06-11 22:27:36 +02:00
Nicola Murino	0540b8780e	redact credentials within hooks ... go-retryablehttp does not redact credentials, so we still log them when we use it https://github.com/hashicorp/go-retryablehttp/pull/133	2021-05-12 22:44:17 +02:00
Nicola Murino	acb4310c11	add a startup hook	2021-04-05 10:07:59 +02:00
Nicola Murino	d5f092284a	improve signals handling	2021-03-25 19:31:21 +01:00
Nicola Murino	d6dc3a507e	extend virtual folders support to all storage backends ... Fixes #241	2021-03-21 19:15:47 +01:00
Nicola Murino	055506e518	sftpfs: add an option to disable concurrent reads	2021-03-06 15:41:40 +01:00
Nicola Murino	bfe0c18976	portable mode: fix WebDAV support	2021-03-05 08:41:24 +01:00
Nicola Murino	ca3e15578e	Use new methods in the io and os packages instead of ioutil ones ... ioutil is deprecated in Go 1.16 and SFTPGo is an application, not a library, we have no reason to keep compatibility with old Go versions. Go 1.16 fix some cifs related issues too.	2021-02-25 21:53:04 +01:00
Nicola Murino	2146b83343	data providers: add filesystem to folder ... ... ... and some descriptive fields. The filesystem support for virtual folders will be implemented in future commits	2021-02-24 19:40:29 +01:00
Nicola Murino	a21ccad174	web hooks: add mutual TLS support	2021-02-13 14:41:37 +01:00
Nicola Murino	51f110bc7b	sftpd: add statvfs@openssh.com support	2021-02-11 19:45:52 +01:00
Nicola Murino	4ddfe41f23	loaddata: restore admins too	2021-02-11 08:33:32 +01:00
Nicola Murino	78bf808322	virtual folders: change dataprovider structure ... This way we no longer depend on the local file system path and so we can add support for cloud backends in future updates	2021-02-01 19:04:15 +01:00
Nicola Murino	820169c5c6	windows service: simplify code ... update testify to 1.7.0 too	2021-01-21 19:07:13 +01:00
Nicola Murino	57976b4085	httpd: add mTLS and multiple bindings support	2021-01-19 18:59:41 +01:00
Nicola Murino	899f1a1844	improve windows service ... ensure to exit the service process in any case	2021-01-18 21:46:26 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00
Nicola Murino	daac90c4e1	fix a potential race condition for pre-login and ext auth ... hooks doing something like this: err = provider.updateUser(u) ... return provider.userExists(username) could be racy if another update happen before provider.userExists(username) also pass a pointer to updateUser so if the user is modified inside "validateUser" we can just return the modified user without do a new query	2021-01-05 09:50:22 +01:00
Nicola Murino	72b2c83392	defender: allow hot-reloading for safe and block lists	2021-01-04 17:52:14 +01:00
Nicola Murino	684f4ba1a6	mutal TLS: add support for revocation lists	2021-01-03 17:03:04 +01:00
Nicola Murino	037d89a320	add support for a basic built-in defender ... It can help to prevent DoS and brute force password guessing	2021-01-02 14:05:09 +01:00
Nicola Murino	0966d44c0f	httpd: add support for listening over a Unix-domain socket ... Fixes #266	2020-12-29 19:02:56 +01:00
Nicola Murino	c69d63c1f8	add support for multiple bindings ... Fixes #253	2020-12-23 16:12:30 +01:00
Nicola Murino	1ac610da1a	fix build on Windows	2020-12-18 16:22:52 +01:00
Nicola Murino	bcf0fa073e	telemetry server: add optional https and authentication	2020-12-18 16:04:42 +01:00
Nicola Murino	143df87fee	add some docs for telemetry server ... move pprof to the telemetry server only	2020-12-18 09:47:22 +01:00
Márk Sági-Kazár	6d895843dc	feat: add new telemetry server (#254) ... Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	2020-12-18 09:01:19 +01:00
Nicola Murino	a6985075b9	add sftpfs storage backend ... Fixes #224	2020-12-12 10:31:09 +01:00
Nicola Murino	c451f742aa	revertprovider: crypted provider was not supported in v4 ... also ensure to initialize kms before the dataprovider, it could be needed to downgrade secret from cloud kms providers	2020-12-06 10:36:48 +01:00
Nicola Murino	4a88ea5c03	add Data At Rest Encryption support	2020-12-05 13:48:13 +01:00
Nicola Murino	95c6d41c35	config: make config file relative to the config dir ... a configuration parsing error is now fatal	2020-12-03 17:16:35 +01:00
Nicola Murino	634b723b5d	add KMS support ... Fixes #226	2020-11-30 21:46:34 +01:00
Nicola Murino	6699f5c2cc	initial data loading: an error is no longer fatal ... therefore it does not prevent the services from starting	2020-11-25 09:18:36 +01:00
Nicola Murino	0609188d3f	allow to disable SFTP service ... Fixes #228	2020-11-24 13:44:57 +01:00
Nicola Murino	dccc583b5d	add a dedicated struct to store encrypted credentials ... also gcs credentials are now encrypted, both on disk and inside the provider. Data provider is automatically migrated and load data will accept old format too but you should upgrade to the new format to avoid future issues	2020-11-22 21:53:04 +01:00
Nicola Murino	a6355e298e	add support for limit files using shell like patterns ... Fixes #209	2020-11-15 22:04:48 +01:00
Nicola Murino	0a14297b48	webdav: performance improvements and bug fixes ... we need my custom golang/x/net/webdav fork for now https://github.com/drakkan/net/tree/sftpgo	2020-11-04 19:11:40 +01:00
Nicola Murino	f2acde789d	portable mode: add Azure Blob support	2020-10-25 21:42:43 +01:00
Sean Hildebrand	db7e81e9d0	add prefer_database_credentials configuration parameter ... When true, users' Google Cloud Storage credentials will be written to the data provider instead of disk. Pre-existing credentials on disk will be used as a fallback Fixes #201	2020-10-22 10:42:40 +02:00
Nicola Murino	bb5207ad77	Add support for loading users/folders on startup ... Fixes #161	2020-10-20 18:42:37 +02:00
Nicola Murino	0c0382c9b5	docker: disable scheduled build ... We already have an edge version built after each commit	2020-10-10 20:15:34 +02:00
Nicola Murino	bbab6149e8	fix windows service: was broken in the latest commit	2020-10-09 22:42:13 +02:00
Nicola Murino	ce9387f1ab	update dependencies and some docs	2020-10-09 20:25:42 +02:00
Mark Sagi-Kazar	5e2db77ef9	refactor: add an enum for filesystem providers ... Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	2020-10-05 21:40:21 +02:00