506 commits

Author	SHA1	Message	Date
Nicola Murino	c85601146d	WIP new WebAdmin: event actions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-31 20:49:25 +01:00
Nicola Murino	143d4611ba	WIP new WebAdmin: events page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-28 19:38:01 +01:00
Nicola Murino	caa1d70aab	WebUI: add a base template for info messages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-28 10:22:16 +01:00
Nicola Murino	a275ef17a8	relax Unix domain socket permissions so that they are group writable ... Fixes #1507 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-28 09:34:07 +01:00
Nicola Murino	69da5c10c6	WIP new WebAdmin: configs page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-27 12:48:15 +01:00
Nicola Murino	d01fccf28c	WIP new WebAdmin: maintenance page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-26 21:03:41 +01:00
Nicola Murino	9fcff83f8f	WIP new WebAdmin: status page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-25 19:26:51 +01:00
Nicola Murino	eec9c449d4	vfs: make PipeReader an interface ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-24 19:59:50 +01:00
Nicola Murino	8180b75ef1	WIP new WebAdmin: IP lists pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-24 19:23:15 +01:00
Nicola Murino	d381304136	WIP new WebAdmin: admin/admins pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-22 20:22:41 +01:00
Nicola Murino	e38350e8b3	WIP new WebAdmin: role page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-21 17:19:25 +01:00
Nicola Murino	3f479c5537	WIP new WebAdmin: roles page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-21 16:49:04 +01:00
Nicola Murino	0d387d9799	prefer errors.As to errors.Is ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-21 15:46:38 +01:00
Nicola Murino	8648351fc7	WIP new WebAdmin: connections page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-20 15:35:05 +01:00
Nicola Murino	73b2573b14	WIP new WebAdmin: two factor auth page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-18 20:25:07 +01:00
Nicola Murino	91802fad3e	WIP new WebAdmin: profile, change password, message pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-18 19:18:57 +01:00
Nicola Murino	87451560e3	normalize common database errors ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-17 17:36:35 +01:00
Nicola Murino	5ac99ee556	WIP new WebAdmin: folder page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-16 19:51:37 +01:00
Nicola Murino	d939a82225	user: add TLS certificates ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 21:36:23 +01:00
Nicola Murino	0722c4369b	WIP new WebAdmin: folders page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 16:59:27 +01:00
Nicola Murino	1a0f734a9c	WIP new WebAdmin: remove some hard coded strings ... so they can be localized Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 09:41:39 +01:00
Nicola Murino	bf94f8b87c	WIP new WebAdmin: group page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 09:09:42 +01:00
Nicola Murino	5c8214e121	WIP new WebAdmin: groups page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-11 19:26:13 +01:00
Nicola Murino	e6c8b0c86b	Merge branch 'main' of github.com:drakkan/sftpgo ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-10 20:16:28 +01:00
Nicola Murino	03ebd5b841	fix a lint warning from the previous PR ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-10 20:15:51 +01:00
Anthrazz	c21b434c4e	defender: implement logging of events and bans (#1495) ... defender: implement logging of events and bans Signed-off-by: Anthrazz <25553648+Anthrazz@users.noreply.github.com>	2024-01-10 20:12:57 +01:00
Nicola Murino	113724f340	Merge branch 'main' of github.com:drakkan/sftpgo ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-10 20:01:54 +01:00
Nicola Murino	9cde0909b0	test cases: replace expired TLS certificates ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-10 19:53:48 +01:00
Nicola Murino	86eab21be8	WebAdmin: fix parsing form field ... some field names changed with the new UI Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-10 18:49:20 +01:00
Nicola Murino	e1b5d2fe39	WebAdmin: use the new UI for user pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-09 19:54:08 +01:00
Nicola Murino	ca880f6cbb	WebAdmin: completed base page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-01 20:09:15 +01:00
Nicola Murino	784b7585c1	remove end year from Copyright notice in files ... so we don't have to update all the files every year Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-01 11:31:45 +01:00
Nicola Murino	ce0693feda	WebUIs: move more shared components to common/base.html ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-31 17:35:14 +01:00
Nicola Murino	3e47a4f664	WebAdmin: use the new theme for the login and setup page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-30 19:12:22 +01:00
Nicola Murino	7318d1f32a	Web: move baselogin template to common ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-30 14:13:25 +01:00
Nicola Murino	259566fcce	WebUI: allow absolute URLs for disclaimers ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-28 19:59:06 +01:00
Nicola Murino	3121c35437	WebClient: do not silently overwrite files/directories ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-28 18:43:07 +01:00
Nicola Murino	61b5f97bf2	scp: close transfers before sending upload errors ... This change should fix the random failure in TestSCPTransferQuotaLimits because the quota is already updated when the scp command ends. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-21 18:03:07 +01:00
Nicola Murino	5f30ea3658	tests: add some logs to debug some sporadic test failures ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-17 10:46:21 +01:00
Nicola Murino	ba472c3c67	portable mode: fix disabling services if enabled using a config file ... clarify that a config file/env vars can still be used for further customizations Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-17 09:09:18 +01:00
Nicola Murino	00ce4e4685	EventManager: add uid and extension placeholders ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-16 11:39:32 +01:00
Nicola Murino	f721cf5c40	WebClient: fix test cases ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-12 19:04:32 +01:00
Nicola Murino	ff2eed8ee9	portable mode: fix panic while validating TLS certificates ... Fixes #1480 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-12 18:18:19 +01:00
Nicola Murino	61fe7c39a7	WebClient: allow to pass args for localized errors from the backend ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-12 18:04:14 +01:00
Nicola Murino	691133d7c8	WebClient: improve test coverage ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-10 18:34:09 +01:00
Nicola Murino	8ce9af4adf	dataprovider: sort related resources by name ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-10 17:50:48 +01:00
Nicola Murino	d8b040e57c	refuse to start if the config file is invalid ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-10 16:50:15 +01:00
Nicola Murino	c71f0426ae	WebClient WIP: add support for localizations ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-10 16:40:13 +01:00
Nicola Murino	74836af66e	WebUI: extract a common struct for all pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-25 18:30:56 +01:00
Nicola Murino	ed828458ab	WebUI add title to all pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-25 18:11:10 +01:00
Nicola Murino	6175acb572	add support for reading more secrets from files ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-24 20:43:50 +01:00
patrickap	a91cf22e0f	provider: support for username and password file (#1455) ... Signed-off-by: patrickap <patrick.schlageter@web.de>	2023-11-24 20:28:51 +01:00
Nicola Murino	62854e4802	WebClient: use flatpickr as time picker ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-22 20:14:49 +01:00
Nicola Murino	bde5713ed6	WebClient: cleanup some js code ... also returns an error if file or directory names contain a slash instead of silently replacing slashes with a similar symbol Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-22 15:57:33 +01:00
Nicola Murino	ac309cf9a3	WebClient: remove data schema usage from mfa page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-18 20:06:31 +01:00
Nicola Murino	59bdd4bc4e	WebClient: add support for more languages to the editor ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-18 14:17:28 +01:00
Nicola Murino	271d958acf	S3: fix compatibility with the latest SDK ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-18 12:00:53 +01:00
Nicola Murino	bfa17314c6	keyboard interactive auth: respect hook disabled setting ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-18 11:28:15 +01:00
Nicola Murino	1a765c7ff7	WebClient share: add a download page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-17 19:10:03 +01:00
Nicola Murino	61e6cc6985	WebClient: remove remaining inline onclick events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-16 18:55:14 +01:00
Nicola Murino	37b0c229fc	Web UI: propagate CSPNonce to templates ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-15 18:48:16 +01:00
Nicola Murino	c5c5860012	ssh: allow to configure public key auth algorithms ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-09 20:03:04 +01:00
Nicola Murino	a1346aa071	httpd: fixed logging of refused requests due to rate limiting/blocklisting ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-08 19:11:00 +01:00
Nicola Murino	6295be786f	WebClient: add a ping URL ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-06 19:58:39 +01:00
Nicola Murino	d5a9bec3da	WebClient: allow bulk move or copy actions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-06 19:10:35 +01:00
Nicola Murino	654ce2e349	s3: allow to skip TLS verification ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-05 19:27:11 +01:00
Nicola Murino	010c36cab5	WebClient: allow to set a list of default CSS ... The new WIP WebClient requires 2 CSS files Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-05 17:30:33 +01:00
Nicola Murino	b872c423ee	Remove external integrations, they are not supported in the new WIP WebClient ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-05 17:30:21 +01:00
Nicola Murino	2ee2098a48	WebClient: add test cases for new backend code ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-05 17:30:17 +01:00
Nicola Murino	0671178e29	WebClient: fix test cases ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-05 17:30:06 +01:00
Nicola Murino	37facd21d4	WebClient shares: fix view pdf files ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-05 17:29:15 +01:00
Nicola Murino	9322701615	WIP: new WebClient UI ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-05 17:26:29 +01:00
Nicola Murino	87b12af932	static files: refactor neutered http.FileSystem ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-03 17:22:28 +01:00
Nicola Murino	75c2bcff8f	TLS: disable by default cipher suites using RSA key exchange ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-01 18:35:23 +01:00
Nicola Murino	822a05aa20	TLS ciphers: use a more secure default if no preference is specified ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-01 16:39:04 +01:00
Nicola Murino	379f87f571	loaddata: do not reveal the existence of the files in error messages ... return a generic error message Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-01 10:54:20 +01:00
Nicola Murino	51febb19fa	httpd: add database based token manager ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-11-01 10:54:14 +01:00
Nicola Murino	5c938e46b7	allow to restrict the env vars passed to plugins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-29 15:19:30 +01:00
Nicola Murino	9a7a3b00dc	EventManager commands: allow to retrieve env vars from the process env ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-29 11:52:53 +01:00
Nicola Murino	8c31cc47b0	web UIs: fix dismissable alerts ... alerts can now be shown again after the user dismissal Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-29 08:17:24 +01:00
Nicola Murino	59378104b7	webclient: fix link for shares with a trailing space ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-29 07:33:56 +01:00
Nicola Murino	e1c3097546	event rules: add test case for rename after upload ... This is a common pattern in WinSCP Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-28 21:02:14 +02:00
Nicola Murino	9bcdc90ca8	add basic test cases for ALPN protocols ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-28 13:07:23 +02:00
Nicola Murino	7da5d8fcea	config: rename protocols to tls_protocols ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-28 12:42:05 +02:00
Nicola Murino	4a15775f65	allow to configure ALPN protocols ... Fixes #1406 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-28 12:35:26 +02:00
Nicola Murino	691e44c1dc	add more upload modes ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-25 19:05:37 +02:00
Nicola Murino	90bce505c4	improve conditional resuming of uploads ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-24 19:14:33 +02:00
Nicola Murino	320e404e4d	vfs: make PipeWriter an interface ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-23 09:56:46 +02:00
Nicola Murino	e3c4ee0833	add support for conditional resuming of uploads ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-23 09:56:40 +02:00
Nicola Murino	fc460922ad	events: fix event type string conversion ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-21 11:25:39 +02:00
Nicola Murino	ba9df51b2e	fix or suppress lint warnings detected by golangci-lint 1.55.0 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-20 20:31:17 +02:00
Nicola Murino	6282f95bd3	improve temp dirs handling an some logs ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-17 18:06:52 +02:00
Nicola Murino	63972edb96	httpd: add a test case for StripSlash middleware ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-08 10:46:17 +02:00
Nicola Murino	da0eb5037e	httpd: skip StripSlash middleware for URL ending with multiple slashes ... Fixes #1434 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-08 10:40:08 +02:00
Nicola Murino	4b685b21a2	configs: fix backward compatibility ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-07 22:02:10 +02:00
Nicola Murino	f05fe78737	ssh: refactor host key algorithm restriction ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-07 16:07:19 +02:00
Nicola Murino	19a95d8c55	httpfs: limit body size ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-07 11:28:16 +02:00
Nicola Murino	64c7588a44	sftpd: improve permissions checking test cases ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-10-04 19:41:50 +02:00
Nicola Murino	c55196a525	portable mode: allow to set config dir/config file ... The -c flag is no longer used for SSH commands. This is a backward incompatible change Fixes #1423 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-09-25 18:20:09 +02:00
Nicola Murino	e54fd46a9e	SQL providers: make sure we don't exceed the allowed placeholders ... Fixes #1415 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-09-12 19:15:40 +02:00
Nicola Murino	fac022090d	httpd: disable directory index for static files ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-09-08 19:55:45 +02:00
Nicola Murino	aefcea034a	validate API key scope ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-09-08 18:54:11 +02:00
Nicola Murino	5ef0a2ed4b	External/plugin auth: check for password change after empty response ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-26 12:04:41 +02:00
Nicola Murino	a592e388cd	ftpd: advertise TLS support only if really enabled ... if we don't have a global TLS configuration, advertise TLS only on the bindings where it is configured instead of failing at runtime Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-21 15:48:29 +02:00
Nicola Murino	b94ec7597c	smtp: set default port to 587 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-20 22:32:03 +02:00
Nicola Murino	c437f0ad76	logger: update mail adapter ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-20 21:42:41 +02:00
Nicola Murino	397cad93df	httpd request logger: set log level based on the status code ... Fixes #1393 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-20 19:01:16 +02:00
Nicola Murino	62b87083bb	ftpd: add support for TLS session reuse ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-20 16:00:36 +02:00
Nicola Murino	de35eb77cb	ftpd: use the extra field for certificate authentication ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-18 14:39:28 +02:00
Nicola Murino	163662a65a	eventmanager: replace placeholders in multipart filename ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-14 14:34:25 +02:00
Nicola Murino	6395fa0b67	eventmanager: fix params copy ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-12 19:03:47 +02:00
Nicola Murino	f03fdd1155	add object metadata to notification events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-12 18:51:47 +02:00
Nicola Murino	6c482a248d	portable mode: add WebClient ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-10 19:02:55 +02:00
Nicola Murino	25450d9efc	fix event validation test case ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-09 19:00:59 +02:00
Nicola Murino	60cc07bc81	eventmanager: add DELETE method to HTTP notifications ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-09 18:44:17 +02:00
Nicola Murino	5011002d84	allow to set umask on *NIX platforms ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-08 18:30:42 +02:00
Nicola Murino	63212bb033	remove the legacy PreferServerCipherSuites configuration ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-07 19:11:48 +02:00
Nicola Murino	830116bcf2	shares: allow to force an expiration date ... this is a soft requirement, users can reactivate expired shares by updating the expiration date Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-07 19:07:20 +02:00
Nicola Murino	ea96fe9a26	postgres provider: add support for "allow" and "prefer" SSL modes ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-05 20:01:14 +02:00
Nicola Murino	54a76e8c45	s3: remove usage of the now deprecated EndpointResolver ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-05 11:58:01 +02:00
Nicola Murino	132d18d5d1	sftpd: fix keyboard interactive test cases ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-04 21:32:14 +02:00
Nicola Murino	75e6ef6132	sftpd: remove diffie-hellman-group18-sha512 KEX ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-04 21:10:39 +02:00
Nicola Murino	af0d7b48ad	sftpd: refactor multi-step authentication ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-04 20:56:23 +02:00
Nicola Murino	0413c0471c	add a specific permission to manage folders ... creating/updating folders embedded in users is no longer supported. Fixes #1349 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-07-23 18:48:49 +02:00
Nicola Murino	00366fce07	shares: respect password strength ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-07-16 16:51:38 +02:00
Nicola Murino	e88172dd7e	back to development ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-07-15 12:35:30 +02:00
Nicola Murino	4f8794a255	file patterns: fix denied except rules ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-07-08 17:02:47 +02:00
Nicola Murino	5e5a09f164	make GroupConditionPatterns uniform with the accepted PR ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-07-02 10:57:29 +02:00
David Stäheli	f78e4b0443	check for multiple inverse matches (#1332) ... * update check for multiple inverse matches Signed-off-by: David Stäheli <mistrdave@gmail.com> * after match, direct return true Signed-off-by: David Stäheli <mistrdave@gmail.com> * apply same behaviour to checkEventGroupConditionPatterns Signed-off-by: David Stäheli <mistrdave@gmail.com> * fix spellmistake of function name Signed-off-by: David Stäheli <mistrdave@gmail.com> --------- Signed-off-by: David Stäheli <mistrdave@gmail.com>	2023-07-02 09:49:21 +02:00
Nicola Murino	51d8f3b436	back to development ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-29 14:42:16 +02:00
Nicola Murino	d1e4ee7bc8	config: fix loading commands args from env vars ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-25 21:31:57 +02:00
Nicola Murino	76964a6b85	check second factor after plugin authentication ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-25 07:16:26 +02:00
Nicola Murino	66f360e66c	back to development ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-18 07:15:39 +02:00
Nicola Murino	a38ce460bb	WebClient: show user quota ... Also remove per-source data transfer limits. This was an oversight Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-16 21:06:21 +02:00
Nicola Murino	1c1b76011f	WebAdmin: relax key prefix validation ... try to automatically fix leading and trailing slashes Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-12 19:13:16 +02:00
Nicola Murino	957d3a7b4d	CockroachDB: use unordered_unique_rowid for primary keys ... sequential values in a primary key does not perform as well Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-10 18:23:35 +02:00
Nicola Murino	d7d7b0bbf0	dataprovider: fix sql for CockroachDB ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-10 15:32:51 +02:00
Nicola Murino	99424bfa58	squash database migrations ... SQLite: remove AUTOINCREMENT from primary keys. It is not needed. Postgres: switch from serial to identity for primary keys. This means Postgres < 10 will not work in v2.6.x Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-10 13:06:24 +02:00
Nicola Murino	324d695d93	try to fix a randomly failing test case ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-08 19:41:58 +02:00
Nicola Murino	9d60972743	WebClient: redirect to the requested URL after login ... This feature is only useful and enabled for file manager urls Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-08 18:14:47 +02:00
Nicola Murino	f938af5a61	WebClient: fix sorting by size ... Fixes #1313 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-04 21:45:31 +02:00
Nicola Murino	3499edd5c2	WebUI: remove leading and trailing spaces from user-submitted input ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-04 08:45:17 +02:00
Nicola Murino	9470cd6e69	multi-node installations: use a different backup path for each node ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 17:54:24 +02:00
Nicola Murino	74e5999c63	added support for verifying sha256/sha512 passwords hash ... this simplifies the migration of users from some proprietary products Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 16:58:45 +02:00
Nicola Murino	48939b2b4f	add XOAUTH2 ... start the countdown, let's see how long it takes for your favorite Go-based proprietary SFTP server to notice this change, copy the SFTPGo code and thus violate its license, and announce the same feature :) Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-06-03 16:17:32 +02:00
Nicola Murino	8339fee69d	smtp: add debug option ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-30 19:11:28 +02:00
Nicola Murino	8f934f7c82	email action: allow to configure Bcc ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-25 19:55:27 +02:00
Nicola Murino	e11473cf52	config: limit the size for env files ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-25 05:25:28 +02:00
Nicola Murino	f8f8962ccb	file patterns: evaluate allowed filters before the denied ones ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-24 19:56:53 +02:00
Nicola Murino	2238043efd	EventManager: add email field placeholder ... Fixes #1288 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-24 19:08:51 +02:00
Nicola Murino	255985b7b0	Windows: start the service in a goroutine ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-23 12:59:27 +02:00
Nicola Murino	2b77709a04	back to development ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-21 09:23:24 +02:00
Nicola Murino	5b4a1bda2e	set version to 2.5.1 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-20 17:39:23 +02:00
Nicola Murino	3f94f6d0e7	proxy protocol: fix require policy in some edge cases ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-20 16:08:57 +02:00
Nicola Murino	d28a53a6cf	webdav: fix caching with external auth/plugins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-20 12:39:07 +02:00
Nicola Murino	bbaca578cd	EventManager: add content type option for email config ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-17 19:28:13 +02:00
Nicola Murino	52ec36dbd6	update pwd reset template. Update deps and use new features from the OIDC library ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-17 18:10:57 +02:00
Nicola Murino	e0d9b8bddf	WebClient: update password change timestamp after password reset ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-16 19:15:45 +02:00
Nicola Murino	19da923369	webdav: add support for parsing more time formats ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-16 18:51:42 +02:00
Nicola Murino	adad8e658b	osfs: add optional buffering ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-16 18:08:14 +02:00
Nicola Murino	e10487ad57	EventManager: improve automatic detection of JSON body ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-12 19:22:50 +02:00
Nicola Murino	4eded56d5f	add support for log events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-12 18:34:59 +02:00
Nicola Murino	05c54614b2	back to development ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-05 19:12:50 +02:00
Nicola Murino	32020e236f	set version to 2.5.0 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-03 13:07:48 +02:00
Nicola Murino	ee5b7290a0	EventManager: add more debug logs for HTTP actions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-25 20:27:40 +02:00
Nicola Murino	712f2053a4	REST API dumpdata: allow to specify the resources to dump ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-18 18:11:23 +02:00
Nicola Murino	d0a171558d	fix test cases for system commands ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-15 16:09:53 +02:00
Nicola Murino	1ade850557	add a log to better debug a randomically failing test case ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-15 15:08:42 +02:00
Nicola Murino	466f2e88b3	WebClient: fix rename ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-15 14:16:26 +02:00
Nicola Murino	3cb53b2c33	fix cross folder copy ... also update css/js deps and other minor changes Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-13 18:23:42 +02:00
Nicola Murino	6279216c2e	webdav: fix GET as PROPFIND if a prefix is defined ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-09 20:17:37 +02:00
Nicola Murino	5219c1fdd1	back to development ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-08 19:00:05 +02:00
Nicola Murino	4294659785	try harder to convert transfer errors in well-known error types ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-08 14:55:04 +02:00
Nicola Murino	f03f1b0156	improve test cases coverage ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-08 10:01:48 +02:00
Nicola Murino	184b99d500	user: add a field to indicate whether the password is set ... A structure similar to the one used for secrets would be better, but we don't want to break backwards compatibility. Also document that omitting the password field in the request body will preserve the current password when updating a user using the REST API. Added a test case for this. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-06 18:22:09 +02:00
Nicola Murino	74f05e5305	EventManager: check the parent directory before creating a zip ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-03 18:53:13 +02:00
Nicola Murino	ee90bfb506	add unixcrypt build tag ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-26 10:33:30 +02:00
Nicola Murino	e17068a76f	postgres provider: add support for load balancing ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-25 09:29:13 +01:00
Nicola Murino	354fc9b3d6	OIDC: allow to extract custom fields from sub-structs ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-23 18:15:07 +01:00
Nicola Murino	e29f6857db	EventManager: add IDP login trigger and check account action ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-22 19:02:54 +01:00
Nicola Murino	2710207779	update jquery, go deps, actions/setup-go to v4 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-15 18:44:08 +01:00
Nicola Murino	84396343da	fix some codeql warnings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-10 17:30:06 +01:00
Nicola Murino	0423e8f157	httpd: generate defender events for failed 2fa and password resets ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-04 13:55:48 +01:00
Nicola Murino	bdcee06665	WebClient: remove the default upload size limit ... Users who want a limit can still set it. By default, we want to allow uploads of any size Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-02 18:26:21 +01:00
Nicola Murino	4ba3ae876d	allow to set password strength at user/group level ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-02 09:11:30 +01:00
Nicola Murino	662164c7ff	smtp: require templates only if a server is configured or in service mode ... This regression was introduced after recent changes to allow setting the SMTP settings from the WebAdmin UI. Fixes #1217 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-01 18:31:02 +01:00
Nicola Murino	fad6af11e5	don't expose error messages from pre-actions and post connect hooks ... always return a generic error instead to avoid leaking internal info Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-28 18:01:09 +01:00
Nicola Murino	dba088daed	printf: replace %#v with the more explicit %q ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-27 19:19:57 +01:00
Nicola Murino	a23fdea9e3	ftpd: allow hostnames as passive IP ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-27 19:19:50 +01:00
Nicola Murino	561976bcd0	WebClient: return proper status code for http.MaxBytesError ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-27 11:03:05 +01:00
Nicola Murino	874776bd12	also capture logs for pre-login and check-password commands ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-26 15:15:34 +01:00
Felix Eckhofer	ec67b67e9e	Send output from external_auth_hook to logs ... Signed-off-by: Felix Eckhofer <felix@eckhofer.com>	2023-02-26 07:39:34 +01:00
Nicola Murino	e0cbb966f0	eventmanager: skip password expiration check for expired users ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-25 16:33:39 +01:00
Nicola Murino	df9d47900a	eventmanager: add user/folders as comma separated string in errors ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-25 15:26:38 +01:00
Nicola Murino	b8496c4d6e	eventmanager: add user expiration check ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-25 13:06:09 +01:00
Nicola Murino	b0cfaf189c	portable mode: allow to read the password from a file ... Fixes #1206 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-25 10:24:23 +01:00
Nicola Murino	195cb9f081	enable keyboard interactive authentication by default ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-24 20:22:32 +01:00
Nicola Murino	9a10740218	allow ACME HTTP-01 challenge with https redirect from port 80 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-24 20:08:14 +01:00
Nicola Murino	7bcd79a70a	telemetry: improve test cases ... remove an unnecessary nil check in tlsutils added as workaround to make telemetry test cases work Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-24 11:05:46 +01:00
Nicola Murino	8805d85377	configs: add ACME section ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-23 19:25:20 +01:00