beenull/sftpgo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1748 commits 8 branches 48 tags 35 MiB
Commit graph

361 commits

Author SHA1 Message Date
Nicola Murino
8ce9af4adf
dataprovider: sort related resources by name 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-12-10 17:50:48 +01:00
Nicola Murino
d8b040e57c
refuse to start if the config file is invalid 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-12-10 16:50:15 +01:00
Nicola Murino
c71f0426ae
WebClient WIP: add support for localizations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-12-10 16:40:13 +01:00
Nicola Murino
74836af66e
WebUI: extract a common struct for all pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-25 18:30:56 +01:00
Nicola Murino
ed828458ab
WebUI add title to all pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-25 18:11:10 +01:00
Nicola Murino
6175acb572
add support for reading more secrets from files 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-24 20:43:50 +01:00
patrickap
a91cf22e0f
provider: support for username and password file (#1455) 
Signed-off-by: patrickap <patrick.schlageter@web.de>
 2023-11-24 20:28:51 +01:00
Nicola Murino
62854e4802
WebClient: use flatpickr as time picker 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-22 20:14:49 +01:00
Nicola Murino
bde5713ed6
WebClient: cleanup some js code 
also returns an error if file or directory names contain a slash
instead of silently replacing slashes with a similar symbol

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-22 15:57:33 +01:00
Nicola Murino
ac309cf9a3
WebClient: remove data schema usage from mfa page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-18 20:06:31 +01:00
Nicola Murino
59bdd4bc4e
WebClient: add support for more languages to the editor 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-18 14:17:28 +01:00
Nicola Murino
271d958acf
S3: fix compatibility with the latest SDK 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-18 12:00:53 +01:00
Nicola Murino
bfa17314c6
keyboard interactive auth: respect hook disabled setting 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-18 11:28:15 +01:00
Nicola Murino
1a765c7ff7
WebClient share: add a download page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-17 19:10:03 +01:00
Nicola Murino
61e6cc6985
WebClient: remove remaining inline onclick events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-16 18:55:14 +01:00
Nicola Murino
37b0c229fc
Web UI: propagate CSPNonce to templates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-15 18:48:16 +01:00
Nicola Murino
c5c5860012
ssh: allow to configure public key auth algorithms 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-09 20:03:04 +01:00
Nicola Murino
a1346aa071
httpd: fixed logging of refused requests due to rate limiting/blocklisting 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-08 19:11:00 +01:00
Nicola Murino
6295be786f
WebClient: add a ping URL 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-06 19:58:39 +01:00
Nicola Murino
d5a9bec3da
WebClient: allow bulk move or copy actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-06 19:10:35 +01:00
Nicola Murino
654ce2e349
s3: allow to skip TLS verification 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 19:27:11 +01:00
Nicola Murino
010c36cab5
WebClient: allow to set a list of default CSS 
The new WIP WebClient requires 2 CSS files

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:30:33 +01:00
Nicola Murino
b872c423ee
Remove external integrations, they are not supported in the new WIP WebClient 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:30:21 +01:00
Nicola Murino
2ee2098a48
WebClient: add test cases for new backend code 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:30:17 +01:00
Nicola Murino
0671178e29
WebClient: fix test cases 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:30:06 +01:00
Nicola Murino
37facd21d4
WebClient shares: fix view pdf files 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:29:15 +01:00
Nicola Murino
9322701615
WIP: new WebClient UI 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-05 17:26:29 +01:00
Nicola Murino
87b12af932
static files: refactor neutered http.FileSystem 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-03 17:22:28 +01:00
Nicola Murino
75c2bcff8f
TLS: disable by default cipher suites using RSA key exchange 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-01 18:35:23 +01:00
Nicola Murino
822a05aa20
TLS ciphers: use a more secure default if no preference is specified 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-01 16:39:04 +01:00
Nicola Murino
379f87f571
loaddata: do not reveal the existence of the files in error messages 
return a generic error message

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-01 10:54:20 +01:00
Nicola Murino
51febb19fa
httpd: add database based token manager 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-11-01 10:54:14 +01:00
Nicola Murino
5c938e46b7
allow to restrict the env vars passed to plugins 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-29 15:19:30 +01:00
Nicola Murino
9a7a3b00dc
EventManager commands: allow to retrieve env vars from the process env 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-29 11:52:53 +01:00
Nicola Murino
8c31cc47b0
web UIs: fix dismissable alerts 
alerts can now be shown again after the user dismissal

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-29 08:17:24 +01:00
Nicola Murino
59378104b7
webclient: fix link for shares with a trailing space 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-29 07:33:56 +01:00
Nicola Murino
e1c3097546
event rules: add test case for rename after upload 
This is a common pattern in WinSCP

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-28 21:02:14 +02:00
Nicola Murino
9bcdc90ca8
add basic test cases for ALPN protocols 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-28 13:07:23 +02:00
Nicola Murino
7da5d8fcea
config: rename protocols to tls_protocols 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-28 12:42:05 +02:00
Nicola Murino
4a15775f65
allow to configure ALPN protocols 
Fixes #1406

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-28 12:35:26 +02:00
Nicola Murino
691e44c1dc
add more upload modes 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-25 19:05:37 +02:00
Nicola Murino
90bce505c4
improve conditional resuming of uploads 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-24 19:14:33 +02:00
Nicola Murino
320e404e4d
vfs: make PipeWriter an interface 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-23 09:56:46 +02:00
Nicola Murino
e3c4ee0833
add support for conditional resuming of uploads 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-23 09:56:40 +02:00
Nicola Murino
fc460922ad
events: fix event type string conversion 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-21 11:25:39 +02:00
Nicola Murino
ba9df51b2e
fix or suppress lint warnings detected by golangci-lint 1.55.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-20 20:31:17 +02:00
Nicola Murino
6282f95bd3
improve temp dirs handling an some logs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-17 18:06:52 +02:00
Nicola Murino
63972edb96
httpd: add a test case for StripSlash middleware 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-08 10:46:17 +02:00
Nicola Murino
da0eb5037e
httpd: skip StripSlash middleware for URL ending with multiple slashes 
Fixes #1434

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-08 10:40:08 +02:00
Nicola Murino
4b685b21a2
configs: fix backward compatibility 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-07 22:02:10 +02:00
Nicola Murino
f05fe78737
ssh: refactor host key algorithm restriction 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-07 16:07:19 +02:00
Nicola Murino
19a95d8c55
httpfs: limit body size 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-07 11:28:16 +02:00
Nicola Murino
64c7588a44
sftpd: improve permissions checking test cases 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-10-04 19:41:50 +02:00
Nicola Murino
c55196a525
portable mode: allow to set config dir/config file 
The -c flag is no longer used for SSH commands.
This is a backward incompatible change

Fixes #1423

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-09-25 18:20:09 +02:00
Nicola Murino
e54fd46a9e
SQL providers: make sure we don't exceed the allowed placeholders 
Fixes #1415

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-09-12 19:15:40 +02:00
Nicola Murino
fac022090d
httpd: disable directory index for static files 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-09-08 19:55:45 +02:00
Nicola Murino
aefcea034a
validate API key scope 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-09-08 18:54:11 +02:00
Nicola Murino
5ef0a2ed4b
External/plugin auth: check for password change after empty response 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-26 12:04:41 +02:00
Nicola Murino
a592e388cd
ftpd: advertise TLS support only if really enabled 
if we don't have a global TLS configuration, advertise TLS only on the
bindings where it is configured instead of failing at runtime

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-21 15:48:29 +02:00
Nicola Murino
b94ec7597c
smtp: set default port to 587 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-20 22:32:03 +02:00
Nicola Murino
c437f0ad76
logger: update mail adapter 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-20 21:42:41 +02:00
Nicola Murino
397cad93df
httpd request logger: set log level based on the status code 
Fixes #1393

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-20 19:01:16 +02:00
Nicola Murino
62b87083bb
ftpd: add support for TLS session reuse 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-20 16:00:36 +02:00
Nicola Murino
de35eb77cb
ftpd: use the extra field for certificate authentication 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-18 14:39:28 +02:00
Nicola Murino
163662a65a
eventmanager: replace placeholders in multipart filename 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-14 14:34:25 +02:00
Nicola Murino
6395fa0b67
eventmanager: fix params copy 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-12 19:03:47 +02:00
Nicola Murino
f03fdd1155
add object metadata to notification events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-12 18:51:47 +02:00
Nicola Murino
6c482a248d
portable mode: add WebClient 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-10 19:02:55 +02:00
Nicola Murino
25450d9efc
fix event validation test case 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-09 19:00:59 +02:00
Nicola Murino
60cc07bc81
eventmanager: add DELETE method to HTTP notifications 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-09 18:44:17 +02:00
Nicola Murino
5011002d84
allow to set umask on *NIX platforms 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-08 18:30:42 +02:00
Nicola Murino
63212bb033
remove the legacy PreferServerCipherSuites configuration 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-07 19:11:48 +02:00
Nicola Murino
830116bcf2
shares: allow to force an expiration date 
this is a soft requirement, users can reactivate expired shares by
updating the expiration date

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-07 19:07:20 +02:00
Nicola Murino
ea96fe9a26
postgres provider: add support for "allow" and "prefer" SSL modes 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-05 20:01:14 +02:00
Nicola Murino
54a76e8c45
s3: remove usage of the now deprecated EndpointResolver 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-05 11:58:01 +02:00
Nicola Murino
132d18d5d1
sftpd: fix keyboard interactive test cases 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-04 21:32:14 +02:00
Nicola Murino
75e6ef6132
sftpd: remove diffie-hellman-group18-sha512 KEX 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-04 21:10:39 +02:00
Nicola Murino
af0d7b48ad
sftpd: refactor multi-step authentication 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-08-04 20:56:23 +02:00
Nicola Murino
0413c0471c
add a specific permission to manage folders 
creating/updating folders embedded in users is no longer supported.

Fixes #1349

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-23 18:48:49 +02:00
Nicola Murino
00366fce07
shares: respect password strength 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-16 16:51:38 +02:00
Nicola Murino
e88172dd7e
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-15 12:35:30 +02:00
Nicola Murino
4f8794a255
file patterns: fix denied except rules 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-08 17:02:47 +02:00
Nicola Murino
5e5a09f164
make GroupConditionPatterns uniform with the accepted PR 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-07-02 10:57:29 +02:00
David Stäheli
f78e4b0443
check for multiple inverse matches (#1332) 
* update check for multiple inverse matches

Signed-off-by: David Stäheli <mistrdave@gmail.com>

* after match, direct return true

Signed-off-by: David Stäheli <mistrdave@gmail.com>

* apply same behaviour to checkEventGroupConditionPatterns

Signed-off-by: David Stäheli <mistrdave@gmail.com>

* fix spellmistake of function name

Signed-off-by: David Stäheli <mistrdave@gmail.com>

---------

Signed-off-by: David Stäheli <mistrdave@gmail.com>
 2023-07-02 09:49:21 +02:00
Nicola Murino
51d8f3b436
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-29 14:42:16 +02:00
Nicola Murino
d1e4ee7bc8
config: fix loading commands args from env vars 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-25 21:31:57 +02:00
Nicola Murino
76964a6b85
check second factor after plugin authentication 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-25 07:16:26 +02:00
Nicola Murino
66f360e66c
back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-18 07:15:39 +02:00
Nicola Murino
a38ce460bb
WebClient: show user quota 
Also remove per-source data transfer limits. This was an
oversight

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-16 21:06:21 +02:00
Nicola Murino
1c1b76011f
WebAdmin: relax key prefix validation 
try to automatically fix leading and trailing slashes

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-12 19:13:16 +02:00
Nicola Murino
957d3a7b4d
CockroachDB: use unordered_unique_rowid for primary keys 
sequential values in a primary key does not perform as well

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-10 18:23:35 +02:00
Nicola Murino
d7d7b0bbf0
dataprovider: fix sql for CockroachDB 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-10 15:32:51 +02:00
Nicola Murino
99424bfa58
squash database migrations 
SQLite: remove AUTOINCREMENT from primary keys. It is not needed.

Postgres: switch from serial to identity for primary keys.
This means Postgres < 10 will not work in v2.6.x

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-10 13:06:24 +02:00
Nicola Murino
324d695d93
try to fix a randomly failing test case 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-08 19:41:58 +02:00
Nicola Murino
9d60972743
WebClient: redirect to the requested URL after login 
This feature is only useful and enabled for file manager urls

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-08 18:14:47 +02:00
Nicola Murino
f938af5a61
WebClient: fix sorting by size 
Fixes #1313

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-04 21:45:31 +02:00
Nicola Murino
3499edd5c2
WebUI: remove leading and trailing spaces from user-submitted input 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-04 08:45:17 +02:00
Nicola Murino
9470cd6e69
multi-node installations: use a different backup path for each node 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-03 17:54:24 +02:00
Nicola Murino
74e5999c63
added support for verifying sha256/sha512 passwords hash 
this simplifies the migration of users from some proprietary products

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-03 16:58:45 +02:00
Nicola Murino
48939b2b4f
add XOAUTH2 
start the countdown, let's see how long it takes for your favorite
Go-based proprietary SFTP server to notice this change, copy the SFTPGo
code and thus violate its license, and announce the same feature :)

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-03 16:17:32 +02:00