84 commits

Author	SHA1	Message	Date
Nicola Murino	2f092d1289	fix: prevent path traversal via edge-level path normalization ... Moved path sanitization (backslash conversion and path cleaning) to the SFTP/FTP handlers before VFS routing and permission checks. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2026-03-07 12:03:59 +01:00
Nicola Murino	8c85a722a2	apply naming rules for related groups, roles and folders ... also enforce stricter validation rules for usernames/names Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-12-06 22:08:22 +01:00
Nicola Murino	22c875c0a1	sftpd: add support for OpenPubkey SSH ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-11-19 09:16:56 +01:00
Nicola Murino	ddbe40cefa	HTTPD, WebDAV: use http.ResponseController ... backport from Enterprise edition Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-08-02 18:00:45 +02:00
Nicola Murino	b6873768b2	replace strings.Split with SplitSeq ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-05-31 19:03:41 +02:00
Nicola Murino	11d8fffd1b	remove obsoletes build constraints ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-04-20 17:15:40 +02:00
Nicola Murino	2255c5f000	upgrade golangci-lint to v2 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-03-29 11:36:19 +01:00
Nicola Murino	bfe6c58133	don't allow DSA keys ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-12-18 19:01:15 +01:00
Nicola Murino	f30a9a2095	OIDC cookie: use a cryptographically secure random string ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-21 07:52:36 +01:00
Nicola Murino	f22ec2275f	fix new lint warnings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-10 20:58:22 +01:00
Nicola Murino	ef98ee7d11	don't allow admins to change their own permissions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-09 20:24:35 +01:00
Nicola Murino	03724d5eb1	remove fallback if rand.Reader fails ... Failing to read from rand.Reader essentially can't happen, and if it does is not possible to fallback securely, so just panic Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-09 18:44:25 +01:00
Nicola Murino	c69fbe6bf9	tls: allow to configure all supported TLS versions and ciphers ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-10-23 19:50:37 +02:00
Nicola Murino	d8691d1e1a	update translations ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-10-13 17:00:17 +02:00
Nicola Murino	14cabda5c2	update shortuid to v4 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-09-08 18:01:14 +02:00
Nicola Murino	68e62d3d9b	httpd: allow to use proxy protocol ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-08-10 21:02:38 +02:00
Nicola Murino	d94f80c8da	replace utils.Contains with slices.Contains ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-24 18:27:13 +02:00
Nicola Murino	bd5eb03d9c	replace hand-written slice utilities with methods from slices package ... SFTPGo depends on Go 1.22 so we can use slices package Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-24 18:17:55 +02:00
Nicola Murino	b5c821795a	allow to customize name and log from the WebUI ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-24 09:14:27 +02:00
Nicola Murino	0cddcba5a7	EventManager: add an action to rotate the log file ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-04 19:51:52 +02:00
Nicola Murino	3f2604d33f	ssh: use 3072-bits for the auto-generated RSA key ... This is the same as ssh-keygen Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-24 18:22:36 +02:00
Nicola Murino	eb0c6549c4	micro optimization ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-12 18:10:03 +02:00
Nicola Murino	5d24d665bd	add an util method to convert []byte to string ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-08 19:01:58 +02:00
Nicola Murino	0a8a0ee771	revert #450 ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-27 10:50:25 +02:00
Nicola Murino	cc9a0d4dc2	add time-based access restrictions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-17 11:30:03 +01:00
Nicola Murino	4d357a6a57	EventManager: allow to check for inactive users ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-04 19:48:10 +01:00
Nicola Murino	92911bda2b	require at least 2048 bits for RSA certificates/keys ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-25 11:12:57 +01:00
Nicola Murino	9a6a65931e	two-factor auth: fixed validation of conflicting settings ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-22 18:20:51 +01:00
Nicola Murino	de089e51fd	Web: allow to require password change and two-factor for admins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-21 20:45:10 +01:00
Nicola Murino	e61fb42cbc	remove metadata plugin ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-17 12:30:47 +01:00
Nicola Murino	1ff55bbfa7	add DirLister interface ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-15 20:53:56 +01:00
Nicola Murino	71e01ab26d	new WebAdmin: add test cases ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-03 12:42:05 +01:00
Nicola Murino	ad80d4e475	WIP new WebAdmin: event rules ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-01 20:32:43 +01:00
Nicola Murino	c85601146d	WIP new WebAdmin: event actions ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-31 20:49:25 +01:00
Nicola Murino	143d4611ba	WIP new WebAdmin: events page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-28 19:38:01 +01:00
Nicola Murino	caa1d70aab	WebUI: add a base template for info messages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-28 10:22:16 +01:00
Nicola Murino	a275ef17a8	relax Unix domain socket permissions so that they are group writable ... Fixes #1507 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-28 09:34:07 +01:00
Nicola Murino	69da5c10c6	WIP new WebAdmin: configs page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-27 12:48:15 +01:00
Nicola Murino	d01fccf28c	WIP new WebAdmin: maintenance page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-26 21:03:41 +01:00
Nicola Murino	9fcff83f8f	WIP new WebAdmin: status page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-25 19:26:51 +01:00
Nicola Murino	8180b75ef1	WIP new WebAdmin: IP lists pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-24 19:23:15 +01:00
Nicola Murino	d381304136	WIP new WebAdmin: admin/admins pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-22 20:22:41 +01:00
Nicola Murino	e38350e8b3	WIP new WebAdmin: role page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-21 17:19:25 +01:00
Nicola Murino	3f479c5537	WIP new WebAdmin: roles page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-21 16:49:04 +01:00
Nicola Murino	8648351fc7	WIP new WebAdmin: connections page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-20 15:35:05 +01:00
Nicola Murino	91802fad3e	WIP new WebAdmin: profile, change password, message pages ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-18 19:18:57 +01:00
Nicola Murino	87451560e3	normalize common database errors ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-17 17:36:35 +01:00
Nicola Murino	5ac99ee556	WIP new WebAdmin: folder page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-16 19:51:37 +01:00
Nicola Murino	d939a82225	user: add TLS certificates ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 21:36:23 +01:00
Nicola Murino	1a0f734a9c	WIP new WebAdmin: remove some hard coded strings ... so they can be localized Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 09:41:39 +01:00