deblan-mirror/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2026-03-14 14:25:52 +01:00
Code Issues Projects Releases Packages Wiki Activity
2,298 commits 9 branches 54 tags 41 MiB
Commit graph

2,298 commits

This branch
This branch
All branches
Author SHA1 Message Date
Nicola Murino
4a091d6c24
 		logger: remove journald support 
It was only used by the removed startsubsys mode.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-27 16:41:26 +01:00
Nicola Murino
891248e7c9
 		update deps 
added a slog/log adapter for ftpserverlib 0.28.0

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-27 11:48:06 +01:00
Nicola Murino
23d6e0dc3f
 		ftpd: add tls version, cipher and KEX to login log 
Fixes #2124

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 12:52:31 +01:00
Nicola Murino
44828629c5
 		update nfpm to 2.44.1 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 11:26:35 +01:00
Nicola Murino
9db27aa782
 		remove restoreTemplateVars as it is no longer used 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 11:23:40 +01:00
Nicola Murino
3d549ce702
 		squash database migrations 
also added shares_groups_mapping table, currently not used in the
open-source version

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-24 11:08:44 +01:00
Nicola Murino
1d9cc1e00f
 		ftpd: allow configuring a single passive port 
Fixes #2146

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-23 07:36:06 +01:00
Nicola Murino
babdee5be1
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-20 17:58:57 +01:00
Nicola Murino
a1e45277dd
 		fix TestMemoryOIDCManager test case 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-20 17:19:53 +01:00
dependabot[bot]
375650e9be Bump actions/download-artifact from 6 to 7 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-20 17:03:24 +01:00
dependabot[bot]
2edd13aef6 Bump actions/upload-artifact from 5 to 6 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-20 17:03:05 +01:00
Nicola Murino
130fc8e0a2
 		OIDC/OAuth2: increase auth state validity to 2 minutes 
Updates #2091

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-20 16:58:46 +01:00
Nicola Murino
0add546be3
 		user: fix group validation 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-17 20:01:16 +01:00
Nicola Murino
d0f4c6423e
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-11 08:44:52 +01:00
Nicola Murino
decdb187cf
 		Dockerfile: bump Alpine from 3.22 to 3.23 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-11 08:44:45 +01:00
Nicola Murino
21639b963c
 		OAuth2: add PKCE 
Fixes #2134

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-11 08:44:38 +01:00
Nicola Murino
d42bbef16e
 		refactor: minor improvements to ResolvePath 
Make ResolvePath more robust by avoiding implicit reliance on path
normalization performed by external libraries such as pkg/sftp and
ftpserverlib

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-11 08:44:30 +01:00
Nicola Murino
ac3e59562d
 		Enforce missing naming rule for actions and rules 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-07 10:35:13 +01:00
Nicola Murino
0cf9036f47
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-06 22:10:29 +01:00
Nicola Murino
8c85a722a2
 		apply naming rules for related groups, roles and folders 
also enforce stricter validation rules for usernames/names

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-12-06 22:08:22 +01:00
Nicola Murino
e608805b13
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-11-30 12:29:42 +01:00
dependabot[bot]
cbdc48ba7c Bump actions/checkout from 5 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-30 12:26:47 +01:00
Nicola Murino
90821ffc23
 		cloud backends: update part size limits 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-11-23 12:56:59 +01:00
Nicola Murino
32cc426cb9
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-11-20 09:00:39 +01:00
Nicola Murino
9fa18c37f7
 		fix lint warning 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-11-19 19:29:04 +01:00
Nicola Murino
4230da8e7d
 		s3: implement multipart downloads without using the S3 Manager 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-11-19 18:53:27 +01:00
Nicola Murino
22c875c0a1
 		sftpd: add support for OpenPubkey SSH 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-11-19 09:16:56 +01:00
Nicola Murino
74f8539247
 		pre-login hook: require either a full user object or no user modification 
The previous behavior was a leftover from an old refactor.
This change aligns the pre-login hook with the behavior of other hooks,
although it may break some edge cases that relied on the previous inconsistent
behavior.

Fixes #2107

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-11-18 20:09:22 +01:00
dependabot[bot]
3a42c70021 Bump golangci/golangci-lint-action from 8 to 9 
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 8 to 9.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v8...v9)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-18 18:54:01 +01:00
dependabot[bot]
59bd46a227 Bump actions/upload-artifact from 4 to 5 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-27 08:55:40 +01:00
dependabot[bot]
5039a0ee31 Bump actions/download-artifact from 5 to 6 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-27 08:55:02 +01:00
Nicola Murino
973b68a383
 		data provider: micro-optimization 
skip availability check when updating the node timestamp.
If the update succeeds, the data provider is healthy

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-26 09:48:47 +01:00
Nicola Murino
5ce9688780
 		enforce group-level password strength for users and shares 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-26 09:44:32 +01:00
Nicola Murino
accb9703d0
 		back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-26 08:14:24 +01:00
Nicola Murino
9c42ec34e8
 		pkgs update 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-26 08:12:32 +01:00
Nicola Murino
29c635a9a6
 		update version and deps v2.7.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-23 18:26:44 +02:00
Nicola Murino
e82d1bbef6
 		sftpgo.json: remove non-existent setting 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-16 19:40:29 +02:00
Nicola Murino
2c36077178
 		CI: use Go 1.25 for FreeBSD 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-16 19:39:49 +02:00
dependabot[bot]
4e91326124 Bump github/codeql-action from 3 to 4 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-15 08:42:08 +02:00
Nicola Murino
317f14f869
 		Docker: remove git and rsync 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-15 08:41:05 +02:00
Nicola Murino
a768dac29d
 		jwt: increase leeway and add some tests 
also export a constant for the Cookie name

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-11 14:14:21 +02:00
Nicola Murino
c4bc88cd2e
 		Docker: update to debian 13 
also update nfpm to 2.43.4

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-10 21:30:33 +02:00
Nicola Murino
90685d8ef2
 		fix random failure in test cases 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-10 21:30:05 +02:00
Nicola Murino
f21c3d2af2
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-09 20:46:29 +02:00
Nicola Murino
278f522e30
 		sftpgo.json: cleanup unsupported configuration keys 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-09 20:44:43 +02:00
Nicola Murino
fa70ff35c4
 		Add debug log to investigate intermittent test failure in CI 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-08 19:22:35 +02:00
Nicola Murino
314bb5c886
 		update deps and nfpm 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-08 18:51:52 +02:00
Nicola Murino
0ae2354fed
 		JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 
We replaced the jwtauth and jwx libraries with a minimal custom wrapper
around go-jose because we don’t need the full feature set provided by jwx.
Implementing our own wrapper simplifies the codebase and improves
maintainability.

Moreover, go-jose depends only on the standard library, resulting in a
leaner dependency that still meets all our requirements.

This change also reduces the SFTPGo binary size by approximately 1MB

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-08 18:10:39 +02:00
Nicola Murino
9ca35c3555
 		update deps 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-10-04 11:42:35 +02:00
Nicola Murino
69f2c70661
 		CI: use windows-latest and install iscc manually 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-09-28 18:41:39 +02:00