19 commits

Author	SHA1	Message	Date
Nicola Murino	02db00d008	dataprovider: add naming rules ... naming rules allow to support case insensitive usernames, trim trailing and leading white spaces, and accept any valid UTF-8 characters in usernames. If you were enabling `skip_natural_keys_validation` now you need to set `naming_rules` to `1` Fixes #687 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-31 18:01:37 +01:00
Nicola Murino	6d3d94a01f	move kms implementation outside the sdk package ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-06 10:11:47 +01:00
Nicola Murino	78233ff9a3	web UI/REST API: add password reset ... In order to reset the password from the admin/client user interface, an SMTP configuration must be added and the user/admin must have an email address. You can prohibit the reset functionality on a per-user basis by using a specific restriction. Fixes #597	2021-11-13 13:25:43 +01:00
Nicola Murino	4aa9686e3b	refactor custom actions ... SFTPGo is now fully auditable, all fs and provider events that change something are notified and can be collected using hooks/plugins. There are some backward incompatible changes for command hooks	2021-10-10 13:08:05 +02:00
Nicola Murino	ba1febba73	rework user and admin profiles ... users and admins can now also update their email and description	2021-09-29 18:46:15 +02:00
Nicola Murino	7bad65a43e	user: add a permission to disable changing api key authentication ... also implement the missing APIs to enable/disable api key authentication	2021-09-06 18:46:35 +02:00
Nicola Murino	59140a6d51	add additional data to MFA secrets and fix pointers management	2021-09-05 14:10:12 +02:00
Nicola Murino	8a4c21b64a	add builtin two-factor auth support ... The builtin two-factor authentication is based on time-based one time passwords (RFC 6238) which works with Authy, Google Authenticator and other compatible apps.	2021-09-04 12:11:04 +02:00
Nicola Murino	fe953d6b38	REST API: add support for API key authentication	2021-08-17 18:08:32 +02:00
Nicola Murino	bd5191dfc5	add experimental plugin system	2021-07-11 15:26:51 +02:00
Nicola Murino	076b2f0ee0	modules: add v2 support	2021-06-26 07:31:41 +02:00
Manuel Reithuber	f19937b715	move Filesystem config validation to vfs	2021-06-19 12:24:43 +02:00
Nicola Murino	43182fc25e	OpenAPI: add users API ... These new APIs match the web client features. I'm aware that some API do not follow REST best practises. I want to avoid things likes "/user/folders/<path>" where "path" must be encoded and making it optional create issues, so I defined resources as query parameters instead of path parameters	2021-06-05 16:07:09 +02:00
Nicola Murino	d6dc3a507e	extend virtual folders support to all storage backends ... Fixes #241	2021-03-21 19:15:47 +01:00
Nicola Murino	88122ba2f8	update jwtauth to v5	2021-03-05 18:50:45 +01:00
Nicola Murino	267d9f1831	web ui: allow to create folders from a template	2021-02-04 19:09:43 +01:00
Nicola Murino	4f609cfa30	JWT: add token audience ... a token released for API audience cannot be used for web pages and vice-versa	2021-02-02 09:14:10 +01:00
Nicola Murino	41a1af863e	OpenAPI: minor changes	2021-01-18 13:24:38 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00