74 commits

Author	SHA1	Message	Date
Nicola Murino	796ea1dde9	allow to store temporary sessions within the data provider ... so we can persist password reset codes, OIDC auth sessions and tokens. These features will also work in multi-node setups without sicky sessions now Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-19 19:49:51 +02:00
Nicola Murino	1e0b3a2a8c	web client: add share mode read/write ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-09 19:09:43 +02:00
Nicola Murino	504cd3efda	add groups support ... Using groups simplifies the administration of multiple accounts by letting you assign settings once to a group, instead of multiple times to each individual user. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-25 15:49:11 +02:00
Nicola Murino	002a06629e	refactoring of user session counters ... Fixes #792 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-14 19:07:41 +02:00
Nicola Murino	d8de0faef5	allow to require two-factor auth for users ... Fixes #721 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-06 16:57:13 +01:00
Nicola Murino	5c2fd8d52a	add support for a start directory ... Fixes #705 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-03 12:44:56 +01:00
Nicola Murino	c6b8644828	OIDC: execute pre-login hook after IDP authentication ... so the SFTPGo users can be auto-created using the hook Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-19 10:53:35 +01:00
Nicola Murino	9382db751c	make HTTP shares browsable ... if you share a single folder with read scope, you can now browse the share and download single files Fixes #674 See #677 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-06 16:46:43 +01:00
Nicola Murino	1df1225eed	add support for data transfer bandwidth limits ... with total limit or separate settings for uploads and downloads and overrides based on the client's IP address. Limits can be reset using the REST API Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-30 11:42:36 +01:00
Nicola Murino	7c68b03d07	move plugin handling outside the sdk package ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-05 11:37:45 +01:00
Nicola Murino	4d7a4aa99a	check rename source and target	2021-12-28 12:03:52 +01:00
Nicola Murino	7d8823307f	defender: add provider driver ... Fixes #616	2021-12-25 12:08:07 +01:00
Nicola Murino	ced73ed04e	REST API: add an option to create missing dirs	2021-12-19 12:14:53 +01:00
Nicola Murino	cc73bb811b	change log level from warn to error where appropriate ... Fixes #649	2021-12-16 19:53:00 +01:00
Nicola Murino	6092b6628e	logs: use info level for login related messages ... so enabling debug level is not required, for example only to understand that a user exceeded the allowed sessions. Also set the cache update frequency as documented	2021-12-02 19:36:42 +01:00
Nicola Murino	3f3591bae0	web client: allow to preview images and pdf ... pdf depends on browser support. It does not work on mobile devices.	2021-11-25 19:24:32 +01:00
Nicola Murino	8a8298ad46	web client: improve file upload	2021-11-22 12:25:36 +01:00
Nicola Murino	78233ff9a3	web UI/REST API: add password reset ... In order to reset the password from the admin/client user interface, an SMTP configuration must be added and the user/admin must have an email address. You can prohibit the reset functionality on a per-user basis by using a specific restriction. Fixes #597	2021-11-13 13:25:43 +01:00
Nicola Murino	3bc58f5988	WebClient/REST API: add sharing support	2021-11-06 14:13:20 +01:00
Nicola Murino	74fc3aaf37	REST API: add events search	2021-10-23 15:47:21 +02:00
Nicola Murino	64e87d64bd	web client UI: allow to edit plain text files ... Fixes #567	2021-10-09 14:17:28 +02:00
Nicola Murino	ba1febba73	rework user and admin profiles ... users and admins can now also update their email and description	2021-09-29 18:46:15 +02:00
Nicola Murino	b5639a51fd	don't generate defender events for HTTP/WebDAV requests with no auth ... it is quite common for HTTP clients to send a first request without the Authorization header and then send the credentials after receiving a 401 response. We don't want to generate defender events in this case	2021-09-11 18:23:11 +02:00
Nicola Murino	7bad65a43e	user: add a permission to disable changing api key authentication ... also implement the missing APIs to enable/disable api key authentication	2021-09-06 18:46:35 +02:00
Nicola Murino	fe953d6b38	REST API: add support for API key authentication	2021-08-17 18:08:32 +02:00
Nicola Murino	bd5191dfc5	add experimental plugin system	2021-07-11 15:26:51 +02:00
Nicola Murino	076b2f0ee0	modules: add v2 support	2021-06-26 07:31:41 +02:00
Nicola Murino	c1b862394d	move other errors to utils package	2021-06-19 13:06:01 +02:00
Manuel Reithuber	f19937b715	move Filesystem config validation to vfs	2021-06-19 12:24:43 +02:00
Nicola Murino	43182fc25e	OpenAPI: add users API ... These new APIs match the web client features. I'm aware that some API do not follow REST best practises. I want to avoid things likes "/user/folders/<path>" where "path" must be encoded and making it optional create issues, so I defined resources as query parameters instead of path parameters	2021-06-05 16:07:09 +02:00
Nicola Murino	423d8306be	webclient: allow to download multiple files as zip	2021-05-30 23:07:46 +02:00
Nicola Murino	d6dc3a507e	extend virtual folders support to all storage backends ... Fixes #241	2021-03-21 19:15:47 +01:00
Nicola Murino	78bf808322	virtual folders: change dataprovider structure ... This way we no longer depend on the local file system path and so we can add support for cloud backends in future updates	2021-02-01 19:04:15 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00
Nicola Murino	d6b3acdb62	add REST API for the defender	2021-01-02 19:33:24 +01:00
Nicola Murino	bcf0fa073e	telemetry server: add optional https and authentication	2020-12-18 16:04:42 +01:00
Nicola Murino	a6985075b9	add sftpfs storage backend ... Fixes #224	2020-12-12 10:31:09 +01:00
Nicola Murino	50982229e1	REST API: add a method to get the status of the services ... added a status page to the built-in web admin	2020-12-08 11:18:34 +01:00
Nicola Murino	4a88ea5c03	add Data At Rest Encryption support	2020-12-05 13:48:13 +01:00
Nicola Murino	634b723b5d	add KMS support ... Fixes #226	2020-11-30 21:46:34 +01:00
Nicola Murino	4bb9d07dde	user: add a free text field ... Fixes #230	2020-11-25 22:26:34 +01:00
Nicola Murino	dccc583b5d	add a dedicated struct to store encrypted credentials ... also gcs credentials are now encrypted, both on disk and inside the provider. Data provider is automatically migrated and load data will accept old format too but you should upgrade to the new format to avoid future issues	2020-11-22 21:53:04 +01:00
Nicola Murino	a6355e298e	add support for limit files using shell like patterns ... Fixes #209	2020-11-15 22:04:48 +01:00
Nicola Murino	5ff8f75917	add Azure Blob support	2020-10-25 08:18:48 +01:00
Nicola Murino	01850c7399	REST API: remove status from ApiResponse ... it duplicates the header HTTP status	2020-09-08 09:45:21 +02:00
Nicola Murino	3925c7ff95	REST API/Web admin: add a parameter to disconnect a user after an update ... This way you can force the user to login again and so to use the updated configuration. A deleted user will be automatically disconnected. Fixes #163 Improved some docs too.	2020-09-01 16:10:26 +02:00
Nicola Murino	f3228713bc	Allow individual protocols to be enabled per user ... Fixes #154	2020-08-17 12:49:20 +02:00
Nicola Murino	fa5333784b	add a maximum allowed size for a single upload	2020-08-16 20:17:02 +02:00
Nicola Murino	4e41a5583d	refactoring: add common package ... The common package defines the interfaces that a protocol must implement and contain code that can be shared among supported protocols. This way should be easier to support new protocols	2020-07-24 23:39:38 +02:00
Nicola Murino	8cb47817f6	Add API endpoint to set current quota ... Fixes #130	2020-06-20 12:38:04 +02:00