44 commits

Author	SHA1	Message	Date
Nicola Murino	796ea1dde9	allow to store temporary sessions within the data provider ... so we can persist password reset codes, OIDC auth sessions and tokens. These features will also work in multi-node setups without sicky sessions now Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-05-19 19:49:51 +02:00
Nicola Murino	504cd3efda	add groups support ... Using groups simplifies the administration of multiple accounts by letting you assign settings once to a group, instead of multiple times to each individual user. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-04-25 15:49:11 +02:00
Nicola Murino	ca32cd5e0e	allow placeholders for add/update users and folders ... remove session token for S3, a temporary token is useless for our usage Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-27 16:32:21 +02:00
Nicola Murino	5c2fd8d52a	add support for a start directory ... Fixes #705 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-03-03 12:44:56 +01:00
Nicola Murino	4519bffa39	S3: add support for assume role ... Fixes #736 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-28 20:19:13 +01:00
Nicola Murino	e18ad55067	S3: add support for session tokens ... Fixes #736 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-25 15:30:04 +01:00
Nicola Murino	4e9dae6fa4	allow to cache external authentications ... Fixes #733 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-25 11:51:10 +01:00
Nicola Murino	8bbf54d2b6	azure blobs: add support for multipart downloads ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-21 19:01:31 +01:00
Nicola Murino	cd35636939	S3: add a timeout for single part uploads ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-02-01 12:15:56 +01:00
Nicola Murino	02db00d008	dataprovider: add naming rules ... naming rules allow to support case insensitive usernames, trim trailing and leading white spaces, and accept any valid UTF-8 characters in usernames. If you were enabling `skip_natural_keys_validation` now you need to set `naming_rules` to `1` Fixes #687 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-31 18:01:37 +01:00
Nicola Murino	1df1225eed	add support for data transfer bandwidth limits ... with total limit or separate settings for uploads and downloads and overrides based on the client's IP address. Limits can be reset using the REST API Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-30 11:42:36 +01:00
Nicola Murino	c3831de94e	add hide policy to pattern filters ... Disallowed files/dirs can be completly hidden. This may cause performance issues for large directories Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-15 17:16:49 +01:00
Nicola Murino	6d3d94a01f	move kms implementation outside the sdk package ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-06 10:11:47 +01:00
Nicola Murino	a6fe802370	move kms definitions to the sdk package ... This is the first step to make the sdk a separate module Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-01-04 12:49:30 +01:00
Nicola Murino	7d8823307f	defender: add provider driver ... Fixes #616	2021-12-25 12:08:07 +01:00
Nicola Murino	0bb141960f	add support for different bandwidth limits based on client IP	2021-12-10 18:43:26 +01:00
Nicola Murino	24b0352eb6	GCS: add ACL support	2021-11-15 21:57:41 +01:00
Nicola Murino	ee5c5e033d	S3: add ACL support ... Fixes #610	2021-11-13 16:05:40 +01:00
Maharanjan	0661876e99	Added email field for user account	2021-09-25 19:06:13 +02:00
Nicola Murino	da5a061b65	add basic REST APIs for data retention ... Fixes #495	2021-09-25 12:20:31 +02:00
Nicola Murino	be3857d572	dataprovider: add timestamp fields for users and admins	2021-08-19 15:51:43 +02:00
Nicola Murino	fe953d6b38	REST API: add support for API key authentication	2021-08-17 18:08:32 +02:00
Nicola Murino	85a47810ff	S3: expose more properties, possible backward incompatible change ... Before these changes we implictly set S3ForcePathStyle if an endpoint was provided. This can cause issues with some S3 compatible object storages and must be explicitly set now. AWS is also deprecating this setting https://aws.amazon.com/it/blogs/aws/amazon-s3-path-deprecation-plan-the-rest-of-the-story/	2021-07-23 16:56:48 +02:00
Nicola Murino	e1a2451c22	s3: allow to configure the chunk download timeout	2021-07-11 18:39:45 +02:00
Nicola Murino	bd5191dfc5	add experimental plugin system	2021-07-11 15:26:51 +02:00
Nicola Murino	076b2f0ee0	modules: add v2 support	2021-06-26 07:31:41 +02:00
Nicola Murino	9d3d7db29c	azblob: store SAS URL as kms.Secret	2021-06-11 22:27:36 +02:00
Nicola Murino	feec2118bb	improve defender and quotas REST API	2021-06-07 21:52:43 +02:00
Nicola Murino	43182fc25e	OpenAPI: add users API ... These new APIs match the web client features. I'm aware that some API do not follow REST best practises. I want to avoid things likes "/user/folders/<path>" where "path" must be encoded and making it optional create issues, so I defined resources as query parameters instead of path parameters	2021-06-05 16:07:09 +02:00
Nicola Murino	25a44030f9	actions: add pre-download and pre-upload ... Downloads and uploads can be denied based on hook response	2021-05-26 07:48:37 +02:00
Nicola Murino	02bb09ec01	remove deprecated file extensions filters ... these filters were deprecated a long time ago, everyone should use patterns filters now	2021-05-22 12:28:05 +02:00
Nicola Murino	23d9ebfc91	add a basic front-end web interface for end-users ... Fixes #339 #321 #398	2021-05-06 21:35:43 +02:00
Nicola Murino	0823928f98	allow to disable login filesystem checks ... SFTPGo requires that the user's home directory, virtual folder root, and intermediate paths to virtual folders exist to work properly. If you already know that the required directories exist, disabling these checks will speed up login.	2021-04-05 17:57:30 +02:00
Nicola Murino	fdf3f23df5	allow to disable some hooks on a per-user basis ... This way you can, for example, mix external and internal users	2021-04-04 22:32:25 +02:00
Nicola Murino	ea26d7786c	sftpfs: add buffering support ... this way we improve performance over high latency networks	2021-04-03 16:00:55 +02:00
Nicola Murino	d6dc3a507e	extend virtual folders support to all storage backends ... Fixes #241	2021-03-21 19:15:47 +01:00
Nicola Murino	055506e518	sftpfs: add an option to disable concurrent reads	2021-03-06 15:41:40 +01:00
Nicola Murino	a6e36e7cad	FTP: improve TLS certificate authentication ... For each user you can now configure: - TLS certificate auth - TLS certificate auth and password - Password auth For TLS auth, the certificate common name must match the name provided using the "USER" FTP command	2021-02-28 12:10:40 +01:00
Nicola Murino	ca3e15578e	Use new methods in the io and os packages instead of ioutil ones ... ioutil is deprecated in Go 1.16 and SFTPGo is an application, not a library, we have no reason to keep compatibility with old Go versions. Go 1.16 fix some cifs related issues too.	2021-02-25 21:53:04 +01:00
Nicola Murino	2146b83343	data providers: add filesystem to folder ... ... ... and some descriptive fields. The filesystem support for virtual folders will be implemented in future commits	2021-02-24 19:40:29 +01:00
Nicola Murino	b1ce6eb85b	web admin: allow to set an empty password for SFTPGo users	2021-02-15 19:38:53 +01:00
Nicola Murino	78bf808322	virtual folders: change dataprovider structure ... This way we no longer depend on the local file system path and so we can add support for cloud backends in future updates	2021-02-01 19:04:15 +01:00
Nicola Murino	80f5ccd357	web admin: add backup/restore	2021-01-22 19:42:18 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00