42 commits

Author	SHA1	Message	Date
Nicola Murino	b6873768b2	replace strings.Split with SplitSeq ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-05-31 19:03:41 +02:00
Nicola Murino	d95d773570	oidc: allow login if the password method is disabled ... isLoggedInWithOIDC returns false before login so we need to add a specific check Fixes #1879 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-03-29 20:28:49 +01:00
Nicola Murino	ff13be4616	zip creation: avoid stat if not strictly required ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2025-01-03 11:43:09 +01:00
Nicola Murino	e21c989038	logs: add a specific log structure for successful logins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-12-07 10:29:33 +01:00
Nicola Murino	3dd412f6e3	WebAdmin and REST API: remove too granular permissions ... Our permissions system for admin users is too granular and some permissions overlap. For example, you can define an administrator with the "manage_system" permission and not with the "manage_admins" or "manage_user" permission, but the "manage_system" permission allows you to restore a backup and then create users and administrators. The following permissions will be removed: "manage_admins", "manage_apikeys", "manage_system", "retention_checks", "manage_event_rules", "manage_roles", "manage_ip_lists". Now you need to add the "*" permission to replace the removed granular permissions because the removed permissions allow actions that should only be allowed to super administrators. There is no point in having separate, overlapping permissions. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-10 10:46:28 +01:00
Nicola Murino	eba4c93efd	user: add additional emails ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-10-11 19:20:51 +02:00
Nicola Murino	d94f80c8da	replace utils.Contains with slices.Contains ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-24 18:27:13 +02:00
Nicola Murino	b5c821795a	allow to customize name and log from the WebUI ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-24 09:14:27 +02:00
Nicola Murino	01b666a78f	WebUIs: check login conditions before allowing password reset ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-14 19:34:42 +02:00
Nicola Murino	50a3c0d911	defender: allow to impose a delay between login attempts ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-18 10:35:54 +02:00
Nicola Murino	a1af33c6aa	WebClient: allow to set TLS certificates ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-03 18:30:03 +02:00
Nicola Murino	456517af87	notifier plugin: add support for login succeeded events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-10 18:39:08 +02:00
Nicola Murino	8b2188fcb6	remove some useless nil checks ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-02 18:49:07 +01:00
Nicola Murino	799fdd7098	allow IPs in defender safe list to exceed max per-host connections ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-27 18:22:21 +01:00
Nicola Murino	de089e51fd	Web: allow to require password change and two-factor for admins ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-21 20:45:10 +01:00
Nicola Murino	1ff55bbfa7	add DirLister interface ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-15 20:53:56 +01:00
Nicola Murino	e5836c8118	WebUI: add a JSON helper function ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-04 18:16:10 +01:00
Nicola Murino	87451560e3	normalize common database errors ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-17 17:36:35 +01:00
Nicola Murino	784b7585c1	remove end year from Copyright notice in files ... so we don't have to update all the files every year Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-01 11:31:45 +01:00
Nicola Murino	3e47a4f664	WebAdmin: use the new theme for the login and setup page ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-30 19:12:22 +01:00
Nicola Murino	3121c35437	WebClient: do not silently overwrite files/directories ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-28 18:43:07 +01:00
Nicola Murino	c71f0426ae	WebClient WIP: add support for localizations ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-12-10 16:40:13 +01:00
Nicola Murino	af0d7b48ad	sftpd: refactor multi-step authentication ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-08-04 20:56:23 +02:00
Nicola Murino	8f934f7c82	email action: allow to configure Bcc ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-25 19:55:27 +02:00
Nicola Murino	e0d9b8bddf	WebClient: update password change timestamp after password reset ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-16 19:15:45 +02:00
Nicola Murino	4eded56d5f	add support for log events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-05-12 18:34:59 +02:00
Nicola Murino	712f2053a4	REST API dumpdata: allow to specify the resources to dump ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-04-18 18:11:23 +02:00
Nicola Murino	0423e8f157	httpd: generate defender events for failed 2fa and password resets ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-03-04 13:55:48 +01:00
Nicola Murino	dba088daed	printf: replace %#v with the more explicit %q ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-27 19:19:57 +01:00
Nicola Murino	561976bcd0	WebClient: return proper status code for http.MaxBytesError ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-27 11:03:05 +01:00
Nicola Murino	1b1745b7f7	move IP/Network lists to the data provider ... this is a backward incompatible change, all previous file based IP/network lists will not work anymore Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-02-09 09:33:33 +01:00
Nicola Murino	c0fe08b597	defender: allow to set a different score for "no auth tried" events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-25 18:49:03 +01:00
Nicola Murino	7b5bebc588	EventManager: add "on-demand" trigger ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-21 15:41:24 +01:00
Nicola Murino	0190d0b849	update Copyright year ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2023-01-03 10:18:30 +01:00
Nicola Murino	1f9cf194fe	add role to events ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-12-03 11:45:27 +01:00
Nicola Murino	5a222807b7	add roles ... Fixes #837 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-11-16 19:04:50 +01:00
Nicola Murino	2636fedce8	node token: add/pars admin username ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-10-02 09:51:47 +02:00
Nicola Murino	76e89d07d4	add support for inter-node communications ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-25 19:48:55 +02:00
Nicola Murino	f19691250d	zip downloads: make zip entries relative to the current dir when possible ... Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-19 17:06:42 +02:00
Nicola Murino	63e3891808	WebClient/HTTP API: ensure to check home dir, when needed, in multi-node setups ... Behind a load balancer with no sticky sessions enabled is not enough to check the home dir only when the client logs in Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-09-07 16:23:56 +02:00
Nicola Murino	e3c5cf981f	download as zip: improve filename ... include username and also filename/directory name if the user downloads a single file/directory Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-26 19:05:42 +02:00
Nicola Murino	c8158e14e0	move SFTPGo package to the internal folder ... SFTPGo is a daemon and command line tool, not a library. The public API are provided by the SDK Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2022-07-24 16:18:54 +02:00

Renamed from httpd/api_utils.go (Browse further)