Nicola Murino
0ae2354fed
JWT: replace jwtauth/jwx with lightweight wrapper around go-jose
...
We replaced the jwtauth and jwx libraries with a minimal custom wrapper
around go-jose because we don’t need the full feature set provided by jwx.
Implementing our own wrapper simplifies the codebase and improves
maintainability.
Moreover, go-jose depends only on the standard library, resulting in a
leaner dependency that still meets all our requirements.
This change also reduces the SFTPGo binary size by approximately 1MB
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2025-10-08 18:10:39 +02:00
Nicola Murino
a5dd529d88
node token: embed permissions directly in JWT
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2025-08-22 15:57:41 +02:00
Nicola Murino
ec90b61bb4
allow to configure JWT tokens and cookies duration
...
Fixes #1839
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-12-18 18:33:37 +01:00
Nicola Murino
c56be285a5
replace fnv with sha256
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-12-14 14:42:43 +01:00
Nicola Murino
6a7c8df1ef
use GenerateOpaqueString also for node secrets
...
this method will use rand.Text() with Go 1.24
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-11-27 19:05:19 +01:00
Nicola Murino
21bd8c5660
node: use a plain string as key
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-10-28 18:34:36 +01:00
Nicola Murino
5d24d665bd
add an util method to convert []byte to string
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-05-08 19:01:58 +02:00
Nicola Murino
784b7585c1
remove end year from Copyright notice in files
...
so we don't have to update all the files every year
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-01-01 11:31:45 +01:00
Nicola Murino
19a95d8c55
httpfs: limit body size
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-10-07 11:28:16 +02:00
Nicola Murino
0190d0b849
update Copyright year
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-01-03 10:18:30 +01:00
Nicola Murino
e17975ed7d
dataprovider: include port in node name and make it a hash
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-12-20 16:40:32 +01:00
Nicola Murino
5a222807b7
add roles
...
Fixes #837
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-11-16 19:04:50 +01:00
Nicola Murino
2636fedce8
node token: add/pars admin username
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-10-02 09:51:47 +02:00
Nicola Murino
76e89d07d4
add support for inter-node communications
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-09-25 19:48:55 +02:00