Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-06 14:20:55 +03:00
Code Issues Packages Projects Releases Wiki Activity
1,535 Commits 9 Branches 53 Tags
e446e3392d22118a8abe0ea427c490cbfbc52791
Commit Graph

494 Commits

Author SHA1 Message Date
Nicola Murino
e446e3392d check second factor after plugin authentication 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-25 07:18:42 +02:00
Nicola Murino
a503feaab6 set version to 2.5.2 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-17 18:33:56 +02:00
Nicola Murino
cba894987c WebClient: show user quota 
Also remove per-source data transfer limits. This was an
oversight

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-16 21:31:15 +02:00
Nicola Murino
1d120bdd26 WebAdmin: don't show hidden deny policy for allowed patterns 
The deny policy only applies to denied patterns, showing an allowed
pattern as hidden will confuse users

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-14 19:01:22 +02:00
Nicola Murino
3a3df5670d WebAdmin: relax key prefix validation 
try to automatically fix leading and trailing slashes

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-12 19:15:02 +02:00
Nicola Murino
97bbf37af4 branch 2.5.x 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-09 19:47:17 +02:00
Nicola Murino
9d60972743 WebClient: redirect to the requested URL after login 
This feature is only useful and enabled for file manager urls

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-08 18:14:47 +02:00
Nicola Murino
48939b2b4f add XOAUTH2 
start the countdown, let's see how long it takes for your favorite
Go-based proprietary SFTP server to notice this change, copy the SFTPGo
code and thus violate its license, and announce the same feature :)

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-06-03 16:17:32 +02:00
Nicola Murino
8339fee69d smtp: add debug option 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-30 19:11:28 +02:00
Nicola Murino
ae7954eee2 WebUIs: fix disclaimer paths 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-26 17:59:38 +02:00
Nicola Murino
b2781e0bfc WebAdmin: Set TLS username to empty string if disabled 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-25 18:24:51 +02:00
Nicola Murino
e11473cf52 config: limit the size for env files 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-25 05:25:28 +02:00
Nicola Murino
f8f8962ccb file patterns: evaluate allowed filters before the denied ones 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-24 19:56:53 +02:00
Nicola Murino
2238043efd EventManager: add email field placeholder 
Fixes #1288

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-24 19:08:51 +02:00
Nicola Murino
5b4a1bda2e set version to 2.5.1 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-20 17:39:23 +02:00
Nicola Murino
3f94f6d0e7 proxy protocol: fix require policy in some edge cases 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-20 16:08:57 +02:00
Nicola Murino
d28a53a6cf webdav: fix caching with external auth/plugins 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-20 12:39:07 +02:00
Nicola Murino
963cec124e oidc docs: fix typo 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-18 18:43:46 +02:00
Nicola Murino
52ec36dbd6 update pwd reset template. Update deps and use new features from the OIDC library 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-17 18:10:57 +02:00
Nicola Murino
adad8e658b osfs: add optional buffering 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-16 18:08:14 +02:00
Nicola Murino
4eded56d5f add support for log events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-12 18:34:59 +02:00
Nicola Murino
05c54614b2 back to development 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-05 19:12:50 +02:00
Nicola Murino
32020e236f set version to 2.5.0 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-05-03 13:07:48 +02:00
Nicola Murino
b9cf6e5083 Add the link to the new Azure offer for Windows 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-26 13:53:05 +02:00
Nicola Murino
ee5b7290a0 EventManager: add more debug logs for HTTP actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-25 20:27:40 +02:00
Nicola Murino
fd6a44c562 OpenAPI: fix filesystem action types enum 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-23 14:46:09 +02:00
Nicola Murino
712f2053a4 REST API dumpdata: allow to specify the resources to dump 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-18 18:11:23 +02:00
Nicola Murino
466f2e88b3 WebClient: fix rename 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-15 14:16:26 +02:00
Nicola Murino
3cb53b2c33 fix cross folder copy 
also update css/js deps and other minor changes

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-13 18:23:42 +02:00
Nicola Murino
f03f1b0156 improve test cases coverage 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-08 10:01:48 +02:00
Nicola Murino
184b99d500 user: add a field to indicate whether the password is set 
A structure similar to the one used for secrets would be better,
but we don't want to break backwards compatibility.

Also document that omitting the password field in the request body
will preserve the current password when updating a user using the
REST API. Added a test case for this.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-06 18:22:09 +02:00
Nicola Murino
74f05e5305 EventManager: check the parent directory before creating a zip 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-03 18:53:13 +02:00
Nicola Murino
aefa7f77c2 add a link to the Terraform provider 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-04-02 18:48:56 +02:00
Nicola Murino
084d4109b8 WebAdmin: ensure to sanitize data before rendering 
Thanks to Polina Zvorykina, VK for reporting this issue

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-28 12:28:38 +02:00
Nicola Murino
b60d3f680e user as JSON: rename 2fa_protocols to two_factor_protocols 
This is a breaking change, but it is necessary to make JSON serialization of
users more compatible.
For example, Terraform does not allow JSON fields starting with numbers

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-26 15:57:53 +02:00
Nicola Murino
ee90bfb506 add unixcrypt build tag 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-26 10:33:30 +02:00
Nicola Murino
e17068a76f postgres provider: add support for load balancing 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-25 09:29:13 +01:00
Nicola Murino
354fc9b3d6 OIDC: allow to extract custom fields from sub-structs 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-23 18:15:07 +01:00
Nicola Murino
e29f6857db EventManager: add IDP login trigger and check account action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-22 19:02:54 +01:00
Nicola Murino
2710207779 update jquery, go deps, actions/setup-go to v4 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-15 18:44:08 +01:00
Nicola Murino
b719d03ebe WebAdmin: improve fs config layout 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-12 15:08:32 +01:00
Nicola Murino
14242b59a2 oidc docs: add env vars config 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-09 18:58:36 +01:00
Nicola Murino
dad346cee8 add codeql 
update deps

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-05 16:38:29 +01:00
Nicola Murino
0423e8f157 httpd: generate defender events for failed 2fa and password resets 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-04 13:55:48 +01:00
Nicola Murino
4ba3ae876d allow to set password strength at user/group level 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-02 09:11:30 +01:00
Nicola Murino
662164c7ff smtp: require templates only if a server is configured or in service mode 
This regression was introduced after recent changes to allow setting the SMTP
settings from the WebAdmin UI.

Fixes #1217

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-03-01 18:31:02 +01:00
Nicola Murino
fad6af11e5 don't expose error messages from pre-actions and post connect hooks 
always return a generic error instead to avoid leaking internal info

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-28 18:01:09 +01:00
Nicola Murino
a23fdea9e3 ftpd: allow hostnames as passive IP 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-27 19:19:50 +01:00
Nicola Murino
561976bcd0 WebClient: return proper status code for http.MaxBytesError 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-27 11:03:05 +01:00
Nicola Murino
874776bd12 also capture logs for pre-login and check-password commands 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-02-26 15:15:34 +01:00