Backup_Repos/filestash
1
0
Fork 0
mirror of https://github.com/mickael-kerjean/filestash synced 2026-01-03 14:25:15 +01:00
Code Issues Projects Releases Wiki Activity
1056 commits 4 branches 6 tags 133 MiB
Commit graph

534 commits

Author SHA1 Message Date
Mickael Kerjean
bd9deb858d feature (crypto): nonce generator as a counter 2022-09-09 23:22:47 +10:00
Mickael Kerjean
7e5ec42f6c maintain (config): openup 2 methods for Config for plugins 
This is for plugins to do more fine grained stuff with the global
Config object
 2022-09-09 15:12:14 +10:00
Mickael Kerjean
d53cbefc54 fix (plg_image_ascii): reasonable content type 2022-09-08 15:19:10 +10:00
Mickael Kerjean
bb7ea98f02 fix (sync): concurrent map read and map write 2022-09-08 14:55:26 +10:00
Mickael Kerjean
bfe809d5ab cleanup (plugin): disable plugin that don't seem to be used 2022-09-07 00:51:32 +10:00
Mickael Kerjean
b1c1f9e0f2 feature (api): api configuration 2022-09-07 00:50:23 +10:00
Mickael Kerjean
3a63eb0777 feature (plg_image_ascii): image ascii transform 
The idea here is to be able to use curl and have Filestash to render
image in a terminal friendly fashion
 2022-09-06 22:27:12 +10:00
Mickael Kerjean
549d6805f0 feature (api): prepare api for public use 2022-09-05 11:59:28 +10:00
Mickael Kerjean
c7e40e42db feature (429): rate limit authentication endpoints 2022-09-04 22:26:03 +10:00
Mickael Kerjean
952f45097e feature (rest): setup for rest api 2022-09-04 18:39:34 +10:00
Mickael Kerjean
dd6f0ca407 feature (cancellation): logic to cancel request in client and server 2022-09-02 17:26:32 +10:00
Mickael Kerjean
0bfab6eff2 feature (report): activity report plugin 2022-09-02 00:58:43 +10:00
Mickael Kerjean
bb9fb89d44 fix (concurrency): prevent concurrent map writes 
when booting up, we have a lot of Set in the Config alongside a lot of
Get, Let's block all the concurrent Set
 2022-09-01 23:28:29 +10:00
Mickael Kerjean
231e5ba18d feature (auditing): pluggable auditing in admin console 2022-09-01 07:37:59 +10:00
Mickael Kerjean
75696a8088 fix (plg_backend_tmp): incorrect permission when creating folder 2022-08-31 00:40:23 +10:00
Mickael Kerjean
a82177e719 maintain (ctx): pass app context as pointer 2022-08-30 17:27:23 +10:00
Mickael Kerjean
b62a9dd423 fix (os): wrapper for file related operation via the os package 2022-08-30 01:46:06 +10:00
Mickael Kerjean
8bbd4a2f57 fix (symlink): evaluate symlinks before opening file 2022-08-29 20:10:14 +10:00
Mickael Kerjean
28c2e5070d fix (#500): ldap issue as reported in #500 2022-08-28 23:41:20 +10:00
Mickael Kerjean
bb91f589e1 fix (open): handle non existing local file 2022-08-28 22:18:38 +10:00
Mickael Kerjean
4f0741111b feature (auth): add machine_id in template binding 2022-08-28 22:04:50 +10:00
Mickael Kerjean
812446ac23 fix (symlink): wrap os.OpenFile to prevent symlinks expansion 
os.Open and os.OpenFile make it possible to open a wide range of
files as seen in https://cs.opensource.google/go/go/+/refs/tags/go1.19:src/os/types.go;l=35

We only want to handle regular files and folders, no socket, device,
symlink, ....
 2022-08-28 21:43:43 +10:00
Mickael Kerjean
633f17a63b feature (plg_authenticate_passthrough): populate session data 2022-08-26 21:03:26 +10:00
Mickael Kerjean
4f4fcfc16e fix (ftp): prevent connection close when uploading / downloading 2022-08-26 15:53:49 +10:00
Mickael Kerjean
f7484b7aab fix (plg_backend_tmp): sanity check for user input 2022-08-23 18:07:44 +10:00
Mickael Kerjean
8f7ac67db7 fix (plg_backend_tmp): prevent local filesystem access 2022-08-23 17:33:52 +10:00
Mickael Kerjean
fea8c024c9 feature (middleware): add environment variable in template bind 
This enable binding environment variable for things like hostname that
would look like '{{ .ENV_NAME }}.example.com'
 2022-08-19 23:10:06 +10:00
Mickael Kerjean
77767af252 maintain (plg_backend_nop): additional debug log 2022-08-19 12:13:52 +10:00
Mickael Kerjean
ee6256e075 fix (plg_plugin_webdav): IIS compat 2022-08-09 19:08:14 +10:00
Mickael Kerjean
a75a33d49b fix (share): access shared link multiple times issue 
When trying to access a shared link protected with a password many
times over, user would see an ErrNotValid (case 2 from ShareVerifyProof in
ctrl/share.go). With this commit, we are making sure the proof cookie
doesn't grow more when trying to access the same link over and over again
 2022-07-20 00:25:39 +10:00
Mickael Kerjean
1d47e557fc debug (log): expose additional info on debug more 2022-07-19 22:56:27 +10:00
Mickael Kerjean
9f7550938b fix (iframe): proof cookie should be iframe friendly 
before this commit, we couldn't embed a shared link protected by a
password as it would show the following error: "Unauthorized Shared
space".
 2022-07-16 18:59:53 +10:00
Mickael Kerjean
9a1de6253c feature (logging): additional logging info in debug mode 2022-07-14 13:27:21 +10:00
Mickael Kerjean
b2690e906b feature (plg_backend_ftp): alternative ftp backend 2022-06-12 02:25:31 +10:00
Mickael Kerjean
d265d5b5e0 fix (panic): concurrent read issue 2022-05-19 00:45:56 +10:00
Mickael Kerjean
77b64fcfcc improve (ldap): trim prefix for ldap backend connection 2022-05-19 00:42:06 +10:00
Mickael Kerjean
f72b630e50 fix (csp): csp policy on cat 
The issue this is fixing is for the plg_opener_htmlframe which does
open html documents as an iframe. Without this, we couldn't load any
js at all which was causing issue to render things like markdown via
external libs and such
 2022-05-13 08:43:47 +10:00
Mickael Kerjean
2e10feff4f feature (manifest): generate application manifest server side 
the app manifest used to be statically generated meaning it would show
Filestash whenever user tries to install as an app. Now admin can
change that to show something else
 2022-05-11 22:23:02 +10:00
Mickael Kerjean
4ec94902b5 fix (healthz): pass when using either http / https 2022-05-11 00:46:05 +10:00
Mickael Kerjean
bf72ee1bd2 feature (plugin): css plugin enhancement 2022-05-11 00:45:41 +10:00
Mickael Kerjean
0988f7ccb0 fix (onlyoffice): issue with http/https starter 2022-05-10 20:51:19 +10:00
Mickael Kerjean
f71e07a53a fix (plg_starter_https): unused deps 2022-05-09 00:59:28 +10:00
Mickael Kerjean
19df27edda cleanup (plg_starter_https): remove dead code 2022-05-06 01:05:25 +10:00
Mickael Kerjean
cc65e1d6dd fix (sftp): disable insecure access on sftp 
for those use case where we want to force the client to send the
fingerprint of the public key
 2022-04-30 13:35:21 +10:00
Mickael Kerjean
a0d434cd96 fix (sftp): easier format for host key verification 2022-04-30 13:15:54 +10:00
Mickael Kerjean
054c92c71f fix (plg_starter_https): broken https plugin 
the https plugin was broken. Instead of trying to do everything, we've
refactor the plugin to only do self signed certificate.

let's encrypt is causing a lot of weird issues as it won't work in a range of vps
provider so we considered it out of scope for this plugin. If we're to
integrate with lets encrypt in the future, this should be done as
another starter plugin
 2022-04-30 12:35:04 +10:00
Mickael Kerjean
d94c0fef1a fix (log): log to file when using Log.Stdout 2022-04-27 00:37:39 +10:00
Mickael Kerjean
e2b1b4f477 fix (constant): license info as code 2022-04-25 20:03:13 +10:00
Mickael Kerjean
f9e51482d5 feature (css): inject css as a plugin 2022-04-25 00:34:44 +10:00
Mickael Kerjean
b9279fa77f improve (iframe): warning with unsupported use case 2022-04-21 01:28:58 +10:00
Mickael Kerjean
b3762eff6a fix (regression): regression caught by e2e tests 2022-04-21 01:13:15 +10:00
Mickael Kerjean
629a80c836 fix (#469): allow cross domain iframe 2022-04-20 08:04:09 +10:00
Mickael Kerjean
84aaea4008 fix (console): provide a fix for #461 and #463 2022-04-07 08:52:07 +10:00
Mickael Kerjean
9b60ac6301 feature (log): enable more log types 2022-04-07 08:02:24 +10:00
Mickael Kerjean
d1890ecb33 cleanup (config): remove dead code 2022-04-07 07:35:26 +10:00
Mickael Kerjean
3d0fc67b50 cleanup (main): cleanup server main func 2022-04-05 08:05:56 +10:00
Mickael Kerjean
614ec4ff6a Merge branch 'master' of ssh://github.com/mickael-kerjean/filestash 2022-04-02 20:09:06 +11:00
Mickael Kerjean
0e4fc75b35 cleanup (plugin): list of prebuild plugin 2022-04-02 20:07:05 +11:00
John Long
367907d88a
update (plg_backend_locale): directory permission - #435 
https://github.com/mickael-kerjean/filestash/issues/434
 2022-03-20 23:02:23 +11:00
Mickael Kerjean
91b85779d6 fix (error): error display when ls failed 2022-03-03 17:21:29 +11:00
Mickael Kerjean
2c926df4f6 cleanup (samba): cleanup code in samba plugin 2022-02-23 22:12:24 +11:00
Mickael Kerjean
6028a4363b fix (samba): prevent panic in nil pointer dereference 
the samba lib was crashing with nil pointer dereference when username
is an empty string ?!? Too lazy to provide a better fix so this will
do for now
 2022-02-22 23:45:56 +11:00
Mickael Kerjean
7d56a72019 fix (samba): make samba backend more intuitive 2022-02-22 08:05:54 +11:00
Mickael Kerjean
8d5c574a75 cleanup (plugin): update builtin plugin 2022-02-18 18:44:24 +11:00
Mickael Kerjean
6e3392a046 feature (office): enable / disable download button in only office 2022-02-18 18:26:22 +11:00
Mickael Kerjean
f66408b6da fix (starter): issues in starter plugin 2022-02-17 08:35:24 +11:00
Mickael Kerjean
8018454dff cleanup (plugin): deprecated starter plugin 
That plugin wouldn't work as expected and result in some angry email
from people who gave it a try so I'm getting rid of it to focus on the
other core plugin that make more sense for the project
 2022-02-16 08:53:12 +11:00
Mickael Kerjean
394ae29c03 fix (starter): make it possible for starter plugin to complete 2022-02-16 00:09:21 +11:00
Quentin Bramas
dec9e2f60d
fix (s3): s3 rename - #421 
* fix MV function in the S3 backend

* fix space encoding

Co-authored-by: Quentin Bramas <bramas@unistra.fr>
 2022-02-06 20:29:35 +11:00
Mickael Kerjean
9171b6fb5e refactoring (config): separate config loading and saving 
The idea is that we can now plug and play different logic for loading
and saving configuration data via a go generator built from plugins
 2022-02-04 00:51:57 +11:00
Mickael Kerjean
625e0ed160 feature (sso): support for templating in attribute mapping 2022-02-01 22:22:23 +11:00
Mickael Kerjean
82e12ca1a6 fix (#422): retrocompatibility with authentication middleware 2022-02-01 17:24:27 +11:00
Mickael Kerjean
7b95dde25f fix (#426): username case sensitive on sftp 
better strategy is to:
1. attempt the login "as is"
2. attempt the lowercase version in case of error
 2022-01-31 23:34:17 +11:00
Mickael Kerjean
71dd675c7c fix (ldap): ldap labels 2022-01-31 23:19:26 +11:00
alexanghh
ab71c339dd
feature (cookie split): split session cookie onto fixed size chunks - #422 
* Fixed invalid cookie issue when session object is serialized into a string larger than 4KB.

* Update session.go

Removed comments

* Update share.go

Removed comments
 2022-01-27 09:07:02 +11:00
Mickael Kerjean
42770afc69 cleanup (plg_backend_tmp): cleanup the tmp backend 2022-01-25 18:25:20 +11:00
Mickael Kerjean
53f744c42b plugin (add): add temporary file backend to default list 2022-01-25 18:19:35 +11:00
Mickael Kerjean
c543ab19db fix (sso): sso cookie issues 2022-01-25 18:18:49 +11:00
Mickael Kerjean
5f50d276a1 feature (plg_backend_tmp): backend to quickly store temporary files 2022-01-25 18:16:39 +11:00
Mickael Kerjean
8d68bd798a feature (plg_backend_office): local backend with versioning 2022-01-25 08:37:47 +11:00
Mickael Kerjean
55c3965b5d feature (plg_backend_local): add path 2022-01-25 08:35:23 +11:00
Mickael Kerjean
3a896f936c fix (compile): compile errors in existing plugins 2022-01-22 08:05:30 +11:00
Mickael Kerjean
0edfdfda86 fix (zip): store error in error.log when zipping content 2022-01-21 01:50:19 +11:00
Mickael Kerjean
5c086bc6cf feature (plg_backend_nop): add a few more files for testing 2022-01-20 17:18:22 +11:00
Mickael Kerjean
03996a5239 fix (zip): fix a leak and improve config handling 2022-01-20 17:17:03 +11:00
Mickael Kerjean
a95fad4d13 feature (static): upate a few static pages 
- /about now shows a list of installed plugin
- 404 page is more "funky"
 2022-01-20 17:15:49 +11:00
Mickael Kerjean
ae1adb3dad clean (code): cleanup 2022-01-19 22:58:07 +11:00
Mickael Kerjean
50920396b7 fix (zip): additional debug information on zip 2022-01-19 18:07:18 +11:00
Mickael Kerjean
9e1f71761a fix (sftp): case in username 2022-01-19 10:04:56 +11:00
Mickael Kerjean
b6c71e9333 fix (config): hide non registered config values 2022-01-17 03:37:37 +11:00
Mickael Kerjean
9d477b6110 performance (scoring): x10 faster search matching 2022-01-16 23:09:28 +11:00
Mickael Kerjean
4e7579ab65 feature (search): support for '$' 2022-01-16 20:29:58 +11:00
Mickael Kerjean
57a60fc838 feature (next): support for next in oauth2 backends 2022-01-15 17:28:48 +11:00
Mickael Kerjean
73c2386868 documentation (plugin): add sample code for search plugin 2022-01-15 15:50:35 +11:00
Mickael Kerjean
073e99886a documentation (plugin): sample plugin for search 2022-01-15 15:42:04 +11:00
Mickael Kerjean
f2ba98bf4a documentation (authorisation): example of authorisation plugin 2022-01-15 15:36:56 +11:00
Mickael Kerjean
ebb4247a77 merge 2022-01-15 03:25:36 +11:00
Mickael Kerjean
d53fdeea71 feature (search): search relevance when using stateless plugin 2022-01-15 03:13:32 +11:00
Mildred Ki'Lya
cf827673c0
feature (dav): support for servers who have the username in their URL - #418 
In the URL parameters for DAV backends (WebDAV and CalDAV/CardDAV) the
%{username} string is interpolated to the URL encoded username. It
shouldn't conflict with legitimate URLS as %{ is not a valid URL escape
sequence.

This is needed for some servers where the URL contains the username
such as Cyrus IMAP.
 2022-01-14 22:51:53 +11:00
Mickael Kerjean
a91df1637d feature (search): search as a plugin 2022-01-14 16:38:42 +11:00