Mickael Kerjean
8f7ac67db7
fix (plg_backend_tmp): prevent local filesystem access
2022-08-23 17:33:52 +10:00
Mickael Kerjean
fea8c024c9
feature (middleware): add environment variable in template bind
...
This enable binding environment variable for things like hostname that
would look like '{{ .ENV_NAME }}.example.com'
2022-08-19 23:10:06 +10:00
Mickael Kerjean
77767af252
maintain (plg_backend_nop): additional debug log
2022-08-19 12:13:52 +10:00
Mickael Kerjean
ee6256e075
fix (plg_plugin_webdav): IIS compat
2022-08-09 19:08:14 +10:00
Mickael Kerjean
a75a33d49b
fix (share): access shared link multiple times issue
...
When trying to access a shared link protected with a password many
times over, user would see an ErrNotValid (case 2 from ShareVerifyProof in
ctrl/share.go). With this commit, we are making sure the proof cookie
doesn't grow more when trying to access the same link over and over again
2022-07-20 00:25:39 +10:00
Mickael Kerjean
1d47e557fc
debug (log): expose additional info on debug more
2022-07-19 22:56:27 +10:00
Mickael Kerjean
9f7550938b
fix (iframe): proof cookie should be iframe friendly
...
before this commit, we couldn't embed a shared link protected by a
password as it would show the following error: "Unauthorized Shared
space".
2022-07-16 18:59:53 +10:00
Mickael Kerjean
9a1de6253c
feature (logging): additional logging info in debug mode
2022-07-14 13:27:21 +10:00
Mickael Kerjean
b2690e906b
feature (plg_backend_ftp): alternative ftp backend
2022-06-12 02:25:31 +10:00
Mickael Kerjean
d265d5b5e0
fix (panic): concurrent read issue
2022-05-19 00:45:56 +10:00
Mickael Kerjean
77b64fcfcc
improve (ldap): trim prefix for ldap backend connection
2022-05-19 00:42:06 +10:00
Mickael Kerjean
f72b630e50
fix (csp): csp policy on cat
...
The issue this is fixing is for the plg_opener_htmlframe which does
open html documents as an iframe. Without this, we couldn't load any
js at all which was causing issue to render things like markdown via
external libs and such
2022-05-13 08:43:47 +10:00
Mickael Kerjean
2e10feff4f
feature (manifest): generate application manifest server side
...
the app manifest used to be statically generated meaning it would show
Filestash whenever user tries to install as an app. Now admin can
change that to show something else
2022-05-11 22:23:02 +10:00
Mickael Kerjean
4ec94902b5
fix (healthz): pass when using either http / https
2022-05-11 00:46:05 +10:00
Mickael Kerjean
bf72ee1bd2
feature (plugin): css plugin enhancement
2022-05-11 00:45:41 +10:00
Mickael Kerjean
0988f7ccb0
fix (onlyoffice): issue with http/https starter
2022-05-10 20:51:19 +10:00
Mickael Kerjean
f71e07a53a
fix (plg_starter_https): unused deps
2022-05-09 00:59:28 +10:00
Mickael Kerjean
19df27edda
cleanup (plg_starter_https): remove dead code
2022-05-06 01:05:25 +10:00
Mickael Kerjean
cc65e1d6dd
fix (sftp): disable insecure access on sftp
...
for those use case where we want to force the client to send the
fingerprint of the public key
2022-04-30 13:35:21 +10:00
Mickael Kerjean
a0d434cd96
fix (sftp): easier format for host key verification
2022-04-30 13:15:54 +10:00
Mickael Kerjean
054c92c71f
fix (plg_starter_https): broken https plugin
...
the https plugin was broken. Instead of trying to do everything, we've
refactor the plugin to only do self signed certificate.
let's encrypt is causing a lot of weird issues as it won't work in a range of vps
provider so we considered it out of scope for this plugin. If we're to
integrate with lets encrypt in the future, this should be done as
another starter plugin
2022-04-30 12:35:04 +10:00
Mickael Kerjean
d94c0fef1a
fix (log): log to file when using Log.Stdout
2022-04-27 00:37:39 +10:00
Mickael Kerjean
e2b1b4f477
fix (constant): license info as code
2022-04-25 20:03:13 +10:00
Mickael Kerjean
f9e51482d5
feature (css): inject css as a plugin
2022-04-25 00:34:44 +10:00
Mickael Kerjean
b9279fa77f
improve (iframe): warning with unsupported use case
2022-04-21 01:28:58 +10:00
Mickael Kerjean
b3762eff6a
fix (regression): regression caught by e2e tests
2022-04-21 01:13:15 +10:00
Mickael Kerjean
629a80c836
fix ( #469 ): allow cross domain iframe
2022-04-20 08:04:09 +10:00
Mickael Kerjean
84aaea4008
fix (console): provide a fix for #461 and #463
2022-04-07 08:52:07 +10:00
Mickael Kerjean
9b60ac6301
feature (log): enable more log types
2022-04-07 08:02:24 +10:00
Mickael Kerjean
d1890ecb33
cleanup (config): remove dead code
2022-04-07 07:35:26 +10:00
Mickael Kerjean
3d0fc67b50
cleanup (main): cleanup server main func
2022-04-05 08:05:56 +10:00
Mickael Kerjean
614ec4ff6a
Merge branch 'master' of ssh://github.com/mickael-kerjean/filestash
2022-04-02 20:09:06 +11:00
Mickael Kerjean
0e4fc75b35
cleanup (plugin): list of prebuild plugin
2022-04-02 20:07:05 +11:00
John Long
367907d88a
update (plg_backend_locale): directory permission - #435
...
https://github.com/mickael-kerjean/filestash/issues/434
2022-03-20 23:02:23 +11:00
Mickael Kerjean
91b85779d6
fix (error): error display when ls failed
2022-03-03 17:21:29 +11:00
Mickael Kerjean
2c926df4f6
cleanup (samba): cleanup code in samba plugin
2022-02-23 22:12:24 +11:00
Mickael Kerjean
6028a4363b
fix (samba): prevent panic in nil pointer dereference
...
the samba lib was crashing with nil pointer dereference when username
is an empty string ?!? Too lazy to provide a better fix so this will
do for now
2022-02-22 23:45:56 +11:00
Mickael Kerjean
7d56a72019
fix (samba): make samba backend more intuitive
2022-02-22 08:05:54 +11:00
Mickael Kerjean
8d5c574a75
cleanup (plugin): update builtin plugin
2022-02-18 18:44:24 +11:00
Mickael Kerjean
6e3392a046
feature (office): enable / disable download button in only office
2022-02-18 18:26:22 +11:00
Mickael Kerjean
f66408b6da
fix (starter): issues in starter plugin
2022-02-17 08:35:24 +11:00
Mickael Kerjean
8018454dff
cleanup (plugin): deprecated starter plugin
...
That plugin wouldn't work as expected and result in some angry email
from people who gave it a try so I'm getting rid of it to focus on the
other core plugin that make more sense for the project
2022-02-16 08:53:12 +11:00
Mickael Kerjean
394ae29c03
fix (starter): make it possible for starter plugin to complete
2022-02-16 00:09:21 +11:00
Quentin Bramas
dec9e2f60d
fix (s3): s3 rename - #421
...
* fix MV function in the S3 backend
* fix space encoding
Co-authored-by: Quentin Bramas <bramas@unistra.fr>
2022-02-06 20:29:35 +11:00
Mickael Kerjean
9171b6fb5e
refactoring (config): separate config loading and saving
...
The idea is that we can now plug and play different logic for loading
and saving configuration data via a go generator built from plugins
2022-02-04 00:51:57 +11:00
Mickael Kerjean
625e0ed160
feature (sso): support for templating in attribute mapping
2022-02-01 22:22:23 +11:00
Mickael Kerjean
82e12ca1a6
fix ( #422 ): retrocompatibility with authentication middleware
2022-02-01 17:24:27 +11:00
Mickael Kerjean
7b95dde25f
fix ( #426 ): username case sensitive on sftp
...
better strategy is to:
1. attempt the login "as is"
2. attempt the lowercase version in case of error
2022-01-31 23:34:17 +11:00
Mickael Kerjean
71dd675c7c
fix (ldap): ldap labels
2022-01-31 23:19:26 +11:00
alexanghh
ab71c339dd
feature (cookie split): split session cookie onto fixed size chunks - #422
...
* Fixed invalid cookie issue when session object is serialized into a string larger than 4KB.
* Update session.go
Removed comments
* Update share.go
Removed comments
2022-01-27 09:07:02 +11:00
