Commit graph

144 commits

Author SHA1 Message Date
Mickael Kerjean
231e5ba18d feature (auditing): pluggable auditing in admin console 2022-09-01 07:37:59 +10:00
Mickael Kerjean
a82177e719 maintain (ctx): pass app context as pointer 2022-08-30 17:27:23 +10:00
Mickael Kerjean
4f0741111b feature (auth): add machine_id in template binding 2022-08-28 22:04:50 +10:00
Mickael Kerjean
fea8c024c9 feature (middleware): add environment variable in template bind
This enable binding environment variable for things like hostname that
would look like '{{ .ENV_NAME }}.example.com'
2022-08-19 23:10:06 +10:00
Mickael Kerjean
a75a33d49b fix (share): access shared link multiple times issue
When trying to access a shared link protected with a password many
times over, user would see an ErrNotValid (case 2 from ShareVerifyProof in
ctrl/share.go). With this commit, we are making sure the proof cookie
doesn't grow more when trying to access the same link over and over again
2022-07-20 00:25:39 +10:00
Mickael Kerjean
1d47e557fc debug (log): expose additional info on debug more 2022-07-19 22:56:27 +10:00
Mickael Kerjean
9f7550938b fix (iframe): proof cookie should be iframe friendly
before this commit, we couldn't embed a shared link protected by a
password as it would show the following error: "Unauthorized Shared
space".
2022-07-16 18:59:53 +10:00
Mickael Kerjean
9a1de6253c feature (logging): additional logging info in debug mode 2022-07-14 13:27:21 +10:00
Mickael Kerjean
f72b630e50 fix (csp): csp policy on cat
The issue this is fixing is for the plg_opener_htmlframe which does
open html documents as an iframe. Without this, we couldn't load any
js at all which was causing issue to render things like markdown via
external libs and such
2022-05-13 08:43:47 +10:00
Mickael Kerjean
2e10feff4f feature (manifest): generate application manifest server side
the app manifest used to be statically generated meaning it would show
Filestash whenever user tries to install as an app. Now admin can
change that to show something else
2022-05-11 22:23:02 +10:00
Mickael Kerjean
4ec94902b5 fix (healthz): pass when using either http / https 2022-05-11 00:46:05 +10:00
Mickael Kerjean
e2b1b4f477 fix (constant): license info as code 2022-04-25 20:03:13 +10:00
Mickael Kerjean
f9e51482d5 feature (css): inject css as a plugin 2022-04-25 00:34:44 +10:00
Mickael Kerjean
b9279fa77f improve (iframe): warning with unsupported use case 2022-04-21 01:28:58 +10:00
Mickael Kerjean
b3762eff6a fix (regression): regression caught by e2e tests 2022-04-21 01:13:15 +10:00
Mickael Kerjean
629a80c836 fix (#469): allow cross domain iframe 2022-04-20 08:04:09 +10:00
Mickael Kerjean
f66408b6da fix (starter): issues in starter plugin 2022-02-17 08:35:24 +11:00
Mickael Kerjean
9171b6fb5e refactoring (config): separate config loading and saving
The idea is that we can now plug and play different logic for loading
and saving configuration data via a go generator built from plugins
2022-02-04 00:51:57 +11:00
Mickael Kerjean
625e0ed160 feature (sso): support for templating in attribute mapping 2022-02-01 22:22:23 +11:00
Mickael Kerjean
82e12ca1a6 fix (#422): retrocompatibility with authentication middleware 2022-02-01 17:24:27 +11:00
alexanghh
ab71c339dd
feature (cookie split): split session cookie onto fixed size chunks - #422
* Fixed invalid cookie issue when session object is serialized into a string larger than 4KB.

* Update session.go

Removed comments

* Update share.go

Removed comments
2022-01-27 09:07:02 +11:00
Mickael Kerjean
c543ab19db fix (sso): sso cookie issues 2022-01-25 18:18:49 +11:00
Mickael Kerjean
0edfdfda86 fix (zip): store error in error.log when zipping content 2022-01-21 01:50:19 +11:00
Mickael Kerjean
03996a5239 fix (zip): fix a leak and improve config handling 2022-01-20 17:17:03 +11:00
Mickael Kerjean
a95fad4d13 feature (static): upate a few static pages
- /about now shows a list of installed plugin
- 404 page is more "funky"
2022-01-20 17:15:49 +11:00
Mickael Kerjean
50920396b7 fix (zip): additional debug information on zip 2022-01-19 18:07:18 +11:00
Mickael Kerjean
57a60fc838 feature (next): support for next in oauth2 backends 2022-01-15 17:28:48 +11:00
Mickael Kerjean
a91df1637d feature (search): search as a plugin 2022-01-14 16:38:42 +11:00
Mickael Kerjean
f1c32880a3 refactoring (sso): sso middleware 2022-01-10 00:42:16 +11:00
Mickael Kerjean
632100ac0f clean (code): cleanup the laundry on the server 2022-01-07 01:25:43 +11:00
Mickael Kerjean
e5800c6c3b feature (sso): authentication middleware 2022-01-06 20:22:26 +11:00
Mickael Kerjean
b8bc56aea2 fix (share): access when redirection is enabled 2021-11-05 18:23:03 +11:00
Mickael Kerjean
095876d450 feature (config): make cookie timeout configurable by admin 2021-10-30 22:31:14 +11:00
Mickael Kerjean
e13262dd36 feature (oauth): redirection link for oauth 2021-10-13 22:54:15 +11:00
Mickael Kerjean
fd395b0f04 improve (upload): remove multipart for faster upload 2021-10-03 03:18:48 +11:00
Mickael Kerjean
be09a0f60f fix (access): UI should show/hide according to plugin meta 2021-09-16 23:21:36 +10:00
Mickael Kerjean
1c337f5c57 improve (log): additional debugging 2021-09-14 22:37:37 +10:00
Mickael Kerjean
c2992b1185 improve (log): additional logging 2021-08-28 15:44:08 +10:00
Mickael Kerjean
f7a4e52703 maintain (go): go format 2021-08-22 16:47:09 +10:00
Mickael Kerjean
b26bdfa1c6 merge 2021-08-22 13:11:22 +10:00
robertDawson2
d581e8b4ca fix (multipart): remove multipart form data - #401
* added line to fix caching issue on upload, where cache does not clear

* removed comments and added error logging line

Co-authored-by: Bobby Dawson <bobby@donorsearch.net>
2021-08-22 13:05:09 +10:00
Quentin Bramas
bbe21185b6
improve (upload): Limit memory usage when parsing multipart form data, so that large files are stored in disk (#382)
Co-authored-by: Quentin Bramas <bramas@unistra.fr>
2021-05-25 21:57:46 +10:00
thielepaul
d37497cd0e
fix(zip): close file after copying to zip (#388) 2021-04-06 20:47:15 +10:00
Mickael
cddbcfc6d1 feature (zip): configurable timeout on zip download 2021-03-29 23:44:24 +11:00
Mickael Kerjean
eb81398ce8 feature (zip): download file(s) at once 2021-03-21 23:01:10 +11:00
Mickael
0178630b7b fix (IE): show message for IE users 2021-03-04 21:12:20 +11:00
thielepaul
78c1c6b7b3
feature (css): allow users to set custom css in admin panel - #332 2020-10-19 01:26:00 +11:00
Mickael Kerjean
3bdbba92df fix (path): windows path bug #299 2020-08-31 14:13:16 +10:00
Mickael Kerjean
5b22a6015c feature (health): health check endpoint 2020-08-23 13:16:15 +10:00
Mickael Kerjean
fad90e4c06 feature (security): add well known security endpoint 2020-08-06 23:09:18 +10:00