Commit Graph

114 Commits

Author SHA1 Message Date
Oleg Lobanov 23f84642e6
build: use make for building the project (#1304) 2021-03-04 00:10:08 +01:00
Alvaro Aleman d8f415f8ab
feat: allow to password protect shares (#1252)
This changes allows to password protect shares. It works by:
* Allowing to optionally pass a password when creating a share
* If set, the password + salt that is configured via a new flag will be
  hashed via bcrypt and the hash stored together with the rest of the
  share
* Additionally, a random 96 byte long token gets generated and stored
  as part of the share
* When the backend retrieves an unauthenticated request for a share that
  has authentication configured, it will return a http 401
* The frontend detects this and will show a login prompt
* The actual download links are protected via an url arg that contains
  the previously generated token. This allows us to avoid buffering the
  download in the browser and allows pasting the link without breaking
  it
2021-03-02 12:00:18 +01:00
Oleg Lobanov 019ce80fc5
fix: don't allow to remove root user 2021-01-11 22:33:36 +01:00
WeidiDeng 6914063853
feat: allow disabling file detections by reading header (#1175) 2021-01-07 11:30:17 +01:00
WeidiDeng fb5b28d9cb
feat: download shared subdirectory (#1184)
Co-authored-by: Oleg Lobanov <oleg@lobanov.me>
2020-12-28 17:35:29 +01:00
WeidiDeng 677bce376b
feat: add sharing management (#1178) (closes #1000) 2020-12-24 19:02:28 +01:00
WeidiDeng f62806f6c9
fix: check user input to prevent permission elevation (#1196) (closes #1195) 2020-12-24 18:22:48 +01:00
Oleg Lobanov 58835b7e53
fix: move files between different volumes (closes #1177) 2020-12-24 17:50:27 +01:00
Oleg Lobanov 586d198d47
fix: fix hanging when reading a named pipe file (closes #1155) 2020-11-24 11:37:31 +01:00
Julien Loir e8b4e9af46
feat: add single click mode (#1139) 2020-11-23 19:06:37 +01:00
Tiger Nie 10e399b3c3
feat: add hide dotfiles param (#1148) 2020-11-20 11:51:28 +01:00
Ramires Viana 7096b3dab9 fix: empty folder in archive 2020-11-04 15:56:27 +00:00
Ramires Viana e119bc55ea feat: shared folder file listing 2020-11-04 15:56:05 +00:00
Ramires Viana 1ce3068a99 fix: resource rename action invalid path 2020-11-03 12:30:56 +00:00
Xabi ad99bf1801
fix: fix panic when accessing nonexistent .js file in static path (#1105) 2020-10-02 15:09:03 +02:00
Keagan McClelland 97693cc611
feat: add disable exec flag (#1090) 2020-10-01 16:45:24 +02:00
Oleg Lobanov 8142b32f38
feat: put selected files in the root of the archive (closes #1065) 2020-09-11 16:54:22 +02:00
Ramires Viana 3d2cb838d1 feat: preview size button 2020-08-25 14:14:15 +00:00
Davide Maggio c3450f4614
chore: return text/plain header in auth response (#1051) 2020-08-05 10:48:03 +02:00
Oleg Lobanov 411a928fea
chore: fix lint errors 2020-07-28 13:40:06 +02:00
Oleg Lobanov f5d02cdde9
fix: delete cached previews when deleting file 2020-07-28 11:59:55 +02:00
Oleg Lobanov 95bc92955f
feat: cache resized images 2020-07-27 19:26:45 +02:00
Oleg Lobanov cb8ac5ebf1
chore: add resize tests 2020-07-27 19:26:44 +02:00
Oleg Lobanov aa78e3ab1f
feat: add param to disable img resizing 2020-07-27 19:26:44 +02:00
Oleg Lobanov 94ef59602f
feat: limit image resize workers 2020-07-27 19:26:44 +02:00
Ramires Viana 727c63b98e fix: parent verification on copy 2020-07-23 12:02:02 +00:00
Ramires Viana 34dfb49b71 fix: path separator inconsistency on rename 2020-07-20 17:45:45 +00:00
Henrique Dias 0b0a704d44
chore: remove hacdias/fileutils dep (#1037) 2020-07-18 20:10:22 +02:00
Ramires Viana 2636f876ab feat: rename option on replace prompt 2020-07-17 14:11:15 +00:00
Ramires Viana eed9da1471 feat: file copy, move and paste conflict checking 2020-07-17 12:37:52 +00:00
Ramires Viana 0727496601 fix: remove incomplete uploaded files 2020-07-14 00:21:15 +00:00
Fabian Fritzsche 453636dfe2
fix: add preview bypass for .gif files (#1012) 2020-07-07 16:47:11 +02:00
monkeyWie 6b0d49b1fc
feat: add image thumbnails support (#980)
* set max image preview size to 1080x1080px
2020-06-25 09:37:13 +02:00
Oleg Lobanov 68f8348dde
fix: apply all fs user rulles 2020-06-22 18:46:22 +02:00
Ramires Viana 82c883f95e fix: save event hook
fix filebrowser/filebrowser#696
2020-06-17 22:57:13 +00:00
Ramires Viana 89773447a5
feat: add folder upload (#981)
* feat: folder upload
fix filebrowser/filebrowser#741

* fix: apply gofmt formater

* feat: upload button prompt

* feat: empty folder upload
2020-06-16 21:56:44 +02:00
Oleg Lobanov 28672c0114
fix(security): check user permission to rename files 2020-06-06 17:45:51 +02:00
Oleg Lobanov 700f32718e
refactor: add more go linters (#970) 2020-06-01 01:12:36 +02:00
Oleg Lobanov ba47e3b2fe
fix: fix static assets url generation (#965) 2020-05-31 22:26:10 +02:00
Henrique Dias a9e715dc50
Merge branch 'master' into remove-logout-button 2020-01-09 17:27:49 +00:00
Ramires Viana 55a9d945cc Add dark theme 2020-01-09 17:24:59 +00:00
Ovidiu Predescu b42b09ccbe Disable the logout method for authentication methods other than 'json' (currently 'proxy' and 'none'.) 2019-12-03 17:31:11 -08:00
A Kirkpatrick 5fb7207d65 Determine the real IP address of the client for logging
When running behind a reverse proxy such as nginx, the remote IP as
logged is always that of the proxy. Figuring out the correct address
in this context is a little tricky, hence the following module is
used:

https://github.com/tomasen/realip
2019-11-17 14:14:15 +10:30
ttys3 be902be453 fix: prevent maliciously constructed parameters like `/api/public/dl/XZzCDnK2_not_exists_hash_name` cause panic (#791) 2019-07-05 12:15:57 +01:00
ttys3 fc5e2247f6 http/auth.go: new user signup: support auto user dir creation (#788) 2019-06-21 11:43:21 +01:00
dom3k ffd8a3a637 fix: use ParseFromRequest instead of ParseFromRequestWithClaims (#771)
ParseFromRequestWithClaims is DEPRECATED
2019-06-06 12:22:04 +01:00
Alexandre Stein b3b5db351f Update download names file for weak clients 2019-05-13 16:30:18 +02:00
Henrique Dias 604487920d fixes: requiring a trailing slash (#669) 2019-05-12 09:20:53 +01:00
Henrique Dias 72e74d421c fix: don't return 404 if the prefix doesn't exist
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
2019-05-12 09:04:09 +01:00
Henrique Dias fa86894550 lint: lint the code
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>

Former-commit-id: 984c56e0b9a9169b10c6017fbd68ab4fbd3868d7 [formerly 27c43314222c723a220b9b1d2141e1509ed05627] [formerly 0a9f6c47bff2d653035c93765ea08ade73ec450c [formerly b7fdcc3ee9]]
Former-commit-id: c27e7fa41f20f433a9a0a97ecc40ab78968b43dc [formerly 185db4a17969cd4fb76cc2b06bd58221c9c6c100]
Former-commit-id: 9b26d1b0642c61cd38f7cdf422f95b2bf9a9614d
2019-04-20 14:15:28 +01:00