Marc Ole Bulling
6af3b52770
Set cookies to SameSiteStrictMode, set OAuth cookie to SameSiteLaxMode
2026-03-23 18:27:56 +01:00
Marc Ole Bulling
a3cbfd4b2e
Fixed headers for filename, fixed tests
2026-03-21 12:05:53 +01:00
Marc Ole Bulling
77bf451dd7
Minor fix for http headers
2026-03-21 09:45:10 +01:00
Marc Bulling
60d00f2ab7
Replace SHA1 password hash and salts with argon2id ( #384 )
...
* Added argon2 support and migration
* Require re-entering of download password after changing
* Fixed tests
* Force logout for all users
* Updated docs
2026-03-20 22:12:50 +01:00
Marc Ole Bulling
5a41718777
Sanitize user agent, init logging from serverSettings.DataDir
2026-03-20 11:51:10 +01:00
Marc Ole Bulling
4764dba447
Fixed some minor bugs
2026-03-20 11:39:46 +01:00
Marc Ole Bulling
a8fa93c258
Fixed gokapi-cli crash when uploading a directory with --json parameter
2026-03-20 11:22:36 +01:00
Marc Ole Bulling
b711973bc2
Fixed bug where api caching was not stored correctly
2026-03-20 11:19:39 +01:00
Marc Ole Bulling
da834518c7
Improved SSE, prevent slow clients from blocking output
2026-03-20 11:09:56 +01:00
Marc Ole Bulling
c2ae778a35
Increase Oauth state length, added types to csrf tokens
2026-03-20 10:49:50 +01:00
Marc Ole Bulling
ce1944b5f2
Better ssl certificate generation
2026-03-20 10:27:43 +01:00
Marc Ole Bulling
6bd2803a82
Fixed tests
2026-03-20 10:26:53 +01:00
Marc Ole Bulling
87e6208db4
Make config file default permission 0600
2026-03-20 10:09:39 +01:00
Marc Ole Bulling
51d9f32670
Better error message when CSFR token expired
2026-03-20 10:03:36 +01:00
Marc Ole Bulling
d35e58f8df
Delete all super admin sessions when using --deployment-password
2026-03-20 09:44:37 +01:00
Marc Ole Bulling
b8c26cd106
Automatically update app and api version in openapi.json
2026-03-20 09:33:40 +01:00
Marc Bulling
e46d67ad26
Enable parallel uploading for e2e encrypted files (both UI and cli) ( #383 )
2026-03-19 19:31:54 +01:00
Marc Bulling
91ff2e6b5d
Use SharedWorker for SSE to not be limited by HTTP/1.1 per-origin connection limit, Synchronise new files and deleted files across views( #382 )
...
* Use SharedWorker for SSE to not be limited by HTTP/1.1 per-origin connection limit
* Synchronise new files and deleted files across views
2026-03-18 09:41:51 +01:00
Marc Ole Bulling
5a8ad29633
Fix regex not being escaped
2026-03-16 19:14:24 +01:00
Marc Ole Bulling
35173c1436
Better alignment for modal inputs
2026-03-16 10:41:23 +01:00
Marc Ole Bulling
0b51f53dde
Better looking upload options
2026-03-16 10:22:18 +01:00
Marc Ole Bulling
39bd0c70a7
Fixed minor race condition
2026-03-15 09:37:01 +01:00
Marc Ole Bulling
311b6bef62
gokapi-cli also looks up ~/.config/gokapi-cli/ and /etc/gokapi-cli for config files #380
2026-03-15 09:12:54 +01:00
Marc Ole Bulling
2e63a2b6d9
Add version number to build output and remove os/arch from zipped file
2026-03-15 08:40:45 +01:00
Marc Ole Bulling
862faa1cfa
Improved documentation
2026-03-13 15:40:42 +01:00
Marc Ole Bulling
0688afa3e4
Fixed typos in documentation
2026-03-13 14:55:05 +01:00
Marc Bulling
962b7f59f4
Added better error handling with more detailed errors, added mock OIDC server for testing
2026-03-12 10:39:13 +01:00
Marc Ole Bulling
c654a5c2f3
Fixed GOKAPI_GUEST_UPLOAD_BY_DEFAULT not being honoured for OAuth and Header Auth #378
2026-03-10 22:00:59 +01:00
Marc Ole Bulling
9a4b289c60
Added tests, fixed minor race condition, updated version number
2026-03-10 16:33:50 +01:00
Marc Ole Bulling
6087961f1f
Updated to Go1.26.1
2026-03-10 15:43:12 +01:00
Marc Ole Bulling
7a59e5a181
Added tool tip for user and API permissions, enhanced changelog generator, updated changelog
2026-03-10 15:40:34 +01:00
Marc Ole Bulling
e55edf49e1
Better check for max file size
2026-03-10 14:01:43 +01:00
Marc Ole Bulling
efa7cb0097
Show username in top right corner
2026-03-10 12:56:47 +01:00
Marc Ole Bulling
f45e869d2a
Better error handling for failed chunks, allocateChunk also returns error if given size is too big
2026-03-10 12:21:55 +01:00
Marc Ole Bulling
dc9347294e
Fixed race conditions and limit e2e info
2026-03-08 15:53:06 +01:00
Marc Ole Bulling
9c0171ea69
Added rate limiting for API authentication, disallow non-admin promoting other users to admins, disallow granting user permissions if the user does not hold them themselves
2026-03-08 12:20:54 +01:00
Marc Bulling
fc8ff27240
Merge commit from fork
...
* Make SSE only readable to the current user TODO tests
* Fixe SSE not outputing old data, added tests TODO fix tests
* Fixed tests
2026-03-04 21:52:44 +01:00
Marc Bulling
a85d6ec2a9
Merge commit from fork
2026-03-04 21:48:20 +01:00
Marc Bulling
1e0cbb2661
Merge commit from fork
2026-03-04 21:45:00 +01:00
Marc Bulling
c85153d322
Merge commit from fork
2026-03-04 21:33:06 +01:00
Marc Bulling
4a30486ef1
Merge commit from fork
2026-03-04 21:21:27 +01:00
Marc Ole Bulling
c5066af40e
Fixed disallowing of generating new api keys
2026-03-04 20:58:01 +01:00
Marc Ole Bulling
2937a41fed
Added DISABLE_API_MENU env to hide API menu and disable generation of new API keys for non-admin users #377 , redirect to admin menu from file request menu for users without permission, updated version number
2026-03-04 20:42:52 +01:00
Marc Ole Bulling
9a5291dd8b
Fixed rate limiting for download password
2026-03-03 21:36:09 +01:00
Marc Ole Bulling
709310fc3a
More secure handling for download password, better rate limiting
2026-03-03 21:32:33 +01:00
Marc Ole Bulling
86370914b0
Harden session cookie security
2026-03-03 20:14:39 +01:00
Marc Ole Bulling
4b6b0777ed
Replace select/time.After with time.Sleep
2026-03-03 14:46:40 +01:00
Marc Ole Bulling
a081d9b879
Fixed API download / download button always proxying AWS files #375
2026-03-03 14:25:57 +01:00
Marc Ole Bulling
1e564e8202
Replace r.Form.Get with r.PostForm.Get to only parse Post values
2026-03-03 10:04:29 +01:00
Marc Ole Bulling
81311b2c5f
Set login rate limiting before comparing credentials, added log entry for successful login #359
2026-03-01 14:32:27 +01:00
