Henrique Dias
cd5749dff8
test(auth): cover per-user scope isolation for proxy and hook provisioning
...
Unit tests for Settings.CreateUserHome (derives a per-user home, rejects a
colliding scope, preserves an explicit scope) plus proxy and hook regression
tests asserting that with CreateUserDir enabled two provisioned users receive
distinct home directories instead of the server root.
Refs GHSA-j7jh-37pf-mf8h, GHSA-j2fc-28fx-hc8q
2026-07-25 08:16:18 +02:00
Henrique Dias
8ddd3d1db9
fix(auth): isolate auto-provisioned proxy and hook users to their own home
...
Proxy- and hook-authenticated users were auto-provisioned by applying the
default scope (".") and passing it straight to MakeUserDir, which normalizes
"." to "/". With CreateUserDir enabled, every provisioned user therefore
received the server root as its scope instead of a per-user home directory,
letting one user read, overwrite and delete another user's files.
The signup handler already cleared the scope before deriving the home
directory. Centralize that logic into Settings.CreateUserHome (clear the
scope when CreateUserDir is on and no explicit scope was supplied, derive the
home dir, then reject a scope already owned by another user) and use it from
signup, proxy and hook auth so the three provisioning paths cannot diverge.
Refs GHSA-j7jh-37pf-mf8h, GHSA-j2fc-28fx-hc8q
2026-07-25 08:16:15 +02:00
Henrique Dias
a1063925e1
fix: restore symlink behavior as opt-in followExternalSymlinks
2026-06-23 13:19:51 +02:00
Beckam White
fda8a99292
feat: add "redirect after copy/move" user setting ( #5662 )
2026-01-10 10:27:54 +01:00
Ariel Leyva
a2d80c62c1
feat: add "disable image resolution calculation" flag ( #5638 )
2025-12-29 08:25:49 +01:00
Henrique Dias
f029c3005e
refactor: cleanup package names ( #5605 )
2025-12-06 10:52:11 +01:00
jake-dog
b9ac45d5da
feat: configurable logout page URL for proxy/hook auth ( #3884 )
...
Co-authored-by: Henrique Dias <mail@hacdias.com>
2025-11-30 08:44:34 +01:00
Lucky Jain
ac7b49c148
feat: add option to hide the login button from public-facing pages ( #3922 )
...
Co-authored-by: Henrique Dias <mail@hacdias.com>
2025-11-14 16:21:08 +01:00
Henrique Dias
9d44932dba
chore: use more standard golangci-lint options
2025-11-14 16:18:12 +01:00
Ahmad Hesam
0d973d3aad
feat: add 'hide-dotfiles' as command line parameter ( #3802 )
...
Co-authored-by: Henrique Dias <mail@hacdias.com>
2025-11-14 08:19:03 +01:00
Adam
b9787c78f3
feat: allow setting ace editor theme ( #3826 )
...
Co-authored-by: Henrique Dias <mail@hacdias.com>
2025-09-25 16:47:00 +02:00
Vincent Lee
21ad653b7e
feat: Allow file and directory creation modes to be configured
...
The defaults remain the same as before.
For now, the config options are global instead of per-user.
Note also that the BoltDB creation maintains the old default mode of 0640
since it's not really a user-facing filesystem manipulation.
Fixes #5316 , #5200
2025-07-22 07:56:52 +02:00
Henrique Dias
464b644adf
fix: add configurable minimum password length ( #5225 )
2025-06-28 10:07:34 +02:00
Henrique Dias
ae4fb0ea25
chore: make as exception to mnd
2025-06-27 08:19:34 +02:00
Oleksandr Redko
1d494ff315
build: bump golangci-lint to 2.1.6
2025-06-27 07:56:15 +02:00
Oleg Lobanov
ae0af1f996
chore: fix golangci-lint errors
2024-04-01 18:24:06 +02:00
Dardan
7fabadc871
feat: make user session timeout configurable ( #2753 )
...
Co-authored-by: Oleg Lobanov <oleg@lobanov.me>
2023-11-02 22:01:56 +01:00
Tobias Goerke
7b35815754
feat: integrate tus.io for resumable and chunked uploads ( #2145 )
2023-07-28 18:15:44 +02:00
Gabriel Alencar
428c1c606d
feat: add a new setting that disables the display of the disk usage ( #2136 )
2023-02-15 23:30:48 +01:00
Ramires Viana
dda9a389f3
feat: hook authentication method
2022-07-20 16:40:49 +02:00
Oleg Lobanov
02730bb9bf
fix: set correct scope when user home creation is enabled
2022-06-03 16:04:15 +02:00
Oleg Lobanov
f81857acce
build: refactor makefile
2021-12-20 23:36:50 +01:00
lilihx
0426629a59
feat: add ability to select file modified time format ( #1536 )
2021-09-11 14:12:51 +02:00
Ryan Qian
0358e42d2c
feat: add manifest theme color param ( #1542 )
2021-09-10 17:08:15 +02:00
Oleg Lobanov
34d7d2c8c4
chore: upgrade golangci-lint
2021-07-26 12:00:05 +02:00
WeidiDeng
6914063853
feat: allow disabling file detections by reading header ( #1175 )
2021-01-07 11:30:17 +01:00
Julien Loir
e8b4e9af46
feat: add single click mode ( #1139 )
2020-11-23 19:06:37 +01:00
Tiger Nie
10e399b3c3
feat: add hide dotfiles param ( #1148 )
2020-11-20 11:51:28 +01:00
Keagan McClelland
97693cc611
feat: add disable exec flag ( #1090 )
2020-10-01 16:45:24 +02:00
Oleg Lobanov
aa78e3ab1f
feat: add param to disable img resizing
2020-07-27 19:26:44 +02:00
Oleg Lobanov
700f32718e
refactor: add more go linters ( #970 )
2020-06-01 01:12:36 +02:00
Ramires Viana
55a9d945cc
Add dark theme
2020-01-09 17:24:59 +00:00
Henrique Dias
d0f8c141e1
feat: adds support for unix sockets ( #729 )
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
2019-05-17 11:48:06 +01:00
Henrique Dias
243b12d4c2
refactor: cleanup comments
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
Former-commit-id: 09c20fe153894ff9f7d076d7470b015240c2e0ea [formerly 5d924777fe9ceb19a894eb8d450ab6b47a99d1e6] [formerly c4e99a1cee5b217f76cf2db05827c115ee1ef45c [formerly cc79548206
2019-04-20 14:22:19 +01:00
Henrique Dias
fa86894550
lint: lint the code
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
Former-commit-id: 984c56e0b9a9169b10c6017fbd68ab4fbd3868d7 [formerly 27c43314222c723a220b9b1d2141e1509ed05627] [formerly 0a9f6c47bff2d653035c93765ea08ade73ec450c [formerly b7fdcc3ee9
2019-04-20 14:15:28 +01:00
荒野無燈
65a53514d5
global settings: add createUserDir option. new feature: auto create user home dir while adding user.
...
Former-commit-id: 331a76abdc611236ccc761d0fd9a814ed1ee0c35 [formerly 0c1024a5b8109c84d213e0cbdbe05e10eb5793d4] [formerly 467e1789f55c410ff2ca9e9ef125d9fe28410bc9 [formerly e8570e4dba
2019-02-19 11:55:18 +08:00
Henrique Dias
58ff28f84d
feat: export generate key
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
Former-commit-id: 3088476c44d4608e2b8c90d3c274b6db17ef30c0 [formerly e40d3ba193e0b54bccce8c13459032f51af84c7b] [formerly 33cabf26abee5ef4f1dd63e423fe1b0fa7ae4f7c [formerly a3daac84a2
2019-01-11 20:25:39 +00:00
Henrique Dias
a3b9807717
fix: clean server struct once it gets to the handler
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
Former-commit-id: a9d9c2cd9a5fffa71409ebb0867faa3a0aca6e9f [formerly c3359cf3ff2633945a9c8dd5ea8eff5a77484364] [formerly 8921b27f322e426cf2f2f07dc682e1fffca162e0 [formerly f1c86054b3
2019-01-09 08:13:24 +00:00
Henrique Dias
01929c72ea
feat: make server options a struct ( #615 )
...
Former-commit-id: a54bc7c8a0fb700d4f90f78c54d6cb028e8acea7 [formerly a0946a1d5b82ce5681684bc0f871bd892c4d6c3f] [formerly 6b23b0abbe5cde6a6348f982975d15a1161359de [formerly 0e7abaa7fb
2019-01-08 10:29:09 +00:00
Henrique Dias
5a83d6736b
fix: rename global scope as root and fix root md
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
Former-commit-id: 856c18bc9cf98a27b6cbea923b231e0aaf279190 [formerly 201c1a0294947930a7d0706af72ce719a8cc3b98] [formerly 0253e57e2994023e798f6fb0ae76f9c21d18fd69 [formerly 33a58c999a
2019-01-07 20:34:44 +00:00
Henrique Dias
f1a89f5ec4
feat: add global scope ( #604 )
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
Former-commit-id: a44ebfc7a5687b5f51f0ff791335f66ab9f2e8e0 [formerly 9a044fadd8f2ebbb7dbb773273799c26a797f513] [formerly 7f374d016eaf756cfce215dd16a2274bbabe1915 [formerly f55f205ced
2019-01-06 13:01:42 +00:00
Henrique Dias
f879944346
feat: dont persist server data on database
...
License: MIT
Signed-off-by: Henrique Dias <hacdias@gmail.com>
Former-commit-id: 2ba9d0a5d060380a73ec1b46901a6f16a5e985a1 [formerly 1cd1c62eaba87c166d8fe10baebfe27bce0448a0] [formerly 3d1721671fb760a4b99aa66fe7d5a8d00579b17c [formerly a8ff679ae3
2019-01-06 12:26:48 +00:00
Henrique Dias
1db210a24f
🧼 : remove comment [ci skip]
...
Former-commit-id: 6560b8172709c5e8809b734eaf82139635c24905 [formerly c172a284c4c2bce5d7f82a13dda7cdc78d5c7d66] [formerly b75b0b28ef23b9e341628054252f32eb08f9933c [formerly c830b80269
2019-01-05 23:56:22 +00:00
Henrique Dias
12b2c21522
feat: v2 ( #599 )
...
Read https://github.com/filebrowser/filebrowser/pull/575 .
Former-commit-id: 7aedcaaf72b863033e3f089d6df308d41a3fd00c [formerly bdbe4d49161b901c4adf9c245895a1be2d62e4a7] [formerly acfc1ec67c423e0b3e065a8c1f8897c5249af65b [formerly d309066def
2019-01-05 22:44:33 +00:00
Henrique Dias
0549bd73eb
make updates
2015-09-18 16:49:53 +01:00
Henrique Dias
f7227520ea
improvements
2015-09-18 13:52:10 +01:00
Henrique Dias
abb9c4efe1
updates, sort interface
2015-09-18 09:47:02 +01:00
Henrique Dias
edf0a453a3
add browse functionality
2015-09-17 17:41:31 +01:00
Henrique Dias
992f1c2c01
make frontmatter parser more "DRYer"
2015-09-17 15:38:04 +01:00
Henrique Dias
d061c26caf
updates
2015-09-16 21:48:08 +01:00
