cloudreve

Commit Graph

Author	SHA1	Message	Date
PLus123456	b6924efa41	feat(encryption): apply destination policy encryption when relocating blobs Encryption is currently applied in exactly one place, while wrapping the stream of an upload request that carries an upload session with encryption metadata. A writer that moves a blob straight into a storage policy therefore stores it as it was, which is how a storage policy relocation ends up leaving plaintext on a policy that has file encryption enabled. Add RelocateBlob, which transfers the blob of an entity into another storage policy and applies that policy's encryption setting on the way. A blob that is already encrypted is transferred as ciphertext under its existing data key, so relocation costs no crypto and cannot invalidate the key held by the entity. A plaintext blob relocated into a policy with encryption enabled is encrypted during the transfer under a freshly generated data key, which is returned for the caller to persist onto the entity, along with an EncryptMetadata field on RelocateEntityParameter to commit it with. The encryption metadata is returned rather than persisted so that the plaintext data key never has to be carried in a resumable task state, and it is stripped from the returned value for the same reason. Extract the stream wrapping into encryptUploadRequest so both writers share it, and pass the request offset as the counter offset instead of a hardcoded zero. That is a no-op today, since server side encryption only ever runs on a relayed upload, which is forced into a single chunk starting at zero, but it keeps the keystream aligned for any writer that starts at an offset. Refs #3518	1 day ago
Aaron Liu	0bb0ab8335	fix(dbfs): thumbnail not generated for shared files (close #3495 )	2 weeks ago
Aaron Liu	d00f447739	fix(conf): enhance environment variable parsing for configuration overrides (close #3498 )	2 weeks ago
dependabot[bot]	ef0862dcbd	chore(deps): bump golang.org/x/image from 0.38.0 to 0.41.0 (#3488 ) Bumps [golang.org/x/image](https://github.com/golang/image) from 0.38.0 to 0.41.0. - [Commits](https://github.com/golang/image/compare/v0.38.0...v0.41.0) --- updated-dependencies: - dependency-name: golang.org/x/image dependency-version: 0.41.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 weeks ago
dependabot[bot]	c098983dc4	chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#3487 ) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0. - [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.55.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 weeks ago
dependabot[bot]	88498a42bd	chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.52.0 (#3492 ) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.48.0 to 0.52.0. - [Commits](https://github.com/golang/crypto/compare/v0.48.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 weeks ago
Aaron Liu	1c5cad6dec	fix(ssrf): implement effectiveIP function to normalize IPv4-in-IPv6 addresses	2 weeks ago
Aaron Liu	bce08f88e9	fix(router): require AdminWrite scope for URL test related routes	2 weeks ago
Hao Chen	c278c6af39	fix(callback): validate upload callback secret (#3497 )	2 weeks ago
Aaron Liu	7329602751	fix(dbfs): enforce storage pre allocate before creating file placeholders Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2 weeks ago
Aaron Liu	7a211bceb5	fix(upload): implement chunk upload tracking and completion logic for concurrent chunk upload Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2 weeks ago
Aaron Liu	aa78c4ce09	doc: add contributing guidance	3 weeks ago
Aaron Liu	b2e808e6ca	feat(explorer): add empty recycle bin button & move restore action to top quick actions (close #3473 )	3 weeks ago
Aaron Liu	1d091c4100	fix(router): require admin write scope for test node routes	1 month ago
Aaron Liu	d4a145c3ac	Update submodule	1 month ago
Aaron Liu	332a9d8002	fix(router): require admin write scope for test node routes	1 month ago
Aaron Liu	f3347130ac	fix(middleware): improve access token validation in ViewerSessionValidation	1 month ago
Aaron Liu	83375198c8	fix(oauth): admin read scope should not be required for all authed routes (close #3471 )	1 month ago
Aaron Liu	ba2e870bbd	feat(user): options to disable exposing user emails to other users	2 months ago
Aaron Liu	9e9fb43e72	fix(router): AdminWrite scope should be required for OneDrive OAuth callback	2 months ago
Aaron Liu	0b00dd308f	fix(sse): block subscribing to single share file	2 months ago
Aaron Liu	3607f79bb4	fix(thumb): max pixel dimensions constraint in builtin thumb generator	2 months ago
Aaron Liu	7e1289d552	fix(user): search user endpoint should only search in active users	2 months ago
Aaron Liu	7968e50429	fix(WOPI): SuggestedTarget header should not accept file path	2 months ago
Aaron Liu	26b6b1044b	doc: update security policy	2 months ago
Aaron Liu	78a731ffad	fix(route): require AdminWrite scope for thumbnail generator executable test	2 months ago
dependabot[bot]	b2f0406006	chore(deps): bump github.com/aws/aws-sdk-go from 1.31.5 to 1.34.0 (#3462 ) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.31.5 to 1.34.0. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Changelog](https://github.com/aws/aws-sdk-go/blob/v1.34.0/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.31.5...v1.34.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-version: 1.34.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	63fa7b4c65	chore(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 (#3461 ) Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.57.0 to 0.59.1. - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1) --- updated-dependencies: - dependency-name: github.com/quic-go/quic-go dependency-version: 0.59.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
Aaron Liu	aaebf317a7	feat(remote download): configurable SSRF check for target URL	2 months ago
Aaron Liu	ed20843dc3	fix(oauth): scope limitation does not take effects in jwt	2 months ago
Aaron Liu	54dc81deef	update submodule	3 months ago
Aaron Liu	3487407131	fix(fts): context menu inconsistently shown items caused by missing capability bits in file traversing (fix #3385 )	3 months ago
Aaron Liu	a9a0c1ee78	fix(fts): full-text search should not retrieve files in trash bin (fix #3386 )	3 months ago
Aaron Liu	9792a5c84f	fix(s3): throw error is content length is missing (fix #3394 )	3 months ago
Aaron Liu	8acc57420a	feat(ent): add index for created_at	3 months ago
Howard Yin	c33273b36d	fix: implement orderby create_at api (#3437 )	3 months ago
dependabot[bot]	5994f7864f	chore(deps): bump golang.org/x/image from 0.18.0 to 0.38.0 (#3403 ) Bumps [golang.org/x/image](https://github.com/golang/image) from 0.18.0 to 0.38.0. - [Commits](https://github.com/golang/image/compare/v0.18.0...v0.38.0) --- updated-dependencies: - dependency-name: golang.org/x/image dependency-version: 0.38.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 months ago
WittF	58b83ea1e4	fix(deps): bump github.com/wneessen/go-mail from 0.7.1 to 0.7.2 (#3372 ) Fix From header display name being stripped, which causes Tencent Cloud SES to reject emails with "NotAuthenticatedSender".	4 months ago
scholar7r	0e19b28e81	feat: implement batch delete share service (#3356 ) * feat: implement batch delete service * refactor: implement `GetByHashIDs` to make sure only query database once * refactor: use decode instead of `Get` before `Delete` - fix incorrect `DeleteBatch` method (for admin) calling - implement DeleteBatchByUserID	4 months ago
Aaron Liu	006680c5df	update submodule	5 months ago
Aaron Liu	2628c98aae	update submodule	5 months ago
Aaron Liu	457926e8cb	feat(dashboard): set global default file apps (close cloudreve/cloudreve#2304 )	5 months ago
Aaron Liu	cb0b5d2a39	fix(dashboard): cannot delete user with OAuth grants (close #3354 )	5 months ago
scholar7r	7a430058b4	fix(controller): response of AdminBatchDeleteShare (#3350 )	5 months ago
Darren Yu	50017060f1	fix: skip 0kb placeholder object as directory in file listing (#3347 )	5 months ago
Aaron Liu	0f2f35d7d4	fix(dbfs): default view can be overwritten accidently (close #3330 )	5 months ago
Aaron Liu	0be493c6e2	fix(oauth): client secret cannot be saved (close #3337 )	5 months ago
Aaron Liu	3fd8aaa398	fix: expose aria2 udp port	5 months ago
Aaron Liu	5b823305d5	fix: typo in issue contact links	5 months ago
Aaron Liu	edf16a9ed8	misc: issue templaye syntax issue	5 months ago

1 2 3 4 5 ...

1189 Commits (b6924efa417464f578c019e7521e9daa2a41baeb) All Branches Search

1189 Commits (b6924efa417464f578c019e7521e9daa2a41baeb)

All Branches