b6924efa41
feat(encryption): apply destination policy encryption when relocating blobs
...
Encryption is currently applied in exactly one place, while wrapping the stream
of an upload request that carries an upload session with encryption metadata.
A writer that moves a blob straight into a storage policy therefore stores it
as it was, which is how a storage policy relocation ends up leaving plaintext
on a policy that has file encryption enabled.
Add RelocateBlob, which transfers the blob of an entity into another storage
policy and applies that policy's encryption setting on the way. A blob that is
already encrypted is transferred as ciphertext under its existing data key, so
relocation costs no crypto and cannot invalidate the key held by the entity. A
plaintext blob relocated into a policy with encryption enabled is encrypted
during the transfer under a freshly generated data key, which is returned for
the caller to persist onto the entity, along with an EncryptMetadata field on
RelocateEntityParameter to commit it with.
The encryption metadata is returned rather than persisted so that the plaintext
data key never has to be carried in a resumable task state, and it is stripped
from the returned value for the same reason.
Extract the stream wrapping into encryptUploadRequest so both writers share it,
and pass the request offset as the counter offset instead of a hardcoded zero.
That is a no-op today, since server side encryption only ever runs on a relayed
upload, which is forced into a single chunk starting at zero, but it keeps the
keystream aligned for any writer that starts at an offset.
Refs #3518
2 days ago
0bb0ab8335
fix(dbfs): thumbnail not generated for shared files ( close #3495 )
2 weeks ago
d00f447739
fix(conf): enhance environment variable parsing for configuration overrides ( close #3498 )
2 weeks ago
1c5cad6dec
fix(ssrf): implement effectiveIP function to normalize IPv4-in-IPv6 addresses
2 weeks ago
7329602751
fix(dbfs): enforce storage pre allocate before creating file placeholders
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 weeks ago
7a211bceb5
fix(upload): implement chunk upload tracking and completion logic for concurrent chunk upload
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 weeks ago
b2e808e6ca
feat(explorer): add empty recycle bin button & move restore action to top quick actions ( close #3473 )
3 weeks ago
ba2e870bbd
feat(user): options to disable exposing user emails to other users
2 months ago
3607f79bb4
fix(thumb): max pixel dimensions constraint in builtin thumb generator
2 months ago
7968e50429
fix(WOPI): SuggestedTarget header should not accept file path
2 months ago
aaebf317a7
feat(remote download): configurable SSRF check for target URL
2 months ago
ed20843dc3
fix(oauth): scope limitation does not take effects in jwt
2 months ago
3487407131
fix(fts): context menu inconsistently shown items caused by missing capability bits in file traversing ( fix #3385 )
3 months ago
a9a0c1ee78
fix(fts): full-text search should not retrieve files in trash bin ( fix #3386 )
3 months ago
9792a5c84f
fix(s3): throw error is content length is missing ( fix #3394 )
3 months ago
457926e8cb
feat(dashboard): set global default file apps ( close cloudreve/cloudreve#2304 )
5 months ago
50017060f1
fix: skip 0kb placeholder object as directory in file listing ( #3347 )
5 months ago
0f2f35d7d4
fix(dbfs): default view can be overwritten accidently ( close #3330 )
5 months ago
3180c72b53
fix(dbfs): folder summary type error in cache ( #3332 )
...
* fix(dbfs): folder summary type error in cache
* Update dbfs.go
5 months ago
95865add54
fix(slave node): panic when transfer files in slave node
5 months ago
153a00ecd5
feat(fts): start background task to force build index for existing files ( close #2895 )
6 months ago
1e3b851e19
feat: full-text search and RAG powered search
6 months ago
ec9fdd33bc
fix(direct link): cannot access direct link for files without blobs ( close #3239 )
6 months ago
6322a9e951
fix(s3): nil pointer when uploading files to SeaweedFS ( close #3265 )
6 months ago
57239e81af
security: use `crypto/rand` for secret keys
6 months ago
5d9cfaa973
fix(eventhub): nil pointer trying get owner
6 months ago
2241a9e2c8
feat(dashboard): add setting option for event push
6 months ago
1c5eefdc6a
feat(devices): add landing page for desktop client
6 months ago
5b214beadc
feat(thumb): change image type to NRGBA when do resize to keep transparency ( #3207 )
6 months ago
2ecc7f4f59
fix(cos): missing response-content-disposition header when enable not sign for CDN url ( #2546 ) ( #3202 )
...
* fix(cos): missing response-content-disposition header for public-read bucket
* fix(cos): anonymous GET req not support response header
6 months ago
2725bd47b5
fix(share): download on folder share wrongly not counted ( #3196 )
6 months ago
a84c5d8e97
feat(oauth): OAuth for 3rd party apps
6 months ago
722abb81c5
fix(nodepool): exclusive lock should be held for weight LB
7 months ago
e8f965e980
fix(security): resolve multiple vulnerability.
...
Vulnerability identified and fix provided by Kolega.dev (https://kolega.dev )
7 months ago
f01ed64bdb
feat(perf): improve memory usage for importing task / add configurable Pprof endpoint ( fix #3059 )
7 months ago
736414fa10
fix(dbfs): setting version does not change file size
7 months ago
32632db36f
feat(fs): change event debounce before emitting to subscriber
8 months ago
c01b748dfc
feat(fs): fs change event notification via SSE / show panic stack trace in task queue
8 months ago
05c68b4062
fix(thumb blob path): separators be wrongly modified ( #3062 ) ( #3116 )
...
* fix(thumb blob path): separators be wrongly modified
* Update common.go
8 months ago
a08c796e3f
fix(ks3): fix content disposition format for download filename ( #3040 ) ( #3057 )
8 months ago
67c6f937c9
fix(oss): disable RSA min key size check for OSS callback ( #3038 )
9 months ago
deecc5c20b
feat(thumb blob path): support magic variables in thumb blob path ( #3030 )
9 months ago
e3580d9351
feat(encryption): add UI and settings for file encryption
9 months ago
16b02b1fb3
feat: file blob encryption
9 months ago
6bd30a8af7
fix(oss): change default expire ttl and sign param to adapt SDK v2 ( #2979 )
...
* fix(oss): change default expire ttl and sign param to adapt SDK v2
* fix(oss): add expire ttl limit
10 months ago
21cdafb2af
fix(oss): traffic limit should be in query instead of headers ( #2977 )
10 months ago
e29237d593
fix(webdav): error code for missing parent in mkcol should be `409` instead of `404` ( #2953 )
10 months ago
46897e2880
fix(oss): presigned multipart upload mismatch
10 months ago
e7d6fb25e4
feat(oss): upgrade to SDK v2 ( #2963 )
10 months ago
3d41e00384
feat(media meta): add Mapbox as a map provider option ( #2922 )
10 months ago
PLus123456
Aaron Liu
Darren Yu