9 Commits

Author	SHA1	Message	Date
Nicola Murino	47317bed9b	make sure that Retry-After header has a value greater than zero	2021-04-19 09:16:27 +02:00
Nicola Murino	f45c89fc46	add rate limiting support for REST API/web admin too	2021-04-19 08:14:04 +02:00
Nicola Murino	d6dc3a507e	extend virtual folders support to all storage backends ... Fixes #241	2021-03-21 19:15:47 +01:00
Nicola Murino	88122ba2f8	update jwtauth to v5	2021-03-05 18:50:45 +01:00
Nicola Murino	e9dd4ecdf0	web admin: add CSRF	2021-02-03 08:55:28 +01:00
Nicola Murino	f863530653	JWT: only accepts tokens from the expected header or cookie	2021-02-02 13:11:47 +01:00
Nicola Murino	4f609cfa30	JWT: add token audience ... a token released for API audience cannot be used for web pages and vice-versa	2021-02-02 09:14:10 +01:00
Nicola Murino	c2bbd468c4	REST API: add logout and store invalidated token	2021-01-26 22:35:36 +01:00
Nicola Murino	778ec9b88f	REST API v2 ... - add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197	2021-01-17 22:29:08 +01:00