Commit Graph

29 Commits

Author SHA1 Message Date
Michael Mayer
6a89519e63 Videos: Refactor codec, content and file type specifications #4770
Signed-off-by: Michael Mayer <michael@photoprism.app>
2025-02-05 00:30:45 +01:00
Michael Mayer
1f4f65e988 Server: Add "force" and "mode" flags for sockets #4673 #4767 #4765 #4467
These changes allow you to force the re-creation of existing Unix domain
sockets and set the permissions of sockets after they have been created.

The flag or variable value for this must be formatted as follows:
--http-host="unix:/var/run/photoprism.sock?force=true&mode=660"

Signed-off-by: Michael Mayer <michael@photoprism.app>
2025-02-04 12:03:00 +01:00
Michael Mayer
37ebd86002 WebDAV: Add missing client and session info to the login log
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-07-11 08:26:20 +02:00
Michael Mayer
a97f8d0795 API: Implement OIDC redirect endpoint #782
Requires further testing and refinement before it can be released.

Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-07-01 16:50:53 +02:00
Michael Mayer
b08b06c2fe WebDAV: Log successful authentication attempts via auth token #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-17 07:29:44 +02:00
Michael Mayer
153bb8e564 Auth: Extend session lifetime if 2FA is enabled #808 #3943 #4114
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-12 13:30:30 +02:00
Michael Mayer
fdc2062d33 Account: Refactor access token API and request forms #808 #4114
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-05 14:46:11 +02:00
Michael Mayer
851a7393ef WebDAV: Refactor audit log messages
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-04 11:23:09 +02:00
Michael Mayer
2185618910 API: Refactor authentication failure rate limit #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-04 11:18:05 +02:00
Michael Mayer
31d1f06ffa Security: Refactor rate limits for failed authentication request #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-31 14:45:17 +02:00
Michael Mayer
37c3c9d624 Account: Add auth-related error messages to pkg/authn #808 #4114
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-29 12:16:26 +01:00
Michael Mayer
1912cd54ca Account: Add GET /api/v1/users/:uid/sessions endpoint #808 #4114
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-28 13:24:12 +01:00
Michael Mayer
4425becb3d Auth: Implement 2FA setup and login in the web user interface #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-21 14:32:51 +01:00
Michael Mayer
802bb87980 WebDAV: Improve authorization checks and rate limit enforcement #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-29 16:20:46 +01:00
Michael Mayer
75e52a6bf5 WebDAV: Refactor internal/server/webdav_auth.go #782 #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-29 15:11:23 +01:00
Michael Mayer
86dc89c4b9 Config: Show error if originals and storage path seem identical #1642
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-21 14:22:16 +01:00
Michael Mayer
2df0b6e4b1 Server: Exclude .mp4 and .zip from compression and refactor vary #4018
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-20 12:48:42 +01:00
Michael Mayer
a4e2bb33b9 2FA: Rename "Auth Secret" to "App Password" for more clarity #782 #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-19 18:10:01 +01:00
Michael Mayer
7e7ba69982 Auth: Add client_uid and client_name to auth_sessions table #808 #3943
This also adds the ability to change the client role if needed and
improves the usage information and output of the CLI commands.

Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-18 16:53:05 +01:00
Michael Mayer
2912ac9464 Security: Refactor cache headers, auth token validation & UI #782 #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-17 14:16:02 +01:00
Michael Mayer
abfea6354c Config: Allow CORS for fonts and CSS when using a CDN #3931
see https://www.w3.org/TR/css-fonts-3/#font-fetching-requirements

Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-16 20:04:36 +01:00
Michael Mayer
c3b9b73d1d API: Only allow CDNs to cache GET, HEAD, and OPTIONS requests #3931
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-16 16:17:16 +01:00
Michael Mayer
cf71582e3f WebDAV: Require username when authenticating with basic auth #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-11 18:51:38 +01:00
Michael Mayer
e8ca9b8db2 WebDAV: Check if basic auth user matches the token, if set #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-11 12:49:31 +01:00
Michael Mayer
d481bc3d34 WebDAV: Add token authentication tests #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-11 12:08:39 +01:00
Michael Mayer
eff130cf90 WebDAV: Allow authentication with auth token and any username #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-11 11:37:36 +01:00
Michael Mayer
cc356abe03 WebDAV: Allow authentication with auth token and no username #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-10 18:03:38 +01:00
Michael Mayer
94e361a8fd WebDAV: Add authorization check based on auth tokens #782 #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-10 16:54:13 +01:00
Michael Mayer
63ad161b96 WebDAV: Refactor authentication and HTTP request handlers #3942 #3959
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-10 09:56:46 +01:00