1176 Commits

Author SHA1 Message Date
Aaron Liu
1d091c4100 fix(router): require admin write scope for test node routes 2026-06-26 14:03:21 +08:00
Aaron Liu
d4a145c3ac Update submodule 4.17.0 2026-06-26 12:53:22 +08:00
Aaron Liu
332a9d8002 fix(router): require admin write scope for test node routes 2026-06-26 10:27:35 +08:00
Aaron Liu
f3347130ac fix(middleware): improve access token validation in ViewerSessionValidation 2026-06-26 10:24:33 +08:00
Aaron Liu
83375198c8 fix(oauth): admin read scope should not be required for all authed routes (close #3471) 2026-06-26 10:15:06 +08:00
Aaron Liu
ba2e870bbd feat(user): options to disable exposing user emails to other users 2026-06-13 11:40:48 +08:00
Aaron Liu
9e9fb43e72 fix(router): AdminWrite scope should be required for OneDrive OAuth callback 2026-06-13 11:09:54 +08:00
Aaron Liu
0b00dd308f fix(sse): block subscribing to single share file 2026-06-13 11:02:15 +08:00
Aaron Liu
3607f79bb4 fix(thumb): max pixel dimensions constraint in builtin thumb generator 2026-06-13 10:44:11 +08:00
Aaron Liu
7e1289d552 fix(user): search user endpoint should only search in active users 2026-06-13 10:39:21 +08:00
Aaron Liu
7968e50429 fix(WOPI): SuggestedTarget header should not accept file path 2026-06-13 10:31:50 +08:00
Aaron Liu
26b6b1044b doc: update security policy 4.16.1 2026-06-06 11:28:13 +08:00
Aaron Liu
78a731ffad fix(route): require AdminWrite scope for thumbnail generator executable test 2026-06-06 11:19:38 +08:00
dependabot[bot]
b2f0406006 chore(deps): bump github.com/aws/aws-sdk-go from 1.31.5 to 1.34.0 (#3462)
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.31.5 to 1.34.0.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/v1.34.0/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.31.5...v1.34.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-version: 1.34.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-06 11:14:55 +08:00
dependabot[bot]
63fa7b4c65 chore(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 (#3461)
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.59.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-06 11:14:40 +08:00
Aaron Liu
aaebf317a7 feat(remote download): configurable SSRF check for target URL 2026-06-06 10:54:11 +08:00
Aaron Liu
ed20843dc3 fix(oauth): scope limitation does not take effects in jwt 2026-06-06 09:55:57 +08:00
Aaron Liu
54dc81deef update submodule 4.16.0 2026-05-10 10:23:32 +08:00
Aaron Liu
3487407131 fix(fts): context menu inconsistently shown items caused by missing capability bits in file traversing (fix #3385) 2026-05-09 14:14:50 +08:00
Aaron Liu
a9a0c1ee78 fix(fts): full-text search should not retrieve files in trash bin (fix #3386) 2026-05-09 13:14:19 +08:00
Aaron Liu
9792a5c84f fix(s3): throw error is content length is missing (fix #3394) 2026-05-09 11:17:40 +08:00
Aaron Liu
8acc57420a feat(ent): add index for created_at 2026-05-09 11:14:11 +08:00
Howard Yin
c33273b36d fix: implement orderby create_at api (#3437) 2026-05-09 10:59:19 +08:00
dependabot[bot]
5994f7864f chore(deps): bump golang.org/x/image from 0.18.0 to 0.38.0 (#3403)
Bumps [golang.org/x/image](https://github.com/golang/image) from 0.18.0 to 0.38.0.
- [Commits](https://github.com/golang/image/compare/v0.18.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/image
  dependency-version: 0.38.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 11:56:53 +08:00
WittF
58b83ea1e4 fix(deps): bump github.com/wneessen/go-mail from 0.7.1 to 0.7.2 (#3372)
Fix From header display name being stripped, which causes Tencent Cloud
SES to reject emails with "NotAuthenticatedSender".
2026-03-26 08:39:42 +08:00
scholar7r
0e19b28e81 feat: implement batch delete share service (#3356)
* feat: implement batch delete service

* refactor: implement `GetByHashIDs` to make sure only query database once

* refactor: use decode instead of `Get` before `Delete`

- fix incorrect `DeleteBatch` method (for admin) calling
- implement DeleteBatchByUserID
2026-03-18 09:23:43 +08:00
Aaron Liu
006680c5df update submodule 4.15.0 2026-03-14 10:12:48 +08:00
Aaron Liu
2628c98aae update submodule 2026-03-14 10:05:28 +08:00
Aaron Liu
457926e8cb feat(dashboard): set global default file apps (close cloudreve/cloudreve#2304) 2026-03-13 10:28:11 +08:00
Aaron Liu
cb0b5d2a39 fix(dashboard): cannot delete user with OAuth grants (close #3354) 2026-03-13 10:28:11 +08:00
scholar7r
7a430058b4 fix(controller): response of AdminBatchDeleteShare (#3350) 2026-03-12 14:14:00 +08:00
Darren Yu
50017060f1 fix: skip 0kb placeholder object as directory in file listing (#3347) 2026-03-12 14:12:54 +08:00
Aaron Liu
0f2f35d7d4 fix(dbfs): default view can be overwritten accidently (close #3330) 2026-03-04 16:59:38 +08:00
Aaron Liu
0be493c6e2 fix(oauth): client secret cannot be saved (close #3337) 2026-03-04 14:40:37 +08:00
Aaron Liu
3fd8aaa398 fix: expose aria2 udp port 2026-03-04 14:40:04 +08:00
Aaron Liu
5b823305d5 fix: typo in issue contact links 2026-02-24 16:46:50 +08:00
Aaron Liu
edf16a9ed8 misc: issue templaye syntax issue 2026-02-24 16:45:19 +08:00
Aaron Liu
5d915f11ff misc: add more issue templates 2026-02-24 16:40:38 +08:00
Aaron Liu
d9baa74c81 misc: update issue template 2026-02-24 16:26:56 +08:00
Darren Yu
3180c72b53 fix(dbfs): folder summary type error in cache (#3332)
* fix(dbfs): folder summary type error in cache

* Update dbfs.go
2026-02-24 14:37:57 +08:00
Aaron Liu
95865add54 fix(slave node): panic when transfer files in slave node 4.14.1 2026-02-15 09:18:24 +08:00
Aaron Liu
9a59c8348e fix(fts): increase default timeout for media meta queue 2026-02-15 09:16:50 +08:00
Aaron Liu
846366d223 update submodule 4.14.0 2026-02-14 10:08:53 +08:00
Aaron Liu
5d45691e43 chore: add v4 tag for docker images (close #3284) 2026-02-14 10:00:53 +08:00
Aaron Liu
2a59407916 fix(oauth): openid scope is not added by default / add scope name and list in dashboard (close #3274) 2026-02-14 10:00:14 +08:00
Aaron Liu
a8a625e967 update submodule 2026-02-13 10:11:32 +08:00
Aaron Liu
153a00ecd5 feat(fts): start background task to force build index for existing files (close #2895) 2026-02-12 13:40:11 +08:00
Aaron Liu
1e3b851e19 feat: full-text search and RAG powered search 2026-02-11 16:05:09 +08:00
Aaron Liu
ec9fdd33bc fix(direct link): cannot access direct link for files without blobs (close #3239) 4.13.0 2026-02-05 19:36:04 +08:00
Aaron Liu
6322a9e951 fix(s3): nil pointer when uploading files to SeaweedFS (close #3265) 2026-02-05 19:25:43 +08:00