padloc/padlock-cloud

Web service for storing Padlock data in the cloud

padlock-cloud's Issues

No Way To Limit Accounts

Imagine you are running a private Padlock Cloud for you, your friends, your family, etc. You have email settings configured, certificates configured, a public IP and public DNS. You go through the login and sync settings without any hurdles - fantastic!

Until you stop to think. What is keeping spammers or robots or script junkies from flooding your server with dummy credentials and inflating your database? How do you control which friends and family are allowed and which random strangers are blocked? Any tips on this idea, @MaKleSoft?

Option to stay logged in on Android or if you close the window

Is this possible? In Android, everytime I leave the window, I have to reenter my password. It gets really annoying. It would be nice to be able to stay logged in for a period of time or check a box to stay logged in until you log out of the machine, restart or shutdown.

Use letsEncrypt with padlock cloud

Hi,
I try to use padlock-cloud with my uberspace and a letsEncrypt certificate. I map the padlock-cloud with a .htaccess rewriteRule. I point the tls paths to the files privkey.pem and fullchain.pem. If I open my browser it's start downloading a File called Download. What am I doing wrong?
Cheers.

Could someone create a Synology package?

I´m not big with linux but I would love to see this Padlock Cloud instance on my Synology DS Server.

"Error reading preface" when trying to connect with the updated app

When I try to connect to the server with the app updated beginning of september 2017, I get the following error message in the server log:

http2: server: error reading preface from client 192.168.10.1:45381: read tcp 192.168.10.167:3000->192.168.10.1:45381: read: connection reset by peer

This happens with Padlock 2.0.0 on Android.

No 'Access-Control-Allow-Origin' header

When installing the padlock-cloud on a self hosted system the chrome app is not able to access this host due to missing Access-Control-Allow-Origin header.

I would propose either adding a configuration for this or just add it by default.
If this change will not be implemented it would be at least worth noticing it in the readme that a proxy is required to add this header.

No E-Mail sent

Hi, I started padlock-cloud with the Docker image of weboaks and set my E-Mail SMTP settings. But when I type a E-Mail Adress to register it, I recived this error:

14.12.2018 09:12:12INFO: 2018/12/14 08:12:12 Starting server on port 3000
14.12.2018 09:12:35INFO: 2018/12/14 08:12:35 10.42.192.130:59930 PUT /auth/ - account_not_found - [email protected]
14.12.2018 09:12:35INFO: 2018/12/14 08:12:35 10.42.192.130:59934 POST /auth/ - auth_token:request - [email protected]:api:SgGTjzG5
14.12.2018 09:12:35INFO: 2018/12/14 08:12:35 10.42.192.130:59938 POST /track/ - method_not_allowed - POST
14.12.2018 09:12:35ERROR: 2018/12/14 08:12:35 10.42.192.130:59934 POST /auth/
14.12.2018 09:12:35***STACK TRACE***
14.12.2018 09:12:35short response: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot ready.
14.12.2018 09:12:35***REQUEST***
14.12.2018 09:12:35POST /auth/ HTTP/1.1
14.12.2018 09:12:35Host: myHost.adress
14.12.2018 09:12:35Connection: close
14.12.2018 09:12:35Accept: application/vnd.padlock;version=1
14.12.2018 09:12:35Accept-Encoding: gzip, deflate
14.12.2018 09:12:35Accept-Language: de
14.12.2018 09:12:35Connection: close
14.12.2018 09:12:35Content-Length: 120
14.12.2018 09:12:35Content-Type: application/x-www-form-urlencoded
14.12.2018 09:12:35Origin: file://
14.12.2018 09:12:35User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Padlock/2.7.2 Chrome/59.0.3071.115 Electron/1.8.2 Safari/537.36
14.12.2018 09:12:35X-Device-App-Version: 2.7.2
14.12.2018 09:12:35X-Device-Hostname: MYPC
14.12.2018 09:12:35X-Device-Manufacturer:
14.12.2018 09:12:35X-Device-Model:
14.12.2018 09:12:35X-Device-Os-Version: 10.0.17134
14.12.2018 09:12:35X-Device-Platform: Windows
14.12.2018 09:12:35X-Device-Uuid: UUID
14.12.2018 09:12:35X-Forwarded-For: IP-ADRESS
14.12.2018 09:12:35X-Forwarded-Port: 443
14.12.2018 09:12:35X-Forwarded-Proto: https

Because of the LOGINDISABLED I tought it could be a problem with the E-Mail server so I tried a different one:

14.12.2018 09:16:40INFO: 2018/12/14 08:16:40 Starting server on port 3000
14.12.2018 09:16:55INFO: 2018/12/14 08:16:55 10.42.192.130:47836 PUT /auth/ - account_not_found - [email protected]
14.12.2018 09:16:55INFO: 2018/12/14 08:16:55 10.42.192.130:47838 POST /auth/ - auth_token:request - [email protected]:api:m7OFA65T
14.12.2018 09:16:55INFO: 2018/12/14 08:16:55 10.42.192.130:47842 POST /track/ - method_not_allowed - POST
14.12.2018 09:16:55ERROR: 2018/12/14 08:16:55 10.42.192.130:47838 POST /auth/
14.12.2018 09:16:55***STACK TRACE***
14.12.2018 09:16:55short response: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN SASL-IR] mail-n Cyrus IMAP git2.4.17+0-Debian-2.4.17+nocaldav-0+deb8u2 server ready
14.12.2018 09:16:55***REQUEST***
14.12.2018 09:16:55POST /auth/ HTTP/1.1
14.12.2018 09:16:55Host: myHost.adress
14.12.2018 09:16:55Connection: close
14.12.2018 09:16:55Accept: application/vnd.padlock;version=1
14.12.2018 09:16:55Accept-Encoding: gzip, deflate
14.12.2018 09:16:55Accept-Language: de
14.12.2018 09:16:55Connection: close
14.12.2018 09:16:55Content-Length: 120
14.12.2018 09:16:55Content-Type: application/x-www-form-urlencoded
14.12.2018 09:16:55Origin: file://
14.12.2018 09:16:55User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Padlock/2.7.2 Chrome/59.0.3071.115 Electron/1.8.2 Safari/537.36
14.12.2018 09:16:55X-Device-App-Version: 2.7.2
14.12.2018 09:16:55X-Device-Hostname: MYPC
14.12.2018 09:16:55X-Device-Manufacturer:
14.12.2018 09:16:55X-Device-Model:
14.12.2018 09:16:55X-Device-Os-Version: 10.0.17134
14.12.2018 09:16:55X-Device-Platform: Windows
14.12.2018 09:16:55X-Device-Uuid: UUID
14.12.2018 09:16:55X-Forwarded-For: IP-ADRESS
14.12.2018 09:16:55X-Forwarded-Port: 443
14.12.2018 09:16:55X-Forwarded-Proto: https

Can you tell me, what this error mean and what I can do?

Not working with the new Padlock app for Android

When I try to sync with the new app I get this error in the logs:

INFO: 2017/09/09 12:33:24 123.123.123.123:55230 POST /store/ - method_not_allowed - POST

Error: resource temporarily unavailable

Hello,

I have been using padlock-cloud for a while and it used to work just fine.
It stopped working a few days (weeks?) ago, and after investigating the only vague message resource temporarily unavailable that was output, I found that it comes from:
https://github.com/MaKleSoft/padlock-cloud/blob/master/padlockcloud/storage.go#L97
The error was returned by leveldb.OpenFile when trying to open the directory auth-accounts.
Would you know where this comes from and how to correct this bug?
Thank you!

Rémi

Pass wildcards to email whitelist

I know that there is a whitelist since #13 but unfortunately we can't use wildcards. Is there any chance to get this functionality? Maybe some sort of regex checks?

Thank you in advance!

Cannot log in to dashboard with latest version

Admittedly this is being done from this docker image, but it's up to date as far as the code goes, I think. If I try to log in to the dashboard with Firefox, it immediately redirects back to the login, and also redirects if you try to go directly to /dashboard. It works fine in Chrome.

Unable to connect to padlock-cloud with padlock version 2.0

Running a private padlock-cloud off my synology
I upgraded to the latest version of padlock-cloud
go get -u github.com/maklesoft/padlock-cloud
pulled the latest code and built it. However I still get "something went wrong. Please try again later!" when trying to synchronize to the cloud using the new app
It works on the older version of ios - as I am still able to sync with another device that hasn't been upgraded.

Also - the version has not been updated in the version.go file (so I was confused if I was running the latest version - but did a git pull and it is the latest code)

Any thoughts?

Cannot read property 'plan' of undefined

Hi guys,

I run padlock-cloud under docker behind traefik proxy from here -> https://github.com/redrick/padlock-docker-arm/blob/master/Dockerfile

but every time I get my link and try to load webpage dashboard I get stuck on this js error in console:

Cannot read property 'plan' of undefined

Nothing gets rendered....

Tested with Mac app and sync works, but when trying womething like profile settings and such points me to webpage and that is not working....

Trace is:

Uncaught TypeError: Cannot read property 'plan' of undefined
    at HTMLElement._monthlyPrice (cloud-dashboard.js:13851)
    at runMethodEffect (cloud-dashboard.js:3323)
    at Function._evaluateBinding (cloud-dashboard.js:5138)
    at Object.runBindingEffect [as fn] (cloud-dashboard.js:3092)
    at runEffectsForProperty (cloud-dashboard.js:2686)
    at runEffects (cloud-dashboard.js:2652)
    at HTMLElement._propagatePropertyChanges (cloud-dashboard.js:4203)
    at HTMLElement._propertiesChanged (cloud-dashboard.js:4168)
    at HTMLElement._flushProperties (cloud-dashboard.js:2006)
    at HTMLElement.ready (cloud-dashboard.js:4132)

Which points to:

    _monthlyPrice() {
>>        const plan = this.account.subscription.plan;
        const price = plan.interval === "month" ? plan.amount / 100 : plan.amount / 1200;
        return $l("${0}/month", price);
    }

Am I missing something in leveldb or some option when running it ?

Many thanks, wonderful thing you did here :)

SMTP-SSL on Port 465 does not work

I'm trying to setup a padlock-cloud on my RasPi-Device.
For the smtp-section in the config I tryed to use the STMP-SSL on Port 465. My webhoster recomends SSL on 465 over STARTTLS on 587. After a lot of try-and-error work i fund out, that padlock-cloud seams unable to use SSL on 465 for the SMTP-authentication. Now i swiched back to STARTTLS on 587 and it works.
I just wanted to let you know. It would be cool if you would add SSL support for STMP. Otherwise pls give a note in the Readme.md so that folks don't waste time on trying SMTP-SSL

And BTW:
Thanks for making this cool software! MaKleSoft and OpenSource rocks!

Padlock and reverse proxy

Hey,
I have a running Nginx reverse proxy that manages nextcloud on port 443,
which was sat up in this way in the .ENV file
# Host VIRTUAL_HOST=cloud.yourdomain.com LETSENCRYPT_HOST=cloud.yourdomain.com [email protected]
Link
is it possible to integrate this option into padlock?
Thanks!

Allow usage in subdirectory through reverse proxy

I wanted to setup padlock-cloud on a server in a sub directory using a reverse proxy forwarding a sub directory /lock. I have also configured the PC_BASE_URL to my host (like https://example.com/lock), but this only seems to be used for the email templates.
For example I'm forwarded to https://example.com/dashboard when calling https://example.com/lock. When I'm logged in at https://example.com/lock/dashboard, the assets do not load as they are expected in /static/….

Can you provide a configuration for a relative path or use the sub path from PC_BASE_URL to allow this?

Build failure with leveldb

The vendored leveldb dependency does not build.

This line here imports a package github.com/syndtr/goleveldb/leveldb/util which does not exist in the vendor dir.

Server Setup

I have built the server and I can connect to it in a web browser with;
https://packlock.mydomain.com:3000
and I get a page asking to enter my email. So it seems to connect.

However, if I enter https://packlock.mydomain.com:3000 into the custom URL in the android or desktop app and try to signin. I always get a can't connect to server message on the client.

I think I must be missing soemthing??

Can my server use a self signed cert, as per;
openssl req -new -newkey rsa:4096 -x509 -sha256 -days 365 -nodes -out MyCertificate.crt -keyout MyKey.key
I have that configured currently?

Error On go build

I am sure this is something silly. I've cloned the project and try running go build. Below is the error (sanitized):

OS: Ubuntu 16.04
Go: 1.6

storage.go:7:8: cannot find package "github.com/MaKleSoft/padlock-cloud/Godeps/_workspace/src/github.com/syndtr/goleveldb/leveldb" in any of:
/usr/lib/go-1.6/src/github.com/MaKleSoft/padlock-cloud/Godeps/_workspace/src/github.com/syndtr/goleveldb/leveldb (from $GOROOT)
/home/username/.go/src/github.com/MaKleSoft/padlock-cloud/Godeps/_workspace/src/github.com/syndtr/goleveldb/leveldb (from $GOPATH)

Run without displaying port and use LetsEncrypt certs

It would be really great if this could run on a sub-domain that I set up without having to type the port. Right now I am running a few sites from my home and I have them all running in Apache and secured with LetsEncrypt certificates. It would be great to be able to extend it in Apache to include this server that's running and to use those certificates that I made for it with LetsEncrypt.

Better error message if user visits activation link twice