quentinguidee/cloud-sh-server

☁️ cloud.sh is a lightweight self-hosted cloud for your home lab.

📷 by Pawel Czerwinski on Unsplash

cloud-sh-server's Issues

Use JWT for authentication

https://jwt.io/

Due to the very personal nature of the data stored on cloud.sh, there must be a solution to revoke these tokens.

One solution would be to generate one master token per user, which would also be repeated in the JWT. In the event that the user were to revoke the master token, all JWTs would be revoked automatically.

Support another DBMS

SQLite is good for very small apps. However, it only allows one connection at a time. For example, uploading multiple files at once causes some uploads to fail.

This error should be fixed by using PostgreSQL

Better DBMS credentials storage

Currently, the credentials are stored in a database.json file. It should be more secured.

Add global storage limit

Currently, there are no limitations on how much cloud.sh server can use the storage, which could be defined in .env file

Better auth token generation

Currently, the auth token generation could be predicted.

token := make([]byte, 32)
_, err := rand.Read(token)

We should probably set the seed and also use lowercase chars.