Commit graph

46 commits

Author SHA1 Message Date
Alfredo Cardigliano
aebd8b459c Add more info to login activities alerts 2025-02-14 16:48:43 +01:00
Alfredo Cardigliano
9352d0cdcd Update copyright 2025-01-02 09:09:56 +01:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
Luca Deri
6a2017a4bc Implemented -L <path> for logging HTTP requestss #7398 2023-06-09 19:40:21 +02:00
Nicolò Maio
9282581f3f
Add trace http auth events on log file. (#7434) 2023-06-09 12:34:32 +02:00
lucaderi
d395deac4e Automated commit of clang-format CI changes. 2023-04-07 14:20:44 +00:00
Alfredo Cardigliano
77f3107049 Custom informative captive portal is now working. Cleanup. 2023-03-31 18:25:06 +02:00
Alfredo Cardigliano
1acbebe1a6 Fix WISP response with custom login url 2023-03-31 17:27:29 +02:00
Alfredo Cardigliano
c02cdf5077 Set multiple LAN addresses in case of multiple LAN interfaces 2023-03-29 11:29:34 +02:00
Luca Deri
f726b867c7 Updated (C) 2023-01-01 16:37:57 +01:00
Luca Deri
7f05a01428 Extended ACL buffer to accommodate more entries 2022-03-04 00:17:59 +01:00
MatteoBiscosi
f7db2e1974 Removed double plugin directory swap 2022-02-11 12:07:24 +01:00
Luca Deri
63d2e261ac Warning fixes 2022-01-13 17:50:05 +01:00
Alfredo Cardigliano
f2060f2488 Copyright update (C) 2022-01-03 09:35:09 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
e88e13450e Implements tokens for the REST API 2020-11-16 18:07:01 +01:00
Alfredo Cardigliano
e3ca57daf7 Add auth_session_duration parameter to the v1/create/ntopng/session.lua REST API 2020-11-11 16:10:23 +01:00
Alfredo Cardigliano
0c5de96a44 New lua API ntop.createUserSession. New REST API rest/v1/get/ntopng/session.lua to generate session cookies. 2020-07-30 18:08:03 +02:00
emanuele-f
0ad1b65512 Add plugins support for httpdocs, HTML templates and Lua modules
Such resources can be placed into the following plugin subdirs:

- ./httpdocs: javascript, css and similar, see plugins_utils.getHttpdocsDir
- ./modules: Lua modules, see plugins_utils.loadModule
- ./templates: HTML templates, see plugins_utils.renderTemplate
2020-04-14 17:53:25 +02:00
Luca Deri
48b3fbc348 Reworked error messages 2020-04-02 19:50:31 +02:00
emanuele-f
ead1dc0545 Fix plugins menu integration
Fixes #3655
2020-03-27 12:48:37 +01:00
emanuele-f
6608182920 Rework HTTP server startup
Now the HTTP server starts accepting requests only after
startup.lua has completed. This prevents spurius errors
from occurring during startup, e.g. #3595 .
2020-03-25 18:56:11 +01:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
emanuele-f
fe9d5ee882 Fix plugins lua scripts runtime directory 2019-12-10 11:29:04 +01:00
Luca Deri
0378f1ac69 Code cleanup 2019-05-16 17:51:34 +02:00
emanuele-f
dad7057233 Add warning when remote admin access is enabled but gui access is restricted
Closes #2501
2019-04-19 18:10:40 +02:00
Luca Deri
bedff2c8e2 Updated (C) 2019-01-07 19:28:49 +01:00
emanuele-f
5e321077ca Disable user login after failed attempts 2018-12-17 17:36:38 +01:00
Luca Deri
d146200962 Implements async HTTP send used in pcap download to avoid that paused clients will lead ntopng to drop packets 2018-08-15 08:13:25 +02:00
Simone Mainardi
6f0104045a Initial work to check available space in socket buffers to send pcaps 2018-08-14 19:55:10 +02:00
Simone Mainardi
bd4252d727 Live pcap download security fixes 2018-08-14 17:57:42 +02:00
Luca Deri
444a12e0e8 Win fixes 2018-07-17 00:58:05 +02:00
Emanuele Faranda
a4730f33c1 Improve captive portal support with WISPr XML 2018-07-06 19:35:48 +02:00
Simone Mainardi
b980a1808f Implements web UI ACL 2018-06-22 19:31:02 +02:00
Simone Mainardi
7fa432ad9a Generalizes captive portal server start/stop
Fixes https://github.com/ntop/ntopng/issues/1819
2018-06-20 18:07:00 +02:00
Simone Mainardi
c1bcc625ac Code cleanup for HTTP/HTTPs 2018-06-20 11:38:08 +02:00
Luca Deri
1ee5eff201 Minor code cleanup 2018-06-20 08:25:24 +02:00
Simone Mainardi
8f1228c04f Captive portal HTTP server fixes 2018-06-19 17:29:36 +02:00
Luca Deri
56b275124f Improved ntopng startup time
Split the HTTP server into management and non-management (splash) servers

Implemented protection of the HTTP interface via an ACL that can be set with
- redis-cli set ntopng.prefs.http_acl_management_port "XXXX"

Where XXXX has the format +net/mask,+net/mask....

Example:
- You want the HTTP management interface be accessible only from localhost
   redis-cli set ntopng.prefs.http_acl_management_port "+127.0.0.0/8"

- You want the HTTP management interface be accessible for everybody except 192.168.0.0/16
  redis-cli set ntopng.prefs.http_acl_management_port "+0.0.0.0/0,-192.168.0.0/16"
2018-06-19 11:43:49 +02:00
emanuele-f
a70dce4301 Secure ntopng cookies with SameSite and HttpOnly
HttpOnly prevents the cookie from being accessed by javascript code and restricts XMLHttpObject utilization.
See https://blog.codinghorror.com/protecting-your-cookies-httponly/ .

SameSite=lax restricts cookie utilization in iframes, images or XMLHttpRequests, but still allows external
sites to link to the ntopng webserver and use the existing authenticated user session.
See https://www.sjoerdlangkemper.nl/2016/04/14/preventing-csrf-with-samesite-cookie-attribute/ .
2018-05-16 11:43:23 +02:00
Luca Deri
f0c936c368 Updated (C) to 2018 2018-03-22 21:59:42 +01:00
Luca Deri
420ce53060 Added support for HTTP splash port 2017-10-16 07:57:32 +02:00
Luca Deri
7e384d3c18 Added the ability to activate the web HTTP port on two ports. Example -w 80,3000
Changes in the captive portal logic that made it compatible with Android
Updated bridging readme to include the latest changes
2017-01-25 22:44:34 +01:00
Luca
30e1a75f98 (C) update 2017-01-10 15:03:16 -08:00
Luca Deri
d7c452f0a3 Moved to 2016 2016-01-01 09:27:39 +01:00
Luca Deri
b178cf4121 Added travis file for code testing
Added .gitignore file for ignoring selected files
Reworked src and include paths to organize the source better
Fixed bug with invalid git version caused in some settings that do not compile code extracting it from github
2015-05-01 19:40:52 +02:00
Renamed from HTTPserver.h (Browse further)