7amou3 / xtraupload Goto Github PK

We need to secure the communication between the grpc storage servers and the API server,

1. Use a self signed cert to authorize client connections.
2. A private CA (cert authority) will sign the certs that are going to be deployed on each server.

• Admin can create/update/delete a plan.
• Admin can assign a plan to a user through the administration panel
• Any standard user can upgrade his account to a premium account by purchasing a plan via credit card or paypal.

Add docker image and docker compose

The id server will issue authentication tokens and validate authorization policies for the:

• Main application.
• Client application.
• Storage server(s).

1. In the filemanager, user can preview the folowing file type:

• Image thumbnail,
• Video stream,
• Document (pdf, docx)

2. In download page, the user can preview the folowing file type:

• Image thumbnail.
• Video stream.
• Document (pdf, docx)

• Admin can update/delete/add a server to the storage servers list.
• Files should be Uploaded directly to the least loaded server.
• Servers status are displayed in administration area (connectivity, space left, cpu load, memory status...

Admin area depends on chartjs to display it's charts, I noticed that chart js has big bundle size (~165 kb) and is not compatible with es thus may cause optimization bailouts.
The goal is to remove this library and replace it with a lightweight chart library

• Let the user introduce incorrectly user and password up to 5 times.
• After the fifth failed attempt, the captcha must be also resolved.
• After another 5 failed attemps, the user will be temporaly locked out at IP level (10 minutes).

• The default system language is English
• Based on http header, XtraUpload must switch to the detected browser language
• Admin can Add/Update/Delete language.
• User can change language, the changes are persisted in db.