Returns the admin configuration settings, decrypting the configuration file and providing default values if not set.

Updates the admin configuration settings. Requires admin privileges and a valid CSRF token.

Handles user authentication via OIDC or form-based credentials. For OIDC flows, processes callbacks; otherwise, performs standard authentication with optional TOTP verification.

Checks if the current session is authenticated. If the users file is missing or empty, returns a setup flag. Also returns information about admin privileges, TOTP status, and folder-only access.

Returns the current CSRF token along with the configured share URL.

Performs HTTP Basic authentication. If credentials are missing, sends a 401 response prompting for Basic auth. On valid credentials, optionally handles TOTP verification and finalizes session login.

Clears the session, removes persistent login tokens, and redirects the user to the login page.

Copies files from a source folder to a destination folder. It validates folder names, handles file renaming if a conflict exists, and updates metadata accordingly.

Moves the specified files from the given folder to the trash and updates metadata accordingly.

Moves files from a source folder to a destination folder, updating metadata accordingly.

Renames a file within a specified folder and updates folder metadata. If a file with the new name exists, a unique name is generated.

Saves file content to disk in a specified folder and updates metadata accordingly.

Downloads a file from a specified folder. The file is served inline for images or as an attachment for other types.

Creates a ZIP archive of the specified files in a folder and serves it for download.

Extracts ZIP archives from a specified folder and updates metadata. Returns a list of extracted files.

Serves a shared file based on a share token. If the file is password protected and no password is provided, a password entry form is returned.

Generates a secure share link token for a specific file with an optional password protection and expiration time.

Retrieves a list of files that have been moved to Trash, enriched with metadata such as who deleted them and when.

Restores files from Trash based on provided trash file identifiers and updates metadata.

Deletes trash items based on provided trash file identifiers from the trash metadata and removes the files from disk.

Retrieves tags from the createdTags.json metadata file.

Saves tag data for a specified file and updates global tag data. For folder-specific tags, saves to the folder's metadata file.

Retrieves a list of files from a specified folder along with global tags and metadata.

Creates a new folder in the upload directory (under an optional parent) and creates an associated empty metadata file.

Deletes a specified folder if it is empty and not the root folder, and also removes its metadata file.

Renames an existing folder and updates its associated metadata files.

Retrieves the list of folders in the upload directory, including file counts and metadata file names for each folder.

Renders an HTML view of a shared folder's contents. Supports password protection, file listing with pagination, and an upload container if uploads are allowed.

Generates a secure share link for a folder along with optional password protection and upload settings.

Retrieves and serves a file from a shared folder based on a share token.

Handles file upload to a shared folder using a share token. Validates file size, extension, and uploads the file to the shared folder, updating metadata accordingly.

Handles file uploads for both chunked and non-chunked (full) uploads. Validates CSRF, user authentication, and permissions, and processes file uploads accordingly. On success, returns a JSON status for chunked uploads or redirects for full uploads.

Removes the temporary directory used for chunked uploads, given a folder name matching the expected resumable pattern.

Returns a JSON array of users. Only available to authenticated admin users.

Adds a new user to the system. In setup mode, the new user is automatically made admin.

Removes the specified user from the system. Cannot remove the currently logged-in user.

Returns the permissions for the current user, or all permissions if the user is an admin.

Updates permissions for users. Only available to authenticated admin users.

Allows an authenticated user to change their password by verifying the old password and updating to a new one.

Updates user panel settings by disabling TOTP when not enabled. Accessible to authenticated users.

Clears the TOTP secret from the users file for the current user.

Verifies a recovery code to disable TOTP and finalize login.

Generates a new TOTP recovery code for the authenticated user, stores its hash, and returns the plain text recovery code.

Generates (or retrieves) the TOTP secret for the user and builds a QR code image for scanning.

Verifies a TOTP code and completes login for pending users or validates TOTP for setup verification.