@nebulon Perfect, thank you! @nebulon @girish thanks for the fast response on this!

@msbt I also forgot about that option actually, such a long time ago when I wrote all that code 😄

more likely a browser hiccup..

@fbartels that is correct, admins can login to all apps always. This was the case from the get-go and now it is a bit hard to change this behavior since setups depend on this. But maybe worth reevaluating.

@nebulon said in Google Sign In for Surfer:

so you could write small shell scripts for each site to avoid the risk of uploading to the wrong instance.

Yes, I do the same. 🙂 Thank you.

@luckow Thanks for introducing me to this site (siwecos.de)!

Confirmed! 🙏

Looking good, thanks for the fix!

Ok I added those test cases and made a new package release now. Please be aware that if you just use # in a path in the browser URL bar, without encoding it, the browser will treat this as a URL hash, not as part of the filepath.

eg. foo/bar#baz.txt will end up as foo/bar only.

Also note, that surfer has no concept of admins or normal users, so all Cloudron users, which are assigned to have access to the app can login and are the same.

@nebulon said in Access Control of Surfer content:

there is no real way to logout otherwise, since I didn't want to add any kind of overlay with a button or so.

Got it. Thanks for closing on this topic.

@robi said in Upload a folder content to root directory:

try using * instead of .

Yes, this worked. Thank you.

@robi This seems like an acceptable workaround. If you're already building a static site this should pretty straight forward.

@nebulon Awesome - that's exactly what I am looking for! Thanks! 🙂

@nebulon thanks. works like a charm now.

@murgero said in Potential Security Concern / Feature Request:

@jdaviescoates - Hidden folders in surfer still get served up.

I know. I was suggesting that perhaps Surfer could have an option for them not to be.