release: 0.20.3

* New translations en-us.ts (French)

* New translations en-us.ts (Spanish)

* New translations en-us.ts (Japanese)

* New translations en-us.ts (Japanese)

* New translations en-us.ts (Swedish)

* New translations en-us.ts (Swedish)

* New translations en-us.ts (Swedish)

* New translations en-us.ts (Swedish)

* New translations en-us.ts (Russian)

* New translations en-us.ts (Russian)

CHANGELOG.md

@@ -1,3 +1,73 @@
+## [0.20.3](https://github.com/stonith404/pingvin-share/compare/v0.20.2...v0.20.3) (2023-11-17)
+
+
+### Bug Fixes
+
+* max expiration gets ignored if expiration is set to "never" ([330eef5](https://github.com/stonith404/pingvin-share/commit/330eef51e4f3f3fb29833bc9337e705553340aaa))
+
+## [0.20.2](https://github.com/stonith404/pingvin-share/compare/v0.20.1...v0.20.2) (2023-11-11)
+
+
+### Bug Fixes
+
+* **oauth:** github and discord login error ([#323](https://github.com/stonith404/pingvin-share/issues/323)) ([fd44f42](https://github.com/stonith404/pingvin-share/commit/fd44f42f28c0fa2091876b138f170202d9fde04e)), closes [#322](https://github.com/stonith404/pingvin-share/issues/322) [#302](https://github.com/stonith404/pingvin-share/issues/302)
+* reverse shares couldn't be created unauthenticated ([966ce26](https://github.com/stonith404/pingvin-share/commit/966ce261cb4ad99efaadef5c36564fdfaed0d5c4))
+
+## [0.20.1](https://github.com/stonith404/pingvin-share/compare/v0.20.0...v0.20.1) (2023-11-05)
+
+
+### Bug Fixes
+
+* share information text color in light mode ([1138cd0](https://github.com/stonith404/pingvin-share/commit/1138cd02b0b6ac1d71c4dbc2808110c672237190))
+
+## [0.20.0](https://github.com/stonith404/pingvin-share/compare/v0.19.2...v0.20.0) (2023-11-04)
+
+
+### Features
+
+* ability to add and delete files of existing share ([#306](https://github.com/stonith404/pingvin-share/issues/306)) ([98380e2](https://github.com/stonith404/pingvin-share/commit/98380e2d48cc8ffa831d9b69cf5c0e8a40e28862))
+
+## [0.19.2](https://github.com/stonith404/pingvin-share/compare/v0.19.1...v0.19.2) (2023-11-03)
+
+
+### Features
+
+* ability to limit the max expiration of a share ([bbfc9d6](https://github.com/stonith404/pingvin-share/commit/bbfc9d6f147eea404f011c3af9d7dc7655c3d21d))
+* change totp issuer to display logo in 2FAS app ([e0fbbec](https://github.com/stonith404/pingvin-share/commit/e0fbbeca3c1a858838b20aeead52694772b7d871))
+
+
+### Bug Fixes
+
+* jwt secret changes on application restart ([33742a0](https://github.com/stonith404/pingvin-share/commit/33742a043d6549783984ae7e8a3c30f0fe3917de))
+* wrong validation of setting max share expiration to `0` ([acc35f4](https://github.com/stonith404/pingvin-share/commit/acc35f47178e230f50ce54d6f1ad5370caa3382d))
+
+## [0.19.1](https://github.com/stonith404/pingvin-share/compare/v0.19.0...v0.19.1) (2023-10-22)
+
+
+### Bug Fixes
+
+* **oauth:** fix wrong redirectUri in oidc after change appUrl ([#296](https://github.com/stonith404/pingvin-share/issues/296)) ([119b1ec](https://github.com/stonith404/pingvin-share/commit/119b1ec840ad7f4e1c7c4bb476bf1eeed91d9a1a))
+
+## [0.19.0](https://github.com/stonith404/pingvin-share/compare/v0.18.2...v0.19.0) (2023-10-22)
+
+
+### Features
+
+* **auth:** add OAuth2 login ([#276](https://github.com/stonith404/pingvin-share/issues/276)) ([02cd98f](https://github.com/stonith404/pingvin-share/commit/02cd98fa9cf9865d91494848aabaf42b19e4957b)), closes [#278](https://github.com/stonith404/pingvin-share/issues/278) [#279](https://github.com/stonith404/pingvin-share/issues/279) [#281](https://github.com/stonith404/pingvin-share/issues/281)
+
+
+### Bug Fixes
+
+* delete unfinished shares after a day ([d327bc3](https://github.com/stonith404/pingvin-share/commit/d327bc355c8583231e058731934cf51ab25d9ce5))
+
+## [0.18.2](https://github.com/stonith404/pingvin-share/compare/v0.18.1...v0.18.2) (2023-10-09)
+
+
+### Bug Fixes
+
+* disable image optimizations for logo to prevent caching issues with custom logos ([3891900](https://github.com/stonith404/pingvin-share/commit/38919003e9091203b507d0f0b061f4a1835ff4f4))
+* memory leak while downloading large files ([97e7d71](https://github.com/stonith404/pingvin-share/commit/97e7d7190dfe219caf441dffcd7830c304c3c939))
+
 ## [0.18.1](https://github.com/stonith404/pingvin-share/compare/v0.18.0...v0.18.1) (2023-09-22)
 
 

Dockerfile

@@ -13,6 +13,7 @@ RUN npm run build
 
 # Stage 3: Backend dependencies
 FROM node:20-alpine AS backend-dependencies
+RUN apk add --no-cache python3
 WORKDIR /opt/app
 COPY backend/package.json backend/package-lock.json ./
 RUN npm ci
@@ -32,7 +33,9 @@ ENV NODE_ENV=docker
 # Alpine specific dependencies
 RUN apk update --no-cache
 RUN apk upgrade --no-cache
-RUN apk add --no-cache curl
+RUN apk add --no-cache curl nginx
+
+COPY ./nginx/nginx.conf /etc/nginx/nginx.conf
 
 WORKDIR /opt/app/frontend
 COPY --from=frontend-builder /opt/app/public ./public
@@ -55,4 +58,4 @@ HEALTHCHECK --interval=10s --timeout=3s CMD curl -f http://localhost:3000/api/he
 
 # Application startup
 # HOSTNAME=0.0.0.0 fixes https://github.com/vercel/next.js/issues/51684. It can be removed as soon as the issue is fixed
-CMD cp -rn /tmp/img /opt/app/frontend/public && HOSTNAME=0.0.0.0 node frontend/server.js & cd backend && npm run prod
+CMD cp -rn /tmp/img /opt/app/frontend/public && nginx && PORT=3333 HOSTNAME=0.0.0.0 node frontend/server.js & cd backend && npm run prod

README.md

@@ -2,7 +2,7 @@
 
 ---
 
-_Read this in another language: [Spanish](/docs/README.es.md), [English](/README.md), [Simplified Chinese](/docs/README.zh-cn.md)_
+_Read this in another language: [Spanish](/docs/README.es.md), [English](/README.md), [Simplified Chinese](/docs/README.zh-cn.md), [日本語](/docs/README.ja-jp.md)_
 
 ---
 
@@ -63,6 +63,8 @@ npm run build
 pm2 start --name="pingvin-share-frontend" npm -- run start
 ```
 
+**Uploading Large Files**: By default, Pingvin Share uses a built-in reverse proxy to reduce the installation steps. However, this reverse proxy is not optimized for uploading large files. If you wish to upload larger files, you can either use the Docker installation or set up your own reverse proxy. An example configuration for Nginx can be found in `/nginx/nginx.conf`.
+
 The website is now listening on `http://localhost:3000`, have fun with Pingvin Share 🐧!
 
 ### Integrations
@@ -77,6 +79,10 @@ ClamAV is used to scan shares for malicious files and remove them if found.
 
 Please note that ClamAV needs a lot of [ressources](https://docs.clamav.net/manual/Installing/Docker.html#memory-ram-requirements).
 
+#### OAuth 2 Login
+
+View the [OAuth 2 guide](/docs/oauth2-guide.md) for more information.
+
 ### Additional resources
 
 - [Synology NAS installation](https://mariushosting.com/how-to-install-pingvin-share-on-your-synology-nas/)

backend/package-lock.json

@@ -1,13 +1,14 @@
 {
   "name": "pingvin-share-backend",
-  "version": "0.18.1",
+  "version": "0.20.3",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "pingvin-share-backend",
-      "version": "0.18.1",
+      "version": "0.20.3",
       "dependencies": {
+        "@nestjs/cache-manager": "^2.1.0",
         "@nestjs/common": "^10.1.2",
         "@nestjs/config": "^3.0.0",
         "@nestjs/core": "^10.1.2",
@@ -21,6 +22,7 @@
         "archiver": "^5.3.1",
         "argon2": "^0.30.3",
         "body-parser": "^1.20.2",
+        "cache-manager": "^5.2.4",
         "clamscan": "^2.1.2",
         "class-transformer": "^0.5.1",
         "class-validator": "^0.14.0",
@@ -28,6 +30,8 @@
         "cookie-parser": "^1.4.6",
         "mime-types": "^2.1.35",
         "moment": "^2.29.4",
+        "nanoid": "^3.3.6",
+        "node-fetch": "^2.7.0",
         "nodemailer": "^6.9.4",
         "otplib": "^12.0.1",
         "passport": "^0.6.0",
@@ -52,6 +56,7 @@
         "@types/mime-types": "^2.1.1",
         "@types/multer": "^1.4.7",
         "@types/node": "^20.4.5",
+        "@types/node-fetch": "^2.6.6",
         "@types/nodemailer": "^6.4.9",
         "@types/passport-jwt": "^3.0.9",
         "@types/qrcode-svg": "^1.1.1",
@@ -622,6 +627,18 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/@nestjs/cache-manager": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmmirror.com/@nestjs/cache-manager/-/cache-manager-2.1.0.tgz",
+      "integrity": "sha512-9kep3a8Mq5cMuXN/anGhSYc0P48CRBXk5wyJJRBFxhNkCH8AIzZF4CASGVDIEMmm3OjVcEUHojjyJwCODS17Qw==",
+      "peerDependencies": {
+        "@nestjs/common": "^9.0.0 || ^10.0.0",
+        "@nestjs/core": "^9.0.0 || ^10.0.0",
+        "cache-manager": "<=5",
+        "reflect-metadata": "^0.1.12",
+        "rxjs": "^7.0.0"
+      }
+    },
     "node_modules/@nestjs/cli": {
       "version": "10.1.10",
       "resolved": "https://registry.npmjs.org/@nestjs/cli/-/cli-10.1.10.tgz",
@@ -1438,6 +1455,16 @@
       "resolved": "https://registry.npmjs.org/@types/node/-/node-20.4.5.tgz",
       "integrity": "sha512-rt40Nk13II9JwQBdeYqmbn2Q6IVTA5uPhvSO+JVqdXw/6/4glI6oR9ezty/A9Hg5u7JH4OmYmuQ+XvjKm0Datg=="
     },
+    "node_modules/@types/node-fetch": {
+      "version": "2.6.6",
+      "resolved": "https://registry.npmmirror.com/@types/node-fetch/-/node-fetch-2.6.6.tgz",
+      "integrity": "sha512-95X8guJYhfqiuVVhRFxVQcf4hW/2bCuoPwDasMf/531STFoNoWTT7YDnWdXHEZKqAGUigmpG31r2FE70LwnzJw==",
+      "dev": true,
+      "dependencies": {
+        "@types/node": "*",
+        "form-data": "^4.0.0"
+      }
+    },
     "node_modules/@types/nodemailer": {
       "version": "6.4.9",
       "resolved": "https://registry.npmjs.org/@types/nodemailer/-/nodemailer-6.4.9.tgz",
@@ -2525,6 +2552,23 @@
         "node": ">= 0.8"
       }
     },
+    "node_modules/cache-manager": {
+      "version": "5.2.4",
+      "resolved": "https://registry.npmmirror.com/cache-manager/-/cache-manager-5.2.4.tgz",
+      "integrity": "sha512-gkuCjug16NdGvKm/sydxGVx17uffrSWcEe2xraBtwRCgdYcFxwJAla4OYpASAZT2yhSoxgDiWL9XH6IAChcZJA==",
+      "dependencies": {
+        "lodash.clonedeep": "^4.5.0",
+        "lru-cache": "^10.0.1"
+      }
+    },
+    "node_modules/cache-manager/node_modules/lru-cache": {
+      "version": "10.0.1",
+      "resolved": "https://registry.npmmirror.com/lru-cache/-/lru-cache-10.0.1.tgz",
+      "integrity": "sha512-IJ4uwUTi2qCccrioU6g9g/5rvvVl13bsdczUUcqbciD9iLr095yj8DQKdObriEvuNSx325N1rV1O0sJFszx75g==",
+      "engines": {
+        "node": "14 || >=16.14"
+      }
+    },
     "node_modules/call-bind": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
@@ -5248,6 +5292,11 @@
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
+    "node_modules/lodash.clonedeep": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmmirror.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz",
+      "integrity": "sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ=="
+    },
     "node_modules/lodash.defaults": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz",
@@ -5572,6 +5621,17 @@
       "integrity": "sha512-nnbWWOkoWyUsTjKrhgD0dcz22mdkSnpYqbEjIm2nhwhuxlSkpywJmBo8h0ZqJdkp73mb90SssHkN4rsRaBAfAA==",
       "dev": true
     },
+    "node_modules/nanoid": {
+      "version": "3.3.6",
+      "resolved": "https://registry.npmmirror.com/nanoid/-/nanoid-3.3.6.tgz",
+      "integrity": "sha512-BGcqMMJuToF7i1rt+2PWSNVnWIkGCU78jBG3RxO/bZlnZPK2Cmi2QaffxGO/2RvWi9sL+FAiRiXMgsyxQ1DIDA==",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
     "node_modules/napi-build-utils": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-1.0.2.tgz",
@@ -5733,9 +5793,9 @@
       }
     },
     "node_modules/node-fetch": {
-      "version": "2.6.7",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz",
-      "integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==",
+      "version": "2.7.0",
+      "resolved": "https://registry.npmmirror.com/node-fetch/-/node-fetch-2.7.0.tgz",
+      "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==",
       "dependencies": {
         "whatwg-url": "^5.0.0"
       },
@@ -7833,7 +7893,7 @@
     },
     "node_modules/tr46": {
       "version": "0.0.3",
-      "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
+      "resolved": "https://registry.npmmirror.com/tr46/-/tr46-0.0.3.tgz",
       "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw=="
     },
     "node_modules/tree-kill": {
@@ -8235,7 +8295,7 @@
     },
     "node_modules/webidl-conversions": {
       "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
+      "resolved": "https://registry.npmmirror.com/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
       "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ=="
     },
     "node_modules/webpack": {
@@ -8305,7 +8365,7 @@
     },
     "node_modules/whatwg-url": {
       "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
+      "resolved": "https://registry.npmmirror.com/whatwg-url/-/whatwg-url-5.0.0.tgz",
       "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==",
       "dependencies": {
         "tr46": "~0.0.3",
@@ -8951,6 +9011,12 @@
         }
       }
     },
+    "@nestjs/cache-manager": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmmirror.com/@nestjs/cache-manager/-/cache-manager-2.1.0.tgz",
+      "integrity": "sha512-9kep3a8Mq5cMuXN/anGhSYc0P48CRBXk5wyJJRBFxhNkCH8AIzZF4CASGVDIEMmm3OjVcEUHojjyJwCODS17Qw==",
+      "requires": {}
+    },
     "@nestjs/cli": {
       "version": "10.1.10",
       "resolved": "https://registry.npmjs.org/@nestjs/cli/-/cli-10.1.10.tgz",
@@ -9542,6 +9608,16 @@
       "resolved": "https://registry.npmjs.org/@types/node/-/node-20.4.5.tgz",
       "integrity": "sha512-rt40Nk13II9JwQBdeYqmbn2Q6IVTA5uPhvSO+JVqdXw/6/4glI6oR9ezty/A9Hg5u7JH4OmYmuQ+XvjKm0Datg=="
     },
+    "@types/node-fetch": {
+      "version": "2.6.6",
+      "resolved": "https://registry.npmmirror.com/@types/node-fetch/-/node-fetch-2.6.6.tgz",
+      "integrity": "sha512-95X8guJYhfqiuVVhRFxVQcf4hW/2bCuoPwDasMf/531STFoNoWTT7YDnWdXHEZKqAGUigmpG31r2FE70LwnzJw==",
+      "dev": true,
+      "requires": {
+        "@types/node": "*",
+        "form-data": "^4.0.0"
+      }
+    },
     "@types/nodemailer": {
       "version": "6.4.9",
       "resolved": "https://registry.npmjs.org/@types/nodemailer/-/nodemailer-6.4.9.tgz",
@@ -10386,6 +10462,22 @@
       "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
       "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg=="
     },
+    "cache-manager": {
+      "version": "5.2.4",
+      "resolved": "https://registry.npmmirror.com/cache-manager/-/cache-manager-5.2.4.tgz",
+      "integrity": "sha512-gkuCjug16NdGvKm/sydxGVx17uffrSWcEe2xraBtwRCgdYcFxwJAla4OYpASAZT2yhSoxgDiWL9XH6IAChcZJA==",
+      "requires": {
+        "lodash.clonedeep": "^4.5.0",
+        "lru-cache": "^10.0.1"
+      },
+      "dependencies": {
+        "lru-cache": {
+          "version": "10.0.1",
+          "resolved": "https://registry.npmmirror.com/lru-cache/-/lru-cache-10.0.1.tgz",
+          "integrity": "sha512-IJ4uwUTi2qCccrioU6g9g/5rvvVl13bsdczUUcqbciD9iLr095yj8DQKdObriEvuNSx325N1rV1O0sJFszx75g=="
+        }
+      }
+    },
     "call-bind": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
@@ -12394,6 +12486,11 @@
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
+    "lodash.clonedeep": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmmirror.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz",
+      "integrity": "sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ=="
+    },
     "lodash.defaults": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz",
@@ -12636,6 +12733,11 @@
       "integrity": "sha512-nnbWWOkoWyUsTjKrhgD0dcz22mdkSnpYqbEjIm2nhwhuxlSkpywJmBo8h0ZqJdkp73mb90SssHkN4rsRaBAfAA==",
       "dev": true
     },
+    "nanoid": {
+      "version": "3.3.6",
+      "resolved": "https://registry.npmmirror.com/nanoid/-/nanoid-3.3.6.tgz",
+      "integrity": "sha512-BGcqMMJuToF7i1rt+2PWSNVnWIkGCU78jBG3RxO/bZlnZPK2Cmi2QaffxGO/2RvWi9sL+FAiRiXMgsyxQ1DIDA=="
+    },
     "napi-build-utils": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-1.0.2.tgz",
@@ -12767,9 +12869,9 @@
       }
     },
     "node-fetch": {
-      "version": "2.6.7",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz",
-      "integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==",
+      "version": "2.7.0",
+      "resolved": "https://registry.npmmirror.com/node-fetch/-/node-fetch-2.7.0.tgz",
+      "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==",
       "requires": {
         "whatwg-url": "^5.0.0"
       }
@@ -14306,7 +14408,7 @@
     },
     "tr46": {
       "version": "0.0.3",
-      "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
+      "resolved": "https://registry.npmmirror.com/tr46/-/tr46-0.0.3.tgz",
       "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw=="
     },
     "tree-kill": {
@@ -14586,7 +14688,7 @@
     },
     "webidl-conversions": {
       "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
+      "resolved": "https://registry.npmmirror.com/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
       "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ=="
     },
     "webpack": {
@@ -14635,7 +14737,7 @@
     },
     "whatwg-url": {
       "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
+      "resolved": "https://registry.npmmirror.com/whatwg-url/-/whatwg-url-5.0.0.tgz",
       "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==",
       "requires": {
         "tr46": "~0.0.3",

backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pingvin-share-backend",
-  "version": "0.18.1",
+  "version": "0.20.3",
   "scripts": {
     "build": "nest build",
     "dev": "cross-env NODE_ENV=development nest start --watch",
@@ -13,6 +13,7 @@
     "seed": "ts-node prisma/seed/config.seed.ts"
   },
   "dependencies": {
+    "@nestjs/cache-manager": "^2.1.0",
     "@nestjs/common": "^10.1.2",
     "@nestjs/config": "^3.0.0",
     "@nestjs/core": "^10.1.2",
@@ -26,6 +27,7 @@
     "archiver": "^5.3.1",
     "argon2": "^0.30.3",
     "body-parser": "^1.20.2",
+    "cache-manager": "^5.2.4",
     "clamscan": "^2.1.2",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.0",
@@ -33,6 +35,8 @@
     "cookie-parser": "^1.4.6",
     "mime-types": "^2.1.35",
     "moment": "^2.29.4",
+    "nanoid": "^3.3.6",
+    "node-fetch": "^2.7.0",
     "nodemailer": "^6.9.4",
     "otplib": "^12.0.1",
     "passport": "^0.6.0",
@@ -57,6 +61,7 @@
     "@types/mime-types": "^2.1.1",
     "@types/multer": "^1.4.7",
     "@types/node": "^20.4.5",
+    "@types/node-fetch": "^2.6.6",
     "@types/nodemailer": "^6.4.9",
     "@types/passport-jwt": "^3.0.9",
     "@types/qrcode-svg": "^1.1.1",

backend/prisma/migrations/20231021165436_oauth/migration.sql

@@ -0,0 +1,31 @@
+-- CreateTable
+CREATE TABLE "OAuthUser" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "provider" TEXT NOT NULL,
+    "providerUserId" TEXT NOT NULL,
+    "providerUsername" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    CONSTRAINT "OAuthUser_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- RedefineTables
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_User" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    "username" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "password" TEXT,
+    "isAdmin" BOOLEAN NOT NULL DEFAULT false,
+    "totpEnabled" BOOLEAN NOT NULL DEFAULT false,
+    "totpVerified" BOOLEAN NOT NULL DEFAULT false,
+    "totpSecret" TEXT
+);
+INSERT INTO "new_User" ("createdAt", "email", "id", "isAdmin", "password", "totpEnabled", "totpSecret", "totpVerified", "updatedAt", "username") SELECT "createdAt", "email", "id", "isAdmin", "password", "totpEnabled", "totpSecret", "totpVerified", "updatedAt", "username" FROM "User";
+DROP TABLE "User";
+ALTER TABLE "new_User" RENAME TO "User";
+CREATE UNIQUE INDEX "User_username_key" ON "User"("username");
+CREATE UNIQUE INDEX "User_email_key" ON "User"("email");
+PRAGMA foreign_key_check;
+PRAGMA foreign_keys=ON;

backend/prisma/schema.prisma

@@ -14,7 +14,7 @@ model User {
 
   username String  @unique
   email    String  @unique
-  password String
+  password String?
   isAdmin  Boolean @default(false)
 
   shares        Share[]
@@ -26,6 +26,8 @@ model User {
   totpVerified       Boolean             @default(false)
   totpSecret         String?
   resetPasswordToken ResetPasswordToken?
+
+  oAuthUsers OAuthUser[]
 }
 
 model RefreshToken {
@@ -60,6 +62,15 @@ model ResetPasswordToken {
   user   User   @relation(fields: [userId], references: [id], onDelete: Cascade)
 }
 
+model OAuthUser {
+  id               String @id @default(uuid())
+  provider         String
+  providerUserId   String
+  providerUsername String
+  userId           String
+  user             User   @relation(fields: [userId], references: [id], onDelete: Cascade)
+}
+
 model Share {
   id        String   @id @default(uuid())
   createdAt DateTime @default(now())
@@ -134,7 +145,7 @@ model Config {
   name         String
   category     String
   type         String
-  defaultValue String @default("")
+  defaultValue String  @default("")
   value        String?
   obscured     Boolean @default(false)
   secret       Boolean @default(true)

backend/prisma/seed/config.seed.ts

@@ -5,7 +5,7 @@ const configVariables: ConfigVariables = {
   internal: {
     jwtSecret: {
       type: "string",
-      defaultValue: crypto.randomBytes(256).toString("base64"),
+      value: crypto.randomBytes(256).toString("base64"),
       locked: true,
     },
   },
@@ -37,6 +37,11 @@ const configVariables: ConfigVariables = {
       defaultValue: "false",
       secret: false,
     },
+    maxExpiration: {
+      type: "number",
+      defaultValue: "0",
+      secret: false,
+    },
     maxSize: {
       type: "number",
       defaultValue: "1000000000",
@@ -119,6 +124,89 @@ const configVariables: ConfigVariables = {
       obscured: true,
     },
   },
+  oauth: {
+    "allowRegistration": {
+      type: "boolean",
+      defaultValue: "true",
+    },
+    "ignoreTotp": {
+      type: "boolean",
+      defaultValue: "true",
+    },
+    "github-enabled": {
+      type: "boolean",
+      defaultValue: "false",
+    },
+    "github-clientId": {
+      type: "string",
+      defaultValue: "",
+    },
+    "github-clientSecret": {
+      type: "string",
+      defaultValue: "",
+      obscured: true,
+    },
+    "google-enabled": {
+      type: "boolean",
+      defaultValue: "false",
+    },
+    "google-clientId": {
+      type: "string",
+      defaultValue: "",
+    },
+    "google-clientSecret": {
+      type: "string",
+      defaultValue: "",
+      obscured: true,
+    },
+    "microsoft-enabled": {
+      type: "boolean",
+      defaultValue: "false",
+    },
+    "microsoft-tenant": {
+      type: "string",
+      defaultValue: "common",
+    },
+    "microsoft-clientId": {
+      type: "string",
+      defaultValue: "",
+    },
+    "microsoft-clientSecret": {
+      type: "string",
+      defaultValue: "",
+      obscured: true,
+    },
+    "discord-enabled": {
+      type: "boolean",
+      defaultValue: "false",
+    },
+    "discord-clientId": {
+      type: "string",
+      defaultValue: "",
+    },
+    "discord-clientSecret": {
+      type: "string",
+      defaultValue: "",
+      obscured: true,
+    },
+    "oidc-enabled": {
+      type: "boolean",
+      defaultValue: "false",
+    },
+    "oidc-discoveryUri": {
+      type: "string",
+      defaultValue: "",
+    },
+    "oidc-clientId": {
+      type: "string",
+      defaultValue: "",
+    },
+    "oidc-clientSecret": {
+      type: "string",
+      defaultValue: "",
+      obscured: true,
+    },
+  }
 };
 
 type ConfigVariables = {
@@ -175,7 +263,7 @@ async function migrateConfigVariables() {
     const configVariable =
       configVariables[existingConfigVariable.category]?.[
         existingConfigVariable.name
-      ];
+        ];
     if (!configVariable) {
       await prisma.config.delete({
         where: {

backend/src/app.controller.ts

@@ -0,0 +1,19 @@
+import { Controller, Get, Res } from "@nestjs/common";
+import { Response } from "express";
+import { PrismaService } from "./prisma/prisma.service";
+
+@Controller("/")
+export class AppController {
+  constructor(private prismaService: PrismaService) {}
+
+  @Get("health")
+  async health(@Res({ passthrough: true }) res: Response) {
+    try {
+      await this.prismaService.config.findMany();
+      return "OK";
+    } catch {
+      res.statusCode = 500;
+      return "ERROR";
+    }
+  }
+}

backend/src/app.module.ts

@@ -14,6 +14,9 @@ import { ShareModule } from "./share/share.module";
 import { UserModule } from "./user/user.module";
 import { ClamScanModule } from "./clamscan/clamscan.module";
 import { ReverseShareModule } from "./reverseShare/reverseShare.module";
+import { AppController } from "./app.controller";
+import { OAuthModule } from "./oauth/oauth.module";
+import { CacheModule } from "@nestjs/cache-manager";
 
 @Module({
   imports: [
@@ -32,7 +35,12 @@ import { ReverseShareModule } from "./reverseShare/reverseShare.module";
     ScheduleModule.forRoot(),
     ClamScanModule,
     ReverseShareModule,
+    OAuthModule,
+    CacheModule.register({
+      isGlobal: true,
+    }),
   ],
+  controllers: [AppController],
   providers: [
     {
       provide: APP_GUARD,

backend/src/auth/auth.controller.ts

@@ -47,7 +47,7 @@ export class AuthController {
 
     const result = await this.authService.signUp(dto);
 
-    response = this.addTokensToResponse(
+    this.authService.addTokensToResponse(
       response,
       result.refreshToken,
       result.accessToken,
@@ -66,7 +66,7 @@ export class AuthController {
     const result = await this.authService.signIn(dto);
 
     if (result.accessToken && result.refreshToken) {
-      response = this.addTokensToResponse(
+      this.authService.addTokensToResponse(
         response,
         result.refreshToken,
         result.accessToken,
@@ -85,7 +85,7 @@ export class AuthController {
   ) {
     const result = await this.authTotpService.signInTotp(dto);
 
-    response = this.addTokensToResponse(
+    this.authService.addTokensToResponse(
       response,
       result.refreshToken,
       result.accessToken,
@@ -117,11 +117,11 @@ export class AuthController {
   ) {
     const result = await this.authService.updatePassword(
       user,
-      dto.oldPassword,
       dto.password,
+      dto.oldPassword,
     );
 
-    response = this.addTokensToResponse(response, result.refreshToken);
+    this.authService.addTokensToResponse(response, result.refreshToken);
     return new TokenDTO().from(result);
   }
 
@@ -136,7 +136,7 @@ export class AuthController {
     const accessToken = await this.authService.refreshAccessToken(
       request.cookies.refresh_token,
     );
-    response = this.addTokensToResponse(response, undefined, accessToken);
+    this.authService.addTokensToResponse(response, undefined, accessToken);
     return new TokenDTO().from({ accessToken });
   }
 
@@ -172,22 +172,4 @@ export class AuthController {
     // Note: We use VerifyTotpDTO here because it has both fields we need: password and totp code
     return this.authTotpService.disableTotp(user, body.password, body.code);
   }
-
-  private addTokensToResponse(
-    response: Response,
-    refreshToken?: string,
-    accessToken?: string,
-  ) {
-    if (accessToken)
-      response.cookie("access_token", accessToken, { sameSite: "lax" });
-    if (refreshToken)
-      response.cookie("refresh_token", refreshToken, {
-        path: "/api/auth/token",
-        httpOnly: true,
-        sameSite: "strict",
-        maxAge: 1000 * 60 * 60 * 24 * 30 * 3,
-      });
-
-    return response;
-  }
 }

backend/src/auth/auth.module.ts

@@ -7,7 +7,12 @@ import { AuthTotpService } from "./authTotp.service";
 import { JwtStrategy } from "./strategy/jwt.strategy";
 
 @Module({
-  imports: [JwtModule.register({}), EmailModule],
+  imports: [
+    JwtModule.register({
+      global: true,
+    }),
+    EmailModule,
+  ],
   controllers: [AuthController],
   providers: [AuthService, AuthTotpService, JwtStrategy],
   exports: [AuthService],

backend/src/auth/auth.service.ts

@@ -8,6 +8,7 @@ import { JwtService } from "@nestjs/jwt";
 import { User } from "@prisma/client";
 import { PrismaClientKnownRequestError } from "@prisma/client/runtime/library";
 import * as argon from "argon2";
+import { Request, Response } from "express";
 import * as moment from "moment";
 import { ConfigService } from "src/config/config.service";
 import { EmailService } from "src/email/email.service";
@@ -27,7 +28,7 @@ export class AuthService {
   async signUp(dto: AuthRegisterDTO) {
     const isFirstUser = (await this.prisma.user.count()) == 0;
 
-    const hash = await argon.hash(dto.password);
+    const hash = dto.password ? await argon.hash(dto.password) : null;
     try {
       const user = await this.prisma.user.create({
         data: {
@@ -43,7 +44,7 @@ export class AuthService {
       );
       const accessToken = await this.createAccessToken(user, refreshTokenId);
 
-      return { accessToken, refreshToken };
+      return { accessToken, refreshToken, user };
     } catch (e) {
       if (e instanceof PrismaClientKnownRequestError) {
         if (e.code == "P2002") {
@@ -69,9 +70,16 @@ export class AuthService {
     if (!user || !(await argon.verify(user.password, dto.password)))
       throw new UnauthorizedException("Wrong email or password");
 
+    return this.generateToken(user);
+  }
+
+  async generateToken(user: User, isOAuth = false) {
     // TODO: Make all old loginTokens invalid when a new one is created
     // Check if the user has TOTP enabled
-    if (user.totpVerified) {
+    if (
+      user.totpVerified &&
+      !(isOAuth && this.config.get("oauth.ignoreTotp"))
+    ) {
       const loginToken = await this.createLoginToken(user.id);
 
       return { loginToken };
@@ -129,9 +137,11 @@ export class AuthService {
     });
   }
 
-  async updatePassword(user: User, oldPassword: string, newPassword: string) {
-    if (!(await argon.verify(user.password, oldPassword)))
-      throw new ForbiddenException("Invalid password");
+  async updatePassword(user: User, newPassword: string, oldPassword?: string) {
+    const isPasswordValid =
+      !user.password || !(await argon.verify(user.password, oldPassword));
+
+    if (!isPasswordValid) throw new ForbiddenException("Invalid password");
 
     const hash = await argon.hash(newPassword);
 
@@ -210,4 +220,38 @@ export class AuthService {
 
     return loginToken;
   }
+
+  addTokensToResponse(
+    response: Response,
+    refreshToken?: string,
+    accessToken?: string,
+  ) {
+    if (accessToken)
+      response.cookie("access_token", accessToken, { sameSite: "lax" });
+    if (refreshToken)
+      response.cookie("refresh_token", refreshToken, {
+        path: "/api/auth/token",
+        httpOnly: true,
+        sameSite: "strict",
+        maxAge: 1000 * 60 * 60 * 24 * 30 * 3,
+      });
+  }
+
+  /**
+   * Returns the user id if the user is logged in, null otherwise
+   */
+  async getIdOfCurrentUser(request: Request): Promise<string | null> {
+    if (!request.cookies.access_token) return null;
+    try {
+      const payload = await this.jwtService.verifyAsync(
+        request.cookies.access_token,
+        {
+          secret: this.config.get("internal.jwtSecret"),
+        },
+      );
+      return payload.sub;
+    } catch {
+      return null;
+    }
+  }
 }

backend/src/auth/authTotp.service.ts

@@ -8,7 +8,6 @@ import { User } from "@prisma/client";
 import * as argon from "argon2";
 import { authenticator, totp } from "otplib";
 import * as qrcode from "qrcode-svg";
-import { ConfigService } from "src/config/config.service";
 import { PrismaService } from "src/prisma/prisma.service";
 import { AuthService } from "./auth.service";
 import { AuthSignInTotpDTO } from "./dto/authSignInTotp.dto";
@@ -18,47 +17,32 @@ export class AuthTotpService {
   constructor(
     private prisma: PrismaService,
     private authService: AuthService,
-    private config: ConfigService,
   ) {}
 
   async signInTotp(dto: AuthSignInTotpDTO) {
-    if (!dto.email && !dto.username)
-      throw new BadRequestException("Email or username is required");
-
-    const user = await this.prisma.user.findFirst({
-      where: {
-        OR: [{ email: dto.email }, { username: dto.username }],
-      },
-    });
-
-    if (!user || !(await argon.verify(user.password, dto.password)))
-      throw new UnauthorizedException("Wrong email or password");
-
     const token = await this.prisma.loginToken.findFirst({
       where: {
         token: dto.loginToken,
       },
+      include: {
+        user: true,
+      },
     });
 
-    if (!token || token.userId != user.id || token.used)
+    if (!token || token.used)
       throw new UnauthorizedException("Invalid login token");
 
     if (token.expiresAt < new Date())
       throw new UnauthorizedException("Login token expired", "token_expired");
 
     // Check the TOTP code
-    const { totpSecret } = await this.prisma.user.findUnique({
-      where: { id: user.id },
-      select: { totpSecret: true },
-    });
+    const { totpSecret } = token.user;
 
     if (!totpSecret) {
       throw new BadRequestException("TOTP is not enabled");
     }
 
-    const expected = authenticator.generate(totpSecret);
-
-    if (dto.totp !== expected) {
+    if (!authenticator.check(dto.totp, totpSecret)) {
       throw new BadRequestException("Invalid code");
     }
 
@@ -69,9 +53,9 @@ export class AuthTotpService {
     });
 
     const { refreshToken, refreshTokenId } =
-      await this.authService.createRefreshToken(user.id);
+      await this.authService.createRefreshToken(token.user.id);
     const accessToken = await this.authService.createAccessToken(
-      user,
+      token.user,
       refreshTokenId,
     );
 
@@ -92,12 +76,11 @@ export class AuthTotpService {
       throw new BadRequestException("TOTP is already enabled");
     }
 
-    // TODO: Maybe make the issuer configurable with env vars?
     const secret = authenticator.generateSecret();
 
     const otpURL = totp.keyuri(
       user.username || user.email,
-      this.config.get("general.appName"),
+      "pingvin-share",
       secret,
     );
 

backend/src/auth/dto/authSignInTotp.dto.ts

@@ -1,7 +1,7 @@
 import { IsString } from "class-validator";
 import { AuthSignInDTO } from "./authSignIn.dto";
 
-export class AuthSignInTotpDTO extends AuthSignInDTO {
+export class AuthSignInTotpDTO {
   @IsString()
   totp: string;
 

backend/src/auth/dto/updatePassword.dto.ts

@@ -1,8 +1,9 @@
 import { PickType } from "@nestjs/swagger";
-import { IsString } from "class-validator";
+import { IsOptional, IsString } from "class-validator";
 import { UserDTO } from "src/user/dto/user.dto";
 
 export class UpdatePasswordDTO extends PickType(UserDTO, ["password"]) {
   @IsString()
-  oldPassword: string;
+  @IsOptional()
+  oldPassword?: string;
 }

backend/src/config/config.service.ts

@@ -6,13 +6,20 @@ import {
 } from "@nestjs/common";
 import { Config } from "@prisma/client";
 import { PrismaService } from "src/prisma/prisma.service";
+import { EventEmitter } from "events";
 
+/**
+ * ConfigService extends EventEmitter to allow listening for config updates,
+ * now only `update` event will be emitted.
+ */
 @Injectable()
-export class ConfigService {
+export class ConfigService extends EventEmitter {
   constructor(
     @Inject("CONFIG_VARIABLES") private configVariables: Config[],
     private prisma: PrismaService,
-  ) {}
+  ) {
+    super();
+  }
 
   get(key: `${string}.${string}`): any {
     const configVariable = this.configVariables.filter(
@@ -105,6 +112,8 @@ export class ConfigService {
 
     this.configVariables = await this.prisma.config.findMany();
 
+    this.emit("update", key, value);
+
     return updatedVariable;
   }
 }

backend/src/config/logo.service.ts

@@ -7,7 +7,8 @@ const IMAGES_PATH = "../frontend/public/img";
 @Injectable()
 export class LogoService {
   async create(file: Buffer) {
-    fs.writeFileSync(`${IMAGES_PATH}/logo.png`, file, "binary");
+    const resized = await sharp(file).resize(900).toBuffer();
+    fs.writeFileSync(`${IMAGES_PATH}/logo.png`, resized, "binary");
     this.createFavicon(file);
     this.createPWAIcons(file);
   }

backend/src/file/file.controller.ts

@@ -1,6 +1,7 @@
 import {
   Body,
   Controller,
+  Delete,
   Get,
   Param,
   Post,
@@ -81,4 +82,14 @@ export class FileController {
 
     return new StreamableFile(file.file);
   }
+
+  @Delete(":fileId")
+  @SkipThrottle()
+  @UseGuards(ShareOwnerGuard)
+  async remove(
+    @Param("fileId") fileId: string,
+    @Param("shareId") shareId: string,
+  ) {
+    await this.fileService.remove(shareId, fileId);
+  }
 }

backend/src/file/file.service.ts

@@ -124,6 +124,18 @@ export class FileService {
     };
   }
 
+  async remove(shareId: string, fileId: string) {
+    const fileMetaData = await this.prisma.file.findUnique({
+      where: { id: fileId },
+    });
+
+    if (!fileMetaData) throw new NotFoundException("File not found");
+
+    fs.unlinkSync(`${SHARE_DIRECTORY}/${shareId}/${fileId}`);
+
+    await this.prisma.file.delete({ where: { id: fileId } });
+  }
+
   async deleteAllFiles(shareId: string) {
     await fs.promises.rm(`${SHARE_DIRECTORY}/${shareId}`, {
       recursive: true,

backend/src/jobs/jobs.service.ts

@@ -61,6 +61,28 @@ export class JobsService {
     }
   }
 
+  @Cron("0 */6 * * *")
+  async deleteUnfinishedShares() {
+    const unfinishedShares = await this.prisma.share.findMany({
+      where: {
+        createdAt: { lt: moment().subtract(1, "day").toDate() },
+        uploadLocked: false,
+      },
+    });
+
+    for (const unfinishedShare of unfinishedShares) {
+      await this.prisma.share.delete({
+        where: { id: unfinishedShare.id },
+      });
+
+      await this.fileService.deleteAllFiles(unfinishedShare.id);
+    }
+
+    if (unfinishedShares.length > 0) {
+      this.logger.log(`Deleted ${unfinishedShares.length} unfinished shares`);
+    }
+  }
+
   @Cron("0 0 * * *")
   deleteTemporaryFiles() {
     let filesDeleted = 0;
@@ -93,7 +115,7 @@ export class JobsService {
     this.logger.log(`Deleted ${filesDeleted} temporary files`);
   }
 
-  @Cron("0 * * * *")
+  @Cron("1 * * * *")
   async deleteExpiredTokens() {
     const { count: refreshTokenCount } =
       await this.prisma.refreshToken.deleteMany({

backend/src/oauth/dto/oauthCallback.dto.ts

@@ -0,0 +1,9 @@
+import { IsString } from "class-validator";
+
+export class OAuthCallbackDto {
+  @IsString()
+  code: string;
+
+  @IsString()
+  state: string;
+}

backend/src/oauth/dto/oauthSignIn.dto.ts

@@ -0,0 +1,6 @@
+export interface OAuthSignInDto {
+  provider: "github" | "google" | "microsoft" | "discord" | "oidc";
+  providerId: string;
+  providerUsername: string;
+  email: string;
+}

backend/src/oauth/exceptions/errorPage.exception.ts

@@ -0,0 +1,15 @@
+export class ErrorPageException extends Error {
+  /**
+   * Exception for redirecting to error page (all i18n key should omit `error.msg` and `error.param` prefix)
+   * @param key i18n key of message
+   * @param redirect redirect url
+   * @param params message params (key)
+   */
+  constructor(
+    public readonly key: string = "default",
+    public readonly redirect: string = "/",
+    public readonly params?: string[],
+  ) {
+    super("error");
+  }
+}

backend/src/oauth/filter/errorPageException.filter.ts

@@ -0,0 +1,26 @@
+import { ArgumentsHost, Catch, ExceptionFilter, Logger } from "@nestjs/common";
+import { ConfigService } from "../../config/config.service";
+import { ErrorPageException } from "../exceptions/errorPage.exception";
+
+@Catch(ErrorPageException)
+export class ErrorPageExceptionFilter implements ExceptionFilter {
+  private readonly logger = new Logger(ErrorPageExceptionFilter.name);
+
+  constructor(private config: ConfigService) {}
+
+  catch(exception: ErrorPageException, host: ArgumentsHost) {
+    this.logger.error(exception);
+
+    const ctx = host.switchToHttp();
+    const response = ctx.getResponse();
+
+    const url = new URL(`${this.config.get("general.appUrl")}/error`);
+    url.searchParams.set("redirect", exception.redirect);
+    url.searchParams.set("error", exception.key);
+    if (exception.params) {
+      url.searchParams.set("params", exception.params.join(","));
+    }
+
+    response.redirect(url.toString());
+  }
+}

backend/src/oauth/filter/oauthException.filter.ts

@@ -0,0 +1,38 @@
+import {
+  ArgumentsHost,
+  Catch,
+  ExceptionFilter,
+  HttpException,
+  Logger,
+} from "@nestjs/common";
+import { ConfigService } from "../../config/config.service";
+
+@Catch(HttpException)
+export class OAuthExceptionFilter implements ExceptionFilter {
+  private errorKeys: Record<string, string> = {
+    access_denied: "access_denied",
+    expired_token: "expired_token",
+  };
+  private readonly logger = new Logger(OAuthExceptionFilter.name);
+
+  constructor(private config: ConfigService) {}
+
+  catch(exception: HttpException, host: ArgumentsHost) {
+    const ctx = host.switchToHttp();
+    const response = ctx.getResponse();
+    const request = ctx.getRequest();
+
+    this.logger.error(exception.message);
+    this.logger.error(
+      "Request query: " + JSON.stringify(request.query, null, 2),
+    );
+
+    const key = this.errorKeys[request.query.error] || "default";
+
+    const url = new URL(`${this.config.get("general.appUrl")}/error`);
+    url.searchParams.set("redirect", "/account");
+    url.searchParams.set("error", key);
+
+    response.redirect(url.toString());
+  }
+}

backend/src/oauth/guard/oauth.guard.ts

@@ -0,0 +1,12 @@
+import { CanActivate, ExecutionContext, Injectable } from "@nestjs/common";
+
+@Injectable()
+export class OAuthGuard implements CanActivate {
+  constructor() {}
+
+  canActivate(context: ExecutionContext): boolean {
+    const request = context.switchToHttp().getRequest();
+    const provider = request.params.provider;
+    return request.query.state === request.cookies[`oauth_${provider}_state`];
+  }
+}

backend/src/oauth/guard/provider.guard.ts

@@ -0,0 +1,24 @@
+import {
+  CanActivate,
+  ExecutionContext,
+  Inject,
+  Injectable,
+} from "@nestjs/common";
+import { ConfigService } from "../../config/config.service";
+
+@Injectable()
+export class ProviderGuard implements CanActivate {
+  constructor(
+    private config: ConfigService,
+    @Inject("OAUTH_PLATFORMS") private platforms: string[],
+  ) {}
+
+  canActivate(context: ExecutionContext): boolean {
+    const request = context.switchToHttp().getRequest();
+    const provider = request.params.provider;
+    return (
+      this.platforms.includes(provider) &&
+      this.config.get(`oauth.${provider}-enabled`)
+    );
+  }
+}

backend/src/oauth/oauth.controller.ts

@@ -0,0 +1,110 @@
+import {
+  Controller,
+  Get,
+  Inject,
+  Param,
+  Post,
+  Query,
+  Req,
+  Res,
+  UseFilters,
+  UseGuards,
+} from "@nestjs/common";
+import { User } from "@prisma/client";
+import { Request, Response } from "express";
+import { nanoid } from "nanoid";
+import { AuthService } from "../auth/auth.service";
+import { GetUser } from "../auth/decorator/getUser.decorator";
+import { JwtGuard } from "../auth/guard/jwt.guard";
+import { ConfigService } from "../config/config.service";
+import { OAuthCallbackDto } from "./dto/oauthCallback.dto";
+import { ErrorPageExceptionFilter } from "./filter/errorPageException.filter";
+import { OAuthGuard } from "./guard/oauth.guard";
+import { ProviderGuard } from "./guard/provider.guard";
+import { OAuthService } from "./oauth.service";
+import { OAuthProvider } from "./provider/oauthProvider.interface";
+import { OAuthExceptionFilter } from "./filter/oauthException.filter";
+
+@Controller("oauth")
+export class OAuthController {
+  constructor(
+    private authService: AuthService,
+    private oauthService: OAuthService,
+    private config: ConfigService,
+    @Inject("OAUTH_PROVIDERS")
+    private providers: Record<string, OAuthProvider<unknown>>,
+  ) {}
+
+  @Get("available")
+  available() {
+    return this.oauthService.available();
+  }
+
+  @Get("status")
+  @UseGuards(JwtGuard)
+  async status(@GetUser() user: User) {
+    return this.oauthService.status(user);
+  }
+
+  @Get("auth/:provider")
+  @UseGuards(ProviderGuard)
+  @UseFilters(ErrorPageExceptionFilter)
+  async auth(
+    @Param("provider") provider: string,
+    @Res({ passthrough: true }) response: Response,
+  ) {
+    const state = nanoid(16);
+    const url = await this.providers[provider].getAuthEndpoint(state);
+    response.cookie(`oauth_${provider}_state`, state, { sameSite: "lax" });
+    response.redirect(url);
+  }
+
+  @Get("callback/:provider")
+  @UseGuards(ProviderGuard, OAuthGuard)
+  @UseFilters(ErrorPageExceptionFilter, OAuthExceptionFilter)
+  async callback(
+    @Param("provider") provider: string,
+    @Query() query: OAuthCallbackDto,
+    @Req() request: Request,
+    @Res({ passthrough: true }) response: Response,
+  ) {
+    const oauthToken = await this.providers[provider].getToken(query);
+    const user = await this.providers[provider].getUserInfo(oauthToken, query);
+    const id = await this.authService.getIdOfCurrentUser(request);
+
+    if (id) {
+      await this.oauthService.link(
+        id,
+        provider,
+        user.providerId,
+        user.providerUsername,
+      );
+      response.redirect(this.config.get("general.appUrl") + "/account");
+    } else {
+      const token: {
+        accessToken?: string;
+        refreshToken?: string;
+        loginToken?: string;
+      } = await this.oauthService.signIn(user);
+      if (token.accessToken) {
+        this.authService.addTokensToResponse(
+          response,
+          token.refreshToken,
+          token.accessToken,
+        );
+        response.redirect(this.config.get("general.appUrl"));
+      } else {
+        response.redirect(
+          this.config.get("general.appUrl") + `/auth/totp/${token.loginToken}`,
+        );
+      }
+    }
+  }
+
+  @Post("unlink/:provider")
+  @UseGuards(JwtGuard, ProviderGuard)
+  @UseFilters(ErrorPageExceptionFilter)
+  unlink(@GetUser() user: User, @Param("provider") provider: string) {
+    return this.oauthService.unlink(user, provider);
+  }
+}

backend/src/oauth/oauth.module.ts

@@ -0,0 +1,56 @@
+import { Module } from "@nestjs/common";
+import { OAuthController } from "./oauth.controller";
+import { OAuthService } from "./oauth.service";
+import { AuthModule } from "../auth/auth.module";
+import { GitHubProvider } from "./provider/github.provider";
+import { GoogleProvider } from "./provider/google.provider";
+import { OAuthProvider } from "./provider/oauthProvider.interface";
+import { OidcProvider } from "./provider/oidc.provider";
+import { DiscordProvider } from "./provider/discord.provider";
+import { MicrosoftProvider } from "./provider/microsoft.provider";
+
+@Module({
+  controllers: [OAuthController],
+  providers: [
+    OAuthService,
+    GitHubProvider,
+    GoogleProvider,
+    MicrosoftProvider,
+    DiscordProvider,
+    OidcProvider,
+    {
+      provide: "OAUTH_PROVIDERS",
+      useFactory(
+        github: GitHubProvider,
+        google: GoogleProvider,
+        microsoft: MicrosoftProvider,
+        discord: DiscordProvider,
+        oidc: OidcProvider,
+      ): Record<string, OAuthProvider<unknown>> {
+        return {
+          github,
+          google,
+          microsoft,
+          discord,
+          oidc,
+        };
+      },
+      inject: [
+        GitHubProvider,
+        GoogleProvider,
+        MicrosoftProvider,
+        DiscordProvider,
+        OidcProvider,
+      ],
+    },
+    {
+      provide: "OAUTH_PLATFORMS",
+      useFactory(providers: Record<string, OAuthProvider<unknown>>): string[] {
+        return Object.keys(providers);
+      },
+      inject: ["OAUTH_PROVIDERS"],
+    },
+  ],
+  imports: [AuthModule],
+})
+export class OAuthModule {}

backend/src/oauth/oauth.service.ts

@@ -0,0 +1,171 @@
+import { Inject, Injectable } from "@nestjs/common";
+import { User } from "@prisma/client";
+import { nanoid } from "nanoid";
+import { AuthService } from "../auth/auth.service";
+import { ConfigService } from "../config/config.service";
+import { PrismaService } from "../prisma/prisma.service";
+import { OAuthSignInDto } from "./dto/oauthSignIn.dto";
+import { ErrorPageException } from "./exceptions/errorPage.exception";
+
+@Injectable()
+export class OAuthService {
+  constructor(
+    private prisma: PrismaService,
+    private config: ConfigService,
+    private auth: AuthService,
+    @Inject("OAUTH_PLATFORMS") private platforms: string[],
+  ) {}
+
+  available(): string[] {
+    return this.platforms
+      .map((platform) => [
+        platform,
+        this.config.get(`oauth.${platform}-enabled`),
+      ])
+      .filter(([_, enabled]) => enabled)
+      .map(([platform, _]) => platform);
+  }
+
+  async status(user: User) {
+    const oauthUsers = await this.prisma.oAuthUser.findMany({
+      select: {
+        provider: true,
+        providerUsername: true,
+      },
+      where: {
+        userId: user.id,
+      },
+    });
+    return Object.fromEntries(oauthUsers.map((u) => [u.provider, u]));
+  }
+
+  async signIn(user: OAuthSignInDto) {
+    const oauthUser = await this.prisma.oAuthUser.findFirst({
+      where: {
+        provider: user.provider,
+        providerUserId: user.providerId,
+      },
+      include: {
+        user: true,
+      },
+    });
+    if (oauthUser) {
+      return this.auth.generateToken(oauthUser.user, true);
+    }
+
+    return this.signUp(user);
+  }
+
+  async link(
+    userId: string,
+    provider: string,
+    providerUserId: string,
+    providerUsername: string,
+  ) {
+    const oauthUser = await this.prisma.oAuthUser.findFirst({
+      where: {
+        provider,
+        providerUserId,
+      },
+    });
+    if (oauthUser) {
+      throw new ErrorPageException("already_linked", "/account", [
+        `provider_${provider}`,
+      ]);
+    }
+
+    await this.prisma.oAuthUser.create({
+      data: {
+        userId,
+        provider,
+        providerUsername,
+        providerUserId,
+      },
+    });
+  }
+
+  async unlink(user: User, provider: string) {
+    const oauthUser = await this.prisma.oAuthUser.findFirst({
+      where: {
+        userId: user.id,
+        provider,
+      },
+    });
+    if (oauthUser) {
+      await this.prisma.oAuthUser.delete({
+        where: {
+          id: oauthUser.id,
+        },
+      });
+    } else {
+      throw new ErrorPageException("not_linked", "/account", [provider]);
+    }
+  }
+
+  private async getAvailableUsername(email: string) {
+    // only remove + and - from email for now (maybe not enough)
+    let username = email.split("@")[0].replace(/[+-]/g, "").substring(0, 20);
+    while (true) {
+      const user = await this.prisma.user.findFirst({
+        where: {
+          username: username,
+        },
+      });
+      if (user) {
+        username = username + "_" + nanoid(10).replaceAll("-", "");
+      } else {
+        return username;
+      }
+    }
+  }
+
+  private async signUp(user: OAuthSignInDto) {
+    // register
+    if (!this.config.get("oauth.allowRegistration")) {
+      throw new ErrorPageException("no_user", "/auth/signIn", [
+        `provider_${user.provider}`,
+      ]);
+    }
+
+    if (!user.email) {
+      throw new ErrorPageException("no_email", "/auth/signIn", [
+        `provider_${user.provider}`,
+      ]);
+    }
+
+    const existingUser: User = await this.prisma.user.findFirst({
+      where: {
+        email: user.email,
+      },
+    });
+
+    if (existingUser) {
+      await this.prisma.oAuthUser.create({
+        data: {
+          provider: user.provider,
+          providerUserId: user.providerId.toString(),
+          providerUsername: user.providerUsername,
+          userId: existingUser.id,
+        },
+      });
+      return this.auth.generateToken(existingUser, true);
+    }
+
+    const result = await this.auth.signUp({
+      email: user.email,
+      username: await this.getAvailableUsername(user.email),
+      password: null,
+    });
+
+    await this.prisma.oAuthUser.create({
+      data: {
+        provider: user.provider,
+        providerUserId: user.providerId.toString(),
+        providerUsername: user.providerUsername,
+        userId: result.user.id,
+      },
+    });
+
+    return result;
+  }
+}

backend/src/oauth/provider/discord.provider.ts

@@ -0,0 +1,98 @@
+import { OAuthProvider, OAuthToken } from "./oauthProvider.interface";
+import { OAuthCallbackDto } from "../dto/oauthCallback.dto";
+import { OAuthSignInDto } from "../dto/oauthSignIn.dto";
+import { ConfigService } from "../../config/config.service";
+import { BadRequestException, Injectable } from "@nestjs/common";
+import fetch from "node-fetch";
+
+@Injectable()
+export class DiscordProvider implements OAuthProvider<DiscordToken> {
+  constructor(private config: ConfigService) {}
+
+  getAuthEndpoint(state: string): Promise<string> {
+    return Promise.resolve(
+      "https://discord.com/api/oauth2/authorize?" +
+        new URLSearchParams({
+          client_id: this.config.get("oauth.discord-clientId"),
+          redirect_uri:
+            this.config.get("general.appUrl") + "/api/oauth/callback/discord",
+          response_type: "code",
+          state: state,
+          scope: "identify email",
+        }).toString(),
+    );
+  }
+
+  private getAuthorizationHeader() {
+    return (
+      "Basic " +
+      Buffer.from(
+        this.config.get("oauth.discord-clientId") +
+          ":" +
+          this.config.get("oauth.discord-clientSecret"),
+      ).toString("base64")
+    );
+  }
+
+  async getToken(query: OAuthCallbackDto): Promise<OAuthToken<DiscordToken>> {
+    const res = await fetch("https://discord.com/api/v10/oauth2/token", {
+      method: "post",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded",
+        Authorization: this.getAuthorizationHeader(),
+      },
+      body: new URLSearchParams({
+        code: query.code,
+        grant_type: "authorization_code",
+        redirect_uri:
+          this.config.get("general.appUrl") + "/api/oauth/callback/discord",
+      }),
+    });
+    const token: DiscordToken = await res.json();
+    return {
+      accessToken: token.access_token,
+      refreshToken: token.refresh_token,
+      expiresIn: token.expires_in,
+      scope: token.scope,
+      tokenType: token.token_type,
+      rawToken: token,
+    };
+  }
+
+  async getUserInfo(token: OAuthToken<DiscordToken>): Promise<OAuthSignInDto> {
+    const res = await fetch("https://discord.com/api/v10/users/@me", {
+      method: "get",
+      headers: {
+        Accept: "application/json",
+        Authorization: `${token.tokenType || "Bearer"} ${token.accessToken}`,
+      },
+    });
+    const user = (await res.json()) as DiscordUser;
+    if (user.verified === false) {
+      throw new BadRequestException("Unverified account.");
+    }
+
+    return {
+      provider: "discord",
+      providerId: user.id,
+      providerUsername: user.global_name ?? user.username,
+      email: user.email,
+    };
+  }
+}
+
+export interface DiscordToken {
+  access_token: string;
+  token_type: string;
+  expires_in: number;
+  refresh_token: string;
+  scope: string;
+}
+
+export interface DiscordUser {
+  id: string;
+  username: string;
+  global_name: string;
+  email: string;
+  verified: boolean;
+}

backend/src/oauth/provider/genericOidc.provider.ts

@@ -0,0 +1,208 @@
+import { BadRequestException } from "@nestjs/common";
+import fetch from "node-fetch";
+import { ConfigService } from "../../config/config.service";
+import { JwtService } from "@nestjs/jwt";
+import { Cache } from "cache-manager";
+import { nanoid } from "nanoid";
+import { OAuthCallbackDto } from "../dto/oauthCallback.dto";
+import { OAuthProvider, OAuthToken } from "./oauthProvider.interface";
+import { OAuthSignInDto } from "../dto/oauthSignIn.dto";
+
+export abstract class GenericOidcProvider implements OAuthProvider<OidcToken> {
+  protected discoveryUri: string;
+  private configuration: OidcConfigurationCache;
+  private jwk: OidcJwkCache;
+
+  protected constructor(
+    protected name: string,
+    protected keyOfConfigUpdateEvents: string[],
+    protected config: ConfigService,
+    protected jwtService: JwtService,
+    protected cache: Cache,
+  ) {
+    this.discoveryUri = this.getDiscoveryUri();
+    this.config.addListener("update", (key: string, _: unknown) => {
+      if (this.keyOfConfigUpdateEvents.includes(key)) {
+        this.deinit();
+        this.discoveryUri = this.getDiscoveryUri();
+      }
+    });
+  }
+
+  protected getRedirectUri(): string {
+    return `${this.config.get("general.appUrl")}/api/oauth/callback/${
+      this.name
+    }`;
+  }
+
+  async getConfiguration(): Promise<OidcConfiguration> {
+    if (!this.configuration || this.configuration.expires < Date.now()) {
+      await this.fetchConfiguration();
+    }
+    return this.configuration.data;
+  }
+
+  async getJwk(): Promise<OidcJwk[]> {
+    if (!this.jwk || this.jwk.expires < Date.now()) {
+      await this.fetchJwk();
+    }
+    return this.jwk.data;
+  }
+
+  async getAuthEndpoint(state: string) {
+    const configuration = await this.getConfiguration();
+    const endpoint = configuration.authorization_endpoint;
+
+    const nonce = nanoid();
+    await this.cache.set(
+      `oauth-${this.name}-nonce-${state}`,
+      nonce,
+      1000 * 60 * 5,
+    );
+
+    return (
+      endpoint +
+      "?" +
+      new URLSearchParams({
+        client_id: this.config.get(`oauth.${this.name}-clientId`),
+        response_type: "code",
+        scope: "openid profile email",
+        redirect_uri: this.getRedirectUri(),
+        state,
+        nonce,
+      }).toString()
+    );
+  }
+
+  async getToken(query: OAuthCallbackDto): Promise<OAuthToken<OidcToken>> {
+    const configuration = await this.getConfiguration();
+    const endpoint = configuration.token_endpoint;
+    const res = await fetch(endpoint, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded",
+      },
+      body: new URLSearchParams({
+        client_id: this.config.get(`oauth.${this.name}-clientId`),
+        client_secret: this.config.get(`oauth.${this.name}-clientSecret`),
+        grant_type: "authorization_code",
+        code: query.code,
+        redirect_uri: this.getRedirectUri(),
+      }).toString(),
+    });
+    const token: OidcToken = await res.json();
+    return {
+      accessToken: token.access_token,
+      expiresIn: token.expires_in,
+      idToken: token.id_token,
+      refreshToken: token.refresh_token,
+      tokenType: token.token_type,
+      rawToken: token,
+    };
+  }
+
+  async getUserInfo(
+    token: OAuthToken<OidcToken>,
+    query: OAuthCallbackDto,
+  ): Promise<OAuthSignInDto> {
+    const idTokenData = this.decodeIdToken(token.idToken);
+    // maybe it's not necessary to verify the id token since it's directly obtained from the provider
+
+    const key = `oauth-${this.name}-nonce-${query.state}`;
+    const nonce = await this.cache.get(key);
+    await this.cache.del(key);
+    if (nonce !== idTokenData.nonce) {
+      throw new BadRequestException("Invalid token");
+    }
+
+    return {
+      provider: this.name as any,
+      email: idTokenData.email,
+      providerId: idTokenData.sub,
+      providerUsername: idTokenData.name,
+    };
+  }
+
+  protected abstract getDiscoveryUri(): string;
+
+  private async fetchConfiguration(): Promise<void> {
+    const res = await fetch(this.discoveryUri);
+    const expires = res.headers.has("expires")
+      ? new Date(res.headers.get("expires")).getTime()
+      : Date.now() + 1000 * 60 * 60 * 24;
+    this.configuration = {
+      expires,
+      data: await res.json(),
+    };
+  }
+
+  private async fetchJwk(): Promise<void> {
+    const configuration = await this.getConfiguration();
+    const res = await fetch(configuration.jwks_uri);
+    const expires = res.headers.has("expires")
+      ? new Date(res.headers.get("expires")).getTime()
+      : Date.now() + 1000 * 60 * 60 * 24;
+    this.jwk = {
+      expires,
+      data: (await res.json())["keys"],
+    };
+  }
+
+  private deinit() {
+    this.discoveryUri = undefined;
+    this.configuration = undefined;
+    this.jwk = undefined;
+  }
+
+  private decodeIdToken(idToken: string): OidcIdToken {
+    return this.jwtService.decode(idToken) as OidcIdToken;
+  }
+}
+
+export interface OidcCache<T> {
+  expires: number;
+  data: T;
+}
+
+export interface OidcConfiguration {
+  issuer: string;
+  authorization_endpoint: string;
+  token_endpoint: string;
+  userinfo_endpoint?: string;
+  jwks_uri: string;
+  response_types_supported: string[];
+  id_token_signing_alg_values_supported: string[];
+  scopes_supported?: string[];
+  claims_supported?: string[];
+}
+
+export interface OidcJwk {
+  e: string;
+  alg: string;
+  kid: string;
+  use: string;
+  kty: string;
+  n: string;
+}
+
+export type OidcConfigurationCache = OidcCache<OidcConfiguration>;
+
+export type OidcJwkCache = OidcCache<OidcJwk[]>;
+
+export interface OidcToken {
+  access_token: string;
+  refresh_token: string;
+  token_type: string;
+  expires_in: number;
+  id_token: string;
+}
+
+export interface OidcIdToken {
+  iss: string;
+  sub: string;
+  exp: number;
+  iat: number;
+  email: string;
+  name: string;
+  nonce: string;
+}

backend/src/oauth/provider/github.provider.ts

@@ -0,0 +1,111 @@
+import { OAuthProvider, OAuthToken } from "./oauthProvider.interface";
+import { OAuthCallbackDto } from "../dto/oauthCallback.dto";
+import { OAuthSignInDto } from "../dto/oauthSignIn.dto";
+import { ConfigService } from "../../config/config.service";
+import fetch from "node-fetch";
+import { BadRequestException, Injectable } from "@nestjs/common";
+
+@Injectable()
+export class GitHubProvider implements OAuthProvider<GitHubToken> {
+  constructor(private config: ConfigService) {}
+
+  getAuthEndpoint(state: string): Promise<string> {
+    return Promise.resolve(
+      "https://github.com/login/oauth/authorize?" +
+        new URLSearchParams({
+          client_id: this.config.get("oauth.github-clientId"),
+          redirect_uri:
+            this.config.get("general.appUrl") + "/api/oauth/callback/github",
+          state: state,
+          scope: "user:email",
+        }).toString(),
+    );
+  }
+
+  async getToken(query: OAuthCallbackDto): Promise<OAuthToken<GitHubToken>> {
+    const res = await fetch(
+      "https://github.com/login/oauth/access_token?" +
+        new URLSearchParams({
+          client_id: this.config.get("oauth.github-clientId"),
+          client_secret: this.config.get("oauth.github-clientSecret"),
+          code: query.code,
+        }).toString(),
+      {
+        method: "post",
+        headers: {
+          Accept: "application/json",
+        },
+      },
+    );
+    const token: GitHubToken = await res.json();
+    return {
+      accessToken: token.access_token,
+      tokenType: token.token_type,
+      scope: token.scope,
+      rawToken: token,
+    };
+  }
+
+  async getUserInfo(token: OAuthToken<GitHubToken>): Promise<OAuthSignInDto> {
+    if (!token.scope.includes("user:email")) {
+      throw new BadRequestException("No email permission granted");
+    }
+    const user = await this.getGitHubUser(token);
+    const email = await this.getGitHubEmail(token);
+    if (!email) {
+      throw new BadRequestException("No email found");
+    }
+
+    return {
+      provider: "github",
+      providerId: user.id.toString(),
+      providerUsername: user.name ?? user.login,
+      email,
+    };
+  }
+
+  private async getGitHubUser(
+    token: OAuthToken<GitHubToken>,
+  ): Promise<GitHubUser> {
+    const res = await fetch("https://api.github.com/user", {
+      headers: {
+        Accept: "application/vnd.github+json",
+        Authorization: `${token.tokenType ?? "Bearer"} ${token.accessToken}`,
+      },
+    });
+    return (await res.json()) as GitHubUser;
+  }
+
+  private async getGitHubEmail(
+    token: OAuthToken<GitHubToken>,
+  ): Promise<string | undefined> {
+    const res = await fetch("https://api.github.com/user/public_emails", {
+      headers: {
+        Accept: "application/vnd.github+json",
+        Authorization: `${token.tokenType ?? "Bearer"} ${token.accessToken}`,
+      },
+    });
+    const emails = (await res.json()) as GitHubEmail[];
+    return emails.find((e) => e.primary && e.verified)?.email;
+  }
+}
+
+export interface GitHubToken {
+  access_token: string;
+  token_type: string;
+  scope: string;
+}
+
+export interface GitHubUser {
+  login: string;
+  id: number;
+  name?: string;
+  email?: string; // this filed seems only return null
+}
+
+export interface GitHubEmail {
+  email: string;
+  primary: boolean;
+  verified: boolean;
+  visibility: string | null;
+}

backend/src/oauth/provider/google.provider.ts

@@ -0,0 +1,21 @@
+import { GenericOidcProvider } from "./genericOidc.provider";
+import { ConfigService } from "../../config/config.service";
+import { JwtService } from "@nestjs/jwt";
+import { Inject, Injectable } from "@nestjs/common";
+import { CACHE_MANAGER } from "@nestjs/cache-manager";
+import { Cache } from "cache-manager";
+
+@Injectable()
+export class GoogleProvider extends GenericOidcProvider {
+  constructor(
+    config: ConfigService,
+    jwtService: JwtService,
+    @Inject(CACHE_MANAGER) cache: Cache,
+  ) {
+    super("google", ["oauth.google-enabled"], config, jwtService, cache);
+  }
+
+  protected getDiscoveryUri(): string {
+    return "https://accounts.google.com/.well-known/openid-configuration";
+  }
+}

backend/src/oauth/provider/microsoft.provider.ts

@@ -0,0 +1,29 @@
+import { GenericOidcProvider } from "./genericOidc.provider";
+import { ConfigService } from "../../config/config.service";
+import { JwtService } from "@nestjs/jwt";
+import { Inject, Injectable } from "@nestjs/common";
+import { CACHE_MANAGER } from "@nestjs/cache-manager";
+import { Cache } from "cache-manager";
+
+@Injectable()
+export class MicrosoftProvider extends GenericOidcProvider {
+  constructor(
+    config: ConfigService,
+    jwtService: JwtService,
+    @Inject(CACHE_MANAGER) cache: Cache,
+  ) {
+    super(
+      "microsoft",
+      ["oauth.microsoft-enabled", "oauth.microsoft-tenant"],
+      config,
+      jwtService,
+      cache,
+    );
+  }
+
+  protected getDiscoveryUri(): string {
+    return `https://login.microsoftonline.com/${this.config.get(
+      "oauth.microsoft-tenant",
+    )}/v2.0/.well-known/openid-configuration`;
+  }
+}

backend/src/oauth/provider/oauthProvider.interface.ts

@@ -0,0 +1,24 @@
+import { OAuthCallbackDto } from "../dto/oauthCallback.dto";
+import { OAuthSignInDto } from "../dto/oauthSignIn.dto";
+
+/**
+ * @typeParam T - type of token
+ * @typeParam C - type of callback query
+ */
+export interface OAuthProvider<T, C = OAuthCallbackDto> {
+  getAuthEndpoint(state: string): Promise<string>;
+
+  getToken(query: C): Promise<OAuthToken<T>>;
+
+  getUserInfo(token: OAuthToken<T>, query: C): Promise<OAuthSignInDto>;
+}
+
+export interface OAuthToken<T> {
+  accessToken: string;
+  expiresIn?: number;
+  refreshToken?: string;
+  tokenType?: string;
+  scope?: string;
+  idToken?: string;
+  rawToken: T;
+}

backend/src/oauth/provider/oidc.provider.ts

@@ -0,0 +1,27 @@
+import { GenericOidcProvider } from "./genericOidc.provider";
+import { Inject, Injectable } from "@nestjs/common";
+import { ConfigService } from "../../config/config.service";
+import { JwtService } from "@nestjs/jwt";
+import { CACHE_MANAGER } from "@nestjs/cache-manager";
+import { Cache } from "cache-manager";
+
+@Injectable()
+export class OidcProvider extends GenericOidcProvider {
+  constructor(
+    config: ConfigService,
+    jwtService: JwtService,
+    @Inject(CACHE_MANAGER) protected cache: Cache,
+  ) {
+    super(
+      "oidc",
+      ["oauth.oidc-enabled", "oauth.oidc-discoveryUri"],
+      config,
+      jwtService,
+      cache,
+    );
+  }
+
+  protected getDiscoveryUri(): string {
+    return this.config.get("oauth.oidc-discoveryUri");
+  }
+}

backend/src/reverseShare/reverseShare.service.ts

@@ -3,6 +3,7 @@ import * as moment from "moment";
 import { ConfigService } from "src/config/config.service";
 import { FileService } from "src/file/file.service";
 import { PrismaService } from "src/prisma/prisma.service";
+import { parseRelativeDateToAbsolute } from "src/utils/date.util";
 import { CreateReverseShareDTO } from "./dto/createReverseShare.dto";
 
 @Injectable()
@@ -24,6 +25,17 @@ export class ReverseShareService {
       )
       .toDate();
 
+    const parsedExpiration = parseRelativeDateToAbsolute(data.shareExpiration);
+    if (
+      this.config.get("share.maxExpiration") !== 0 &&
+      parsedExpiration >
+        moment().add(this.config.get("share.maxExpiration"), "hours").toDate()
+    ) {
+      throw new BadRequestException(
+        "Expiration date exceeds maximum expiration date",
+      );
+    }
+
     const globalMaxShareSize = this.config.get("share.maxSize");
 
     if (globalMaxShareSize < data.maxShareSize)

backend/src/share/guard/shareOwner.guard.ts

@@ -1,5 +1,4 @@
 import {
-  CanActivate,
   ExecutionContext,
   Injectable,
   NotFoundException,
@@ -7,10 +6,17 @@ import {
 import { User } from "@prisma/client";
 import { Request } from "express";
 import { PrismaService } from "src/prisma/prisma.service";
+import { JwtGuard } from "../../auth/guard/jwt.guard";
+import { ConfigService } from "src/config/config.service";
 
 @Injectable()
-export class ShareOwnerGuard implements CanActivate {
-  constructor(private prisma: PrismaService) {}
+export class ShareOwnerGuard extends JwtGuard {
+  constructor(
+    configService: ConfigService,
+    private prisma: PrismaService,
+  ) {
+    super(configService);
+  }
 
   async canActivate(context: ExecutionContext) {
     const request: Request = context.switchToHttp().getRequest();
@@ -30,6 +36,8 @@ export class ShareOwnerGuard implements CanActivate {
 
     if (!share.creatorId) return true;
 
+    if (!(await super.canActivate(context))) return false;
+
     return share.creatorId == (request.user as User).id;
   }
 }

backend/src/share/share.controller.ts

@@ -43,6 +43,12 @@ export class ShareController {
     return new ShareDTO().from(await this.shareService.get(id));
   }
 
+  @Get(":id/from-owner")
+  @UseGuards(ShareOwnerGuard)
+  async getFromOwner(@Param("id") id: string) {
+    return new ShareDTO().from(await this.shareService.get(id));
+  }
+
   @Get(":id/metaData")
   @UseGuards(ShareSecurityGuard)
   async getMetaData(@Param("id") id: string) {
@@ -62,12 +68,6 @@ export class ShareController {
     );
   }
 
-  @Delete(":id")
-  @UseGuards(JwtGuard, ShareOwnerGuard)
-  async remove(@Param("id") id: string) {
-    await this.shareService.remove(id);
-  }
-
   @Post(":id/complete")
   @HttpCode(202)
   @UseGuards(CreateShareGuard, ShareOwnerGuard)
@@ -78,6 +78,18 @@ export class ShareController {
     );
   }
 
+  @Delete(":id/complete")
+  @UseGuards(ShareOwnerGuard)
+  async revertComplete(@Param("id") id: string) {
+    return new ShareDTO().from(await this.shareService.revertComplete(id));
+  }
+
+  @Delete(":id")
+  @UseGuards(ShareOwnerGuard)
+  async remove(@Param("id") id: string) {
+    await this.shareService.remove(id);
+  }
+
   @Throttle(10, 60)
   @Get("isShareIdAvailable/:id")
   async isShareIdAvailable(@Param("id") id: string) {

backend/src/share/share.service.ts

@@ -16,6 +16,7 @@ import { EmailService } from "src/email/email.service";
 import { FileService } from "src/file/file.service";
 import { PrismaService } from "src/prisma/prisma.service";
 import { ReverseShareService } from "src/reverseShare/reverseShare.service";
+import { parseRelativeDateToAbsolute } from "src/utils/date.util";
 import { SHARE_DIRECTORY } from "../constants";
 import { CreateShareDTO } from "./dto/createShare.dto";
 
@@ -51,19 +52,24 @@ export class ShareService {
     if (reverseShare) {
       expirationDate = reverseShare.shareExpiration;
     } else {
-      // We have to add an exception for "never" (since moment won't like that)
-      if (share.expiration !== "never") {
-        expirationDate = moment()
-          .add(
-            share.expiration.split("-")[0],
-            share.expiration.split(
-              "-",
-            )[1] as moment.unitOfTime.DurationConstructor,
-          )
-          .toDate();
-      } else {
-        expirationDate = moment(0).toDate();
+      const parsedExpiration = parseRelativeDateToAbsolute(share.expiration);
+
+      const expiresNever = moment(0).toDate() == parsedExpiration;
+
+      if (
+        this.config.get("share.maxExpiration") !== 0 &&
+        (expiresNever ||
+          parsedExpiration >
+            moment()
+              .add(this.config.get("share.maxExpiration"), "hours")
+              .toDate())
+      ) {
+        throw new BadRequestException(
+          "Expiration date exceeds maximum expiration date",
+        );
       }
+
+      expirationDate = parsedExpiration;
     }
 
     fs.mkdirSync(`${SHARE_DIRECTORY}/${share.id}`, {
@@ -181,6 +187,13 @@ export class ShareService {
     });
   }
 
+  async revertComplete(id: string) {
+    return this.prisma.share.update({
+      where: { id },
+      data: { uploadLocked: false, isZipReady: false },
+    });
+  }
+
   async getSharesByUser(userId: string) {
     const shares = await this.prisma.share.findMany({
       where: {

backend/src/user/dto/user.dto.ts

@@ -16,6 +16,9 @@ export class UserDTO {
   @IsEmail()
   email: string;
 
+  @Expose()
+  hasPassword: boolean;
+
   @MinLength(8)
   password: string;
 

backend/src/user/user.controller.ts

@@ -28,7 +28,9 @@ export class UserController {
   @Get("me")
   @UseGuards(JwtGuard)
   async getCurrentUser(@GetUser() user: User) {
-    return new UserDTO().from(user);
+    const userDTO = new UserDTO().from(user);
+    userDTO.hasPassword = !!user.password;
+    return userDTO;
   }
 
   @Patch("me")

backend/src/utils/date.util.ts

@@ -0,0 +1,12 @@
+import * as moment from "moment";
+
+export function parseRelativeDateToAbsolute(relativeDate: string) {
+  if (relativeDate == "never") return moment(0).toDate();
+
+  return moment()
+    .add(
+      relativeDate.split("-")[0],
+      relativeDate.split("-")[1] as moment.unitOfTime.DurationConstructor,
+    )
+    .toDate();
+}

backend/tsconfig.json

@@ -6,7 +6,10 @@
     "emitDecoratorMetadata": true,
     "experimentalDecorators": true,
     "allowSyntheticDefaultImports": true,
-    "target": "es2017",
+    "target": "es2021",
+    "lib": [
+      "ES2021"
+    ],
     "sourceMap": true,
     "outDir": "./dist",
     "baseUrl": "./",

docs/README.es.md

@@ -2,7 +2,7 @@
 
 ---
 
-_Leer esto en otro idioma: [Inglés](/README.md), [Español](/docs/README.es.md), [Chino Simplificado](/docs/README.zh-cn.md)_
+_Leer esto en otro idioma: [Inglés](/README.md), [Español](/docs/README.es.md), [Chino Simplificado](/docs/README.zh-cn.md), [日本語](/docs/README.ja-jp.md)_
 
 ---
 

docs/README.ja-jp.md

@@ -0,0 +1,158 @@
+# <div align="center"><img  src="https://user-images.githubusercontent.com/58886915/166198400-c2134044-1198-4647-a8b6-da9c4a204c68.svg" width="40"/> </br>Pingvin Share</div>
+
+---
+
+_READMEを別の言語で読む: [Spanish](/docs/README.es.md), [English](/README.md), [Simplified Chinese](/docs/README.zh-cn.md), [日本語](/docs/README.ja-jp.md)_
+
+---
+
+Pingvin Share は、セルフホスト型のファイル共有プラットフォームであり、WeTransfer、ギガファイル便などの代替プラットフォームです。
+
+## ✨ 特徴的な機能
+
+- リンクを用いたファイル共有
+- ファイルサイズ無制限 (ストレージスペースの範囲内で)
+- 共有への有効期限の設定
+- 訪問回数の制限とパスワードの設定により共有を安全に保つ
+- メールでリンクを共有
+- ClamAVと連携して、ウイルスチェックが可能
+
+## 🐧 Pingvin Shareについて知る
+
+- [デモ](https://pingvin-share.dev.eliasschneider.com)
+- [DB Techによるレビュー](https://www.youtube.com/watch?v=rWwNeZCOPJA)
+
+<img src="https://user-images.githubusercontent.com/58886915/225038319-b2ef742c-3a74-4eb6-9689-4207a36842a4.png" width="700"/>
+
+## ⌨️ セットアップ
+
+> 注意: Pingvin Shareは、早期段階であり、バグが含まれている場合があります。
+
+### Dockerでインストール (おすすめ)
+
+1. `docker-compose.yml`ファイルをダウンロード
+2. `docker-compose up -d`を実行
+
+Webサイトは、`http://localhost:3000`でリッスンされます。これでPingvin Shareをお使い頂けます🐧!
+
+### スタンドアローンインストール
+
+必要なツール:
+
+- [Node.js](https://nodejs.org/en/download/) >= 16
+- [Git](https://git-scm.com/downloads)
+- [pm2](https://pm2.keymetrics.io/) Pingvin Shareをバックグラウンドで動作させるために必要
+
+```bash
+git clone https://github.com/stonith404/pingvin-share
+cd pingvin-share
+
+# 最新バージョンをチェックアウト
+git fetch --tags && git checkout $(git describe --tags `git rev-list --tags --max-count=1`)
+
+# バックエンドを開始
+cd backend
+npm install
+npm run build
+pm2 start --name="pingvin-share-backend" npm -- run prod
+
+#フロントエンドを開始
+cd ../frontend
+npm install
+npm run build
+pm2 start --name="pingvin-share-frontend" npm -- run start
+```
+
+Webサイトは、`http://localhost:3000`でリッスンされます。これでPingvin Shareをお使い頂けます🐧!
+
+### 連携機能
+
+#### ClamAV (Dockerのみ)
+
+ClamAVは、共有されたファイルをスキャンし、感染したファイルを見つけた場合に削除するために使用されます。
+
+1. ClamAVコンテナをDocker Composeの定義ファイル(`docker-compose.yml`を確認)に追加し、コンテナを開始してください。
+2. Dockerは、Pingvin Shareを開始する前に、ClamAVの準備が整うまで待機します。これには、1分から2分ほどかかります。
+3. Pingvin Shareのログに"ClamAV is active"というログが記録されます。
+
+ClamAVは、非常に多くのリソースを必要とします、詳しくは[リソース](https://docs.clamav.net/manual/Installing/Docker.html#memory-ram-requirements)をご確認ください。
+
+### 追加情報
+
+- [Synology NASへのインストール方法](https://mariushosting.com/how-to-install-pingvin-share-on-your-synology-nas/)
+
+### 新しいバージョンへのアップグレード
+
+Pingvin Shareは早期段階のため、アップグレード前に必ずリリースノートを確認して、アップグレードしても問題ないかどうかご確認ください。
+
+#### Docker
+
+```bash
+docker compose pull
+docker compose up -d
+```
+
+#### スタンドアローン
+
+1. アプリを停止する
+   ```bash
+   pm2 stop pingvin-share-backend pingvin-share-frontend
+   ```
+2. `git clone`のステップを除いて、[インストールガイド](#stand-alone-installation)をくり返してください。
+
+   ```bash
+   cd pingvin-share
+
+   # 最新バージョンをチェックアウト
+   git fetch --tags && git checkout $(git describe --tags `git rev-list --tags --max-count=1`)
+
+   # バックエンドを開始
+   cd backend
+   npm run build
+   pm2 restart pingvin-share-backend
+
+   #フロントエンドを開始
+   cd ../frontend
+   npm run build
+   pm2 restart pingvin-share-frontend
+   ```
+
+### 設定
+
+管理者のダッシュボード内の「設定」ページから、Pingvin Shareをカスタマイズできます。
+
+#### 環境変数
+
+インストール時の特定の設定で、環境変数を使用できます。次の環境変数が使用可能です:
+
+##### バックエンド
+
+| 変数名            | デフォルト値                                        | 説明                                   |
+| ---------------- | -------------------------------------------------- | -------------------------------------- |
+| `PORT`           | `8080`                                             | バックエンドがリッスンするポート番号       |
+| `DATABASE_URL`   | `file:../data/pingvin-share.db?connection_limit=1` | SQLiteのURL                             |
+| `DATA_DIRECTORY` | `./data`                                           | データを保管するディレクトリ               |
+| `CLAMAV_HOST`    | `127.0.0.1`                                        | ClamAVサーバーのIPアドレス               |
+| `CLAMAV_PORT`    | `3310`                                             | ClamAVサーバーのポート番号                |
+
+##### フロントエンド
+
+| 変数名     | デフォルト値             | 説明                                          |
+| --------- | ----------------------- | ----------------------------------------      |
+| `PORT`    | `3000`                  | フロントエンドがリッスンするポート番号            |
+| `API_URL` | `http://localhost:8080` | フロントエンドからアクセスするバックエンドへのURL |
+
+## 🖤 コントリビュート
+
+### 翻訳
+
+Pingvin Shareをあなたが使用している言語に翻訳するお手伝いを募集しています。
+[Crowdin](https://crowdin.com/project/pingvin-share)上で、簡単にPingvin Shareの翻訳作業への参加が可能です。
+
+あなたの言語がありませんか？ 気軽に[リクエスト](https://github.com/stonith404/pingvin-share/issues/new?assignees=&labels=language-request&projects=&template=language-request.yml&title=%F0%9F%8C%90+Language+request%3A+%3Clanguage+name+in+english%3E)してください。
+
+翻訳中に問題がありましたか？ [ローカライズに関するディスカッション](https://github.com/stonith404/pingvin-share/discussions/198)に是非参加してください。
+
+### プロジェクト
+
+Pingvin Shareへのコントリビュートをいつでもお待ちしています！ [コントリビューションガイド](/CONTRIBUTING.md)を確認して、是非参加してください。

docs/README.zh-cn.md

@@ -2,7 +2,7 @@
 
 ---
 
-_选择合适的语言阅读: [西班牙语](/docs/README.es.md), [英语](/README.md), [简体中文](/docs/README.zh-cn.md)_
+_选择合适的语言阅读: [西班牙语](/docs/README.es.md), [英语](/README.md), [简体中文](/docs/README.zh-cn.md), [日本语](/docs/README.ja-jp.md)_
 
 ---
 

docs/oauth2-guide.md

@@ -0,0 +1,157 @@
+# OAuth 2 Login Guide
+
+## Config Built-in OAuth 2 Providers
+
+- [GitHub](#github)
+- [Google](#google)
+- [Microsoft](#microsoft)
+- [Discord](#discord)
+- [OpenID Connect](#openid-connect)
+
+### GitHub
+
+Please follow the [official guide](https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/creating-an-oauth-app) to create an OAuth app.
+
+Redirect URL: `https://<your-domain>/api/oauth/callback/github`
+
+### Google
+
+Please follow the [official guide](https://developers.google.com/identity/protocols/oauth2/web-server#prerequisites) to create an OAuth 2.0 App.
+
+Redirect URL: `https://<your-domain>/api/oauth/callback/google`
+
+### Microsoft
+
+Please follow the [official guide](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app) to register an application.
+
+> [!IMPORTANT]
+> **Microsoft Tenant** you set in the admin panel must match the **supported account types** you set in the Microsoft Entra admin center, otherwise the OAuth login will not work. Refer to the [official documentation](https://learn.microsoft.com/en-us/entra/identity-platform/v2-protocols-oidc#find-your-apps-openid-configuration-document-uri) for more details.
+
+Redirect URL: `https://<your-domain>/api/oauth/callback/microsoft`
+
+### Discord
+
+Create an application on [Discord Developer Portal](https://discord.com/developers/applications).
+
+Redirect URL: `https://<your-domain>/api/oauth/callback/discord`
+
+### OpenID Connect
+
+Generic OpenID Connect provider is also supported, we have tested it on Keycloak, Authentik and Casdoor.
+
+Redirect URL: `https://<your-domain>/api/oauth/callback/oidc`
+
+## Custom your OAuth 2 Provider
+
+If our built-in providers don't meet your needs, you can create your own OAuth 2 provider.
+
+### 1. Create config
+
+Add your config (client id, client secret, etc.) in [`config.seed.ts`](../backend/prisma/seed/config.seed.ts):
+
+```ts
+const configVariables: ConfigVariables = {
+  // ...
+  oauth: {
+    // ...
+    "YOUR_PROVIDER_NAME-enabled": {
+      type: "boolean",
+      defaultValue: "false",
+    },
+    "YOUR_PROVIDER_NAME-clientId": {
+      type: "string",
+      defaultValue: "",
+    },
+    "YOUR_PROVIDER_NAME-clientSecret": {
+      type: "string",
+      defaultValue: "",
+      obscured: true,
+    },
+  }
+}
+```
+
+### 2. Create provider class
+
+#### Generic OpenID Connect
+
+If your provider supports OpenID connect, it's extremely easy to extend [`GenericOidcProvider`](../backend/src/oauth/provider/genericOidc.provider.ts) to add a new OpenID Connect provider.
+
+The [Google provider](../backend/src/oauth/provider/google.provider.ts) and [Microsoft provider](../backend/src/oauth/provider/microsoft.provider.ts) are good examples.
+
+Here are some discovery URIs for popular providers:
+
+- Microsoft: `https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration`
+- Google: `https://accounts.google.com/.well-known/openid-configuration`
+- Apple: `https://appleid.apple.com/.well-known/openid-configuration`
+- Gitlab: `https://gitlab.com/.well-known/openid-configuration`
+- Huawei: `https://oauth-login.cloud.huawei.com/.well-known/openid-configuration`
+- Paypal: `https://www.paypal.com/.well-known/openid-configuration`
+- Yahoo: `https://api.login.yahoo.com/.well-known/openid-configuration`
+
+#### OAuth 2
+
+If your provider only supports OAuth 2, you can implement [`OAuthProvider`](../backend/src/oauth/provider/oauthProvider.interface.ts) interface to add a new OAuth 2 provider.
+
+The [GitHub provider](../backend/src/oauth/provider/github.provider.ts) and [Discord provider](../backend/src/oauth/provider/discord.provider.ts) are good examples.
+
+### 3. Register provider
+
+Register your provider in [`OAuthModule`](../backend/src/oauth/oauth.module.ts) and [`OAuthSignInDto`](../backend/src/oauth/dto/oauthSignIn.dto.ts):
+
+```ts
+@Module({
+  providers: [
+    GitHubProvider,
+    // your provider
+    {
+      provide: "OAUTH_PROVIDERS",
+      useFactory(github: GitHubProvider, /* your provider */): Record<string, OAuthProvider<unknown>> {
+        return {
+          github,
+          /* your provider */
+        };
+      },
+      inject: [GitHubProvider, /* your provider */],
+    },
+  ],
+})
+export class OAuthModule {
+}
+```
+
+```ts
+export interface OAuthSignInDto {
+  provider: 'github' | 'google' | 'microsoft' | 'discord' | 'oidc' /* your provider*/;
+  providerId: string;
+  providerUsername: string;
+  email: string;
+}
+```
+
+### 4. Add frontend icon
+
+Add an icon in [`oauth.util.tsx`](../frontend/src/utils/oauth.util.tsx).
+
+```tsx
+const getOAuthIcon = (provider: string) => {
+  return {
+    'github': <SiGithub />,
+    /* your provider */
+  }[provider];
+}
+```
+
+### 5. Add i18n text
+
+Add keys below to your i18n text in [locale file](../frontend/src/i18n/translations/en-US.ts).
+
+- `signIn.oauth.YOUR_PROVIDER_NAME`
+- `account.card.oauth.YOUR_PROVIDER_NAME`
+- `admin.config.oauth.YOUR_PROVIDER_NAME-enabled`
+- `admin.config.oauth.YOUR_PROVIDER_NAME-client-id`
+- `admin.config.oauth.YOUR_PROVIDER_NAME-client-secret`
+- `error.param.provider_YOUR_PROVIDER_NAME`
+- Other config keys you defined in step 1
+
+Congratulations! 🎉 You have successfully added a new OAuth 2 provider! Pull requests are welcome if you want to share your provider with others.

frontend/.eslintrc.json

@@ -11,6 +11,7 @@
     "react-hooks/exhaustive-deps": ["off"],
     "import/no-anonymous-default-export": ["off"],
     "no-unused-vars": ["warn"],
-    "react/no-unescaped-entities": ["off"]
+    "react/no-unescaped-entities": ["off"],
+    "@next/next/no-img-element": ["off"]
   }
 }

frontend/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pingvin-share-frontend",
-  "version": "0.18.1",
+  "version": "0.20.3",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "pingvin-share-frontend",
-      "version": "0.18.1",
+      "version": "0.20.3",
       "dependencies": {
         "@emotion/react": "^11.11.1",
         "@emotion/server": "^11.11.0",

frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pingvin-share-frontend",
-  "version": "0.18.1",
+  "version": "0.20.3",
   "scripts": {
     "dev": "next dev",
     "build": "next build",

frontend/src/components/Logo.tsx

@@ -1,6 +1,4 @@
-import Image from "next/image";
-
 const Logo = ({ height, width }: { height: number; width: number }) => {
-  return <Image src="/img/logo.png" alt="logo" height={height} width={width} />;
+  return <img src="/img/logo.png" alt="logo" height={height} width={width} />;
 };
 export default Logo;

frontend/src/components/account/showShareInformationsModal.tsx

@@ -36,28 +36,28 @@ const showShareInformationsModal = (
 
     children: (
       <Stack align="stretch" spacing="md">
-        <Text size="sm" color="lightgray">
+        <Text size="sm">
           <b>
             <FormattedMessage id="account.shares.table.id" />:{" "}
           </b>
           {share.id}
         </Text>
 
-        <Text size="sm" color="lightgray">
+        <Text size="sm">
           <b>
             <FormattedMessage id="account.shares.table.description" />:{" "}
           </b>
           {share.description || "No description"}
         </Text>
 
-        <Text size="sm" color="lightgray">
+        <Text size="sm">
           <b>
             <FormattedMessage id="account.shares.table.createdAt" />:{" "}
           </b>
           {formattedCreatedAt}
         </Text>
 
-        <Text size="sm" color="lightgray">
+        <Text size="sm">
           <b>
             <FormattedMessage id="account.shares.table.expiresAt" />:{" "}
           </b>
@@ -66,7 +66,7 @@ const showShareInformationsModal = (
         <Divider />
         <CopyTextField link={link} />
         <Divider />
-        <Text size="sm" color="lightgray">
+        <Text size="sm">
           <b>
             <FormattedMessage id="account.shares.table.size" />:{" "}
           </b>
@@ -76,7 +76,7 @@ const showShareInformationsModal = (
 
         <Flex align="center" justify="center">
           {shareSize / maxShareSize < 0.1 && (
-            <Text size="xs" color="lightgray" style={{ marginRight: "4px" }}>
+            <Text size="xs" style={{ marginRight: "4px" }}>
               {formattedShareSize}
             </Text>
           )}
@@ -87,7 +87,7 @@ const showShareInformationsModal = (
             size="xl"
             radius="xl"
           />
-          <Text size="xs" color="lightgray" style={{ marginLeft: "4px" }}>
+          <Text size="xs" style={{ marginLeft: "4px" }}>
             {formattedMaxShareSize}
           </Text>
         </Flex>

frontend/src/components/admin/configuration/ConfigurationNavBar.tsx

@@ -11,7 +11,7 @@ import {
 } from "@mantine/core";
 import Link from "next/link";
 import { Dispatch, SetStateAction } from "react";
-import { TbAt, TbMail, TbShare, TbSquare } from "react-icons/tb";
+import { TbAt, TbMail, TbShare, TbSocial, TbSquare } from "react-icons/tb";
 import { FormattedMessage } from "react-intl";
 
 const categories = [
@@ -19,6 +19,7 @@ const categories = [
   { name: "Email", icon: <TbMail /> },
   { name: "Share", icon: <TbShare /> },
   { name: "SMTP", icon: <TbAt /> },
+  { name: "OAuth", icon: <TbSocial /> },
 ];
 
 const useStyles = createStyles((theme) => ({

frontend/src/components/auth/SignInForm.tsx

@@ -2,9 +2,11 @@ import {
   Anchor,
   Button,
   Container,
+  createStyles,
   Group,
   Paper,
   PasswordInput,
+  Stack,
   Text,
   TextInput,
   Title,
@@ -18,19 +20,47 @@ import { TbInfoCircle } from "react-icons/tb";
 import { FormattedMessage } from "react-intl";
 import * as yup from "yup";
 import useConfig from "../../hooks/config.hook";
-import useTranslate from "../../hooks/useTranslate.hook";
 import useUser from "../../hooks/user.hook";
+import useTranslate from "../../hooks/useTranslate.hook";
 import authService from "../../services/auth.service";
+import { getOAuthIcon, getOAuthUrl } from "../../utils/oauth.util";
 import toast from "../../utils/toast.util";
 
+const useStyles = createStyles((theme) => ({
+  or: {
+    "&:before": {
+      content: "''",
+      flex: 1,
+      display: "block",
+      borderTopWidth: 1,
+      borderTopStyle: "solid",
+      borderColor:
+        theme.colorScheme === "dark"
+          ? theme.colors.dark[3]
+          : theme.colors.gray[4],
+    },
+    "&:after": {
+      content: "''",
+      flex: 1,
+      display: "block",
+      borderTopWidth: 1,
+      borderTopStyle: "solid",
+      borderColor:
+        theme.colorScheme === "dark"
+          ? theme.colors.dark[3]
+          : theme.colors.gray[4],
+    },
+  },
+}));
+
 const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
   const config = useConfig();
   const router = useRouter();
   const t = useTranslate();
   const { refreshUser } = useUser();
+  const { classes } = useStyles();
 
-  const [showTotp, setShowTotp] = React.useState(false);
-  const [loginToken, setLoginToken] = React.useState("");
+  const [oauth, setOAuth] = React.useState<string[]>([]);
 
   const validationSchema = yup.object().shape({
     emailOrUsername: yup.string().required(t("common.error.field-required")),
@@ -44,7 +74,6 @@ const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
     initialValues: {
       emailOrUsername: "",
       password: "",
-      totp: "",
     },
     validate: yupResolver(validationSchema),
   });
@@ -55,7 +84,6 @@ const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
       .then(async (response) => {
         if (response.data["loginToken"]) {
           // Prompt the user to enter their totp code
-          setShowTotp(true);
           showNotification({
             icon: <TbInfoCircle />,
             color: "blue",
@@ -63,7 +91,11 @@ const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
             title: t("signIn.notify.totp-required.title"),
             message: t("signIn.notify.totp-required.description"),
           });
-          setLoginToken(response.data["loginToken"]);
+          router.push(
+            `/auth/totp/${
+              response.data["loginToken"]
+            }?redirect=${encodeURIComponent(redirectPath)}`,
+          );
         } else {
           await refreshUser();
           router.replace(redirectPath);
@@ -72,25 +104,15 @@ const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
       .catch(toast.axiosError);
   };
 
-  const signInTotp = (email: string, password: string, totp: string) => {
-    authService
-      .signInTotp(email, password, totp, loginToken)
-      .then(async () => {
-        await refreshUser();
-        router.replace(redirectPath);
-      })
-      .catch((error) => {
-        if (error?.response?.data?.error == "share_password_required") {
-          toast.axiosError(error);
-          // Refresh the page to start over
-          window.location.reload();
-        }
-
-        toast.axiosError(error);
-        form.setValues({ totp: "" });
-      });
+  const getAvailableOAuth = async () => {
+    const oauth = await authService.getAvailableOAuth();
+    setOAuth(oauth.data);
   };
 
+  React.useEffect(() => {
+    getAvailableOAuth().catch(toast.axiosError);
+  }, []);
+
   return (
     <Container size={420} my={40}>
       <Title order={2} align="center" weight={900}>
@@ -107,9 +129,7 @@ const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
       <Paper withBorder shadow="md" p={30} mt={30} radius="md">
         <form
           onSubmit={form.onSubmit((values) => {
-            if (showTotp)
-              signInTotp(values.emailOrUsername, values.password, values.totp);
-            else signIn(values.emailOrUsername, values.password);
+            signIn(values.emailOrUsername, values.password);
           })}
         >
           <TextInput
@@ -123,15 +143,6 @@ const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
             mt="md"
             {...form.getInputProps("password")}
           />
-          {showTotp && (
-            <TextInput
-              variant="filled"
-              label={t("account.modal.totp.code")}
-              placeholder="******"
-              mt="md"
-              {...form.getInputProps("totp")}
-            />
-          )}
           {config.get("smtp.enabled") && (
             <Group position="right" mt="xs">
               <Anchor component={Link} href="/auth/resetPassword" size="xs">
@@ -143,6 +154,27 @@ const SignInForm = ({ redirectPath }: { redirectPath: string }) => {
             <FormattedMessage id="signin.button.submit" />
           </Button>
         </form>
+        {oauth.length > 0 && (
+          <Stack mt="xl">
+            <Group align="center" className={classes.or}>
+              <Text>{t("signIn.oauth.or")}</Text>
+            </Group>
+            <Group position="center">
+              {oauth.map((provider) => (
+                <Button
+                  key={provider}
+                  component="a"
+                  target="_blank"
+                  title={t(`signIn.oauth.${provider}`)}
+                  href={getOAuthUrl(config.get("general.appUrl"), provider)}
+                  variant="light"
+                >
+                  {getOAuthIcon(provider)}
+                </Button>
+              ))}
+            </Group>
+          </Stack>
+        )}
       </Paper>
     </Container>
   );

frontend/src/components/auth/TotpForm.tsx

@@ -0,0 +1,84 @@
+import {
+  Button,
+  Container,
+  Group,
+  Paper,
+  PinInput,
+  Title,
+} from "@mantine/core";
+import { FormattedMessage } from "react-intl";
+import * as yup from "yup";
+import useTranslate from "../../hooks/useTranslate.hook";
+import { useForm, yupResolver } from "@mantine/form";
+import { useState } from "react";
+import authService from "../../services/auth.service";
+import toast from "../../utils/toast.util";
+import { useRouter } from "next/router";
+import useUser from "../../hooks/user.hook";
+
+function TotpForm({ redirectPath }: { redirectPath: string }) {
+  const t = useTranslate();
+  const router = useRouter();
+  const { refreshUser } = useUser();
+
+  const [loading, setLoading] = useState(false);
+
+  const validationSchema = yup.object().shape({
+    code: yup
+      .string()
+      .min(6, t("common.error.too-short", { length: 6 }))
+      .required(t("common.error.field-required")),
+  });
+
+  const form = useForm({
+    initialValues: {
+      code: "",
+    },
+    validate: yupResolver(validationSchema),
+  });
+
+  const onSubmit = async () => {
+    if (loading) return;
+    setLoading(true);
+    try {
+      await authService.signInTotp(
+        form.values.code,
+        router.query.loginToken as string,
+      );
+      await refreshUser();
+      await router.replace(redirectPath);
+    } catch (e) {
+      toast.axiosError(e);
+      form.setFieldError("code", "error");
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  return (
+    <Container size={420} my={40}>
+      <Title order={2} align="center" weight={900}>
+        <FormattedMessage id="totp.title" />
+      </Title>
+      <Paper withBorder shadow="md" p={30} mt={30} radius="md">
+        <form onSubmit={form.onSubmit(onSubmit)}>
+          <Group position="center">
+            <PinInput
+              length={6}
+              oneTimeCode
+              aria-label="One time code"
+              autoFocus={true}
+              onComplete={onSubmit}
+              {...form.getInputProps("code")}
+            />
+            <Button mt="md" type="submit" loading={loading}>
+              {t("totp.button.signIn")}
+            </Button>
+          </Group>
+        </form>
+      </Paper>
+    </Container>
+  );
+}
+
+export default TotpForm;

frontend/src/components/share/modals/showCreateReverseShareModal.tsx

@@ -12,6 +12,7 @@ import {
 import { useForm } from "@mantine/form";
 import { useModals } from "@mantine/modals";
 import { ModalsContextProps } from "@mantine/modals/lib/context";
+import moment from "moment";
 import { FormattedMessage } from "react-intl";
 import useTranslate, {
   translateOutsideContext,
@@ -25,6 +26,7 @@ import showCompletedReverseShareModal from "./showCompletedReverseShareModal";
 const showCreateReverseShareModal = (
   modals: ModalsContextProps,
   showSendEmailNotificationOption: boolean,
+  maxExpirationInHours: number,
   getReverseShares: () => void,
 ) => {
   const t = translateOutsideContext();
@@ -34,6 +36,7 @@ const showCreateReverseShareModal = (
       <Body
         showSendEmailNotificationOption={showSendEmailNotificationOption}
         getReverseShares={getReverseShares}
+        maxExpirationInHours={maxExpirationInHours}
       />
     ),
   });
@@ -42,9 +45,11 @@ const showCreateReverseShareModal = (
 const Body = ({
   getReverseShares,
   showSendEmailNotificationOption,
+  maxExpirationInHours,
 }: {
   getReverseShares: () => void;
   showSendEmailNotificationOption: boolean;
+  maxExpirationInHours: number;
 }) => {
   const modals = useModals();
   const t = useTranslate();
@@ -58,27 +63,48 @@ const Body = ({
       expiration_unit: "-days",
     },
   });
+
+  const onSubmit = form.onSubmit(async (values) => {
+    const expirationDate = moment().add(
+      form.values.expiration_num,
+      form.values.expiration_unit.replace(
+        "-",
+        "",
+      ) as moment.unitOfTime.DurationConstructor,
+    );
+    if (
+      maxExpirationInHours != 0 &&
+      expirationDate.isAfter(moment().add(maxExpirationInHours, "hours"))
+    ) {
+      form.setFieldError(
+        "expiration_num",
+        t("upload.modal.expires.error.too-long", {
+          max: moment.duration(maxExpirationInHours, "hours").humanize(),
+        }),
+      );
+      return;
+    }
+
+    shareService
+      .createReverseShare(
+        values.expiration_num + values.expiration_unit,
+        values.maxShareSize,
+        values.maxUseCount,
+        values.sendEmailNotification,
+      )
+      .then(({ link }) => {
+        modals.closeAll();
+        showCompletedReverseShareModal(modals, link, getReverseShares);
+      })
+      .catch(toast.axiosError);
+  });
+
   return (
     <Group>
-      <form
-        onSubmit={form.onSubmit(async (values) => {
-          shareService
-            .createReverseShare(
-              values.expiration_num + values.expiration_unit,
-              values.maxShareSize,
-              values.maxUseCount,
-              values.sendEmailNotification,
-            )
-            .then(({ link }) => {
-              modals.closeAll();
-              showCompletedReverseShareModal(modals, link, getReverseShares);
-            })
-            .catch(toast.axiosError);
-        })}
-      >
+      <form onSubmit={onSubmit}>
         <Stack align="stretch">
           <div>
-            <Grid align={form.errors.link ? "center" : "flex-end"}>
+            <Grid align={form.errors.expiration_num ? "center" : "flex-end"}>
               <Col xs={6}>
                 <NumberInput
                   min={1}

frontend/src/components/upload/Dropzone.tsx

@@ -33,10 +33,12 @@ const useStyles = createStyles((theme) => ({
 }));
 
 const Dropzone = ({
+  title,
   isUploading,
   maxShareSize,
   showCreateUploadModalCallback,
 }: {
+  title?: string;
   isUploading: boolean;
   maxShareSize: number;
   showCreateUploadModalCallback: (files: FileUpload[]) => void;
@@ -60,7 +62,7 @@ const Dropzone = ({
             toast.error(
               t("upload.dropzone.notify.file-too-big", {
                 maxSize: byteToHumanSizeString(maxShareSize),
-              })
+              }),
             );
           } else {
             files = files.map((newFile) => {
@@ -78,7 +80,7 @@ const Dropzone = ({
             <TbCloudUpload size={50} />
           </Group>
           <Text align="center" weight={700} size="lg" mt="xl">
-            <FormattedMessage id="upload.dropzone.title" />
+            {title || <FormattedMessage id="upload.dropzone.title" />}
           </Text>
           <Text align="center" size="sm" mt="xs" color="dimmed">
             <FormattedMessage

frontend/src/components/upload/EditableUpload.tsx

@@ -0,0 +1,238 @@
+import { Button, Group } from "@mantine/core";
+import { useModals } from "@mantine/modals";
+import { cleanNotifications } from "@mantine/notifications";
+import { AxiosError } from "axios";
+import pLimit from "p-limit";
+import { useEffect, useMemo, useState } from "react";
+import { FormattedMessage } from "react-intl";
+import Dropzone from "../../components/upload/Dropzone";
+import FileList from "../../components/upload/FileList";
+import showCompletedUploadModal from "../../components/upload/modals/showCompletedUploadModal";
+import useConfig from "../../hooks/config.hook";
+import useTranslate from "../../hooks/useTranslate.hook";
+import shareService from "../../services/share.service";
+import { FileListItem, FileMetaData, FileUpload } from "../../types/File.type";
+import toast from "../../utils/toast.util";
+import { useRouter } from "next/router";
+
+const promiseLimit = pLimit(3);
+const chunkSize = 10 * 1024 * 1024; // 10MB
+let errorToastShown = false;
+
+const EditableUpload = ({
+  maxShareSize,
+  shareId,
+  files: savedFiles = [],
+}: {
+  maxShareSize?: number;
+  isReverseShare?: boolean;
+  shareId: string;
+  files?: FileMetaData[];
+}) => {
+  const t = useTranslate();
+  const router = useRouter();
+  const config = useConfig();
+
+  const [existingFiles, setExistingFiles] =
+    useState<Array<FileMetaData & { deleted?: boolean }>>(savedFiles);
+  const [uploadingFiles, setUploadingFiles] = useState<FileUpload[]>([]);
+  const [isUploading, setIsUploading] = useState(false);
+
+  const existingAndUploadedFiles: FileListItem[] = useMemo(
+    () => [...uploadingFiles, ...existingFiles],
+    [existingFiles, uploadingFiles],
+  );
+  const dirty = useMemo(() => {
+    return (
+      existingFiles.some((file) => !!file.deleted) || !!uploadingFiles.length
+    );
+  }, [existingFiles, uploadingFiles]);
+
+  const setFiles = (files: FileListItem[]) => {
+    const _uploadFiles = files.filter(
+      (file) => "uploadingProgress" in file,
+    ) as FileUpload[];
+    const _existingFiles = files.filter(
+      (file) => !("uploadingProgress" in file),
+    ) as FileMetaData[];
+
+    setUploadingFiles(_uploadFiles);
+    setExistingFiles(_existingFiles);
+  };
+
+  maxShareSize ??= parseInt(config.get("share.maxSize"));
+
+  const uploadFiles = async (files: FileUpload[]) => {
+    const fileUploadPromises = files.map(async (file, fileIndex) =>
+      // Limit the number of concurrent uploads to 3
+      promiseLimit(async () => {
+        let fileId: string;
+
+        const setFileProgress = (progress: number) => {
+          setUploadingFiles((files) =>
+            files.map((file, callbackIndex) => {
+              if (fileIndex == callbackIndex) {
+                file.uploadingProgress = progress;
+              }
+              return file;
+            }),
+          );
+        };
+
+        setFileProgress(1);
+
+        let chunks = Math.ceil(file.size / chunkSize);
+
+        // If the file is 0 bytes, we still need to upload 1 chunk
+        if (chunks == 0) chunks++;
+
+        for (let chunkIndex = 0; chunkIndex < chunks; chunkIndex++) {
+          const from = chunkIndex * chunkSize;
+          const to = from + chunkSize;
+          const blob = file.slice(from, to);
+          try {
+            await new Promise((resolve, reject) => {
+              const reader = new FileReader();
+              reader.onload = async (event) =>
+                await shareService
+                  .uploadFile(
+                    shareId,
+                    event,
+                    {
+                      id: fileId,
+                      name: file.name,
+                    },
+                    chunkIndex,
+                    chunks,
+                  )
+                  .then((response) => {
+                    fileId = response.id;
+                    resolve(response);
+                  })
+                  .catch(reject);
+
+              reader.readAsDataURL(blob);
+            });
+
+            setFileProgress(((chunkIndex + 1) / chunks) * 100);
+          } catch (e) {
+            if (
+              e instanceof AxiosError &&
+              e.response?.data.error == "unexpected_chunk_index"
+            ) {
+              // Retry with the expected chunk index
+              chunkIndex = e.response!.data!.expectedChunkIndex - 1;
+              continue;
+            } else {
+              setFileProgress(-1);
+              // Retry after 5 seconds
+              await new Promise((resolve) => setTimeout(resolve, 5000));
+              chunkIndex = -1;
+
+              continue;
+            }
+          }
+        }
+      }),
+    );
+
+    await Promise.all(fileUploadPromises);
+  };
+
+  const removeFiles = async () => {
+    const removedFiles = existingFiles.filter((file) => !!file.deleted);
+
+    if (removedFiles.length > 0) {
+      await Promise.all(
+        removedFiles.map(async (file) => {
+          await shareService.removeFile(shareId, file.id);
+        }),
+      );
+
+      setExistingFiles(existingFiles.filter((file) => !file.deleted));
+    }
+  };
+
+  const revertComplete = async () => {
+    await shareService.revertComplete(shareId).then();
+  };
+
+  const completeShare = async () => {
+    return await shareService.completeShare(shareId);
+  };
+
+  const save = async () => {
+    setIsUploading(true);
+
+    try {
+      await revertComplete();
+      await uploadFiles(uploadingFiles);
+
+      const hasFailed = uploadingFiles.some(
+        (file) => file.uploadingProgress == -1,
+      );
+
+      if (!hasFailed) {
+        await removeFiles();
+      }
+
+      await completeShare();
+
+      if (!hasFailed) {
+        toast.success(t("share.edit.notify.save-success"));
+        router.back();
+      }
+    } catch {
+      toast.error(t("share.edit.notify.generic-error"));
+    } finally {
+      setIsUploading(false);
+    }
+  };
+
+  const appendFiles = (appendingFiles: FileUpload[]) => {
+    setUploadingFiles([...appendingFiles, ...uploadingFiles]);
+  };
+
+  useEffect(() => {
+    // Check if there are any files that failed to upload
+    const fileErrorCount = uploadingFiles.filter(
+      (file) => file.uploadingProgress == -1,
+    ).length;
+
+    if (fileErrorCount > 0) {
+      if (!errorToastShown) {
+        toast.error(
+          t("upload.notify.count-failed", { count: fileErrorCount }),
+          {
+            withCloseButton: false,
+            autoClose: false,
+          },
+        );
+      }
+      errorToastShown = true;
+    } else {
+      cleanNotifications();
+      errorToastShown = false;
+    }
+  }, [uploadingFiles]);
+
+  return (
+    <>
+      <Group position="right" mb={20}>
+        <Button loading={isUploading} disabled={!dirty} onClick={() => save()}>
+          <FormattedMessage id="common.button.save" />
+        </Button>
+      </Group>
+      <Dropzone
+        title={t("share.edit.append-upload")}
+        maxShareSize={maxShareSize}
+        showCreateUploadModalCallback={appendFiles}
+        isUploading={isUploading}
+      />
+      {existingAndUploadedFiles.length > 0 && (
+        <FileList files={existingAndUploadedFiles} setFiles={setFiles} />
+      )}
+    </>
+  );
+};
+export default EditableUpload;

frontend/src/components/upload/FileList.tsx

@@ -1,41 +1,106 @@
 import { ActionIcon, Table } from "@mantine/core";
-import { Dispatch, SetStateAction } from "react";
 import { TbTrash } from "react-icons/tb";
-import { FileUpload } from "../../types/File.type";
+import { GrUndo } from "react-icons/gr";
+import { FileListItem } from "../../types/File.type";
 import { byteToHumanSizeString } from "../../utils/fileSize.util";
 import UploadProgressIndicator from "./UploadProgressIndicator";
 import { FormattedMessage } from "react-intl";
 
-const FileList = ({
+const FileListRow = ({
+  file,
+  onRemove,
+  onRestore,
+}: {
+  file: FileListItem;
+  onRemove?: () => void;
+  onRestore?: () => void;
+}) => {
+  {
+    const uploadable = "uploadingProgress" in file;
+    const uploading = uploadable && file.uploadingProgress !== 0;
+    const removable = uploadable
+      ? file.uploadingProgress === 0
+      : onRemove && !file.deleted;
+    const restorable = onRestore && !uploadable && !!file.deleted; // maybe undefined, force boolean
+    const deleted = !uploadable && !!file.deleted;
+
+    return (
+      <tr
+        style={{
+          color: deleted ? "rgba(120, 120, 120, 0.5)" : "inherit",
+          textDecoration: deleted ? "line-through" : "none",
+        }}
+      >
+        <td>{file.name}</td>
+        <td>{byteToHumanSizeString(+file.size)}</td>
+        <td>
+          {removable && (
+            <ActionIcon
+              color="red"
+              variant="light"
+              size={25}
+              onClick={onRemove}
+            >
+              <TbTrash />
+            </ActionIcon>
+          )}
+          {uploading && (
+            <UploadProgressIndicator progress={file.uploadingProgress} />
+          )}
+          {restorable && (
+            <ActionIcon
+              color="primary"
+              variant="light"
+              size={25}
+              onClick={onRestore}
+            >
+              <GrUndo />
+            </ActionIcon>
+          )}
+        </td>
+      </tr>
+    );
+  }
+};
+
+const FileList = <T extends FileListItem = FileListItem>({
   files,
   setFiles,
 }: {
-  files: FileUpload[];
-  setFiles: Dispatch<SetStateAction<FileUpload[]>>;
+  files: T[];
+  setFiles: (files: T[]) => void;
 }) => {
   const remove = (index: number) => {
-    files.splice(index, 1);
+    const file = files[index];
+
+    if ("uploadingProgress" in file) {
+      files.splice(index, 1);
+    } else {
+      files[index] = { ...file, deleted: true };
+    }
+
     setFiles([...files]);
   };
+
+  const restore = (index: number) => {
+    const file = files[index];
+
+    if ("uploadingProgress" in file) {
+      return;
+    } else {
+      files[index] = { ...file, deleted: false };
+    }
+
+    setFiles([...files]);
+  };
+
   const rows = files.map((file, i) => (
-    <tr key={i}>
-      <td>{file.name}</td>
-      <td>{byteToHumanSizeString(file.size)}</td>
-      <td>
-        {file.uploadingProgress == 0 ? (
-          <ActionIcon
-            color="red"
-            variant="light"
-            size={25}
-            onClick={() => remove(i)}
-          >
-            <TbTrash />
-          </ActionIcon>
-        ) : (
-          <UploadProgressIndicator progress={file.uploadingProgress} />
-        )}
-      </td>
-    </tr>
+    <FileListRow
+      key={i}
+      file={file}
+      onRemove={() => remove(i)}
+      onRestore={() => restore(i)}
+    />
   ));
 
   return (

frontend/src/components/upload/modals/showCreateUploadModal.tsx

@@ -18,6 +18,7 @@ import {
 import { useForm, yupResolver } from "@mantine/form";
 import { useModals } from "@mantine/modals";
 import { ModalsContextProps } from "@mantine/modals/lib/context";
+import moment from "moment";
 import { useState } from "react";
 import { TbAlertCircle } from "react-icons/tb";
 import { FormattedMessage } from "react-intl";
@@ -38,9 +39,10 @@ const showCreateUploadModal = (
     appUrl: string;
     allowUnauthenticatedShares: boolean;
     enableEmailRecepients: boolean;
+    maxExpirationInHours: number;
   },
   files: FileUpload[],
-  uploadCallback: (createShare: CreateShare, files: FileUpload[]) => void
+  uploadCallback: (createShare: CreateShare, files: FileUpload[]) => void,
 ) => {
   const t = translateOutsideContext();
 
@@ -69,6 +71,7 @@ const CreateUploadModalBody = ({
     appUrl: string;
     allowUnauthenticatedShares: boolean;
     enableEmailRecepients: boolean;
+    maxExpirationInHours: number;
   };
 }) => {
   const modals = useModals();
@@ -92,6 +95,7 @@ const CreateUploadModalBody = ({
     password: yup.string().min(3).max(30),
     maxViews: yup.number().min(1),
   });
+
   const form = useForm({
     initialValues: {
       link: generatedLink,
@@ -105,6 +109,58 @@ const CreateUploadModalBody = ({
     },
     validate: yupResolver(validationSchema),
   });
+
+  const onSubmit = form.onSubmit(async (values) => {
+    if (!(await shareService.isShareIdAvailable(values.link))) {
+      form.setFieldError("link", t("upload.modal.link.error.taken"));
+    } else {
+      const expirationString = form.values.never_expires
+        ? "never"
+        : form.values.expiration_num + form.values.expiration_unit;
+
+      const expirationDate = moment().add(
+        form.values.expiration_num,
+        form.values.expiration_unit.replace(
+          "-",
+          "",
+        ) as moment.unitOfTime.DurationConstructor,
+      );
+
+      if (
+        options.maxExpirationInHours != 0 &&
+        (form.values.never_expires ||
+          expirationDate.isAfter(
+            moment().add(options.maxExpirationInHours, "hours"),
+          ))
+      ) {
+        form.setFieldError(
+          "expiration_num",
+          t("upload.modal.expires.error.too-long", {
+            max: moment
+              .duration(options.maxExpirationInHours, "hours")
+              .humanize(),
+          }),
+        );
+        return;
+      }
+
+      uploadCallback(
+        {
+          id: values.link,
+          expiration: expirationString,
+          recipients: values.recipients,
+          description: values.description,
+          security: {
+            password: values.password,
+            maxViews: values.maxViews,
+          },
+        },
+        files,
+      );
+      modals.closeAll();
+    }
+  });
+
   return (
     <>
       {showNotSignedInAlert && !options.isUserSignedIn && (
@@ -118,33 +174,9 @@ const CreateUploadModalBody = ({
           <FormattedMessage id="upload.modal.not-signed-in-description" />
         </Alert>
       )}
-      <form
-        onSubmit={form.onSubmit(async (values) => {
-          if (!(await shareService.isShareIdAvailable(values.link))) {
-            form.setFieldError("link", t("upload.modal.link.error.taken"));
-          } else {
-            const expiration = form.values.never_expires
-              ? "never"
-              : form.values.expiration_num + form.values.expiration_unit;
-            uploadCallback(
-              {
-                id: values.link,
-                expiration: expiration,
-                recipients: values.recipients,
-                description: values.description,
-                security: {
-                  password: values.password,
-                  maxViews: values.maxViews,
-                },
-              },
-              files
-            );
-            modals.closeAll();
-          }
-        })}
-      >
+      <form onSubmit={onSubmit}>
         <Stack align="stretch">
-          <Group align="end">
+          <Group align={form.errors.link ? "center" : "flex-end"}>
             <TextInput
               style={{ flex: "1" }}
               variant="filled"
@@ -160,7 +192,7 @@ const CreateUploadModalBody = ({
                   "link",
                   Buffer.from(Math.random().toString(), "utf8")
                     .toString("base64")
-                    .substr(10, 7)
+                    .substr(10, 7),
                 )
               }
             >
@@ -179,7 +211,7 @@ const CreateUploadModalBody = ({
           </Text>
           {!options.isReverseShare && (
             <>
-              <Grid align={form.errors.link ? "center" : "flex-end"}>
+              <Grid align={form.errors.expiration_num ? "center" : "flex-end"}>
                 <Col xs={6}>
                   <NumberInput
                     min={1}
@@ -259,7 +291,7 @@ const CreateUploadModalBody = ({
                     neverExpires: t("upload.modal.completed.never-expires"),
                     expiresOn: t("upload.modal.completed.expires-on"),
                   },
-                  form
+                  form,
                 )}
               </Text>
             </>
@@ -274,7 +306,7 @@ const CreateUploadModalBody = ({
                   <Textarea
                     variant="filled"
                     placeholder={t(
-                      "upload.modal.accordion.description.placeholder"
+                      "upload.modal.accordion.description.placeholder",
                     )}
                     {...form.getInputProps("description")}
                   />
@@ -298,7 +330,7 @@ const CreateUploadModalBody = ({
                       if (!query.match(/^\S+@\S+\.\S+$/)) {
                         form.setFieldError(
                           "recipients",
-                          t("upload.modal.accordion.email.invalid-email")
+                          t("upload.modal.accordion.email.invalid-email"),
                         );
                       } else {
                         form.setFieldError("recipients", null);
@@ -324,7 +356,7 @@ const CreateUploadModalBody = ({
                   <PasswordInput
                     variant="filled"
                     placeholder={t(
-                      "upload.modal.accordion.security.password.placeholder"
+                      "upload.modal.accordion.security.password.placeholder",
                     )}
                     label={t("upload.modal.accordion.security.password.label")}
                     autoComplete="off"
@@ -335,7 +367,7 @@ const CreateUploadModalBody = ({
                     type="number"
                     variant="filled"
                     placeholder={t(
-                      "upload.modal.accordion.security.max-views.placeholder"
+                      "upload.modal.accordion.security.max-views.placeholder",
                     )}
                     label={t("upload.modal.accordion.security.max-views.label")}
                     {...form.getInputProps("maxViews")}

frontend/src/i18n/locales.ts

@@ -4,10 +4,13 @@ import english from "./translations/en-US";
 import spanish from "./translations/es-ES";
 import finnish from "./translations/fi-FI";
 import french from "./translations/fr-FR";
+import japanese from "./translations/ja-JP";
 import dutch from "./translations/nl-BE";
+import polish from "./translations/pl-PL";
 import portuguese from "./translations/pt-BR";
 import russian from "./translations/ru-RU";
 import serbian from "./translations/sr-SP";
+import swedish from "./translations/sv-SE";
 import thai from "./translations/th-TH";
 import chineseSimplified from "./translations/zh-CN";
 
@@ -72,4 +75,19 @@ export const LOCALES = {
     code: "nl-BE",
     messages: dutch,
   },
+  JAPANESE: {
+    name: "日本語",
+    code: "ja-JP",
+    messages: japanese,
+  },
+  POLISH: {
+    name: "Polski",
+    code: "pl-PL",
+    messages: polish,
+  },
+  SWEDISH: {
+    name: "Svenska",
+    code: "sv-SE",
+    messages: swedish,
+  },
 };

frontend/src/i18n/translations/da-DK.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Log ind",
   "signIn.notify.totp-required.title": "2-faktor login påkrævet",
   "signIn.notify.totp-required.description": "Indtast den aktuelle engangskode fra din 2-faktor Authenticator",
+  "signIn.oauth.or": "OR",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Opret en bruger",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Din e-mail",
   "signup.button.submit": "Lad os komme i gang",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "TOTP Authentication",
+  "totp.button.signIn": "Log ind",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Glemt din adgangskode?",
   "resetPassword.description": "Indtast din e-mail for at nulstille din adgangskode.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Adgangskode",
   "account.card.password.old": "Gammel adgangskode",
   "account.card.password.new": "Ny adgangskode",
+  "account.card.password.noPasswordSet": "You don't have a password set. If you want to sign in with email and password you need to set a password.",
   "account.notify.password.success": "Adgangskoden er ændret",
+  "account.card.oauth.title": "Social login",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Unlink",
+  "account.card.oauth.unlinked": "Unlinked",
+  "account.modal.unlink.title": "Unlink account",
+  "account.modal.unlink.description": "Unlinking your social accounts may cause you to lose your account if you don't remember your username and password.",
+  "account.notify.oauth.unlinked.success": "Unlinked successfully",
   "account.card.security.title": "Sikkerhed",
   "account.card.security.totp.enable.description": "Indtast din nuværende adgangskode for at begynde opsætningen af 2-faktor login",
   "account.card.security.totp.disable.description": "Indtast din nuværende adgangskode for at begynde opsætningen af 2-faktor login",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "Du vil ikke være i stand til at slette din deling manuelt og se antallet af besøgende.",
   "upload.modal.expires.never": "aldrig",
   "upload.modal.expires.never-long": "Udløber aldrig",
+  "upload.modal.expires.error.too-long": "Udløbsdatoen overskrider den maksimalt tilladte udløbsdato på {max}.",
   "upload.modal.link.label": "Link",
   "upload.modal.expires.label": "Udløb",
   "upload.modal.expires.minute-singular": "Minut",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Forhåndsvisning ikke understøttet",
   "share.modal.file-preview.error.not-supported.description": "En forhåndsvisning for thise filtype er ikke understøttet. Download venligst filen for at se den.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Edit {shareId}",
+  "share.edit.append-upload": "Append file",
+  "share.edit.notify.generic-error": "An error occurred while finishing your share.",
+  "share.edit.notify.save-success": "Share updated successfully",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Konfiguration",
   "admin.config.category.general": "Generelt",
   "admin.config.category.share": "Del",
   "admin.config.category.email": "E-mail",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Social Login",
   "admin.config.general.app-name": "App-navn",
   "admin.config.general.app-name.description": "Navnet på applikationen",
   "admin.config.general.app-url": "App URL",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Om alle skal kunne oprette en bruger",
   "admin.config.share.allow-unauthenticated-shares": "Tillad uautoriserede delinger",
   "admin.config.share.allow-unauthenticated-shares.description": "Whether unauthenticated users can create shares",
+  "admin.config.share.max-expiration": "Maks. udløb",
+  "admin.config.share.max-expiration.description": "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "Maks. størrelse",
   "admin.config.share.max-size.description": "Maksimal filstørrelse i bytes",
   "admin.config.share.zip-compression-level": "Zip compression level",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Adgangskode",
   "admin.config.smtp.password.description": "Adgangskoden til SMTP serveren",
   "admin.config.smtp.button.test": "Send test e-mail",
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
   // 404
   "404.description": "Ups! Denne side findes ikke.",
   "404.button.home": "Gå tilbage",
+  // error
+  "error.title": "Error",
+  "error.description": "Oops!",
+  "error.button.back": "Go back",
+  "error.msg.default": "Something went wrong.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Gem",
   "common.button.create": "Opret",

frontend/src/i18n/translations/de-DE.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Anmelden",
   "signIn.notify.totp-required.title": "Zwei-Faktor-Authentifizierung benötigt",
   "signIn.notify.totp-required.description": "Bitte füge deinen Zwei-Faktor-Authentifizierungscode ein",
+  "signIn.oauth.or": "ODER",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Erstelle ein Konto",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Deine Emailadresse",
   "signup.button.submit": "Lass uns loslegen",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "TOTP Authentifizierung",
+  "totp.button.signIn": "Anmelden",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Passwort vergessen?",
   "resetPassword.description": "Gib deine Email Adresse ein, um dein Passwort zurückzusetzen.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Passwort",
   "account.card.password.old": "Altes Passwort",
   "account.card.password.new": "Neues Passwort",
+  "account.card.password.noPasswordSet": "You don't have a password set. If you want to sign in with email and password you need to set a password.",
   "account.notify.password.success": "Passwort erfolgreich geändert",
+  "account.card.oauth.title": "Social login",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Unlink",
+  "account.card.oauth.unlinked": "Unlinked",
+  "account.modal.unlink.title": "Unlink account",
+  "account.modal.unlink.description": "Unlinking your social accounts may cause you to lose your account if you don't remember your username and password.",
+  "account.notify.oauth.unlinked.success": "Unlinked successfully",
   "account.card.security.title": "Sicherheit",
   "account.card.security.totp.enable.description": "Gib dein aktuelles Passwort ein, um TOTP zu aktivieren",
   "account.card.security.totp.disable.description": "Gib dein aktuelles Passwort ein, um TOTP zu deaktivieren",
@@ -90,9 +113,9 @@ export default {
   // /account/shares
   "account.shares.title": "Meine Freigaben",
   "account.shares.title.empty": "Es ist so leer hier 👀",
-  "account.shares.description.empty": "Du hast keine Freigaben eingerichtet.",
+  "account.shares.description.empty": "Du hast keine Freigaben erstellt.",
   "account.shares.button.create": "Erstelle eine",
-  "account.shares.info.title": "Teile deine Information",
+  "account.shares.info.title": "Freigabe Informationen",
   "account.shares.table.id": "ID",
   "account.shares.table.name": "Name",
   "account.shares.table.description": "Beschreibung",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "Du wirst deine Freigabe nicht löschen können oder die Besucheranzahl sehen.",
   "upload.modal.expires.never": "niemals",
   "upload.modal.expires.never-long": "Läuft nicht ab",
+  "upload.modal.expires.error.too-long": "Expiration exceeds maximum expiration date of {max}.",
   "upload.modal.link.label": "Link",
   "upload.modal.expires.label": "Gültig bis",
   "upload.modal.expires.minute-singular": "Minute",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Vorschau wird nicht unterstützt",
   "share.modal.file-preview.error.not-supported.description": "Eine Vorschau für diesen Dateityp wird nicht unterstützt. Bitte lade die Datei herunter, um sie anzuzeigen.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Edit {shareId}",
+  "share.edit.append-upload": "Append file",
+  "share.edit.notify.generic-error": "An error occurred while finishing your share.",
+  "share.edit.notify.save-success": "Share updated successfully",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Einstellungen",
   "admin.config.category.general": "Allgemein",
   "admin.config.category.share": "Freigabe",
   "admin.config.category.email": "E-Mail",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Social Login",
   "admin.config.general.app-name": "App-Name",
   "admin.config.general.app-name.description": "Name der Applikation",
   "admin.config.general.app-url": "App-URL",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Gibt an, ob eine Registrierung erlaubt ist",
   "admin.config.share.allow-unauthenticated-shares": "Nicht authentifizierte Freigaben erlauben",
   "admin.config.share.allow-unauthenticated-shares.description": "Gibt an, ob nicht authentifizierte Benutzer Freigaben erstellen können",
+  "admin.config.share.max-expiration": "Max expiration",
+  "admin.config.share.max-expiration.description": "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "Maximale Größe",
   "admin.config.share.max-size.description": "Maximale Größe einer Freigabe in Bytes",
   "admin.config.share.zip-compression-level": "Zip Komprimierungsstufe",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Passwort",
   "admin.config.smtp.password.description": "Passwort des SMTP-Servers",
   "admin.config.smtp.button.test": "Test-E-Mail senden",
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
   // 404
   "404.description": "Ups, diese Seite existiert nicht.",
   "404.button.home": "Zurück zur Startseite",
+  // error
+  "error.title": "Error",
+  "error.description": "Ups!",
+  "error.button.back": "Zurück",
+  "error.msg.default": "Etwas ist schief gelaufen.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Speichern",
   "common.button.create": "Erstellen",

frontend/src/i18n/translations/en-US.ts

@@ -43,6 +43,12 @@ export default {
   "signIn.notify.totp-required.title": "Two-factor authentication required",
   "signIn.notify.totp-required.description":
     "Please enter your two-factor authentication code",
+  "signIn.oauth.or": "OR",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
 
   // END /auth/signin
 
@@ -58,6 +64,12 @@ export default {
 
   // END /auth/signup
 
+  // /auth/totp
+  "totp.title": "TOTP Authentication",
+  "totp.button.signIn": "Sign in",
+
+  // END /auth/totp
+
   // /auth/reset-password
   "resetPassword.title": "Forgot your password?",
   "resetPassword.description": "Enter your email to reset your password.",
@@ -81,8 +93,23 @@ export default {
   "account.card.password.title": "Password",
   "account.card.password.old": "Old password",
   "account.card.password.new": "New password",
+  "account.card.password.noPasswordSet": "You don't have a password set. If you want to sign in with email and password you need to set a password.",
   "account.notify.password.success": "Password changed successfully",
 
+  "account.card.oauth.title": "Social login",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Unlink",
+  "account.card.oauth.unlinked": "Unlinked",
+  "account.modal.unlink.title": "Unlink account",
+  "account.modal.unlink.description": "Unlinking your social accounts may cause you to lose your account if you don't remember your username and password.",
+  "account.notify.oauth.unlinked.success": "Unlinked successfully",
+
+
   "account.card.security.title": "Security",
   "account.card.security.totp.enable.description":
     "Enter your current password to start enabling TOTP",
@@ -261,6 +288,7 @@ export default {
 
   "upload.modal.expires.never": "never",
   "upload.modal.expires.never-long": "Never Expires",
+  "upload.modal.expires.error.too-long": "Expiration exceeds maximum expiration date of {max}.",
 
   "upload.modal.link.label": "Link",
   "upload.modal.expires.label": "Expiration",
@@ -330,12 +358,20 @@ export default {
 
   // END /share/[id]
 
+  // /share/[id]/edit
+  "share.edit.title": "Edit {shareId}",
+  "share.edit.append-upload": "Append file",
+  "share.edit.notify.generic-error": "An error occurred while finishing your share.",
+  "share.edit.notify.save-success": "Share updated successfully",
+  // END /share/[id]/edit
+
   // /admin/config
   "admin.config.title": "Configuration",
   "admin.config.category.general": "General",
   "admin.config.category.share": "Share",
   "admin.config.category.email": "Email",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Social Login",
 
   "admin.config.general.app-name": "App name",
   "admin.config.general.app-name.description": "Name of the application",
@@ -385,6 +421,9 @@ export default {
     "Allow unauthenticated shares",
   "admin.config.share.allow-unauthenticated-shares.description":
     "Whether unauthenticated users can create shares",
+  "admin.config.share.max-expiration": "Max expiration",
+  "admin.config.share.max-expiration.description":
+    "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "Max size",
   "admin.config.share.max-size.description": "Maximum share size in bytes",
   "admin.config.share.zip-compression-level": "Zip compression level",
@@ -407,10 +446,66 @@ export default {
   "admin.config.smtp.password.description": "Password of the SMTP server",
   "admin.config.smtp.button.test": "Send test email",
 
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
+
   // 404
   "404.description": "Oops this page doesn't exist.",
   "404.button.home": "Bring me back home",
 
+  // error
+  "error.title": "Error",
+  "error.description": "Oops!",
+  "error.button.back": "Go back",
+  "error.msg.default": "Something went wrong.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
+
   // Common translations
   "common.button.save": "Save",
   "common.button.create": "Create",

frontend/src/i18n/translations/es-ES.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Iniciar sesión",
   "signIn.notify.totp-required.title": "Se requiere autenticación de dos factores",
   "signIn.notify.totp-required.description": "Por favor ingrese su código de autenticación de dos factores",
+  "signIn.oauth.or": "OR",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Crear una cuenta",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Tu correo",
   "signup.button.submit": "Comencemos",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "Autenticación TOTP",
+  "totp.button.signIn": "Iniciar sesión",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "¿Olvidaste tu contraseña?",
   "resetPassword.description": "Ingresa tu correo para restablecer tu contraseña.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Contraseña",
   "account.card.password.old": "Anterior contraseña",
   "account.card.password.new": "Nueva contraseña",
+  "account.card.password.noPasswordSet": "No tienes una establecida contraseña. Si deseas iniciar sesión con correo electrónico y una contraseña necesitas crear una contraseña.",
   "account.notify.password.success": "Contraseña cambiada correctamente",
+  "account.card.oauth.title": "Inicio de sesión con red social",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Vincular",
+  "account.card.oauth.unlink": "Desvincular",
+  "account.card.oauth.unlinked": "Desvinculado",
+  "account.modal.unlink.title": "Desvincular cuenta",
+  "account.modal.unlink.description": "Desvincular tus cuentas sociales puede causar que pierdas tu cuenta si no recuerdas tu nombre de usuario y contraseña.",
+  "account.notify.oauth.unlinked.success": "Desvinculado correctamente",
   "account.card.security.title": "Seguridad",
   "account.card.security.totp.enable.description": "Ingrese su contraseña actual para habilitar TOTP",
   "account.card.security.totp.disable.description": "Ingrese su contraseña actual para deshabilitar TOTP",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "No podrás eliminar tus compartidos manualmente ni ver el número de visitas.",
   "upload.modal.expires.never": "nunca",
   "upload.modal.expires.never-long": "Nunca Expira",
+  "upload.modal.expires.error.too-long": "La caducidad excede la fecha de caducidad máxima de {max}.",
   "upload.modal.link.label": "Enlace",
   "upload.modal.expires.label": "Expiración",
   "upload.modal.expires.minute-singular": "Minuto",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Vista previa no disponible",
   "share.modal.file-preview.error.not-supported.description": "La vista previa para este tipo de archivo no está disponible. Por favor descargue el archivo para verlo.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Editar {shareId}",
+  "share.edit.append-upload": "Agregar archivo",
+  "share.edit.notify.generic-error": "Ha ocurrido un error mientras se compartía tu archivo.",
+  "share.edit.notify.save-success": "Compartir actualizado correctamente",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Configuración",
   "admin.config.category.general": "General",
   "admin.config.category.share": "Compartido",
   "admin.config.category.email": "Correo",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Inicio de sesión social",
   "admin.config.general.app-name": "Nombre de la App",
   "admin.config.general.app-name.description": "Nombre de la aplicación",
   "admin.config.general.app-url": "App URL",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Si se permite el registro",
   "admin.config.share.allow-unauthenticated-shares": "Permitir compartir sin iniciar sesión",
   "admin.config.share.allow-unauthenticated-shares.description": "Si los usuarios que no han iniciado sesión pueden compartir",
+  "admin.config.share.max-expiration": "Expiración máxima",
+  "admin.config.share.max-expiration.description": "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "Tamaño máximo",
   "admin.config.share.max-size.description": "Tamaño máximo de los archivos, en bytes",
   "admin.config.share.zip-compression-level": "Nivel de compresión del Zip",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Contraseña",
   "admin.config.smtp.password.description": "Contraseña del servidor SMTP",
   "admin.config.smtp.button.test": "Enviar correo de prueba",
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
   // 404
   "404.description": "Oops esta página no existe.",
   "404.button.home": "Regrésame al inicio",
+  // error
+  "error.title": "Error",
+  "error.description": "Oops!",
+  "error.button.back": "Go back",
+  "error.msg.default": "Something went wrong.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Guardar",
   "common.button.create": "Crear",

frontend/src/i18n/translations/fi-FI.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Kirjaudu sisään",
   "signIn.notify.totp-required.title": "Kaksivaiheinen tunnistautuminen vaadittu",
   "signIn.notify.totp-required.description": "Syötä kaksivaiheisen tunnistautumisen koodi tähän",
+  "signIn.oauth.or": "OR",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Rekisteröidy",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Sähköpostisi",
   "signup.button.submit": "Aloitetaan",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "TOTP Authentication",
+  "totp.button.signIn": "Sign in",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Unohditko salasanan?",
   "resetPassword.description": "Kirjoita sähköpostiosoitteesi palauttaaksesi salasanasi.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Salasana",
   "account.card.password.old": "Vanha salasana",
   "account.card.password.new": "Uusi salasana",
+  "account.card.password.noPasswordSet": "You don't have a password set. If you want to sign in with email and password you need to set a password.",
   "account.notify.password.success": "Salasana vaihdettu",
+  "account.card.oauth.title": "Social login",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Unlink",
+  "account.card.oauth.unlinked": "Unlinked",
+  "account.modal.unlink.title": "Unlink account",
+  "account.modal.unlink.description": "Unlinking your social accounts may cause you to lose your account if you don't remember your username and password.",
+  "account.notify.oauth.unlinked.success": "Unlinked successfully",
   "account.card.security.title": "Turvallisuus",
   "account.card.security.totp.enable.description": "Anna nykyinen salasanasi aloittaaksesi TOTP käytön",
   "account.card.security.totp.disable.description": "Syötä nykyinen salasanasi poistaaksesi TOTP käytöstä",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "Et voi poistaa jakoasi manuaalisesti ja tarkastella kävijöiden määrää.",
   "upload.modal.expires.never": "ei koskaan",
   "upload.modal.expires.never-long": "Ei vanhene koskaan",
+  "upload.modal.expires.error.too-long": "Expiration exceeds maximum expiration date of {max}.",
   "upload.modal.link.label": "Linkki",
   "upload.modal.expires.label": "Vanhentuminen",
   "upload.modal.expires.minute-singular": "Minuutti",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Esikatselua ei tuettu",
   "share.modal.file-preview.error.not-supported.description": "Esikatselua thise tiedostotyypille ei tueta. Ole hyvä ja lataa tiedosto nähdäksesi sen.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Edit {shareId}",
+  "share.edit.append-upload": "Append file",
+  "share.edit.notify.generic-error": "An error occurred while finishing your share.",
+  "share.edit.notify.save-success": "Share updated successfully",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Asetukset",
   "admin.config.category.general": "Yleiset",
   "admin.config.category.share": "Jako",
   "admin.config.category.email": "Sähköposti",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Social Login",
   "admin.config.general.app-name": "Sovelluksen nimi",
   "admin.config.general.app-name.description": "Sovelluksen nimi",
   "admin.config.general.app-url": "Sovelluksen URL",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Onko rekisteröinti sallittu",
   "admin.config.share.allow-unauthenticated-shares": "Salli anonyymit jaot",
   "admin.config.share.allow-unauthenticated-shares.description": "Voiko tunnistamattomat käyttäjät luoda jakoja",
+  "admin.config.share.max-expiration": "Max expiration",
+  "admin.config.share.max-expiration.description": "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "Maksimikoko",
   "admin.config.share.max-size.description": "Jaon enimmäiskoko tavuissa (bytes)",
   "admin.config.share.zip-compression-level": "Zip puristustaso",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Salasana",
   "admin.config.smtp.password.description": "SMTP palvelimen salasana",
   "admin.config.smtp.button.test": "Lähetä testisähköposti",
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
   // 404
   "404.description": "Hups tätä sivua ei ole olemassa.",
   "404.button.home": "Tuo minut takaisin kotiin",
+  // error
+  "error.title": "Error",
+  "error.description": "Oops!",
+  "error.button.back": "Go back",
+  "error.msg.default": "Something went wrong.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Tallenna",
   "common.button.create": "Luo",

frontend/src/i18n/translations/fr-FR.ts

@@ -1,9 +1,9 @@
 export default {
   // Navbar
-  "navbar.upload": "Envoyer",
+  "navbar.upload": "Téléverser",
   "navbar.signin": "Se connecter",
   "navbar.home": "Accueil",
-  "navbar.signup": "S'inscrire",
+  "navbar.signup": "S’inscrire",
   "navbar.links.shares": "Mes partages",
   "navbar.links.reverse": "Partages inversés",
   "navbar.avatar.account": "Mon compte",
@@ -18,36 +18,46 @@ export default {
   "home.bullet.b.name": "Confidentialité",
   "home.bullet.b.description": "Vos fichiers sont vos fichiers et ne devraient jamais être mis entre les mains de tiers.",
   "home.bullet.c.name": "Aucune rébarbative limite de taille",
-  "home.bullet.c.description": "Téléchargez des fichiers volumineux que vous le souhaitez. Seul votre disque dur est la limite.",
+  "home.bullet.c.description": "Téléchargez des fichiers aussi volumineux que vous le souhaitez. Seul votre disque dur est la limite.",
   "home.button.start": "Commencer",
   "home.button.source": "Code source",
   // END /
   // /auth/signin
   "signin.title": "Content de vous revoir",
   "signin.description": "Pas encore de compte ?",
-  "signin.button.signup": "S'inscrire",
-  "signin.input.email-or-username": "Courriel ou pseudo",
-  "signin.input.email-or-username.placeholder": "Votre courriel ou pseudo",
+  "signin.button.signup": "S’inscrire",
+  "signin.input.email-or-username": "Courriel ou surnom",
+  "signin.input.email-or-username.placeholder": "Votre courriel ou surnom",
   "signin.input.password": "Mot de passe",
   "signin.input.password.placeholder": "Votre mot de passe",
   "signin.button.submit": "Se connecter",
   "signIn.notify.totp-required.title": "Une authentification à deux facteurs est requise",
   "signIn.notify.totp-required.description": "Veuillez entrer votre code d'authentification à deux facteurs",
+  "signIn.oauth.or": "OU",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Créer un compte",
   "signup.description": "Vous avez déjà un compte ?",
   "signup.button.signin": "Se connecter",
-  "signup.input.username": "Pseudo",
-  "signup.input.username.placeholder": "Votre pseudo",
+  "signup.input.username": "Surnom",
+  "signup.input.username.placeholder": "Votre surnom",
   "signup.input.email": "Adresse email",
-  "signup.input.email.placeholder": "Votre adresse email",
+  "signup.input.email.placeholder": "Votre courriel",
   "signup.button.submit": "Commençons",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "Authentification TOTP",
+  "totp.button.signIn": "Se connecter",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Mot de passe oublié ?",
-  "resetPassword.description": "Saisissez votre email pour réinitialiser votre mot de passe.",
-  "resetPassword.notify.success": "Un email a été envoyé avec un lien pour réinitialiser votre mot de passe.",
+  "resetPassword.description": "Saisissez votre courriel pour réinitialiser votre mot de passe.",
+  "resetPassword.notify.success": "Un courriel a été envoyé avec un lien pour réinitialiser votre mot de passe.",
   "resetPassword.button.back": "Retour à la page de connexion",
   "resetPassword.text.resetPassword": "Réinitialiser le mot de passe",
   "resetPassword.text.enterNewPassword": "Saisissez votre nouveau mot de passe",
@@ -56,17 +66,30 @@ export default {
   // /account
   "account.title": "Mon compte",
   "account.card.info.title": "Détails du compte",
-  "account.card.info.username": "Pseudo",
+  "account.card.info.username": "Surnom",
   "account.card.info.email": "Adresse email",
   "account.notify.info.success": "Compte mis à jour avec succès",
   "account.card.password.title": "Mot de passe",
   "account.card.password.old": "Ancien mot de passe",
   "account.card.password.new": "Nouveau mot de passe",
+  "account.card.password.noPasswordSet": "Vous n’avez pas de mot de passe défini. Si vous voulez vous connecter avec un e-mail et un mot de passe, vous devez définir un mot de passe.",
   "account.notify.password.success": "Le mot de passe a été modifié avec succès",
+  "account.card.oauth.title": "Identifiant social",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Associer",
+  "account.card.oauth.unlink": "Dissocier",
+  "account.card.oauth.unlinked": "Dissocié",
+  "account.modal.unlink.title": "Dissocier le compte",
+  "account.modal.unlink.description": "Dissocier vos comptes de réseaux sociaux peut vous faire perdre votre compte si jamais vous ne vous souvenez pas de votre nom d’utilisateur et de votre mot de passe.",
+  "account.notify.oauth.unlinked.success": "Dissocié avec succès",
   "account.card.security.title": "Sécurité",
-  "account.card.security.totp.enable.description": "Entrez votre mot de passe actuel pour commencer à activer TOTP",
-  "account.card.security.totp.disable.description": "Entrez votre mot de passe pour désactiver TOTP",
-  "account.card.security.totp.button.start": "Commencer",
+  "account.card.security.totp.enable.description": "Entrez votre mot de passe actuel pour activer TOTP",
+  "account.card.security.totp.disable.description": "Entrez votre mot de passe actuel pour désactiver TOTP",
+  "account.card.security.totp.button.start": "Démarrer",
   "account.modal.totp.title": "Activer TOTP",
   "account.modal.totp.step1": "Étape 1 : Ajouter votre authentificateur",
   "account.modal.totp.step2": "Étape 2 : Valider votre code",
@@ -74,8 +97,8 @@ export default {
   "account.modal.totp.code": "Code",
   "account.modal.totp.clickToCopy": "Cliquez pour copier",
   "account.modal.totp.verify": "Vérifier",
-  "account.notify.totp.disable": "TOTP désactivé",
-  "account.notify.totp.enable": "TOTP activé",
+  "account.notify.totp.disable": "TOTP désactivé avec succès",
+  "account.notify.totp.enable": "TOTP activé avec succès",
   "account.card.language.title": "Langue",
   "account.card.language.description": "Le projet est traduit par la communauté. Certaines traductions peuvent être incomplètes.",
   "account.card.color.title": "Thème de couleurs",
@@ -108,8 +131,8 @@ export default {
   // /account/reverseShares
   "account.reverseShares.title": "Partages inversés",
   "account.reverseShares.description": "Un partage inversé vous permet de générer une URL unique qui permet à des utilisateurs externes de créer un partage.",
-  "account.reverseShares.title.empty": "Il n'y a rien ici 👀",
-  "account.reverseShares.description.empty": "Vous n'avez aucun partage inversé.",
+  "account.reverseShares.title.empty": "C’est plutôt vide 👀",
+  "account.reverseShares.description.empty": "Vous n’avez aucun partage inversé.",
   // showCreateReverseShareModal.tsx
   "account.reverseShares.modal.title": "Créer un partage inversé",
   "account.reverseShares.modal.expiration.label": "Expiration",
@@ -126,8 +149,8 @@ export default {
   "account.reverseShares.modal.expiration.year-singular": "An",
   "account.reverseShares.modal.expiration.year-plural": "Ans",
   "account.reverseShares.modal.max-size.label": "Taille maximale du partage",
-  "account.reverseShares.modal.send-email": "Envoyer un email de notification",
-  "account.reverseShares.modal.send-email.description": "Envoyer une notification par email lorsqu'un partage est créé depuis ce partage inversé.",
+  "account.reverseShares.modal.send-email": "Envoyer un courriel de notification",
+  "account.reverseShares.modal.send-email.description": "Envoyer une notification par courriel lorsqu'un partage est créé depuis ce partage inversé.",
   "account.reverseShares.modal.max-use.label": "Nombre d'utilisation max",
   "account.reverseShares.modal.max-use.description": "Le nombre maximal de fois que cette URL peut être utilisée pour créer un partage.",
   "account.reverseShare.never-expires": "Ce partage inversé n'expirera jamais.",
@@ -138,10 +161,10 @@ export default {
   "account.reverseShares.table.shares": "Partages",
   "account.reverseShares.table.remaining": "Utilisations restantes",
   "account.reverseShares.table.max-size": "Taille maximale du partage",
-  "account.reverseShares.table.expires": "Expire dans",
+  "account.reverseShares.table.expires": "Expire le",
   "account.reverseShares.modal.reverse-share-link": "Lien du partage inversé",
   "account.reverseShares.modal.delete.title": "Supprimer le partage inversé",
-  "account.reverseShares.modal.delete.description": "Voulez-vous vraiment supprimer ce partage inversé ? Si vous le faites, les partages qu'il contient seront également supprimés.",
+  "account.reverseShares.modal.delete.description": "Voulez-vous vraiment supprimer ce partage inversé ? Si vous le faites, les partages qu’il contient seront également supprimés.",
   // END /account/reverseShares
   // /admin
   "admin.title": "Administration",
@@ -151,11 +174,11 @@ export default {
   // END /admin
   // /admin/users
   "admin.users.title": "Gestion des utilisateurs",
-  "admin.users.table.username": "Pseudo",
-  "admin.users.table.email": "Adresse email",
+  "admin.users.table.username": "Surnom",
+  "admin.users.table.email": "Courriel",
   "admin.users.table.admin": "Admin",
   "admin.users.edit.update.title": "Modifier l'utilisateur {username}",
-  "admin.users.edit.update.admin-privileges": "Privilèges admin",
+  "admin.users.edit.update.admin-privileges": "Privilèges d’admin",
   "admin.users.edit.update.change-password.title": "Changer le mot de passe",
   "admin.users.edit.update.change-password.field": "Nouveau mot de passe",
   "admin.users.edit.update.change-password.button": "Enregistrer le nouveau mot de passe",
@@ -165,17 +188,17 @@ export default {
   // showCreateUserModal.tsx
   "admin.users.modal.create.title": "Créer un utilisateur",
   "admin.users.modal.create.username": "Surnom",
-  "admin.users.modal.create.email": "Email",
+  "admin.users.modal.create.email": "Courriel",
   "admin.users.modal.create.password": "Mot de passe",
   "admin.users.modal.create.manual-password": "Définir le mot de passe manuellement",
-  "admin.users.modal.create.manual-password.description": "S'il n'est pas coché, l'utilisateur recevra un email avec un lien pour définir son mot de passe.",
-  "admin.users.modal.create.admin": "Privilèges admin",
-  "admin.users.modal.create.admin.description": "Si coché, l'utilisateur pourra accéder au panneau d'administration.",
+  "admin.users.modal.create.manual-password.description": "S’il n'est pas coché, l’utilisateur recevra un email avec un lien pour définir son mot de passe.",
+  "admin.users.modal.create.admin": "Privilèges d’admin",
+  "admin.users.modal.create.admin.description": "Si coché, l’utilisateur pourra accéder au panneau d'administration.",
   // END /admin/users
   // /upload
   "upload.title": "Envoyer",
   "upload.notify.generic-error": "Une erreur est survenue durant le traitement de votre partage.",
-  "upload.notify.count-failed": "{count} fichier(s) n'a(ont) pas pu être envoyé(s). Veuillez réessayer.",
+  "upload.notify.count-failed": "{count} fichier(s) n’a(ont) pas pu être envoyé(s). Veuillez réessayer.",
   // Dropzone.tsx
   "upload.dropzone.title": "Téléverser des fichiers",
   "upload.dropzone.description": "Glissez-déposez des fichiers ici pour commencer votre partage. Ils ne peuvent avoir une taille supérieur à {maxSize} au total.",
@@ -190,7 +213,8 @@ export default {
   "upload.modal.not-signed-in": "Vous n'êtes pas connecté",
   "upload.modal.not-signed-in-description": "Vous ne pourrez pas supprimer votre partage manuellement et afficher le nombre de visiteurs.",
   "upload.modal.expires.never": "jamais",
-  "upload.modal.expires.never-long": "N'expire jamais",
+  "upload.modal.expires.never-long": "N’expire jamais",
+  "upload.modal.expires.error.too-long": "L’expiration dépasse la date d'expiration du {max}.",
   "upload.modal.link.label": "Lien",
   "upload.modal.expires.label": "Expiration",
   "upload.modal.expires.minute-singular": "Minute",
@@ -209,25 +233,25 @@ export default {
   "upload.modal.accordion.description.placeholder": "Note pour les destinataires de ce partage",
   "upload.modal.accordion.email.title": "Adresse courriel des destinataires",
   "upload.modal.accordion.email.placeholder": "Saisir les destinataires de ce partage",
-  "upload.modal.accordion.email.invalid-email": "Adresse email invalide",
+  "upload.modal.accordion.email.invalid-email": "Courriel invalide",
   "upload.modal.accordion.security.title": "Options de sécurité",
   "upload.modal.accordion.security.password.label": "Protection par mot de passe",
   "upload.modal.accordion.security.password.placeholder": "Aucun mot de passe",
   "upload.modal.accordion.security.max-views.label": "Nombre de vues maximum",
   "upload.modal.accordion.security.max-views.placeholder": "Aucune limite",
   // showCompletedUploadModal.tsx
-  "upload.modal.completed.never-expires": "Ce partage n'expirera jamais.",
+  "upload.modal.completed.never-expires": "Ce partage n’expirera jamais.",
   "upload.modal.completed.expires-on": "Ce partage expirera le {expiration}.",
   "upload.modal.completed.share-ready": "Partage prêt",
   // END /upload
   // /share/[id]
   "share.title": "Partage {shareId}",
-  "share.description": "Regardez ce que j'ai partagé !",
+  "share.description": "Regardez ce que j’ai partagé !",
   "share.error.visitor-limit-exceeded.title": "Limite de visiteurs dépassée",
   "share.error.visitor-limit-exceeded.description": "La limite de visiteurs de ce partage a été dépassée.",
   "share.error.removed.title": "Partage supprimé",
   "share.error.not-found.title": "Partage introuvable",
-  "share.error.not-found.description": "Le partage que vous cherchez n'existe pas.",
+  "share.error.not-found.description": "Le partage que vous cherchez n’existe pas.",
   "share.modal.password.title": "Mot de passe requis",
   "share.modal.password.description": "Pour accéder à ce partage, veuillez entrer le mot de passe du partage.",
   "share.modal.password": "Mot de passe",
@@ -240,63 +264,126 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Aperçu non supporté",
   "share.modal.file-preview.error.not-supported.description": "Un aperçu pour ce type de fichier n'est pas pris en charge. Veuillez télécharger le fichier pour le voir.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Modifier {shareId}",
+  "share.edit.append-upload": "Ajouter un fichier",
+  "share.edit.notify.generic-error": "Une erreur est survenue durant le traitement de votre partage.",
+  "share.edit.notify.save-success": "Partage mis à jour avec succès",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Paramètres",
   "admin.config.category.general": "Général",
   "admin.config.category.share": "Partage",
   "admin.config.category.email": "Courriel",
   "admin.config.category.smtp": "SMTP",
-  "admin.config.general.app-name": "Nom de l'appli",
-  "admin.config.general.app-name.description": "Le nom de l'application",
+  "admin.config.category.oauth": "Identifiant social",
+  "admin.config.general.app-name": "Nom de l’appli",
+  "admin.config.general.app-name.description": "Le nom de l’application",
   "admin.config.general.app-url": "URL de l’appli",
   "admin.config.general.app-url.description": "Depuis quel URL le partage Pingvin est disponible",
-  "admin.config.general.show-home-page": "Afficher la page d'accueil",
-  "admin.config.general.show-home-page.description": "Afficher ou non la page d'accueil",
+  "admin.config.general.show-home-page": "Afficher la page d’accueil",
+  "admin.config.general.show-home-page.description": "Afficher ou non la page d’accueil",
   "admin.config.general.logo": "Logo",
-  "admin.config.general.logo.description": "Changez de logo en envoyant une nouvelle image. L'image doit être au format PNG et doit avoir un ratio 1:1.",
+  "admin.config.general.logo.description": "Changez de logo en envoyant une nouvelle image. L’image doit être au format PNG et doit avoir un ratio 1:1.",
   "admin.config.general.logo.placeholder": "Sélectionner une image",
   "admin.config.email.enable-share-email-recipients": "Autoriser le partage par courriel",
   "admin.config.email.enable-share-email-recipients.description": "Permet d'envoyer le lien du partage par courriel. N'activez cette option que si vous avez activé SMTP.",
-  "admin.config.email.share-recipients-subject": "Sujet d'un partage",
-  "admin.config.email.share-recipients-subject.description": "Intitulé du courriel envoyé aux destinataires d'un partage.",
-  "admin.config.email.share-recipients-message": "Message d'un partage",
-  "admin.config.email.share-recipients-message.description": "Contenu du courriel qui est envoyé aux destinataires du partage. Variables possibles :\n• {creator} : Le pseudo de l'auteur du partage\n• {shareUrl} : L'URL du partage\n• {desc} : La description du partage\n• {expires} : La date d'expiration du partage\nLes variables seront remplacées par leur valeur réelle.",
-  "admin.config.email.reverse-share-subject": "Sujet d'un partage inversé",
-  "admin.config.email.reverse-share-subject.description": "Intitulé du courriel envoyé lorsque quelqu'un a partagé des fichiers depuis votre partage inversé.",
-  "admin.config.email.reverse-share-message": "Message du partage inversé",
-  "admin.config.email.reverse-share-message.description": "Contenu du courriel envoyé lorsque quelqu'un partage des fichiers depuis votre partage inversé. {shareUrl} sera remplacé par le nom du créateur et l'URL de partage.",
-  "admin.config.email.reset-password-subject": "Sujet d'une réinitialisation du mot de passe",
-  "admin.config.email.reset-password-subject.description": "Intitulé du courriel envoyé lorsqu'un utilisateur demande une réinitialisation de son mot de passe.",
+  "admin.config.email.share-recipients-subject": "Sujet d’un partage",
+  "admin.config.email.share-recipients-subject.description": "Intitulé du courriel envoyé aux destinataires d’un partage.",
+  "admin.config.email.share-recipients-message": "Message d’un partage",
+  "admin.config.email.share-recipients-message.description": "Contenu du courriel qui est envoyé aux destinataires du partage. Variables possibles :\n• {creator} : Le pseudo de l’auteur du partage\n• {shareUrl} : L’URL du partage\n• {desc} : La description du partage\n• {expires} : La date d'expiration du partage\nLes variables seront remplacées par leur valeur réelle.",
+  "admin.config.email.reverse-share-subject": "Sujet d’un partage inversé",
+  "admin.config.email.reverse-share-subject.description": "Intitulé du courriel envoyé lorsque quelqu’un a partagé des fichiers depuis votre partage inversé.",
+  "admin.config.email.reverse-share-message": "Message d’un partage inversé",
+  "admin.config.email.reverse-share-message.description": "Contenu du courriel envoyé lorsque quelqu’un partage des fichiers depuis votre partage inversé. {shareUrl} sera remplacé par le nom du créateur et l’URL de partage.",
+  "admin.config.email.reset-password-subject": "Sujet d’une réinitialisation du mot de passe",
+  "admin.config.email.reset-password-subject.description": "Intitulé du courriel envoyé lorsqu’un utilisateur demande une réinitialisation de son mot de passe.",
   "admin.config.email.reset-password-message": "Message de réinitialisation du mot de passe",
-  "admin.config.email.reset-password-message.description": "Contenu du courriel envoyé lorsqu'un utilisateur demande à réinitialiser son mot de passe. {url} sera remplacé par l'URL de réinitialisation du mot de passe.",
-  "admin.config.email.invite-subject": "Sujet d'une invitation",
-  "admin.config.email.invite-subject.description": "Intitulé du courriel envoyé lorsqu'un administrateur invite un utilisateur.",
-  "admin.config.email.invite-message": "Message de l'invitation",
-  "admin.config.email.invite-message.description": "Contenu du courriel envoyé lorsqu'un administrateur invite un utilisateur. {url} sera remplacé par l'URL d'invitation et {password} par le mot de passe.",
+  "admin.config.email.reset-password-message.description": "Contenu du courriel envoyé lorsqu’un utilisateur demande à réinitialiser son mot de passe. {url} sera remplacé par l’URL de réinitialisation du mot de passe.",
+  "admin.config.email.invite-subject": "Sujet d’une invitation",
+  "admin.config.email.invite-subject.description": "Intitulé du courriel envoyé lorsqu’un administrateur invite un utilisateur.",
+  "admin.config.email.invite-message": "Message d’une invitation",
+  "admin.config.email.invite-message.description": "Contenu du courriel envoyé lorsqu’un administrateur invite un utilisateur. {url} sera remplacé par l’URL d'invitation et {password} par le mot de passe.",
   "admin.config.share.allow-registration": "Autoriser les inscriptions",
   "admin.config.share.allow-registration.description": "Permet aux visiteurs de créer un compte.",
   "admin.config.share.allow-unauthenticated-shares": "Autoriser les partages anonymes",
-  "admin.config.share.allow-unauthenticated-shares.description": "Autorise des utilisateurs non authentifiés à créer des partages",
+  "admin.config.share.allow-unauthenticated-shares.description": "Permet aux visiteurs de créer des partages",
+  "admin.config.share.max-expiration": "Échéance",
+  "admin.config.share.max-expiration.description": "Échéance du partage en heures. Indiquez 0 pour qu’il n’expire jamais.",
   "admin.config.share.max-size": "Taille max",
   "admin.config.share.max-size.description": "Taille maximale du partage en octets",
   "admin.config.share.zip-compression-level": "Niveau de compression",
   "admin.config.share.zip-compression-level.description": "Ajustez le niveau pour trouver l'équilibre entre la taille du fichier et la vitesse de compression. Les valeurs valides vont de 0 à 9, 0 étant sans compression et 9 étant la compression maximale. ",
   "admin.config.smtp.enabled": "Activer",
-  "admin.config.smtp.enabled.description": "Active SMTP. Activez ceci uniquement si vous avez saisi l'hôte, le port, le courriel, l'utilisateur et le mot de passe de votre serveur SMTP.",
+  "admin.config.smtp.enabled.description": "Active SMTP. Activez ceci uniquement si vous avez saisi l’hôte, le port, le courriel, l’utilisateur et son mot de passe, de votre serveur SMTP.",
   "admin.config.smtp.host": "Hôte",
   "admin.config.smtp.host.description": "Nom du serveur SMTP",
   "admin.config.smtp.port": "Port",
   "admin.config.smtp.port.description": "Port du serveur SMTP",
-  "admin.config.smtp.email": "Adresse email",
-  "admin.config.smtp.email.description": "Adresse à partir de laquelle les emails sont envoyés",
-  "admin.config.smtp.username": "Nom d'utilisateur",
-  "admin.config.smtp.username.description": "Nom d'utilisateur du serveur SMTP",
+  "admin.config.smtp.email": "Courriel",
+  "admin.config.smtp.email.description": "Adresse à partir de laquelle les courriels sont envoyés",
+  "admin.config.smtp.username": "Nom d’utilisateur",
+  "admin.config.smtp.username.description": "Nom d’utilisateur du serveur SMTP",
   "admin.config.smtp.password": "Mot de passe",
   "admin.config.smtp.password.description": "Mot de passe du serveur SMTP",
-  "admin.config.smtp.button.test": "Envoyer un email de test",
+  "admin.config.smtp.button.test": "Envoyer un courriel de test",
+  "admin.config.oauth.allow-registration": "Autoriser l’inscription",
+  "admin.config.oauth.allow-registration.description": "Permettre aux utilisateurs de s’inscrire via leur identifiant social",
+  "admin.config.oauth.ignore-totp": "Ignorer TOTP",
+  "admin.config.oauth.ignore-totp.description": "Ignorer le TOTP lorsque l’utilisateur utilise un identifiant social.",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Permettre la connexion via GitHub.",
+  "admin.config.oauth.github-client-id": "ID client de GitHub",
+  "admin.config.oauth.github-client-id.description": "L’ID du client de l’application OAuth GitHub",
+  "admin.config.oauth.github-client-secret": "Secret du client GitHub",
+  "admin.config.oauth.github-client-secret.description": "Le secret du client de l’application OAuth GitHub",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Permettre la connexion via Google.",
+  "admin.config.oauth.google-client-id": "ID du client Google",
+  "admin.config.oauth.google-client-id.description": "L’ID du client de l’application OAuth Google",
+  "admin.config.oauth.google-client-secret": "Secret client de Google",
+  "admin.config.oauth.google-client-secret.description": "Le secret du client de l’application OAuth Google",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Permettre la connexion via Microsoft.",
+  "admin.config.oauth.microsoft-tenant": "Locataire Microsoft",
+  "admin.config.oauth.microsoft-tenant.description": "ID locataire de l'application OAuth Microsoft\nCommun : les utilisateurs ayant au choix un compte personnel ou d’entreprise issue de Microsoft Entra.\nOrganisations : limité aux utilisateurs ayant un compte d’entreprise ou d’université issue de Microsoft Entra.\nPersonnel : limité aux utilisateurs ayant un compte personnel\nDomanial : limité aux utilisateurs d'un domaine Microsoft Entra spécifié ou d’un ID locataire (au format GUID), qu’ils soient membres d’un registre d’entreprise ou d’université ou bien enregistrés en tant qu’invités avec un compte personnel.",
+  "admin.config.oauth.microsoft-client-id": "ID du client Microsoft",
+  "admin.config.oauth.microsoft-client-id.description": "L’ID du client de l’application Microsoft OAuth",
+  "admin.config.oauth.microsoft-client-secret": "Secret du client Microsoft",
+  "admin.config.oauth.microsoft-client-secret.description": "Le secret du client de l’application Microsoft OAuth",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Permettre la connexion via Discord.",
+  "admin.config.oauth.discord-client-id": "ID du client Discord",
+  "admin.config.oauth.discord-client-id.description": "L’ID du client de l’application OAuth Discord",
+  "admin.config.oauth.discord-client-secret": "Secret du client Discord",
+  "admin.config.oauth.discord-client-secret.description": "Le secret du client de l’application OAuth Discord",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Permettre la connexion via OpenID.",
+  "admin.config.oauth.oidc-discovery-uri": "URI de découverte OpenID",
+  "admin.config.oauth.oidc-discovery-uri.description": "URI de découverte de l’application OpenID OAuth",
+  "admin.config.oauth.oidc-client-id": "ID du client OpenID",
+  "admin.config.oauth.oidc-client-id.description": "L’ID du client de l’application OAuth OpenID",
+  "admin.config.oauth.oidc-client-secret": "Secret du client OpenID",
+  "admin.config.oauth.oidc-client-secret.description": "Le secret du client de l’application OAuth OpenID",
   // 404
   "404.description": "Désolé, mais cette page n’existe pas.",
-  "404.button.home": "Retour à l'accueil",
+  "404.button.home": "Retour à l’accueil",
+  // error
+  "error.title": "Erreur",
+  "error.description": "Oups !",
+  "error.button.back": "Retour",
+  "error.msg.default": "Quelque chose a mal tourné.",
+  "error.msg.access_denied": "Vous avez annulé le processus d’authentification, veuillez réessayer.",
+  "error.msg.expired_token": "Le processus d’authentification a pris trop de temps, veuillez réessayer.",
+  "error.msg.no_user": "L’utilisateur associé au compte {0} n’existe pas.",
+  "error.msg.no_email": "Impossible d’obtenir le courriel du compte {0}.",
+  "error.msg.already_linked": "Le compte {0} est déjà associé à un autre compte.",
+  "error.msg.not_linked": "Le compte {0} n’est pas encore associé à compte.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Sauvegarder",
   "common.button.create": "Créer",

frontend/src/i18n/translations/ja-JP.ts

@@ -0,0 +1,411 @@
+export default {
+  // Navbar
+  "navbar.upload": "アップロード",
+  "navbar.signin": "サインイン",
+  "navbar.home": "ホーム",
+  "navbar.signup": "会員登録",
+  "navbar.links.shares": "自分の共有",
+  "navbar.links.reverse": "ファイルリクエスト",
+  "navbar.avatar.account": "マイアカウント",
+  "navbar.avatar.admin": "管理画面",
+  "navbar.avatar.signout": "サインアウト",
+  // END navbar
+  // /
+  "home.title": "<h>セルフホスト</h>のファイル共有プラットフォーム。",
+  "home.description": "WeTransferのようなサードパーティーサービスに自分のファイルを渡したいですか？",
+  "home.bullet.a.name": "セルフホスト",
+  "home.bullet.a.description": "Pingvin Shareをあなたのマシンでホストしましょう。",
+  "home.bullet.b.name": "プライバシー",
+  "home.bullet.b.description": "あなたのファイルはあなたのものであり、決して第三者の手に入るべきではありません。",
+  "home.bullet.c.name": "ファイルサイズ制限に悩まされることはありません",
+  "home.bullet.c.description": "大きなファイルもアップロード。ストレージのサイズだけが唯一の制限です。",
+  "home.button.start": "始めましょう",
+  "home.button.source": "ソースコード",
+  // END /
+  // /auth/signin
+  "signin.title": "おかえりなさい",
+  "signin.description": "アカウントをお持ちではありませんか？",
+  "signin.button.signup": "会員登録",
+  "signin.input.email-or-username": "メールアドレスまたはユーザー名",
+  "signin.input.email-or-username.placeholder": "メールアドレスまたはユーザー名",
+  "signin.input.password": "パスワード",
+  "signin.input.password.placeholder": "あなたのパスワード",
+  "signin.button.submit": "サインイン",
+  "signIn.notify.totp-required.title": "二段階認証が必要です",
+  "signIn.notify.totp-required.description": "二段階認証コードを入力してください",
+  "signIn.oauth.or": "または",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
+  // END /auth/signin
+  // /auth/signup
+  "signup.title": "アカウントを作成",
+  "signup.description": "既にアカウントをお持ちですか？",
+  "signup.button.signin": "サインイン",
+  "signup.input.username": "ユーザー名",
+  "signup.input.username.placeholder": "あなたのユーザー名",
+  "signup.input.email": "メールアドレス",
+  "signup.input.email.placeholder": "あなたのメールアドレス",
+  "signup.button.submit": "さあ始めましょう",
+  // END /auth/signup
+  // /auth/totp
+  "totp.title": "二段階認証",
+  "totp.button.signIn": "サインイン",
+  // END /auth/totp
+  // /auth/reset-password
+  "resetPassword.title": "パスワードを忘れてしまいましたか？",
+  "resetPassword.description": "登録しているメールアドレスを入力してください。",
+  "resetPassword.notify.success": "パスワードをリセットするためのリンクをメールで送信しました。",
+  "resetPassword.button.back": "サインインページに戻る",
+  "resetPassword.text.resetPassword": "パスワードをリセット",
+  "resetPassword.text.enterNewPassword": "新規パスワードを入力",
+  "resetPassword.input.password": "新規パスワード",
+  "resetPassword.notify.passwordReset": "パスワードのリセットに成功しました。",
+  // /account
+  "account.title": "マイアカウント",
+  "account.card.info.title": "アカウント情報",
+  "account.card.info.username": "ユーザー名",
+  "account.card.info.email": "メールアドレス",
+  "account.notify.info.success": "アカウントの更新に成功しました",
+  "account.card.password.title": "パスワード",
+  "account.card.password.old": "現在のパスワード",
+  "account.card.password.new": "新規パスワード",
+  "account.card.password.noPasswordSet": "パスワードが設定されていません。メールアドレスとパスワードでサインインしたい場合は、パスワードの設定が必要です。",
+  "account.notify.password.success": "パスワードの変更に成功しました",
+  "account.card.oauth.title": "ソーシャルログイン",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "リンク",
+  "account.card.oauth.unlink": "リンク解除",
+  "account.card.oauth.unlinked": "リンクされていません",
+  "account.modal.unlink.title": "アカウントのリンクを解除",
+  "account.modal.unlink.description": "ソーシャルアカウントのリンクを解除すると、ユーザー名とパスワードを覚えていない場合にアカウントへのアクセスが失われる可能性があります。",
+  "account.notify.oauth.unlinked.success": "リンク解除に成功しました",
+  "account.card.security.title": "セキュリティ",
+  "account.card.security.totp.enable.description": "2段階認証を有効にするため、現在のパスワードを入力してください",
+  "account.card.security.totp.disable.description": "2段階認証を無効にするため、現在のパスワードを入力してください",
+  "account.card.security.totp.button.start": "開始",
+  "account.modal.totp.title": "2段階認証を有効にする",
+  "account.modal.totp.step1": "ステップ1: 認証アプリを追加する",
+  "account.modal.totp.step2": "ステップ2: コードを検証",
+  "account.modal.totp.enterManually": "手動で入力",
+  "account.modal.totp.code": "コピー",
+  "account.modal.totp.clickToCopy": "ここをクリックしてコピー",
+  "account.modal.totp.verify": "検証",
+  "account.notify.totp.disable": "2段階認証の無効化に成功しました",
+  "account.notify.totp.enable": "2段階認証の有効化に成功しました",
+  "account.card.language.title": "言語",
+  "account.card.language.description": "プロジェクトはコミュニティによって翻訳されています。一部の言語の翻訳は不完全の場合があります。",
+  "account.card.color.title": "カラースキーム",
+  // ThemeSwitcher.tsx
+  "account.theme.dark": "ダーク",
+  "account.theme.light": "ライト",
+  "account.theme.system": "システムに合わせる",
+  "account.button.delete": "アカウントを削除",
+  "account.modal.delete.title": "アカウントを削除",
+  "account.modal.delete.description": "全ての有効な共有を含め、アカウントに関する全てのデータを完全に削除してもよろしいですか？",
+  // END /account
+  // /account/shares
+  "account.shares.title": "自分の共有",
+  "account.shares.title.empty": "まだ何もありません 👀",
+  "account.shares.description.empty": "共有しているアイテムがありません。",
+  "account.shares.button.create": "新規作成",
+  "account.shares.info.title": "共有情報",
+  "account.shares.table.id": "ID",
+  "account.shares.table.name": "名前",
+  "account.shares.table.description": "説明",
+  "account.shares.table.visitors": "訪問者",
+  "account.shares.table.expiresAt": "有効期限:",
+  "account.shares.table.createdAt": "作成日:",
+  "account.shares.table.size": "サイズ",
+  "account.shares.modal.share-informations": "共有情報",
+  "account.shares.modal.share-link": "共有リンク",
+  "account.shares.modal.delete.title": "共有を削除 {share}",
+  "account.shares.modal.delete.description": "この共有を削除してもよろしいですか？",
+  // END /account/shares
+  // /account/reverseShares
+  "account.reverseShares.title": "ファイルリクエスト",
+  "account.reverseShares.description": "ファイルリクエストは、外部のユーザーにファイルをアップロードしてもらえるユニークなURLを生成できます。",
+  "account.reverseShares.title.empty": "まだ何もありません 👀",
+  "account.reverseShares.description.empty": "ファイルリクエストがありません。",
+  // showCreateReverseShareModal.tsx
+  "account.reverseShares.modal.title": "ファイルリクエストを作成",
+  "account.reverseShares.modal.expiration.label": "有効期限",
+  "account.reverseShares.modal.expiration.minute-singular": "分間",
+  "account.reverseShares.modal.expiration.minute-plural": "分間",
+  "account.reverseShares.modal.expiration.hour-singular": "時間",
+  "account.reverseShares.modal.expiration.hour-plural": "時間",
+  "account.reverseShares.modal.expiration.day-singular": "日間",
+  "account.reverseShares.modal.expiration.day-plural": "日間",
+  "account.reverseShares.modal.expiration.week-singular": "週間",
+  "account.reverseShares.modal.expiration.week-plural": "週間",
+  "account.reverseShares.modal.expiration.month-singular": "ヶ月",
+  "account.reverseShares.modal.expiration.month-plural": "ヶ月",
+  "account.reverseShares.modal.expiration.year-singular": "年間",
+  "account.reverseShares.modal.expiration.year-plural": "年間",
+  "account.reverseShares.modal.max-size.label": "最大ファイルサイズ",
+  "account.reverseShares.modal.send-email": "メール通知を送信",
+  "account.reverseShares.modal.send-email.description": "このファイルリクエストリンクを使用して、ファイルがアップロードされた場合にメールで通知します。",
+  "account.reverseShares.modal.max-use.label": "最大回数",
+  "account.reverseShares.modal.max-use.description": "このURLを使用してファイルをアップロードできる最大回数です。",
+  "account.reverseShare.never-expires": "このファイルリクエストリンクは期限切れになりません。",
+  "account.reverseShare.expires-on": "このファイルリクエストリンクは、{expiration} に期限切れとなります。",
+  "account.reverseShares.table.no-shares": "まだファイルがアップロードされていません",
+  "account.reverseShares.table.count.singular": "共有",
+  "account.reverseShares.table.count.plural": "共有",
+  "account.reverseShares.table.shares": "共有",
+  "account.reverseShares.table.remaining": "残り使用回数",
+  "account.reverseShares.table.max-size": "最大ファイルサイズ",
+  "account.reverseShares.table.expires": "有効期限",
+  "account.reverseShares.modal.reverse-share-link": "ファイルリクエストリンク",
+  "account.reverseShares.modal.delete.title": "ファイルリクエストを削除",
+  "account.reverseShares.modal.delete.description": "本当にこのファイルリクエストを削除しますか？削除すると、関連するファイルアップロードも削除されます。",
+  // END /account/reverseShares
+  // /admin
+  "admin.title": "管理画面",
+  "admin.button.users": "ユーザー管理",
+  "admin.button.config": "設定",
+  "admin.version": "バージョン",
+  // END /admin
+  // /admin/users
+  "admin.users.title": "ユーザー管理",
+  "admin.users.table.username": "ユーザー名",
+  "admin.users.table.email": "メールアドレス",
+  "admin.users.table.admin": "管理画面",
+  "admin.users.edit.update.title": "ユーザー「{username}」を更新",
+  "admin.users.edit.update.admin-privileges": "管理者権限",
+  "admin.users.edit.update.change-password.title": "パスワードを変更",
+  "admin.users.edit.update.change-password.field": "新規パスワード",
+  "admin.users.edit.update.change-password.button": "新しいパスワードを保存",
+  "admin.users.edit.update.notify.password.success": "パスワードの変更に成功しました",
+  "admin.users.edit.delete.title": "ユーザーを削除 {username}",
+  "admin.users.edit.delete.description": "このユーザーとこのユーザーに関連する全てのファイルアップロードを削除してもよろしいですか？",
+  // showCreateUserModal.tsx
+  "admin.users.modal.create.title": "ユーザーを作成",
+  "admin.users.modal.create.username": "ユーザー名",
+  "admin.users.modal.create.email": "メールアドレス",
+  "admin.users.modal.create.password": "パスワード",
+  "admin.users.modal.create.manual-password": "パスワードを手動で設定",
+  "admin.users.modal.create.manual-password.description": "チェックされていない場合、ユーザーにパスワードを設定する為のリンクが記載されたメールを送信します。",
+  "admin.users.modal.create.admin": "管理者権限",
+  "admin.users.modal.create.admin.description": "チェックされている場合、ユーザーは管理画面にアクセスできるようになります。",
+  // END /admin/users
+  // /upload
+  "upload.title": "アップロード",
+  "upload.notify.generic-error": "共有を仕上げている最中にエラーが発生しました。",
+  "upload.notify.count-failed": "{count} ファイルがアップロードに失敗しました。再度お試しください。",
+  // Dropzone.tsx
+  "upload.dropzone.title": "ファイルをアップロード",
+  "upload.dropzone.description": "ここにファイルをドラッグしてアップロードを開始しましょう。{maxSize} 以下のファイルがアップロードできます。",
+  "upload.dropzone.notify.file-too-big": "アップロードしようとしたファイルは、最大ファイルサイズの{maxSize} を超えています。",
+  // FileList.tsx
+  "upload.filelist.name": "ファイル名",
+  "upload.filelist.size": "サイズ",
+  // showCreateUploadModal.tsx
+  "upload.modal.title": "共有を作成",
+  "upload.modal.link.error.invalid": "文字、数字、アンダースコア、ハイフンのみ使用できます",
+  "upload.modal.link.error.taken": "このリンクは既に使用されています",
+  "upload.modal.not-signed-in": "サインインしていません",
+  "upload.modal.not-signed-in-description": "共有の手動削除と訪問者カウンターは表示できません。",
+  "upload.modal.expires.never": "永久",
+  "upload.modal.expires.never-long": "期限切れにさせない",
+  "upload.modal.expires.error.too-long": "設定可能な有効期限を越えています。有効期限の上限は{max} です。",
+  "upload.modal.link.label": "リンク",
+  "upload.modal.expires.label": "有効期限",
+  "upload.modal.expires.minute-singular": "分間",
+  "upload.modal.expires.minute-plural": "分間",
+  "upload.modal.expires.hour-singular": "時間",
+  "upload.modal.expires.hour-plural": "時間",
+  "upload.modal.expires.day-singular": "日間",
+  "upload.modal.expires.day-plural": "日間",
+  "upload.modal.expires.week-singular": "週間",
+  "upload.modal.expires.week-plural": "週間",
+  "upload.modal.expires.month-singular": "ヶ月間",
+  "upload.modal.expires.month-plural": "ヶ月間",
+  "upload.modal.expires.year-singular": "年間",
+  "upload.modal.expires.year-plural": "年間",
+  "upload.modal.accordion.description.title": "説明",
+  "upload.modal.accordion.description.placeholder": "この共有に関する受信者へのメモ",
+  "upload.modal.accordion.email.title": "メールで受け取る相手",
+  "upload.modal.accordion.email.placeholder": "メールの宛先を入力",
+  "upload.modal.accordion.email.invalid-email": "無効なメールアドレスです",
+  "upload.modal.accordion.security.title": "セキュリティオプション",
+  "upload.modal.accordion.security.password.label": "パスワード保護",
+  "upload.modal.accordion.security.password.placeholder": "パスワードなし",
+  "upload.modal.accordion.security.max-views.label": "最大閲覧回数",
+  "upload.modal.accordion.security.max-views.placeholder": "制限なし",
+  // showCompletedUploadModal.tsx
+  "upload.modal.completed.never-expires": "この共有は期限切れになりません。",
+  "upload.modal.completed.expires-on": "この共有は、{expiration} に期限切れとなります。",
+  "upload.modal.completed.share-ready": "共有の準備ができました",
+  // END /upload
+  // /share/[id]
+  "share.title": "「{shareId}」が共有されました",
+  "share.description": "あなたと共有したファイルをご確認ください！",
+  "share.error.visitor-limit-exceeded.title": "訪問者の上限を超えました",
+  "share.error.visitor-limit-exceeded.description": "この共有からの訪問者の回数が制限を超えています。",
+  "share.error.removed.title": "共有が削除されました",
+  "share.error.not-found.title": "共有が見つかりません",
+  "share.error.not-found.description": "お探しの共有が見つかりません。",
+  "share.modal.password.title": "パスワードが必要です",
+  "share.modal.password.description": "この共有にアクセスするには、共有相手から伝えられているパスワードを入力してください。",
+  "share.modal.password": "パスワード",
+  "share.modal.error.invalid-password": "パスワードが間違っています",
+  "share.button.download-all": "全てダウンロード",
+  "share.notify.download-all-preparing": "共有は準備中です。数分後に再度お試しください。",
+  "share.modal.file-link": "ファイルリンク",
+  "share.table.name": "ファイル名",
+  "share.table.size": "サイズ",
+  "share.modal.file-preview.error.not-supported.title": "プレビューに対応していません",
+  "share.modal.file-preview.error.not-supported.description": "これらのファイルのプレビューには対応していません。ファイルをダウンロードして、直接確認してください。",
+  // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "編集 {shareId}",
+  "share.edit.append-upload": "ファイルを追加",
+  "share.edit.notify.generic-error": "共有の最終処理でエラーが発生しました。",
+  "share.edit.notify.save-success": "共有の更新に成功しました",
+  // END /share/[id]/edit
+  // /admin/config
+  "admin.config.title": "設定",
+  "admin.config.category.general": "一般",
+  "admin.config.category.share": "共有",
+  "admin.config.category.email": "メール",
+  "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "ソーシャルログイン",
+  "admin.config.general.app-name": "アプリ名",
+  "admin.config.general.app-name.description": "アプリの名前",
+  "admin.config.general.app-url": "アプリ名",
+  "admin.config.general.app-url.description": "Pingvin Shareで利用できるURL",
+  "admin.config.general.show-home-page": "ホームページを表示する",
+  "admin.config.general.show-home-page.description": "ホームページを表示するかどうか選択",
+  "admin.config.general.logo": "ロゴ",
+  "admin.config.general.logo.description": "新しい画像をアップロードしてロゴを変更できます。画像は、PNG形式でアスペクト比が1:1である必要があります。",
+  "admin.config.general.logo.placeholder": "画像を選択",
+  "admin.config.email.enable-share-email-recipients": "メールでの共有を有効にする",
+  "admin.config.email.enable-share-email-recipients.description": "メールで共有を送信できるようにするか選択してください。SMTPが有効になっている場合にのみ機能します。",
+  "admin.config.email.share-recipients-subject": "宛先への件名",
+  "admin.config.email.share-recipients-subject.description": "メールで共有された相手に送信メールの件名です。",
+  "admin.config.email.share-recipients-message": "宛先への本文",
+  "admin.config.email.share-recipients-message.description": "メールで共有された相手に送信されるメールの本文です。次の変数が利用できます:\n{creator} - 共有作成者のユーザー名\n{shareUrl} - 共有のURL\n{desc} - 共有の説明\n{expires} - 共有の有効期限\n変数は、実際の値によって置き換えられます。",
+  "admin.config.email.reverse-share-subject": "ファイルリクエストの件名",
+  "admin.config.email.reverse-share-subject.description": "あなたが作成したファイルリクエストリンクからファイルがアップロードされた場合に送信されるメールの件名です。",
+  "admin.config.email.reverse-share-message": "ファイルリクエストの本文",
+  "admin.config.email.reverse-share-message.description": "あなたが作成したファイルリクエストリンクからファイルがアップロードされた場合に送信されるメールの本文です。{shareUrl} は、作成者の名前とURLにより置き換えられます。",
+  "admin.config.email.reset-password-subject": "パスワードリセットの件名",
+  "admin.config.email.reset-password-subject.description": "パスワードリセットのリクエストがされた時に送信されるメールの件名です。",
+  "admin.config.email.reset-password-message": "パスワードリセットの本文",
+  "admin.config.email.reset-password-message.description": "あなたが作成したファイルリクエストリンクからファイルがアップロードされた場合に送信されるメールの本文です。{url} は、実際のパスワードリセットURLによって置き換えられます。",
+  "admin.config.email.invite-subject": "無効な件名",
+  "admin.config.email.invite-subject.description": "管理者がユーザーを招待したときに送信されるメールの件名です。",
+  "admin.config.email.invite-message": "無効な本文",
+  "admin.config.email.invite-message.description": "管理者がユーザーを招待したときに送信されるメールの本文です。{url} は、招待URLに、{password} は、パスワードに置き換えられます。",
+  "admin.config.share.allow-registration": "登録を許可する",
+  "admin.config.share.allow-registration.description": "登録を許可するかどうかを選択してください。",
+  "admin.config.share.allow-unauthenticated-shares": "ログインしていない状態での共有を許可する",
+  "admin.config.share.allow-unauthenticated-shares.description": "ログインしていないユーザーに共有の作成を許可するかどうかを選択してください。",
+  "admin.config.share.max-expiration": "有効期限の上限",
+  "admin.config.share.max-expiration.description": "共有に設定可能な有効期限の上限を時間単位で設定できます。0を設定すると、有効期限が無制限になります。",
+  "admin.config.share.max-size": "最大ファイルサイズ",
+  "admin.config.share.max-size.description": "最大ファイルサイズ（byte単位）",
+  "admin.config.share.zip-compression-level": "Zip圧縮レベル",
+  "admin.config.share.zip-compression-level.description": "ファイルサイズと圧縮速度のバランスを取るように、レベルを調整できます。有効な値は0～9の間で、0が無圧縮、9で最大限の圧縮となります。 ",
+  "admin.config.smtp.enabled": "有効",
+  "admin.config.smtp.enabled.description": "SMTPを有効にするかどうかを選択してください。SMTPサーバーのホスト名、ポート番号、電子メールアドレス、ユーザー名、パスワードが入力されている場合にのみ、有効にしてください。",
+  "admin.config.smtp.host": "ホスト名",
+  "admin.config.smtp.host.description": "SMTPサーバーのホスト名",
+  "admin.config.smtp.port": "ポート番号",
+  "admin.config.smtp.port.description": "SMTPサーバーのポート番号",
+  "admin.config.smtp.email": "メールアドレス",
+  "admin.config.smtp.email.description": "送信メールに設定するメールアドレス",
+  "admin.config.smtp.username": "ユーザー名",
+  "admin.config.smtp.username.description": "SMTPサーバーのユーザー名",
+  "admin.config.smtp.password": "パスワード",
+  "admin.config.smtp.password.description": "SMTPサーバーのパスワード",
+  "admin.config.smtp.button.test": "テストメールを送信",
+  "admin.config.oauth.allow-registration": "登録を許可する",
+  "admin.config.oauth.allow-registration.description": "ユーザーにソーシャルアカウント経由での登録を許可します",
+  "admin.config.oauth.ignore-totp": "二段階認証を無視する",
+  "admin.config.oauth.ignore-totp.description": "ソーシャルログイン時に二段階認証を無視するかどうかを設定します",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "GitHubアカウントを使用したログインを許可するかどうかを設定します",
+  "admin.config.oauth.github-client-id": "GitHub クライアントID",
+  "admin.config.oauth.github-client-id.description": "GitHub OAuthアプリのクライアントID",
+  "admin.config.oauth.github-client-secret": "GitHub クライアントシークレット",
+  "admin.config.oauth.github-client-secret.description": "GitHub OAuthアプリのクライアントシークレット",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Googleアカウントを使用したログインを許可するかどうかを設定します",
+  "admin.config.oauth.google-client-id": "Google クライアントID",
+  "admin.config.oauth.google-client-id.description": "Google OAuthアプリのクライアントID",
+  "admin.config.oauth.google-client-secret": "Google クライアントシークレット",
+  "admin.config.oauth.google-client-secret.description": "Google OAuthアプリのクライアントシークレット",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Microsoftアカウントを使用したログインを許可するかどうかを設定します",
+  "admin.config.oauth.microsoft-tenant": "Microsoftテナント",
+  "admin.config.oauth.microsoft-tenant.description": "Microsoft OAuthアプリのテナントID\ncommon: 個人のMicrosoftアカウントとMicrosoft Entra IDの職場または学校のアカウントを持つユーザーは、アプリケーションにサインインできます。 \norganizations: Microsoft Entra IDからの職場または学校のアカウントを持つユーザーのみがアプリケーションにサインインできます。\nconsumers: 個人のMicrosoftアカウントを持つユーザーのみがアプリケーションにサインインできます。\nMicrosoft Entraテナントのドメイン名またはGUID形式のテナントID: 特定のMicrosoft Entraテナント (職場または学校のアカウントを持つディレクトリメンバーまたはパーソナルMicrosoftアカウントを持つディレクトリゲスト) からのユーザーのみがアプリケーションにサインインできます。",
+  "admin.config.oauth.microsoft-client-id": "Microsoft クライアントID",
+  "admin.config.oauth.microsoft-client-id.description": "Microsoft OAuthアプリのクライアントID",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft クライアントシークレット",
+  "admin.config.oauth.microsoft-client-secret.description": "Microsoft OAuthアプリのクライアントシークレット",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Discordアカウントを使用したログインを許可するかどうかを設定します",
+  "admin.config.oauth.discord-client-id": "Discord クライアントID",
+  "admin.config.oauth.discord-client-id.description": "Discord OAuthアプリのクライアントID",
+  "admin.config.oauth.discord-client-secret": "Discord クライアントシークレット",
+  "admin.config.oauth.discord-client-secret.description": "Discord OAuthアプリのクライアントシークレット",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "OpenIDアカウントを使用したログインを許可するかどうかを設定します",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "OpenID OAuthアプリのDiscovery URI",
+  "admin.config.oauth.oidc-client-id": "OpenID クライアントID",
+  "admin.config.oauth.oidc-client-id.description": "OpenID OAuthアプリのクライアントID",
+  "admin.config.oauth.oidc-client-secret": "OpenID クライアントシークレット",
+  "admin.config.oauth.oidc-client-secret.description": "OpenID OAuthアプリのクライアントシークレット",
+  // 404
+  "404.description": "ページが見つかりません。",
+  "404.button.home": "ホームに戻る",
+  // error
+  "error.title": "エラー",
+  "error.description": "申し訳ありません",
+  "error.button.back": "戻る",
+  "error.msg.default": "問題が発生しました。",
+  "error.msg.access_denied": "認証処理を中止しました、後で再度お試しください。",
+  "error.msg.expired_token": "認証処理に時間がかかりすぎています、後で再度お試しください。",
+  "error.msg.no_user": "この{0} アカウントにリンクしたユーザーが存在しません。",
+  "error.msg.no_email": "この{0} アカウントからメールアドレスを取得出来ません。",
+  "error.msg.already_linked": "この{0} アカウントは、既に別のアカウントにリンクされています。",
+  "error.msg.not_linked": "この{0} アカウントはどのアカウントにもリンクされていません。",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
+  // Common translations
+  "common.button.save": "保存",
+  "common.button.create": "作成",
+  "common.button.submit": "送信",
+  "common.button.delete": "削除",
+  "common.button.cancel": "キャンセル",
+  "common.button.confirm": "確認",
+  "common.button.disable": "無効",
+  "common.button.share": "共有",
+  "common.button.generate": "生成",
+  "common.button.done": "完了",
+  "common.text.link": "リンク",
+  "common.text.or": "または",
+  "common.button.go-back": "戻る",
+  "common.notify.copied": "リンクをクリップボードにコピーしました",
+  "common.success": "成功",
+  "common.error": "エラー",
+  "common.error.unknown": "不明なエラーが発生しました",
+  "common.error.invalid-email": "無効なメールアドレス",
+  "common.error.too-short": "最低{length} 文字である必要があります",
+  "common.error.too-long": "最大{length} 文字である必要があります",
+  "common.error.exact-length": "{length} 文字である必要があります",
+  "common.error.invalid-number": "数字でなければなりません",
+  "common.error.field-required": "これは必須項目です"
+};

frontend/src/i18n/translations/nl-BE.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Aanmelden",
   "signIn.notify.totp-required.title": "Tweestapsverificatie vereist",
   "signIn.notify.totp-required.description": "Voer uw tweestapsverificatiecode in",
+  "signIn.oauth.or": "OR",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Account aanmaken",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Uw e-mailadres",
   "signup.button.submit": "Laten we beginnen",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "TOTP Authentication",
+  "totp.button.signIn": "Sign in",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Wachtwoord vergeten?",
   "resetPassword.description": "Voer uw e-mailadres in om uw wachtwoord opnieuw in te stellen.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Wachtwoord",
   "account.card.password.old": "Oud wachtwoord",
   "account.card.password.new": "Nieuw wachtwoord",
+  "account.card.password.noPasswordSet": "You don't have a password set. If you want to sign in with email and password you need to set a password.",
   "account.notify.password.success": "Wachtwoord succesvol gewijzigd",
+  "account.card.oauth.title": "Social login",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Unlink",
+  "account.card.oauth.unlinked": "Unlinked",
+  "account.modal.unlink.title": "Unlink account",
+  "account.modal.unlink.description": "Unlinking your social accounts may cause you to lose your account if you don't remember your username and password.",
+  "account.notify.oauth.unlinked.success": "Unlinked successfully",
   "account.card.security.title": "Beveiliging",
   "account.card.security.totp.enable.description": "Voer uw huidige wachtwoord in om TOTP in te schakelen",
   "account.card.security.totp.disable.description": "Voer uw huidige wachtwoord in om TOTP uit te schakelen",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "You will be unable to delete your share manually and view the visitor count.",
   "upload.modal.expires.never": "nooit",
   "upload.modal.expires.never-long": "Verloopt nooit",
+  "upload.modal.expires.error.too-long": "Expiration exceeds maximum expiration date of {max}.",
   "upload.modal.link.label": "Koppeling",
   "upload.modal.expires.label": "Vervaldatum",
   "upload.modal.expires.minute-singular": "Minuut",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Voorbeeld niet ondersteund",
   "share.modal.file-preview.error.not-supported.description": "Een voorbeeld voor dit bestandstype wordt niet ondersteund. Download het bestand om het te bekijken.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Edit {shareId}",
+  "share.edit.append-upload": "Append file",
+  "share.edit.notify.generic-error": "An error occurred while finishing your share.",
+  "share.edit.notify.save-success": "Share updated successfully",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Configuratie",
   "admin.config.category.general": "Algemeen",
   "admin.config.category.share": "Delen",
   "admin.config.category.email": "E-mail",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Social Login",
   "admin.config.general.app-name": "App naam",
   "admin.config.general.app-name.description": "Naam van de applicatie",
   "admin.config.general.app-url": "App URL",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Of registratie is toegestaan",
   "admin.config.share.allow-unauthenticated-shares": "Allow unauthenticated shares",
   "admin.config.share.allow-unauthenticated-shares.description": "Whether unauthenticated users can create shares",
+  "admin.config.share.max-expiration": "Max expiration",
+  "admin.config.share.max-expiration.description": "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "Max grootte",
   "admin.config.share.max-size.description": "Maximum share size in bytes",
   "admin.config.share.zip-compression-level": "Zip compressie niveau",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Wachtwoord",
   "admin.config.smtp.password.description": "Wachtwoord van de SMTP-server",
   "admin.config.smtp.button.test": "Test e-mail verzenden",
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
   // 404
   "404.description": "Oeps, deze pagina bestaat niet.",
   "404.button.home": "Breng me terug naar huis",
+  // error
+  "error.title": "Error",
+  "error.description": "Oops!",
+  "error.button.back": "Go back",
+  "error.msg.default": "Something went wrong.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Opslaan",
   "common.button.create": "Aanmaken",

frontend/src/i18n/translations/pl-PL.ts

@@ -0,0 +1,411 @@
+export default {
+  // Navbar
+  "navbar.upload": "Prześlij",
+  "navbar.signin": "Zaloguj się",
+  "navbar.home": "Strona główna",
+  "navbar.signup": "Zarejestruj się",
+  "navbar.links.shares": "Moje udziały",
+  "navbar.links.reverse": "Udziały odwrotne",
+  "navbar.avatar.account": "Moje konto",
+  "navbar.avatar.admin": "Administracja",
+  "navbar.avatar.signout": "Wyloguj się",
+  // END navbar
+  // /
+  "home.title": "<h>Samodzielnie utrzymywana</h> platforma udostępniania plików.",
+  "home.description": "Czy na pewno chcesz przekazać swoje prywatne pliki w ręce osób trzecich, takich jak WeTransfer?",
+  "home.bullet.a.name": "Samodzielnie Utrzymywana",
+  "home.bullet.a.description": "Utrzymuj Pingvin Share na własnym serwerze.",
+  "home.bullet.b.name": "Prywatność",
+  "home.bullet.b.description": "To są twoje pliki i nigdy nie powinny trafiać w ręce osób trzecich.",
+  "home.bullet.c.name": "Brak irytującego ograniczenia rozmiaru pliku",
+  "home.bullet.c.description": "Prześlij tak duże pliki, jak chcesz. Ograniczeniem będzie tylko twój dysk twardy.",
+  "home.button.start": "Zaczynajmy",
+  "home.button.source": "Kod źródłowy",
+  // END /
+  // /auth/signin
+  "signin.title": "Witaj ponownie",
+  "signin.description": "Nie masz jeszcze konta?",
+  "signin.button.signup": "Zarejestruj się",
+  "signin.input.email-or-username": "Adres e-mail lub nazwa użytkownika",
+  "signin.input.email-or-username.placeholder": "Adres e-mail lub nazwa użytkownika",
+  "signin.input.password": "Hasło",
+  "signin.input.password.placeholder": "Twoje hasło",
+  "signin.button.submit": "Zaloguj się",
+  "signIn.notify.totp-required.title": "Wymagane jest uwierzytelnianie dwuetapowe",
+  "signIn.notify.totp-required.description": "Wprowadź kod uwierzytelniania dwuetapowego",
+  "signIn.oauth.or": "LUB",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
+  // END /auth/signin
+  // /auth/signup
+  "signup.title": "Utwórz konto",
+  "signup.description": "Masz już konto?",
+  "signup.button.signin": "Zaloguj się",
+  "signup.input.username": "Nazwa użytkownika",
+  "signup.input.username.placeholder": "Twoja nazwa użytkownika",
+  "signup.input.email": "Adres e-mail",
+  "signup.input.email.placeholder": "Twój adres e-mail",
+  "signup.button.submit": "Zaczynajmy",
+  // END /auth/signup
+  // /auth/totp
+  "totp.title": "Uwierzytelnianie TOTP",
+  "totp.button.signIn": "Zaloguj się",
+  // END /auth/totp
+  // /auth/reset-password
+  "resetPassword.title": "Nie pamiętasz hasła?",
+  "resetPassword.description": "Wprowadź swój e-mail, aby zresetować swoje hasło.",
+  "resetPassword.notify.success": "Został wysłany e-mail z linkiem do resetowania hasła.",
+  "resetPassword.button.back": "Powrót do strony logowania",
+  "resetPassword.text.resetPassword": "Resetuj hasło",
+  "resetPassword.text.enterNewPassword": "Wprowadź nowe hasło",
+  "resetPassword.input.password": "Nowe hasło",
+  "resetPassword.notify.passwordReset": "Hasło zostało pomyślnie zresetowane.",
+  // /account
+  "account.title": "Moje konto",
+  "account.card.info.title": "Informacje o koncie",
+  "account.card.info.username": "Nazwa użytkownika",
+  "account.card.info.email": "Adres e-mail",
+  "account.notify.info.success": "Konto zostało zaktualizowane",
+  "account.card.password.title": "Hasło",
+  "account.card.password.old": "Dotychczasowe hasło",
+  "account.card.password.new": "Nowe hasło",
+  "account.card.password.noPasswordSet": "Nie masz ustawionego hasła. Jeśli chcesz zalogować się za pomocą adresu e-mail i hasła, musisz ustawić hasło.",
+  "account.notify.password.success": "Hasło zostało pomyślnie zmienione",
+  "account.card.oauth.title": "Logowanie za pomocą konta społecznościowego",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Połącz",
+  "account.card.oauth.unlink": "Odłącz",
+  "account.card.oauth.unlinked": "Rozłączono",
+  "account.modal.unlink.title": "Odłącz konto",
+  "account.modal.unlink.description": "Odłączenie kont społecznościowych, jeśli nie pamiętasz nazwy użytkownika i hasła, może spowodować utratę konta.",
+  "account.notify.oauth.unlinked.success": "Odłączono pomyślnie",
+  "account.card.security.title": "Zabezpieczenia",
+  "account.card.security.totp.enable.description": "Wprowadź aktualne hasło, aby móc włączyć TOTP",
+  "account.card.security.totp.disable.description": "Wprowadź aktualne hasło, aby wyłączyć TOTP",
+  "account.card.security.totp.button.start": "Uruchom",
+  "account.modal.totp.title": "Uruchom TOTP",
+  "account.modal.totp.step1": "Krok 1: Dodaj swój uwierzytelniacz",
+  "account.modal.totp.step2": "Krok 2: Potwierdź swój kod",
+  "account.modal.totp.enterManually": "Wpisz ręcznie",
+  "account.modal.totp.code": "Kod",
+  "account.modal.totp.clickToCopy": "Kliknij, aby skopiować",
+  "account.modal.totp.verify": "Weryfikuj",
+  "account.notify.totp.disable": "%s wyłączono pomyślnie",
+  "account.notify.totp.enable": "TOTP włączono pomyślnie",
+  "account.card.language.title": "Język",
+  "account.card.language.description": "Projekt jest tłumaczony przez społeczność. Niektóre języki mogą być niekompletne.",
+  "account.card.color.title": "Schemat kolorów",
+  // ThemeSwitcher.tsx
+  "account.theme.dark": "Ciemny",
+  "account.theme.light": "Jasny",
+  "account.theme.system": "System",
+  "account.button.delete": "Usuń Konto",
+  "account.modal.delete.title": "Usuń Konto",
+  "account.modal.delete.description": "Czy na pewno chcesz usunąć swoje konto, w tym wszystkie aktywne udziały?",
+  // END /account
+  // /account/shares
+  "account.shares.title": "Moje udziały",
+  "account.shares.title.empty": "Tu jest pusto :eys:",
+  "account.shares.description.empty": "Nie masz żadnych udziałów.",
+  "account.shares.button.create": "Utwórz go",
+  "account.shares.info.title": "Informacje udziału",
+  "account.shares.table.id": "Nr identyfikacyjny",
+  "account.shares.table.name": "Nazwa",
+  "account.shares.table.description": "Opis",
+  "account.shares.table.visitors": "Odwiedzający",
+  "account.shares.table.expiresAt": "Wygasa",
+  "account.shares.table.createdAt": "Utworzono",
+  "account.shares.table.size": "Rozmiar",
+  "account.shares.modal.share-informations": "Informacje udziału",
+  "account.shares.modal.share-link": "Udostępnij link",
+  "account.shares.modal.delete.title": "Usuń udostępnianie {share}",
+  "account.shares.modal.delete.description": "Czy na pewno chcesz usunąć to udostępnianie?",
+  // END /account/shares
+  // /account/reverseShares
+  "account.reverseShares.title": "Udziały odwrotne",
+  "account.reverseShares.description": "Udostępnianie odwrotne pozwala na wygenerowanie unikalnego adresu URL, który umożliwia użytkownikom zewnętrznym na tworzenie udostępniania.",
+  "account.reverseShares.title.empty": "Tu jest pusto :eys:",
+  "account.reverseShares.description.empty": "Nie masz żadnych udostępnień odwrotnych.",
+  // showCreateReverseShareModal.tsx
+  "account.reverseShares.modal.title": "Utwórz udostępnianie odwrotne",
+  "account.reverseShares.modal.expiration.label": "Wygasanie",
+  "account.reverseShares.modal.expiration.minute-singular": "Minuta",
+  "account.reverseShares.modal.expiration.minute-plural": "Minuty/t",
+  "account.reverseShares.modal.expiration.hour-singular": "Godzina",
+  "account.reverseShares.modal.expiration.hour-plural": "Godziny",
+  "account.reverseShares.modal.expiration.day-singular": "Dzień",
+  "account.reverseShares.modal.expiration.day-plural": "Dni",
+  "account.reverseShares.modal.expiration.week-singular": "Tydzień",
+  "account.reverseShares.modal.expiration.week-plural": "Tygodni/e",
+  "account.reverseShares.modal.expiration.month-singular": "Miesiąc",
+  "account.reverseShares.modal.expiration.month-plural": "Miesiące/ęcy",
+  "account.reverseShares.modal.expiration.year-singular": "Rok",
+  "account.reverseShares.modal.expiration.year-plural": "Lata/lat",
+  "account.reverseShares.modal.max-size.label": "Maksymalny rozmiar udziału",
+  "account.reverseShares.modal.send-email": "Wysyłanie powiadomienia e-mail",
+  "account.reverseShares.modal.send-email.description": "Wyślij powiadomienie e-mail, gdy udostępnianie zostanie utworzone za pomocą linku udostępniania odwrotnego.",
+  "account.reverseShares.modal.max-use.label": "Limit użyć",
+  "account.reverseShares.modal.max-use.description": "Maksymalna ilość razy, kiedy ten adres URL może być użyty do utworzenia udostępniania.",
+  "account.reverseShare.never-expires": "To udostępnienie odwrotne nigdy nie wygasa.",
+  "account.reverseShare.expires-on": "To udostępnienie odwrotne wygaśnie dnia {expiration}.",
+  "account.reverseShares.table.no-shares": "Nie utworzono jeszcze udostępnień",
+  "account.reverseShares.table.count.singular": "udostępnij",
+  "account.reverseShares.table.count.plural": "udziały",
+  "account.reverseShares.table.shares": "Udziały",
+  "account.reverseShares.table.remaining": "Pozostało miejsca",
+  "account.reverseShares.table.max-size": "Maksymalny rozmiar udziału",
+  "account.reverseShares.table.expires": "Wygasa",
+  "account.reverseShares.modal.reverse-share-link": "Link udostępnienia odwrotnego",
+  "account.reverseShares.modal.delete.title": "Usuń udostępnienie odwrotnie",
+  "account.reverseShares.modal.delete.description": "Czy na pewno chcesz usunąć to udostępnienie odwrotne? Jeśli tak, to również zostaną usunięte powiązane z nim udostępnienia.",
+  // END /account/reverseShares
+  // /admin
+  "admin.title": "Administracja",
+  "admin.button.users": "Zarządzanie użytkownikami",
+  "admin.button.config": "Konfiguracja",
+  "admin.version": "Wersja",
+  // END /admin
+  // /admin/users
+  "admin.users.title": "Zarządzanie użytkownikami",
+  "admin.users.table.username": "Nazwa użytkownika",
+  "admin.users.table.email": "Adres e-mail",
+  "admin.users.table.admin": "Administrator",
+  "admin.users.edit.update.title": "Zaktualizuj użytkownika {username}",
+  "admin.users.edit.update.admin-privileges": "Uprawnienia administratora",
+  "admin.users.edit.update.change-password.title": "Zmień hasło",
+  "admin.users.edit.update.change-password.field": "Nowe hasło",
+  "admin.users.edit.update.change-password.button": "Zapisz nowe hasło",
+  "admin.users.edit.update.notify.password.success": "Hasło pomyślnie zmienione",
+  "admin.users.edit.delete.title": "Usuń użytkownika {username}",
+  "admin.users.edit.delete.description": "Czy na pewno chcesz usunąć tego użytkownika i wszystkie jego udziały?",
+  // showCreateUserModal.tsx
+  "admin.users.modal.create.title": "Utwórz użytkownika",
+  "admin.users.modal.create.username": "Nazwa użytkownika",
+  "admin.users.modal.create.email": "Adres e-mail",
+  "admin.users.modal.create.password": "Hasło",
+  "admin.users.modal.create.manual-password": "Ustaw ręcznie hasło",
+  "admin.users.modal.create.manual-password.description": "Jeśli nie zaznaczone, użytkownik otrzyma e-mail z linkiem do ustawienia hasła.",
+  "admin.users.modal.create.admin": "Uprawnienia administratora",
+  "admin.users.modal.create.admin.description": "Jeśli zaznaczone, użytkownik będzie miał dostęp do panelu administratora.",
+  // END /admin/users
+  // /upload
+  "upload.title": "Prześlij",
+  "upload.notify.generic-error": "Wystąpił błąd podczas zakończenia tworzenia udziału.",
+  "upload.notify.count-failed": "Nie udało się przesłać {count} plików. Próbuję ponownie.",
+  // Dropzone.tsx
+  "upload.dropzone.title": "Prześlij pliki",
+  "upload.dropzone.description": "Przeciągnij i upuść pliki tutaj, aby rozpocząć udostępnianie. Możemy zaakceptować tylko pliki mniejsze niż {maxSize}.",
+  "upload.dropzone.notify.file-too-big": "Twoje pliki przekraczają maksymalny rozmiar {maxSize}.",
+  // FileList.tsx
+  "upload.filelist.name": "Nazwa",
+  "upload.filelist.size": "Rozmiar",
+  // showCreateUploadModal.tsx
+  "upload.modal.title": "Utwórz Udział",
+  "upload.modal.link.error.invalid": "Może zawierać tylko litery, cyfry, znaki podkreślenia i myślniki",
+  "upload.modal.link.error.taken": "Ten link jest już w użyciu",
+  "upload.modal.not-signed-in": "Nie jesteś zalogowany/a",
+  "upload.modal.not-signed-in-description": "Nie możesz ręcznie usunąć swojego udziału ani wyświetlić licznika odwiedzających.",
+  "upload.modal.expires.never": "nigdy",
+  "upload.modal.expires.never-long": "Nigdy nie wygasa",
+  "upload.modal.expires.error.too-long": "Termin ważności przekracza maksymalną datę wygaśnięcia {max}.",
+  "upload.modal.link.label": "Link",
+  "upload.modal.expires.label": "Wygasanie",
+  "upload.modal.expires.minute-singular": "Minuta",
+  "upload.modal.expires.minute-plural": "Minuty/t",
+  "upload.modal.expires.hour-singular": "Godzina",
+  "upload.modal.expires.hour-plural": "Godzin/y",
+  "upload.modal.expires.day-singular": "Dzień",
+  "upload.modal.expires.day-plural": "Dni",
+  "upload.modal.expires.week-singular": "Tydzień",
+  "upload.modal.expires.week-plural": "Tygodni/e",
+  "upload.modal.expires.month-singular": "Miesiąc",
+  "upload.modal.expires.month-plural": "Miesiące/ęcy",
+  "upload.modal.expires.year-singular": "Rok",
+  "upload.modal.expires.year-plural": "Lat/a",
+  "upload.modal.accordion.description.title": "Opis",
+  "upload.modal.accordion.description.placeholder": "Notatka dla odbiorców tego udziału",
+  "upload.modal.accordion.email.title": "Odbiorcy wiadomości e-mail",
+  "upload.modal.accordion.email.placeholder": "Wprowadź adresatów wiadomości e-mail",
+  "upload.modal.accordion.email.invalid-email": "Adres e-mail jest nieprawidłowy",
+  "upload.modal.accordion.security.title": "Ustawienia bezpieczeństwa",
+  "upload.modal.accordion.security.password.label": "Ochrona hasłem",
+  "upload.modal.accordion.security.password.placeholder": "Brak hasła",
+  "upload.modal.accordion.security.max-views.label": "Maksymalna liczba wyświetleń",
+  "upload.modal.accordion.security.max-views.placeholder": "Bez ograniczeń",
+  // showCompletedUploadModal.tsx
+  "upload.modal.completed.never-expires": "To udostępnienie nigdy nie wygaśnie.",
+  "upload.modal.completed.expires-on": "To udostępnienie wygaśnie dnia {expiration}.",
+  "upload.modal.completed.share-ready": "Udostępnianie gotowe",
+  // END /upload
+  // /share/[id]
+  "share.title": "Udostępnij {shareId}",
+  "share.description": "Spójrz, co ci udostępniłem!",
+  "share.error.visitor-limit-exceeded.title": "Przekroczono limit odwiedzających",
+  "share.error.visitor-limit-exceeded.description": "Limit odwiedzających dla tego udziału został przekroczony.",
+  "share.error.removed.title": "Udostępnianie usunięte",
+  "share.error.not-found.title": "Nie znaleziono udziału",
+  "share.error.not-found.description": "Udział, który szukasz, nie istnieje.",
+  "share.modal.password.title": "Wymagane hasło",
+  "share.modal.password.description": "Aby uzyskać dostęp do tego udziału, wprowadź hasło.",
+  "share.modal.password": "Hasło",
+  "share.modal.error.invalid-password": "Hasło jest nieprawidłowe",
+  "share.button.download-all": "Pobierz wszystko",
+  "share.notify.download-all-preparing": "Udostępnianie jest przygotowywane. Spróbuj ponownie za kilka minut.",
+  "share.modal.file-link": "Link do pliku",
+  "share.table.name": "Nazwa",
+  "share.table.size": "Rozmiar",
+  "share.modal.file-preview.error.not-supported.title": "Podgląd nie jest obsługiwany",
+  "share.modal.file-preview.error.not-supported.description": "Podgląd dla tego typu pliku nie jest obsługiwany. Pobierz plik, aby go zobaczyć.",
+  // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Edytuj {shareId}",
+  "share.edit.append-upload": "Dołącz plik",
+  "share.edit.notify.generic-error": "W trakcie zakańczania tworzenia udziału wystąpił błąd.",
+  "share.edit.notify.save-success": "Udział zaktualizowany pomyślnie",
+  // END /share/[id]/edit
+  // /admin/config
+  "admin.config.title": "Konfiguracja",
+  "admin.config.category.general": "Ogólne",
+  "admin.config.category.share": "Udostępnij",
+  "admin.config.category.email": "Adres e-mail",
+  "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Logowanie za pomocą konta społecznościowego",
+  "admin.config.general.app-name": "Nazwa aplikacji",
+  "admin.config.general.app-name.description": "Nazwa aplikacji",
+  "admin.config.general.app-url": "Adres URL aplikacji",
+  "admin.config.general.app-url.description": "Pod którym adresem URL Pingvin Share jest dostępny",
+  "admin.config.general.show-home-page": "Pokaż stronę główną",
+  "admin.config.general.show-home-page.description": "Czy wyświetlać stronę główną",
+  "admin.config.general.logo": "Logo",
+  "admin.config.general.logo.description": "Zmień logo, przesyłając nowy obraz. Obraz musi być plikiem PNG i mieć proporcje 1:1.",
+  "admin.config.general.logo.placeholder": "Wybierz obraz",
+  "admin.config.email.enable-share-email-recipients": "Włącz adresatów wiadomości e-mail dla udziału",
+  "admin.config.email.enable-share-email-recipients.description": "Czy zezwolić na wysyłanie e-maili do adresatów udziału? Włącz to tylko wtedy, gdy włączyłeś SMTP.",
+  "admin.config.email.share-recipients-subject": "Temat dla odbiorców udziału",
+  "admin.config.email.share-recipients-subject.description": "Temat wiadomości e-mail, która zostanie wysłana do odbiorców udziału.",
+  "admin.config.email.share-recipients-message": "Wiadomość dla odbiorców udziału",
+  "admin.config.email.share-recipients-message.description": "Wiadomość, która zostanie wysłana do odbiorców udziału. Dostępne zmienne:\n {creator} - Nazwa użytkownika twórcy udziału\n {shareUrl} - Adres URL udziału\n {desc} - Opis udziału\n {expires} - Data wygaśnięcia udziału\n Zmienne zostaną zastąpione rzeczywistą wartością.",
+  "admin.config.email.reverse-share-subject": "Temat udziału odwrotnego",
+  "admin.config.email.reverse-share-subject.description": "Temat wiadomości e-mail, która zostanie wysłana, gdy ktoś utworzy udostępnienie za pomocą linku udziału odwrotnego.",
+  "admin.config.email.reverse-share-message": "Wiadomość udziału odwrotnego",
+  "admin.config.email.reverse-share-message.description": "Wiadomość, która zostanie wysłana, gdy ktoś utworzy udział za pomocą twojego linku udziału odwrotnego. {shareUrl} zostanie zastąpiony nazwą twórcy i adresem URL udziału.",
+  "admin.config.email.reset-password-subject": "Temat resetowania hasła",
+  "admin.config.email.reset-password-subject.description": "Temat wiadomości e-mail, która zostanie wysłana, gdy użytkownik zażąda zresetowania hasła.",
+  "admin.config.email.reset-password-message": "Wiadomość resetowania hasła",
+  "admin.config.email.reset-password-message.description": "Wiadomość, która zostanie wysłana, gdy użytkownik zażąda zresetowania hasła. {url} zostanie zastąpiony adresem URL resetowania hasła.",
+  "admin.config.email.invite-subject": "Temat zaproszenia",
+  "admin.config.email.invite-subject.description": "Temat wiadomości e-mail, która zostanie wysłana, gdy administrator zaprasza użytkownika.",
+  "admin.config.email.invite-message": "Wiadomość zaproszenia",
+  "admin.config.email.invite-message.description": "Wiadomość, która zostanie wysłana, gdy administrator zaprasza użytkownika. {url} zostanie zastąpiony adresem URL zaproszenia, a {password} hasłem.",
+  "admin.config.share.allow-registration": "Zezwól na rejestrację",
+  "admin.config.share.allow-registration.description": "Czy dozwolona jest rejestracja",
+  "admin.config.share.allow-unauthenticated-shares": "Zezwalaj na nieuwierzytelnione udostępnianie",
+  "admin.config.share.allow-unauthenticated-shares.description": "Czy nieautoryzowani użytkownicy mogą tworzyć udostępnienia",
+  "admin.config.share.max-expiration": "Maksymalny okres ważności",
+  "admin.config.share.max-expiration.description": "Maksymalny okres ważności udziału w godzinach. Ustaw na 0, aby zezwolić na nieograniczony okres ważności.",
+  "admin.config.share.max-size": "Rozmiar maksymalny",
+  "admin.config.share.max-size.description": "Maksymalny rozmiar udziału w bajtach",
+  "admin.config.share.zip-compression-level": "Poziom kompresji Zip",
+  "admin.config.share.zip-compression-level.description": "Dostosuj poziom do równowagi między rozmiarem pliku a szybkością kompresji. Prawidłowe wartości mieszczą się w zakresie od 0 do 9, przy czym 0 to brak kompresji a 9 maksymalną kompresją. ",
+  "admin.config.smtp.enabled": "Włączony",
+  "admin.config.smtp.enabled.description": "Czy SMTP ma zostać włączony. Ustaw to, tylko jeśli wprowadziłeś host, port, e-mail, nazwę użytkownika i hasło serwera SMTP.",
+  "admin.config.smtp.host": "Host",
+  "admin.config.smtp.host.description": "Host serwera SMTP",
+  "admin.config.smtp.port": "Numer portu",
+  "admin.config.smtp.port.description": "Numer portu serwera SMTP",
+  "admin.config.smtp.email": "Adres e-mail",
+  "admin.config.smtp.email.description": "Adres e-mail, z którego e-maile są wysyłane",
+  "admin.config.smtp.username": "Nazwa użytkownika",
+  "admin.config.smtp.username.description": "Nazwa użytkownika serwera SMTP",
+  "admin.config.smtp.password": "Hasło",
+  "admin.config.smtp.password.description": "Hasło serwera SMTP",
+  "admin.config.smtp.button.test": "Wyślij testowego e-maila",
+  "admin.config.oauth.allow-registration": "Zezwól na rejestrację",
+  "admin.config.oauth.allow-registration.description": "Zezwalaj użytkownikom na rejestrację za pomocą konta społecznościowego",
+  "admin.config.oauth.ignore-totp": "Ignoruj TOTP",
+  "admin.config.oauth.ignore-totp.description": "Czy zignorować TOTP, kiedy użytkownik loguje się za pomocą konta społecznościowego",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Czy login na GitHub jest włączony",
+  "admin.config.oauth.github-client-id": "ID klienta GitHub",
+  "admin.config.oauth.github-client-id.description": "ID klienta aplikacji GitHub OAuth",
+  "admin.config.oauth.github-client-secret": "Sekret klienta GitHub",
+  "admin.config.oauth.github-client-secret.description": "Sekret klienta aplikacji GitHub OAuth",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Czy jest włączony login na GitHub",
+  "admin.config.oauth.google-client-id": "ID klienta Google",
+  "admin.config.oauth.google-client-id.description": "ID klienta aplikacji GitHub OAuth",
+  "admin.config.oauth.google-client-secret": "Sekret klienta Google",
+  "admin.config.oauth.google-client-secret.description": "Sekret klienta aplikacji Google OAuth",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Czy jest włączony login na GitHub",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID aplikacji Microsoft OAuth\nogólnie: Użytkownicy zarówno z osobistym kontem Microsoft, jak i kontem do pracy lub szkoły z Microsoft Entra ID mogą się zalogować do aplikacji. organizacje: Zalogować do aplikacji mogą tylko użytkownicy z kontami pracowniczymi lub szkolnymi z Microsoft Entra ID.\nkonsumenci: Zalogować się do aplikacji mogą tylko użytkownicy z osobistym kontem Microsoft.\nNazwa domeny lokatora Microsoft Entra lub identyfikator lokatora w formacie GUID: Zalogować się do aplikacji mogą tylko użytkownicy określonego najemcy Microsoft Entra (z listy członków na koncie służbowym lub szkolnym albo z listy gości na koncie osobistym Microsoft).",
+  "admin.config.oauth.microsoft-client-id": "ID klienta Microsoft",
+  "admin.config.oauth.microsoft-client-id.description": "ID klienta aplikacji Microsoft OAuth",
+  "admin.config.oauth.microsoft-client-secret": "Sekret klienta Microsoft",
+  "admin.config.oauth.microsoft-client-secret.description": "Sekret klienta aplikacji Microsoft OAuth",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Czy jest włączony login na Discord",
+  "admin.config.oauth.discord-client-id": "ID klienta Discord",
+  "admin.config.oauth.discord-client-id.description": "ID klienta aplikacji Discord OAuth",
+  "admin.config.oauth.discord-client-secret": "Sekret klienta Discord",
+  "admin.config.oauth.discord-client-secret.description": "Sekret klienta aplikacji Discord OAuth",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Czy jest włączony login OpenID",
+  "admin.config.oauth.oidc-discovery-uri": "Wykrywanie URI OpenID",
+  "admin.config.oauth.oidc-discovery-uri.description": "Wykrywanie URI aplikacji OpenID OAuth",
+  "admin.config.oauth.oidc-client-id": "ID klienta OpenID",
+  "admin.config.oauth.oidc-client-id.description": "ID klienta aplikacji OpenID OAuth",
+  "admin.config.oauth.oidc-client-secret": "Sekret klienta OpenID",
+  "admin.config.oauth.oidc-client-secret.description": "Sekret klienta aplikacji Discord OAuth",
+  // 404
+  "404.description": "Ups! Ta strona nie istnieje.",
+  "404.button.home": "Wróć do strony domowej",
+  // error
+  "error.title": "Błąd",
+  "error.description": "Ups!",
+  "error.button.back": "Wróć",
+  "error.msg.default": "Coś poszło nie tak.",
+  "error.msg.access_denied": "Anulowałeś proces uwierzytelniania, spróbuj ponownie.",
+  "error.msg.expired_token": "Proces uwierzytelniania trwał zbyt długo, spróbuj ponownie.",
+  "error.msg.no_user": "Użytkownik powiązany z tym kontem {0} nie istnieje.",
+  "error.msg.no_email": "Nie można pobrać adresu e-mail z tego konta {0}.",
+  "error.msg.already_linked": "To konto {0} zostało już połączone z innym kontem.",
+  "error.msg.not_linked": "To konto {0} nie zostało jeszcze połączone z żadnym kontem.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
+  // Common translations
+  "common.button.save": "Zapisz",
+  "common.button.create": "Utwórz",
+  "common.button.submit": "Zgłoś",
+  "common.button.delete": "Usuń",
+  "common.button.cancel": "Anuluj",
+  "common.button.confirm": "Potwierdź",
+  "common.button.disable": "Wyłącz",
+  "common.button.share": "Udostępnij",
+  "common.button.generate": "Wygeneruj",
+  "common.button.done": "Gotowe",
+  "common.text.link": "Link",
+  "common.text.or": "lub",
+  "common.button.go-back": "Wróć",
+  "common.notify.copied": "Link został skopiowany do schowka",
+  "common.success": "Zakończono pomyślnie",
+  "common.error": "Błąd",
+  "common.error.unknown": "Wystąpił nieznany błąd",
+  "common.error.invalid-email": "Adres e-mail jest nieprawidłowy",
+  "common.error.too-short": "Musi mieć co najmniej {length} znaków",
+  "common.error.too-long": "Musi mieć co najmniej {length} znaków",
+  "common.error.exact-length": "Musi mieć dokładnie {length} znaków",
+  "common.error.invalid-number": "Musi być liczbą",
+  "common.error.field-required": "To pole jest wymagane"
+};

frontend/src/i18n/translations/pt-BR.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Iniciar sessão",
   "signIn.notify.totp-required.title": "Autenticação de dois fatores necessária",
   "signIn.notify.totp-required.description": "Insira seu código de autenticação de dois fatores",
+  "signIn.oauth.or": "OU",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Criar uma conta",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Seu e-mail",
   "signup.button.submit": "Vamos começar",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "Autenticação TOTP",
+  "totp.button.signIn": "Iniciar sessão",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Esqueceu a sua senha?",
   "resetPassword.description": "Insira o seu e-mail para redefinir a sua senha.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Senha",
   "account.card.password.old": "Senha antiga",
   "account.card.password.new": "Nova senha",
+  "account.card.password.noPasswordSet": "Você não tem uma senha definida. Se quiser entrar com e-mail e senha você precisa definir uma senha.",
   "account.notify.password.success": "Senha alterada com sucesso",
+  "account.card.oauth.title": "Login com Redes Sociais",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Vincular",
+  "account.card.oauth.unlink": "Desvincular",
+  "account.card.oauth.unlinked": "Desvinculado",
+  "account.modal.unlink.title": "Desvincular conta",
+  "account.modal.unlink.description": "Desvincular suas redes sociais pode fazer com que você perca sua conta se não se lembrar de seu nome de usuário e senha.",
+  "account.notify.oauth.unlinked.success": "Desvinculado com sucesso",
   "account.card.security.title": "Segurança",
   "account.card.security.totp.enable.description": "Digite a sua senha atual para começar a habilitar o TOTP",
   "account.card.security.totp.disable.description": "Digite a sua senha atual para desabilitar o TOTP",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "Você não poderá excluir seu compartilhamento manualmente e visualizar a contagem de visitantes.",
   "upload.modal.expires.never": "nunca",
   "upload.modal.expires.never-long": "Nunca expira",
+  "upload.modal.expires.error.too-long": "Expiração excede a data de expiração máxima de {max}.",
   "upload.modal.link.label": "Link",
   "upload.modal.expires.label": "Expiração",
   "upload.modal.expires.minute-singular": "Minuto",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Visualização não suportada",
   "share.modal.file-preview.error.not-supported.description": "Uma visualização para este tipo de arquivo não é suportada. Faça o download do arquivo para visualizá-lo.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Editar {shareId}",
+  "share.edit.append-upload": "Anexar arquivo",
+  "share.edit.notify.generic-error": "Ocorreu um erro ao terminar seu compartilhamento.",
+  "share.edit.notify.save-success": "Compartilhamento atualizado com sucesso",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Configuração",
   "admin.config.category.general": "Geral",
   "admin.config.category.share": "Compartilhamento",
   "admin.config.category.email": "E-mail",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Login com Redes Sociais",
   "admin.config.general.app-name": "Nome da aplicação",
   "admin.config.general.app-name.description": "Nome da aplicação",
   "admin.config.general.app-url": "URL do Aplicativo",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Se o registro é permitido",
   "admin.config.share.allow-unauthenticated-shares": "Permitir compartilhamentos sem autenticação",
   "admin.config.share.allow-unauthenticated-shares.description": "Se usuários não autenticados podem criar compartilhamentos",
+  "admin.config.share.max-expiration": "Expiração máxima",
+  "admin.config.share.max-expiration.description": "Validade máxima de ações em horas. Defina 0 para permitir expiração ilimitada.",
   "admin.config.share.max-size": "Tamanho máximo",
   "admin.config.share.max-size.description": "Tamanho máximo do compartilhamento em bytes",
   "admin.config.share.zip-compression-level": "Nível de compressão",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Senha",
   "admin.config.smtp.password.description": "Senha do servidor SMTP",
   "admin.config.smtp.button.test": "Enviar email de teste",
+  "admin.config.oauth.allow-registration": "Permitir registro",
+  "admin.config.oauth.allow-registration.description": "Permitir que os usuários se registrem através do login de redes sociais",
+  "admin.config.oauth.ignore-totp": "Ignorar TOTP",
+  "admin.config.oauth.ignore-totp.description": "Ignorar o TOTP quando usuário usando login social",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Se o login GitHub está habilitado",
+  "admin.config.oauth.github-client-id": "Client ID do GitHub",
+  "admin.config.oauth.github-client-id.description": "ID do cliente do aplicativo GitHub OAuth",
+  "admin.config.oauth.github-client-secret": "Client Secret do GitHub",
+  "admin.config.oauth.github-client-secret.description": "ID do cliente do aplicativo GitHub OAuth",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Se o login GitHub está habilitado",
+  "admin.config.oauth.google-client-id": "Client ID do Google",
+  "admin.config.oauth.google-client-id.description": "ID do cliente do aplicativo GitHub OAuth",
+  "admin.config.oauth.google-client-secret": "Client Secret do Google",
+  "admin.config.oauth.google-client-secret.description": "Client secret do aplicativo GitHub OAuth",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Se o Microsoft login está habilitado",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "O ID do Tenant do app Microsoft OAuth\ncomum: Usuários com uma conta pessoal da Microsoft e uma conta de trabalho ou escola do Microsoft Entra podem entrar no aplicativo. organizações: somente usuários com contas de trabalho ou de escola do Microsoft Entra ID podem entrar no aplicativo.\nconsumidores: Somente usuários com uma conta pessoal da Microsoft podem acessar o aplicativo.\nnome de domínio do tenant Microsoft Entra ou do ID do inquilino no formato GUID: Somente usuários de um tenant Microsoft Entra específico (membros do diretório com uma conta de trabalho ou de diretório com uma conta pessoal da Microsoft) podem entrar no aplicativo.",
+  "admin.config.oauth.microsoft-client-id": "ID do Cliente Microsoft",
+  "admin.config.oauth.microsoft-client-id.description": "ID do cliente do aplicativo Microsoft OAuth",
+  "admin.config.oauth.microsoft-client-secret": "Segredo do Cliente Microsoft",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret do aplicativo Microsoft OAuth",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Se o login do Discord está habilitado",
+  "admin.config.oauth.discord-client-id": "ID do Cliente Discord",
+  "admin.config.oauth.discord-client-id.description": "ID do cliente do aplicativo Discord OAuth",
+  "admin.config.oauth.discord-client-secret": "Segredo do Cliente Discord",
+  "admin.config.oauth.discord-client-secret.description": "ID do cliente do aplicativo Discord OAuth",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Se o OpenID login está habilitado",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "",
+  "admin.config.oauth.oidc-client-id": "ID do Cliente OpenID",
+  "admin.config.oauth.oidc-client-id.description": "ID do cliente do aplicativo OpenID OAuth",
+  "admin.config.oauth.oidc-client-secret": "Segredo do Cliente OpenID",
+  "admin.config.oauth.oidc-client-secret.description": "ID do cliente do aplicativo OpenID OAuth",
   // 404
   "404.description": "Ops, esta página não existe.",
   "404.button.home": "Me traga de volta para casa",
+  // error
+  "error.title": "Erro",
+  "error.description": "Oops!",
+  "error.button.back": "Voltar",
+  "error.msg.default": "Algo deu errado.",
+  "error.msg.access_denied": "Você cancelou o processo de autenticação, por favor, tente novamente.",
+  "error.msg.expired_token": "O processo de autenticação demorou muito. Por favor, tente novamente.",
+  "error.msg.no_user": "O usuário vinculado a esta conta {0} não existe.",
+  "error.msg.no_email": "Não é possível obter o endereço de e-mail desta conta {0}.",
+  "error.msg.already_linked": "Esta conta {0} já está vinculada a outra conta.",
+  "error.msg.not_linked": "Esta conta {0} ainda não foi vinculada a nenhuma conta.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Salvar",
   "common.button.create": "Criar",

frontend/src/i18n/translations/ru-RU.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Вход",
   "signIn.notify.totp-required.title": "Требуется двухфакторная аутентификация",
   "signIn.notify.totp-required.description": "Пожалуйста, введите код Вашей 2-х факторной аутентификации",
+  "signIn.oauth.or": "ИЛИ",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Создать аккаунт",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Адрес эл. почты",
   "signup.button.submit": "Давайте начнём",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "Авторизация TOTP",
+  "totp.button.signIn": "Войти",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Забыли пароль?",
   "resetPassword.description": "Введите ваш email для восстановления пароля.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Пароль",
   "account.card.password.old": "Старый пароль",
   "account.card.password.new": "Новый пароль",
+  "account.card.password.noPasswordSet": "У вас не установлен пароль. Если вы хотите войти с помощью электронной почты и пароля, вам необходимо установить пароль.",
   "account.notify.password.success": "Пароль успешно изменён",
+  "account.card.oauth.title": "Авторизация через социальные сети",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Подключить",
+  "account.card.oauth.unlink": "Отключить",
+  "account.card.oauth.unlinked": "Отключен",
+  "account.modal.unlink.title": "Отключить связь с учетной записью",
+  "account.modal.unlink.description": "Отключение связи с учетной записью социальных аккаунтов может привести к потере вашей учетной записи, если вы не помните свое имя пользователя и пароль.",
+  "account.notify.oauth.unlinked.success": "Отключение прошло успешно",
   "account.card.security.title": "Безопасность",
   "account.card.security.totp.enable.description": "Введите ваш текущий пароль для начала включения TOTP",
   "account.card.security.totp.disable.description": "Введите ваш текущий пароль, чтобы отключить TOTP",
@@ -111,7 +134,7 @@ export default {
   "account.reverseShares.title.empty": "Тут пусто 👀",
   "account.reverseShares.description.empty": "У вас пока нет обратных загрузок.",
   // showCreateReverseShareModal.tsx
-  "account.reverseShares.modal.title": "Create reverse share",
+  "account.reverseShares.modal.title": "Создать обратную ссылку на файл",
   "account.reverseShares.modal.expiration.label": "Истекает",
   "account.reverseShares.modal.expiration.minute-singular": "Минута",
   "account.reverseShares.modal.expiration.minute-plural": "Минут(ы)",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "Вы не сможете удалить свои файлы вручную и просмотреть количество посетителей.",
   "upload.modal.expires.never": "никогда",
   "upload.modal.expires.never-long": "Никогда не истекает",
+  "upload.modal.expires.error.too-long": "Срок действия превышает максимальную дату окончания срока действия {max}.",
   "upload.modal.link.label": "Ссылка",
   "upload.modal.expires.label": "Истекает",
   "upload.modal.expires.minute-singular": "Минута",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Предпросмотр не поддерживается",
   "share.modal.file-preview.error.not-supported.description": "Предварительный просмотр этого типа файла не поддерживается. Пожалуйста, скачайте файл для его просмотра.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Редактировать {shareId}",
+  "share.edit.append-upload": "Добавить файл",
+  "share.edit.notify.generic-error": "Произошла ошибка при завершении вашей загрузки.",
+  "share.edit.notify.save-success": "Ссылка на ресурс успешна обновлена",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Конфигурация",
   "admin.config.category.general": "Общее",
   "admin.config.category.share": "Загрузки",
   "admin.config.category.email": "Электронная почта",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Авторизация через социальные сети",
   "admin.config.general.app-name": "Название приложения",
   "admin.config.general.app-name.description": "Видимое название приложения",
   "admin.config.general.app-url": "URL-адрес приложения",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Разрешена ли регистрация",
   "admin.config.share.allow-unauthenticated-shares": "Разрешить неавторизованные загрузки",
   "admin.config.share.allow-unauthenticated-shares.description": "Могут ли неавторизованные пользователи создавать загрузки",
+  "admin.config.share.max-expiration": "Максимальная срок действия",
+  "admin.config.share.max-expiration.description": "Максимальный срок действия общего доступа в часах. Установите значение 0, чтобы разрешить неограниченный срок действия.",
   "admin.config.share.max-size": "Максимальный размер",
   "admin.config.share.max-size.description": "Максимальный размер файла в байтах",
   "admin.config.share.zip-compression-level": "Уровень сжатия Zip",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Пароль",
   "admin.config.smtp.password.description": "Пароль SMTP-сервера",
   "admin.config.smtp.button.test": "Отправить тестовое письмо",
+  "admin.config.oauth.allow-registration": "Разрешить регистрацию",
+  "admin.config.oauth.allow-registration.description": "Разрешить пользователям регистрироваться используя учетные записи социальных сетей",
+  "admin.config.oauth.ignore-totp": "Игнорировать TOTP",
+  "admin.config.oauth.ignore-totp.description": "Игнорировать TOTP при использовании социальной авторизации",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Включен ли логин на GitHub",
+  "admin.config.oauth.github-client-id": "ID клиента GitHub",
+  "admin.config.oauth.github-client-id.description": "ID клиента в приложении GitHub OAuth",
+  "admin.config.oauth.github-client-secret": "Секретный ключ клиента GitHub",
+  "admin.config.oauth.github-client-secret.description": "Секретный ключ клиента в приложении GitHub OAuth",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Включен ли логин Google на GitHub",
+  "admin.config.oauth.google-client-id": "ID клиента Google",
+  "admin.config.oauth.google-client-id.description": "ID клиента в приложении Google OAuth",
+  "admin.config.oauth.google-client-secret": "Секретный ключ клиента Google",
+  "admin.config.oauth.google-client-secret.description": "Секретный ключ клиента в приложении Google OAuth",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Включен ли логин Microsoft",
+  "admin.config.oauth.microsoft-tenant": "Корпоративный аккаунт Microsoft",
+  "admin.config.oauth.microsoft-tenant.description": "Идентификатор арендатора приложения Microsoft OAuth\ncommon: Пользователи с личным аккаунтом Microsoft и рабочим или учебным аккаунтом от Microsoft Entra ID могут войти в приложение. organizations: Только пользователи с рабочим или учебным аккаунтом от Microsoft Entra ID могут войти в приложение.\nconsumers: Только пользователи с личным аккаунтом Microsoft могут войти в приложение.\nимя домена арендатора Microsoft Entra или идентификатор арендатора в формате GUID: Только пользователи из определенного арендатора Microsoft Entra (участники каталога с рабочим или учебным аккаунтом или гости каталога с личным аккаунтом Microsoft) могут войти в приложение.",
+  "admin.config.oauth.microsoft-client-id": "Идентификатор клиента Microsoft",
+  "admin.config.oauth.microsoft-client-id.description": "ID клиента в приложении Microsoft OAuth",
+  "admin.config.oauth.microsoft-client-secret": "Секретный ключ клиента Microsoft",
+  "admin.config.oauth.microsoft-client-secret.description": "Секретный ключ клиента в приложении Microsoft OAuth",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Включен ли логин Discord",
+  "admin.config.oauth.discord-client-id": "ID клиента Discord",
+  "admin.config.oauth.discord-client-id.description": "ID клиента в приложении Discord OAuth",
+  "admin.config.oauth.discord-client-secret": "Секретный ключ клиента Discord",
+  "admin.config.oauth.discord-client-secret.description": "Секретный ключ клиента в приложении Discord OAuth",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Включен ли логин OpenID",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI приложения OpenID OAuth",
+  "admin.config.oauth.oidc-client-id": "ID клиента OpenID",
+  "admin.config.oauth.oidc-client-id.description": "ID клиента в приложении OpenID OAuth",
+  "admin.config.oauth.oidc-client-secret": "Секретный ключ клиента OpenID",
+  "admin.config.oauth.oidc-client-secret.description": "Секретный ключ клиента в приложении OpenID OAuth",
   // 404
   "404.description": "Упс, этой страницы не существует.",
   "404.button.home": "Верните меня домой",
+  // error
+  "error.title": "Ошибка",
+  "error.description": "Что-то пошло не так!",
+  "error.button.back": "Назад",
+  "error.msg.default": "Что-то пошло не так.",
+  "error.msg.access_denied": "Вы отменили процесс аутентификации, пожалуйста, попробуйте еще раз.",
+  "error.msg.expired_token": "Процесс аутентификации занял слишком много времени, пожалуйста, попробуйте еще раз.",
+  "error.msg.no_user": "Пользователь связанный с учетной записью {0} не существует.",
+  "error.msg.no_email": "Не удается получить адрес электронной почты от учетной записи {0}.",
+  "error.msg.already_linked": "Эта учетная запись {0} уже привязана к другому аккаунту.",
+  "error.msg.not_linked": "Эта учетная запись {0} ещё не привязана ни к одному аккаунту.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Сохранить",
   "common.button.create": "Создать",

frontend/src/i18n/translations/sr-SP.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "Пријавите се",
   "signIn.notify.totp-required.title": "Потребна је двофакторска аутентификација",
   "signIn.notify.totp-required.description": "Унесите свој двофакторски код за аутентификацију",
+  "signIn.oauth.or": "Или",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "Направи налог",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "Ваш и-мејл",
   "signup.button.submit": "Хајде да почнемо",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "ТОТП аутентификација",
+  "totp.button.signIn": "Пријавите се",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "Заборавили сте лозинку?",
   "resetPassword.description": "Унесите своју е-пошту да бисте ресетовали лозинку.",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "Лозинка",
   "account.card.password.old": "Стара лозинка",
   "account.card.password.new": "Нова лозинка",
+  "account.card.password.noPasswordSet": "Немате постављену лозинку. Ако желите да се пријавите помоћу е-поште и лозинке, потребно је да поставите лозинку.",
   "account.notify.password.success": "Лозинка је успешно промењена",
+  "account.card.oauth.title": "Социал логин",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Прекини везу",
+  "account.card.oauth.unlinked": "Веза је прекинута",
+  "account.modal.unlink.title": "Прекини везу са налогом",
+  "account.modal.unlink.description": "Прекидање везе са вашим друштвеним налозима може довести до губитка налога ако се не сећате корисничког имена и лозинке.",
+  "account.notify.oauth.unlinked.success": "Веза је прекинута",
   "account.card.security.title": "Безбедност",
   "account.card.security.totp.enable.description": "Унесите своју тренутну лозинку да бисте почели да омогућавате ТОТП",
   "account.card.security.totp.disable.description": "Унесите своју тренутну лозинку да бисте онемогућили ТОТП",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "Нећете моћи ручно да избришете своје дељење и видите број посетилаца.",
   "upload.modal.expires.never": "никад",
   "upload.modal.expires.never-long": "Никада не истиче",
+  "upload.modal.expires.error.too-long": "Истек премашује максимални датум истека од {max}.",
   "upload.modal.link.label": "Линк",
   "upload.modal.expires.label": "Истиче",
   "upload.modal.expires.minute-singular": "Минут",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "Преглед није подржан",
   "share.modal.file-preview.error.not-supported.description": "Преглед за овај тип датотеке није подржан. Преузмите датотеку да бисте је видели.",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Edit {shareId}",
+  "share.edit.append-upload": "Append file",
+  "share.edit.notify.generic-error": "An error occurred while finishing your share.",
+  "share.edit.notify.save-success": "Share updated successfully",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "Конфигурација",
   "admin.config.category.general": "Опште",
   "admin.config.category.share": "Дељење",
   "admin.config.category.email": "E-пошта",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Социал Логин",
   "admin.config.general.app-name": "Назив апликације",
   "admin.config.general.app-name.description": "Назив апликације",
   "admin.config.general.app-url": "URL апликације",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "Да ли је регистрација дозвољена",
   "admin.config.share.allow-unauthenticated-shares": "Дозволи дељење без аутентификације",
   "admin.config.share.allow-unauthenticated-shares.description": "Да ли корисници без аутентификације могу да креирају дељења",
+  "admin.config.share.max-expiration": "Максимални рок трајања",
+  "admin.config.share.max-expiration.description": "Максимални рок трајања дељења у сатима. Поставите на 0 да бисте омогућили неограничено трајање.",
   "admin.config.share.max-size": "Максимална величина",
   "admin.config.share.max-size.description": "Максимална величина дељења у бајтовима",
   "admin.config.share.zip-compression-level": "Ниво zip компресије",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "Лозинка",
   "admin.config.smtp.password.description": "Лозинка SMTP сервера",
   "admin.config.smtp.button.test": "Пошаљи тестну е-пошту",
+  "admin.config.oauth.allow-registration": "Дозволи регистрацију",
+  "admin.config.oauth.allow-registration.description": "Дозволите корисницима да се региструју путем друштвене пријаве",
+  "admin.config.oauth.ignore-totp": "Занемари ТОТП",
+  "admin.config.oauth.ignore-totp.description": "Да ли да игноришете ТОТП када корисник користи пријаву на друштвеним мрежама",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Да ли је пријављивање на GitHub омогућено",
+  "admin.config.oauth.github-client-id": "GitHub ИД клијента",
+  "admin.config.oauth.github-client-id.description": "ИД клијента GitHub OAuth апликације",
+  "admin.config.oauth.github-client-secret": "Тајна GitHub клијента",
+  "admin.config.oauth.github-client-secret.description": "Тајна клијента GitHub OAuth апликације",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Да ли је пријављивање на Google омогућено",
+  "admin.config.oauth.google-client-id": "ИД Google клијента",
+  "admin.config.oauth.google-client-id.description": "ИД клијента Google OAuth апликације",
+  "admin.config.oauth.google-client-secret": "Тајна Google клијента",
+  "admin.config.oauth.google-client-secret.description": "Тајна клијента Google OAuth апликације",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Да ли је пријављивање на Microsoft омогућено",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "ИД закупца за Microsoft OAuth апликацију\nуобичајено: Корисници са личним Microsoft налогом и пословним или школским налогом са Microsoft Entra ID-а могу да се пријаве у апликацију. организације: Само корисници са пословним или школским налозима са Microsoft Entra ID-а могу да се пријаве у апликацију.\nпотрошачи: Само корисници са личним Microsoft налогом могу да се пријаве у апликацију.\nиме домена закупца Microsoft Entra ID или ИД закупца у ГУИД формату: Само корисници из одређеног Microsoft Entra ID станара (чланови директоријума са пословним или школским налогом или гости директоријума са личним Microsoft налогом) могу да се пријаве у апликацију.",
+  "admin.config.oauth.microsoft-client-id": "Microsotf Цлиент ИД",
+  "admin.config.oauth.microsoft-client-id.description": "ИД клијента Microsoft OAuth апликације",
+  "admin.config.oauth.microsoft-client-secret": "Тајна Microsoft клијента",
+  "admin.config.oauth.microsoft-client-secret.description": "Тајна клијента за Microsot OAuth апликацију",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Да ли је пријављивање на Discord омогућено",
+  "admin.config.oauth.discord-client-id": "Discord ИД клијента",
+  "admin.config.oauth.discord-client-id.description": "ИД клијента Discord OAuth апликације",
+  "admin.config.oauth.discord-client-secret": "Discord клијент тајна",
+  "admin.config.oauth.discord-client-secret.description": "Тајна клијента Discord OAuth апликације",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Да ли је пријављивање на OpenID омогућено",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "УРИ за откривање OpenID OAuth апликације",
+  "admin.config.oauth.oidc-client-id": "OpenID ИД клијента",
+  "admin.config.oauth.oidc-client-id.description": "ИД клијента OpenID OAuth апликације",
+  "admin.config.oauth.oidc-client-secret": "Тајна OpenID клијента",
+  "admin.config.oauth.oidc-client-secret.description": "Тајна клијента OpenID OAuth апликације",
   // 404
   "404.description": "Опа - Ова страна не постоји.",
   "404.button.home": "Врати ме на почетак",
+  // error
+  "error.title": "Грешка",
+  "error.description": "Ooпс!",
+  "error.button.back": "Иди назад",
+  "error.msg.default": "Нешто је пошло наопако.",
+  "error.msg.access_denied": "Отказали сте процес аутентификације, покушајте поново.",
+  "error.msg.expired_token": "Процес аутентификације је трајао предуго, покушајте поново.",
+  "error.msg.no_user": "Корисник повезан са овим {0} налогом не постоји.",
+  "error.msg.no_email": "Не могу да добијем адресу е-поште са овог {0} налога.",
+  "error.msg.already_linked": "Овај {0} налог је већ повезан са другим налогом.",
+  "error.msg.not_linked": "Овај {0} налог још увек није повезан ни са једним налогом.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "Сачувај",
   "common.button.create": "Направи",

frontend/src/i18n/translations/sv-SE.ts

@@ -0,0 +1,411 @@
+export default {
+  // Navbar
+  "navbar.upload": "Ladda upp",
+  "navbar.signin": "Logga in",
+  "navbar.home": "Startsida",
+  "navbar.signup": "Skapa konto",
+  "navbar.links.shares": "Mina delningar",
+  "navbar.links.reverse": "Omvända delningar",
+  "navbar.avatar.account": "Mitt konto",
+  "navbar.avatar.admin": "Administration",
+  "navbar.avatar.signout": "Logga ut",
+  // END navbar
+  // /
+  "home.title": "En <h>egen</h> fildelningsplattform.",
+  "home.description": "Vill du verkligen lägga dina personliga filer hos en tredje part som WeTransfer?",
+  "home.bullet.a.name": "Lokalt installerad",
+  "home.bullet.a.description": "Hosta Pingvin Share på din egen maskin.",
+  "home.bullet.b.name": "Sekretess",
+  "home.bullet.b.description": "Dina filer är dina filer och bör aldrig hamna i händerna på tredje part.",
+  "home.bullet.c.name": "Ingen irriterande filstorleksbegränsning",
+  "home.bullet.c.description": "Ladda upp så stora filer som du vill. Endast din hårddisk kommer att vara din gräns.",
+  "home.button.start": "Kom igång",
+  "home.button.source": "Källkod",
+  // END /
+  // /auth/signin
+  "signin.title": "Välkommen tillbaka",
+  "signin.description": "Har du inget konto än?",
+  "signin.button.signup": "Skapa konto",
+  "signin.input.email-or-username": "E-post eller användarnamn",
+  "signin.input.email-or-username.placeholder": "Din e-postadress eller ditt användarnamn",
+  "signin.input.password": "Lösenord",
+  "signin.input.password.placeholder": "Lösenord",
+  "signin.button.submit": "Logga in",
+  "signIn.notify.totp-required.title": "Tvåfaktorsautentisering krävs",
+  "signIn.notify.totp-required.description": "Vänligen ange din tvåfaktorsautentiseringskod",
+  "signIn.oauth.or": "ELLER",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
+  // END /auth/signin
+  // /auth/signup
+  "signup.title": "Skapa ett konto",
+  "signup.description": "Har du redan ett konto?",
+  "signup.button.signin": "Logga in",
+  "signup.input.username": "Användarnamn",
+  "signup.input.username.placeholder": "Ditt användarnamn",
+  "signup.input.email": "E-post",
+  "signup.input.email.placeholder": "Din e-post",
+  "signup.button.submit": "Kom igång",
+  // END /auth/signup
+  // /auth/totp
+  "totp.title": "TOTP-autentisering",
+  "totp.button.signIn": "Logga in",
+  // END /auth/totp
+  // /auth/reset-password
+  "resetPassword.title": "Glömt ditt lösenord?",
+  "resetPassword.description": "Ange din e-postadress för att återställa ditt lösenord.",
+  "resetPassword.notify.success": "Ett e-postmeddelande har skickats till dig med en länk för att återställa lösenordet.",
+  "resetPassword.button.back": "Tillbaka till inloggningssidan",
+  "resetPassword.text.resetPassword": "Återställ lösenord",
+  "resetPassword.text.enterNewPassword": "Ange ditt nya lösenord",
+  "resetPassword.input.password": "Nytt lösenord",
+  "resetPassword.notify.passwordReset": "Ditt lösenord har återställts.",
+  // /account
+  "account.title": "Mitt konto",
+  "account.card.info.title": "Kontoinformation",
+  "account.card.info.username": "Användarnamn",
+  "account.card.info.email": "E-post",
+  "account.notify.info.success": "Kontot uppdaterades",
+  "account.card.password.title": "Lösenord",
+  "account.card.password.old": "Gammalt lösenord",
+  "account.card.password.new": "Nytt lösenord",
+  "account.card.password.noPasswordSet": "Du har inget lösenord. Om du vill logga in med e-post och lösenord måste du ange ett lösenord.",
+  "account.notify.password.success": "Lösenordet har ändrats",
+  "account.card.oauth.title": "Inloggning via sociala nätverk",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Länka",
+  "account.card.oauth.unlink": "Avlänka",
+  "account.card.oauth.unlinked": "Avlänkad",
+  "account.modal.unlink.title": "Avlänka konto",
+  "account.modal.unlink.description": "Om du kopplar bort dina sociala konton kan det leda till att du förlorar ditt konto om du inte kommer ihåg ditt användarnamn och lösenord.",
+  "account.notify.oauth.unlinked.success": "Avlänkning utförd",
+  "account.card.security.title": "Säkerhet",
+  "account.card.security.totp.enable.description": "Ange ditt nuvarande lösenord för att aktivera TOTP",
+  "account.card.security.totp.disable.description": "Ange ditt lösenord för att inaktivera TOTP",
+  "account.card.security.totp.button.start": "Start",
+  "account.modal.totp.title": "Aktivera TOTP",
+  "account.modal.totp.step1": "Steg 1: Lägg till din autentiserare",
+  "account.modal.totp.step2": "Steg 2: Bekräfta din kod",
+  "account.modal.totp.enterManually": "Ange manuellt",
+  "account.modal.totp.code": "Kod",
+  "account.modal.totp.clickToCopy": "Klicka för att kopiera",
+  "account.modal.totp.verify": "Verifiera",
+  "account.notify.totp.disable": "TOTP har inaktiverats",
+  "account.notify.totp.enable": "TOTP aktiverat",
+  "account.card.language.title": "Språk",
+  "account.card.language.description": "Projektet är översatt av gemenskapen. Vissa översättningar kan vara ofullständiga.",
+  "account.card.color.title": "Färgschema",
+  // ThemeSwitcher.tsx
+  "account.theme.dark": "Mörk",
+  "account.theme.light": "Ljus",
+  "account.theme.system": "System",
+  "account.button.delete": "Ta bort konto",
+  "account.modal.delete.title": "Ta bort konto",
+  "account.modal.delete.description": "Vill du verkligen ta bort ditt konto inklusive alla dina aktiva delningar?",
+  // END /account
+  // /account/shares
+  "account.shares.title": "Mina delningar",
+  "account.shares.title.empty": "Här var det tomt 👀",
+  "account.shares.description.empty": "Du har inga delningar.",
+  "account.shares.button.create": "Skapa en",
+  "account.shares.info.title": "Information om delning",
+  "account.shares.table.id": "ID",
+  "account.shares.table.name": "Namn",
+  "account.shares.table.description": "Beskrivning",
+  "account.shares.table.visitors": "Besökare",
+  "account.shares.table.expiresAt": "Förfaller den",
+  "account.shares.table.createdAt": "Skapad den",
+  "account.shares.table.size": "Storlek",
+  "account.shares.modal.share-informations": "Information om delning",
+  "account.shares.modal.share-link": "Delningslänk",
+  "account.shares.modal.delete.title": "Ta bort delning {share}",
+  "account.shares.modal.delete.description": "Vill du verkligen ta bort denna delning?",
+  // END /account/shares
+  // /account/reverseShares
+  "account.reverseShares.title": "Omvända delningar",
+  "account.reverseShares.description": "En omvänd delning gör att du kan generera en unik URL som tillåter externa användare att skapa en delning.",
+  "account.reverseShares.title.empty": "Här var det tomt 👀",
+  "account.reverseShares.description.empty": "Du har inga omvända delningar.",
+  // showCreateReverseShareModal.tsx
+  "account.reverseShares.modal.title": "Skapa omvänd delning",
+  "account.reverseShares.modal.expiration.label": "Förfaller",
+  "account.reverseShares.modal.expiration.minute-singular": "Minut",
+  "account.reverseShares.modal.expiration.minute-plural": "Minuter",
+  "account.reverseShares.modal.expiration.hour-singular": "Timme",
+  "account.reverseShares.modal.expiration.hour-plural": "Timmar",
+  "account.reverseShares.modal.expiration.day-singular": "Dag",
+  "account.reverseShares.modal.expiration.day-plural": "Dagar",
+  "account.reverseShares.modal.expiration.week-singular": "Vecka",
+  "account.reverseShares.modal.expiration.week-plural": "Veckor",
+  "account.reverseShares.modal.expiration.month-singular": "Månad",
+  "account.reverseShares.modal.expiration.month-plural": "Månader",
+  "account.reverseShares.modal.expiration.year-singular": "År",
+  "account.reverseShares.modal.expiration.year-plural": "År",
+  "account.reverseShares.modal.max-size.label": "Max storlek på delning",
+  "account.reverseShares.modal.send-email": "Skicka e-postavisering",
+  "account.reverseShares.modal.send-email.description": "Skicka ett e-postmeddelande när en delning skapas med denna länk för omvänd delning.",
+  "account.reverseShares.modal.max-use.label": "Maxanvändningar",
+  "account.reverseShares.modal.max-use.description": "Den maximala mängden gånger denna URL kan användas för att skapa en delning.",
+  "account.reverseShare.never-expires": "Denna omvända delning kommer aldrig att förfalla.",
+  "account.reverseShare.expires-on": "Denna sammanlagda delning löper ut på {expiration}.",
+  "account.reverseShares.table.no-shares": "Inga delningar har skapats ännu",
+  "account.reverseShares.table.count.singular": "delning",
+  "account.reverseShares.table.count.plural": "delningar",
+  "account.reverseShares.table.shares": "Delningar",
+  "account.reverseShares.table.remaining": "Återstående användningar",
+  "account.reverseShares.table.max-size": "Max storlek på delning",
+  "account.reverseShares.table.expires": "Förfaller den",
+  "account.reverseShares.modal.reverse-share-link": "Omvänd delningslänk",
+  "account.reverseShares.modal.delete.title": "Ta bort omvänd delning",
+  "account.reverseShares.modal.delete.description": "Vill du verkligen ta bort denna omvänd delning? Om du gör det, kommer de tillhörande delningarna också att raderas.",
+  // END /account/reverseShares
+  // /admin
+  "admin.title": "Administration",
+  "admin.button.users": "Användarhantering",
+  "admin.button.config": "Konfiguration",
+  "admin.version": "Version",
+  // END /admin
+  // /admin/users
+  "admin.users.title": "Användarhantering",
+  "admin.users.table.username": "Användarnamn",
+  "admin.users.table.email": "E-post",
+  "admin.users.table.admin": "Administratör",
+  "admin.users.edit.update.title": "Uppdatera användare {username}",
+  "admin.users.edit.update.admin-privileges": "Administratörsbehörigheter",
+  "admin.users.edit.update.change-password.title": "Ändra lösenord",
+  "admin.users.edit.update.change-password.field": "Nytt lösenord",
+  "admin.users.edit.update.change-password.button": "Spara nytt lösenord",
+  "admin.users.edit.update.notify.password.success": "Lösenordet har ändrats",
+  "admin.users.edit.delete.title": "Ta bort användare {username}",
+  "admin.users.edit.delete.description": "Vill du verkligen ta bort denna användare och alla deras delningar?",
+  // showCreateUserModal.tsx
+  "admin.users.modal.create.title": "Skapa användare",
+  "admin.users.modal.create.username": "Användarnamn",
+  "admin.users.modal.create.email": "E-post",
+  "admin.users.modal.create.password": "Lösenord",
+  "admin.users.modal.create.manual-password": "Sätt lösenord manuellt",
+  "admin.users.modal.create.manual-password.description": "Om den inte är markerad kommer användaren att få ett e-postmeddelande med en länk för att ange lösenordet.",
+  "admin.users.modal.create.admin": "Administratörsbehörigheter",
+  "admin.users.modal.create.admin.description": "Om detta markeras kommer användaren att kunna komma åt administratörspanelen.",
+  // END /admin/users
+  // /upload
+  "upload.title": "Ladda upp",
+  "upload.notify.generic-error": "Ett fel uppstod när din delning skulle slutföras.",
+  "upload.notify.count-failed": "{count} filer kunde inte laddas upp. Försöker igen.",
+  // Dropzone.tsx
+  "upload.dropzone.title": "Ladde upp filer",
+  "upload.dropzone.description": "Drag och släpp filer här för att starta din delning. Vi kan endast acceptera filer som är mindre än {maxSize} totalt.",
+  "upload.dropzone.notify.file-too-big": "Dina filer överskrider den maximala storleken på {maxSize}.",
+  // FileList.tsx
+  "upload.filelist.name": "Namn",
+  "upload.filelist.size": "Storlek",
+  // showCreateUploadModal.tsx
+  "upload.modal.title": "Skapa delning",
+  "upload.modal.link.error.invalid": "Kan endast innehålla bokstäver, siffror, understreck och bindestreck",
+  "upload.modal.link.error.taken": "Denna länk används redan",
+  "upload.modal.not-signed-in": "Du är inte inloggad",
+  "upload.modal.not-signed-in-description": "Du kommer inte att kunna ta bort din delning manuellt och visa antalet besökare.",
+  "upload.modal.expires.never": "aldrig",
+  "upload.modal.expires.never-long": "Upphör aldrig",
+  "upload.modal.expires.error.too-long": "Förfallodatum överskrider maximalt utgångsdatum för {max}.",
+  "upload.modal.link.label": "Länk",
+  "upload.modal.expires.label": "Förfaller",
+  "upload.modal.expires.minute-singular": "Minut",
+  "upload.modal.expires.minute-plural": "Minuter",
+  "upload.modal.expires.hour-singular": "Timme",
+  "upload.modal.expires.hour-plural": "Timmar",
+  "upload.modal.expires.day-singular": "Dag",
+  "upload.modal.expires.day-plural": "Dagar",
+  "upload.modal.expires.week-singular": "Vecka",
+  "upload.modal.expires.week-plural": "Veckor",
+  "upload.modal.expires.month-singular": "Månad",
+  "upload.modal.expires.month-plural": "Månader",
+  "upload.modal.expires.year-singular": "År",
+  "upload.modal.expires.year-plural": "År",
+  "upload.modal.accordion.description.title": "Beskrivning",
+  "upload.modal.accordion.description.placeholder": "Anteckning till mottagare av denna delning",
+  "upload.modal.accordion.email.title": "E-postmottagare",
+  "upload.modal.accordion.email.placeholder": "Ange e-postmottagare",
+  "upload.modal.accordion.email.invalid-email": "Ogiltig e-postadress",
+  "upload.modal.accordion.security.title": "Säkerhetsalternativ",
+  "upload.modal.accordion.security.password.label": "Lösenordsskydd",
+  "upload.modal.accordion.security.password.placeholder": "Inget lösenord",
+  "upload.modal.accordion.security.max-views.label": "Max antal visningar",
+  "upload.modal.accordion.security.max-views.placeholder": "Ingen gräns",
+  // showCompletedUploadModal.tsx
+  "upload.modal.completed.never-expires": "Denna delning kommer aldrig att upphöra.",
+  "upload.modal.completed.expires-on": "Denna delning upphör att gälla {expiration}.",
+  "upload.modal.completed.share-ready": "Delning redo",
+  // END /upload
+  // /share/[id]
+  "share.title": "Delning {shareId}",
+  "share.description": "Titta vad jag har delat med dig!",
+  "share.error.visitor-limit-exceeded.title": "Besökargränsen överskriden",
+  "share.error.visitor-limit-exceeded.description": "Gränsen för antalet besökare för denna delning har överskridits.",
+  "share.error.removed.title": "Delning borttagen",
+  "share.error.not-found.title": "Delningen hittades inte",
+  "share.error.not-found.description": "Delningen du letar efter existerar inte.",
+  "share.modal.password.title": "Lösenord krävs",
+  "share.modal.password.description": "För att komma åt denna delning, vänligen ange lösenordet för delningen.",
+  "share.modal.password": "Lösenord",
+  "share.modal.error.invalid-password": "Ogiltigt lösenord",
+  "share.button.download-all": "Ladda ner allt",
+  "share.notify.download-all-preparing": "Delningen förbereds. Försök igen om några minuter.",
+  "share.modal.file-link": "Fillänk",
+  "share.table.name": "Namn",
+  "share.table.size": "Storlek",
+  "share.modal.file-preview.error.not-supported.title": "Förhandsgranskning stöds ej",
+  "share.modal.file-preview.error.not-supported.description": "En förhandsvisning för filtypen stöds inte. Ladda ner filen för att se den.",
+  // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Redigera {shareId}",
+  "share.edit.append-upload": "Lägg till fil",
+  "share.edit.notify.generic-error": "Ett fel uppstod när din delning skulle slutföras.",
+  "share.edit.notify.save-success": "Delningen har uppdaterats",
+  // END /share/[id]/edit
+  // /admin/config
+  "admin.config.title": "Konfiguration",
+  "admin.config.category.general": "Allmänt",
+  "admin.config.category.share": "Delning",
+  "admin.config.category.email": "E-post",
+  "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Inloggning via sociala nätverk",
+  "admin.config.general.app-name": "Appnamn",
+  "admin.config.general.app-name.description": "Namn på applikationen",
+  "admin.config.general.app-url": "Appens URL",
+  "admin.config.general.app-url.description": "På vilken URL Pingvin Share finns",
+  "admin.config.general.show-home-page": "Visa startsidan",
+  "admin.config.general.show-home-page.description": "Om du vill visa startsidan",
+  "admin.config.general.logo": "Logotyp",
+  "admin.config.general.logo.description": "Ändra din logotyp genom att ladda upp en ny bild. Bilden måste vara en PNG och bör ha formatet 1:1.",
+  "admin.config.general.logo.placeholder": "Välj bild",
+  "admin.config.email.enable-share-email-recipients": "Aktivera e-postmottagare för delning",
+  "admin.config.email.enable-share-email-recipients.description": "Om du vill tillåta e-post till delningsmottagare. Aktivera endast detta om du har aktiverat SMTP.",
+  "admin.config.email.share-recipients-subject": "Share recipients subject",
+  "admin.config.email.share-recipients-subject.description": "Subject of the email which gets sent to the share recipients.",
+  "admin.config.email.share-recipients-message": "Share recipients message",
+  "admin.config.email.share-recipients-message.description": "Meddelande som skickas till delningens mottagare. Tillgängliga variabler:\n {creator} - Användarnamnet för skaparen av delningen\n {shareUrl} - URL för delningen\n {desc} - Beskrivningen av delningen\n {expires} - Förfallodatumet för delningen\n Variablerna kommer att ersättas med det faktiska värdet.",
+  "admin.config.email.reverse-share-subject": "Omvänd delning ämne",
+  "admin.config.email.reverse-share-subject.description": "Subject of the email which gets sent when someone created a share with your reverse share link.",
+  "admin.config.email.reverse-share-message": "Reverse share message",
+  "admin.config.email.reverse-share-message.description": "Message which gets sent when someone created a share with your reverse share link. {shareUrl} will be replaced with the creator's name and the share URL.",
+  "admin.config.email.reset-password-subject": "Reset password subject",
+  "admin.config.email.reset-password-subject.description": "Subject of the email which gets sent when a user requests a password reset.",
+  "admin.config.email.reset-password-message": "Återställ lösenord meddelande",
+  "admin.config.email.reset-password-message.description": "Meddelande som skickas när en användare begär en lösenordsåterställning. {url} kommer att ersättas med länken för lösenordsåterställningen.",
+  "admin.config.email.invite-subject": "Inbjudan ämne",
+  "admin.config.email.invite-subject.description": "Ämne i e-postmeddelandet som skickas när en administratör bjuder in en användare.",
+  "admin.config.email.invite-message": "Inbjudningsmeddelanden",
+  "admin.config.email.invite-message.description": "Meddelande som skickas när en administratör bjuder in en användare. {url} kommer att ersättas med inbjudningsadressen och {password} med lösenordet.",
+  "admin.config.share.allow-registration": "Tillåt registrering",
+  "admin.config.share.allow-registration.description": "Om registrering är tillåten",
+  "admin.config.share.allow-unauthenticated-shares": "Tillåt oautentiserade delningar",
+  "admin.config.share.allow-unauthenticated-shares.description": "Om oautentiserade användare kan skapa delningar",
+  "admin.config.share.max-expiration": "Max utgångsdatum",
+  "admin.config.share.max-expiration.description": "Max längd innan en delning förfaller i timmar. Sätt till 0 för att tillåta obegränsad förfallotid.",
+  "admin.config.share.max-size": "Max storlek",
+  "admin.config.share.max-size.description": "Maximal storlek för delning i bytes",
+  "admin.config.share.zip-compression-level": "Komprimeringsnivå för zip",
+  "admin.config.share.zip-compression-level.description": "Adjust the level to balance between file size and compression speed. Valid values range from 0 to 9, with 0 being no compression and 9 being maximum compression. ",
+  "admin.config.smtp.enabled": "Aktiverad",
+  "admin.config.smtp.enabled.description": "Whether SMTP is enabled. Only set this to true if you entered the host, port, email, user and password of your SMTP server.",
+  "admin.config.smtp.host": "Adress",
+  "admin.config.smtp.host.description": "Adress för SMTP-servern",
+  "admin.config.smtp.port": "Port",
+  "admin.config.smtp.port.description": "Port för SMTP-servern",
+  "admin.config.smtp.email": "E-post",
+  "admin.config.smtp.email.description": "E-postadress som e-postmeddelanden skickas från",
+  "admin.config.smtp.username": "Användarnamn",
+  "admin.config.smtp.username.description": "Användarnamn för SMTP-servern",
+  "admin.config.smtp.password": "Lösenord",
+  "admin.config.smtp.password.description": "Lösenord för SMTP-servern",
+  "admin.config.smtp.button.test": "Skicka testmeddelande",
+  "admin.config.oauth.allow-registration": "Tillåt registrering",
+  "admin.config.oauth.allow-registration.description": "Tillåt användare att registrera sig via social inloggning",
+  "admin.config.oauth.ignore-totp": "Ignorera TOTP",
+  "admin.config.oauth.ignore-totp.description": "Om du vill ignorera TOTP när användaren använder social inloggning",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Om GitHub-inloggning är aktiverad",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client-ID för GitHub OAuth appen",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret för GitHub OAuth appen",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Om Google-inloggning är aktiverad",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client-ID för Google OAuth appen",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret för Google OAuth appen",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
+  // 404
+  "404.description": "Hoppsan den här sidan finns inte.",
+  "404.button.home": "Ta mig tillbaka hem",
+  // error
+  "error.title": "Fel",
+  "error.description": "Hoppsan!",
+  "error.button.back": "Gå tillbaka",
+  "error.msg.default": "Någonting gick fel.",
+  "error.msg.access_denied": "Du avbröt autentiseringsprocessen, försök igen.",
+  "error.msg.expired_token": "Autentiseringsprocessen tog för lång tid, försök igen.",
+  "error.msg.no_user": "Användare som är länkad till detta {0} konto finns inte.",
+  "error.msg.no_email": "Kan inte hämta e-postadress från detta {0} konto.",
+  "error.msg.already_linked": "Detta {0} konto är redan länkat till ett annat konto.",
+  "error.msg.not_linked": "Detta {0} konto har ännu inte länkat till något konto.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
+  // Common translations
+  "common.button.save": "Spara",
+  "common.button.create": "Skapa",
+  "common.button.submit": "Skicka",
+  "common.button.delete": "Ta bort",
+  "common.button.cancel": "Avbryt",
+  "common.button.confirm": "Bekräfta",
+  "common.button.disable": "Inaktivera",
+  "common.button.share": "Delning",
+  "common.button.generate": "Generera",
+  "common.button.done": "Klar",
+  "common.text.link": "Länk",
+  "common.text.or": "eller",
+  "common.button.go-back": "Gå tillbaka",
+  "common.notify.copied": "Din länk har kopierats till urklipp",
+  "common.success": "Slutförd",
+  "common.error": "Fel",
+  "common.error.unknown": "Ett okänt fel har uppstått",
+  "common.error.invalid-email": "Ogiltig e-postadress",
+  "common.error.too-short": "Måste minst vara {length} tecken långt",
+  "common.error.too-long": "Får högst innehålla {length} tecken",
+  "common.error.exact-length": "Måste vara exakt {length} tecken långt",
+  "common.error.invalid-number": "Måste vara ett tal",
+  "common.error.field-required": "Obligatoriskt fält"
+};

frontend/src/i18n/translations/th-TH.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "เข้าสู่ระบบ",
   "signIn.notify.totp-required.title": "ยืนยันตรวจสอบสิทธิ์สองปัจจัย",
   "signIn.notify.totp-required.description": "กรุณาใส่รหัสยืนยันตัวตนสองปัจจัย",
+  "signIn.oauth.or": "OR",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "สมัครบัญชี",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "อีเมล์์์์์์์์ของคุณ",
   "signup.button.submit": "เริ่มต้นกัน",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "TOTP Authentication",
+  "totp.button.signIn": "Sign in",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "ลืมรหัสผ่าน?",
   "resetPassword.description": "กรุณาใส่อีเมล์์์์์์์ของคุณเพื่อรีเซ็ตรหัสผ่าน",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "รหัสผ่าน",
   "account.card.password.old": "รหัสผ่านเก่า",
   "account.card.password.new": "รหัสผ่านใหม่",
+  "account.card.password.noPasswordSet": "You don't have a password set. If you want to sign in with email and password you need to set a password.",
   "account.notify.password.success": "อัปเดตรหัสผ่านเรียบร้อยแล้ว",
+  "account.card.oauth.title": "Social login",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Unlink",
+  "account.card.oauth.unlinked": "Unlinked",
+  "account.modal.unlink.title": "Unlink account",
+  "account.modal.unlink.description": "Unlinking your social accounts may cause you to lose your account if you don't remember your username and password.",
+  "account.notify.oauth.unlinked.success": "Unlinked successfully",
   "account.card.security.title": "ความปลอดภัย",
   "account.card.security.totp.enable.description": "ใส่รหัสผ่านปัจจุบันของคุณเพื่อเริ่มต้นการเปิดใช้งาน TOTP",
   "account.card.security.totp.disable.description": "ใส่รหัสผ่านปัจจุบันของคุณเพื่อปิดใช้งาน TOTP",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "คุณจะไม่สามารถลบการแชร์ของคุณด้วยตนเองและดูจำนวนผู้เข้าชมได้",
   "upload.modal.expires.never": "ไม่มีกำหนด",
   "upload.modal.expires.never-long": "ไม่มีกำหนดหมดอายุ",
+  "upload.modal.expires.error.too-long": "Expiration exceeds maximum expiration date of {max}.",
   "upload.modal.link.label": "ลิงค์",
   "upload.modal.expires.label": "หมดอายุ",
   "upload.modal.expires.minute-singular": "นาที",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "ไม่รองรับการแสดงตัวอย่าง",
   "share.modal.file-preview.error.not-supported.description": "ไม่รองรับการแสดงตัวอย่างสำหรับไฟล์ประเภทนี้ โปรดดาวน์โหลดไฟล์เพื่อดู",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "Edit {shareId}",
+  "share.edit.append-upload": "Append file",
+  "share.edit.notify.generic-error": "An error occurred while finishing your share.",
+  "share.edit.notify.save-success": "Share updated successfully",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "การตั้งค่า",
   "admin.config.category.general": "ทั่วไป",
   "admin.config.category.share": "การแชร์",
   "admin.config.category.email": "อีเมล์์์์์์",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Social Login",
   "admin.config.general.app-name": "ชื่อแอพ",
   "admin.config.general.app-name.description": "ชื่อแอพพลิเคชัน",
   "admin.config.general.app-url": "URL ของแอพ",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "อนุญาตให้ผู้ใช้ลงทะเบียนด้วยตัวเองเพื่อสร้างแชร์",
   "admin.config.share.allow-unauthenticated-shares": "อนุญาตให้แชร์โดยไม่ต้องเข้าสู่ระบบ",
   "admin.config.share.allow-unauthenticated-shares.description": "อนุญาตให้ผู้ใช้ที่ไม่ได้เข้าสู่ระบบสร้างแชร์",
+  "admin.config.share.max-expiration": "Max expiration",
+  "admin.config.share.max-expiration.description": "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "ขนาดสูงสุด",
   "admin.config.share.max-size.description": "ขนาดสูงสุดของแชร์",
   "admin.config.share.zip-compression-level": "ระดับการบีบอัดไฟล์ Zip",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "รหัสผ่าน",
   "admin.config.smtp.password.description": "รหัสผ่านของเซิร์ฟเวอร์ SMTP",
   "admin.config.smtp.button.test": "ส่งอีเมล์์์์์์ทดสอบ",
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
   // 404
   "404.description": "ไม่พบหน้าที่คุณกำลังมองหา",
   "404.button.home": "หน้าแรก",
+  // error
+  "error.title": "Error",
+  "error.description": "Oops!",
+  "error.button.back": "Go back",
+  "error.msg.default": "Something went wrong.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "บันทึก",
   "common.button.create": "สร้าง",

frontend/src/i18n/translations/zh-CN.ts

@@ -33,6 +33,12 @@ export default {
   "signin.button.submit": "登录",
   "signIn.notify.totp-required.title": "请继续两步验证",
   "signIn.notify.totp-required.description": "请输入一次性验证码",
+  "signIn.oauth.or": "OR",
+  "signIn.oauth.github": "GitHub",
+  "signIn.oauth.google": "Google",
+  "signIn.oauth.microsoft": "Microsoft",
+  "signIn.oauth.discord": "Discord",
+  "signIn.oauth.oidc": "OpenID",
   // END /auth/signin
   // /auth/signup
   "signup.title": "创建账户",
@@ -44,6 +50,10 @@ export default {
   "signup.input.email.placeholder": "请输入电子邮件",
   "signup.button.submit": "注册",
   // END /auth/signup
+  // /auth/totp
+  "totp.title": "TOTP Authentication",
+  "totp.button.signIn": "Sign in",
+  // END /auth/totp
   // /auth/reset-password
   "resetPassword.title": "忘记密码？",
   "resetPassword.description": "请输入电子邮件接受重置密码邮件",
@@ -62,7 +72,20 @@ export default {
   "account.card.password.title": "密码",
   "account.card.password.old": "旧密码",
   "account.card.password.new": "新密码",
+  "account.card.password.noPasswordSet": "You don't have a password set. If you want to sign in with email and password you need to set a password.",
   "account.notify.password.success": "密码更改成功！",
+  "account.card.oauth.title": "Social login",
+  "account.card.oauth.github": "GitHub",
+  "account.card.oauth.google": "Google",
+  "account.card.oauth.microsoft": "Microsoft",
+  "account.card.oauth.discord": "Discord",
+  "account.card.oauth.oidc": "OpenID",
+  "account.card.oauth.link": "Link",
+  "account.card.oauth.unlink": "Unlink",
+  "account.card.oauth.unlinked": "Unlinked",
+  "account.modal.unlink.title": "Unlink account",
+  "account.modal.unlink.description": "Unlinking your social accounts may cause you to lose your account if you don't remember your username and password.",
+  "account.notify.oauth.unlinked.success": "Unlinked successfully",
   "account.card.security.title": "安全",
   "account.card.security.totp.enable.description": "请输入当前密码开启两步验证",
   "account.card.security.totp.disable.description": "请输入当前密码关闭两步验证",
@@ -191,6 +214,7 @@ export default {
   "upload.modal.not-signed-in-description": "你将不能删除你的共享或查看访问次数",
   "upload.modal.expires.never": "永不",
   "upload.modal.expires.never-long": "永不过期",
+  "upload.modal.expires.error.too-long": "Expiration exceeds maximum expiration date of {max}.",
   "upload.modal.link.label": "共享链接",
   "upload.modal.expires.label": "过期时间",
   "upload.modal.expires.minute-singular": "1 分钟",
@@ -240,12 +264,19 @@ export default {
   "share.modal.file-preview.error.not-supported.title": "该文件类型不支持预览",
   "share.modal.file-preview.error.not-supported.description": "该文件类型不支持预览，请下载后打开查看",
   // END /share/[id]
+  // /share/[id]/edit
+  "share.edit.title": "编辑 {shareId}",
+  "share.edit.append-upload": "追加文件",
+  "share.edit.notify.generic-error": "保存共享的过程中发生了错误",
+  "share.edit.notify.save-success": "共享已更新成功",
+  // END /share/[id]/edit
   // /admin/config
   "admin.config.title": "配置管理",
   "admin.config.category.general": "通用",
   "admin.config.category.share": "共享",
   "admin.config.category.email": "电子邮件",
   "admin.config.category.smtp": "SMTP",
+  "admin.config.category.oauth": "Social Login",
   "admin.config.general.app-name": "App 名称",
   "admin.config.general.app-name.description": "这个 App 的名称",
   "admin.config.general.app-url": "App 的地址",
@@ -277,6 +308,8 @@ export default {
   "admin.config.share.allow-registration.description": "是否允许注册",
   "admin.config.share.allow-unauthenticated-shares": "是否允许未验证的共享",
   "admin.config.share.allow-unauthenticated-shares.description": "是否允许未验证的用户创建共享",
+  "admin.config.share.max-expiration": "Max expiration",
+  "admin.config.share.max-expiration.description": "Maximum share expiration in hours. Set to 0 to allow unlimited expiration.",
   "admin.config.share.max-size": "最大文件上限",
   "admin.config.share.max-size.description": "最大文件上限，单位 bytes (1GB=1024MB=1048576KB=1073741824bytes)",
   "admin.config.share.zip-compression-level": "Zip compression level",
@@ -294,9 +327,63 @@ export default {
   "admin.config.smtp.password": "密码",
   "admin.config.smtp.password.description": "SMTP 主机密码",
   "admin.config.smtp.button.test": "发送测试邮件",
+  "admin.config.oauth.allow-registration": "Allow registration",
+  "admin.config.oauth.allow-registration.description": "Allow users to register via social login",
+  "admin.config.oauth.ignore-totp": "Ignore TOTP",
+  "admin.config.oauth.ignore-totp.description": "Whether to ignore TOTP when user using social login",
+  "admin.config.oauth.github-enabled": "GitHub",
+  "admin.config.oauth.github-enabled.description": "Whether GitHub login is enabled",
+  "admin.config.oauth.github-client-id": "GitHub Client ID",
+  "admin.config.oauth.github-client-id.description": "Client ID of the GitHub OAuth app",
+  "admin.config.oauth.github-client-secret": "GitHub Client secret",
+  "admin.config.oauth.github-client-secret.description": "Client secret of the GitHub OAuth app",
+  "admin.config.oauth.google-enabled": "Google",
+  "admin.config.oauth.google-enabled.description": "Whether Google login is enabled",
+  "admin.config.oauth.google-client-id": "Google Client ID",
+  "admin.config.oauth.google-client-id.description": "Client ID of the Google OAuth app",
+  "admin.config.oauth.google-client-secret": "Google Client secret",
+  "admin.config.oauth.google-client-secret.description": "Client secret of the Google OAuth app",
+  "admin.config.oauth.microsoft-enabled": "Microsoft",
+  "admin.config.oauth.microsoft-enabled.description": "Whether Microsoft login is enabled",
+  "admin.config.oauth.microsoft-tenant": "Microsoft Tenant",
+  "admin.config.oauth.microsoft-tenant.description": "Tenant ID of the Microsoft OAuth app\ncommon: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.\nconsumers: Only users with a personal Microsoft account can sign in to the application.\ndomain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.",
+  "admin.config.oauth.microsoft-client-id": "Microsoft Client ID",
+  "admin.config.oauth.microsoft-client-id.description": "Client ID of the Microsoft OAuth app",
+  "admin.config.oauth.microsoft-client-secret": "Microsoft Client secret",
+  "admin.config.oauth.microsoft-client-secret.description": "Client secret of the Microsoft OAuth app",
+  "admin.config.oauth.discord-enabled": "Discord",
+  "admin.config.oauth.discord-enabled.description": "Whether Discord login is enabled",
+  "admin.config.oauth.discord-client-id": "Discord Client ID",
+  "admin.config.oauth.discord-client-id.description": "Client ID of the Discord OAuth app",
+  "admin.config.oauth.discord-client-secret": "Discord Client secret",
+  "admin.config.oauth.discord-client-secret.description": "Client secret of the Discord OAuth app",
+  "admin.config.oauth.oidc-enabled": "OpenID",
+  "admin.config.oauth.oidc-enabled.description": "Whether OpenID login is enabled",
+  "admin.config.oauth.oidc-discovery-uri": "OpenID Discovery URI",
+  "admin.config.oauth.oidc-discovery-uri.description": "Discovery URI of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-id": "OpenID Client ID",
+  "admin.config.oauth.oidc-client-id.description": "Client ID of the OpenID OAuth app",
+  "admin.config.oauth.oidc-client-secret": "OpenID Client secret",
+  "admin.config.oauth.oidc-client-secret.description": "Client secret of the OpenID OAuth app",
   // 404
   "404.description": "当前的页面走丢啦",
   "404.button.home": "返回主页",
+  // error
+  "error.title": "Error",
+  "error.description": "Oops!",
+  "error.button.back": "Go back",
+  "error.msg.default": "Something went wrong.",
+  "error.msg.access_denied": "You canceled the authentication process, please try again.",
+  "error.msg.expired_token": "The authentication process took too long, please try again.",
+  "error.msg.no_user": "User linked to this {0} account doesn't exist.",
+  "error.msg.no_email": "Can't get email address from this {0} account.",
+  "error.msg.already_linked": "This {0} account is already linked to another account.",
+  "error.msg.not_linked": "This {0} account haven't linked to any account yet.",
+  "error.param.provider_github": "GitHub",
+  "error.param.provider_google": "Google",
+  "error.param.provider_microsoft": "Microsoft",
+  "error.param.provider_discord": "Discord",
+  "error.param.provider_oidc": "OpenID",
   // Common translations
   "common.button.save": "保存",
   "common.button.create": "创建",

frontend/src/middleware.ts

@@ -14,7 +14,7 @@ export const config = {
 export async function middleware(request: NextRequest) {
   const routes = {
     unauthenticated: new Routes(["/auth/*", "/"]),
-    public: new Routes(["/share/*", "/s/*", "/upload/*"]),
+    public: new Routes(["/share/*", "/s/*", "/upload/*", "/error"]),
     admin: new Routes(["/admin/*"]),
     account: new Routes(["/account*"]),
     disabled: new Routes([]),

frontend/src/pages/account/index.tsx

@@ -13,6 +13,7 @@ import {
 } from "@mantine/core";
 import { useForm, yupResolver } from "@mantine/form";
 import { useModals } from "@mantine/modals";
+import { useEffect, useState } from "react";
 import { Tb2Fa } from "react-icons/tb";
 import { FormattedMessage } from "react-intl";
 import * as yup from "yup";
@@ -20,16 +21,28 @@ import Meta from "../../components/Meta";
 import LanguagePicker from "../../components/account/LanguagePicker";
 import ThemeSwitcher from "../../components/account/ThemeSwitcher";
 import showEnableTotpModal from "../../components/account/showEnableTotpModal";
+import useConfig from "../../hooks/config.hook";
 import useTranslate from "../../hooks/useTranslate.hook";
 import useUser from "../../hooks/user.hook";
 import authService from "../../services/auth.service";
 import userService from "../../services/user.service";
+import { getOAuthIcon, getOAuthUrl, unlinkOAuth } from "../../utils/oauth.util";
 import toast from "../../utils/toast.util";
 
 const Account = () => {
+  const [oauth, setOAuth] = useState<string[]>([]);
+  const [oauthStatus, setOAuthStatus] = useState<Record<
+    string,
+    {
+      provider: string;
+      providerUsername: string;
+    }
+  > | null>(null);
+
   const { user, refreshUser } = useUser();
   const modals = useModals();
   const t = useTranslate();
+  const config = useConfig();
 
   const accountForm = useForm({
     initialValues: {
@@ -53,10 +66,14 @@ const Account = () => {
     },
     validate: yupResolver(
       yup.object().shape({
-        oldPassword: yup
-          .string()
-          .min(8, t("common.error.too-short", { length: 8 }))
-          .required(t("common.error.field-required")),
+        oldPassword: yup.string().when([], {
+          is: () => !!user?.hasPassword,
+          then: (schema) =>
+            schema
+              .min(8, t("common.error.too-short", { length: 8 }))
+              .required(t("common.error.field-required")),
+          otherwise: (schema) => schema.notRequired(),
+        }),
         password: yup
           .string()
           .min(8, t("common.error.too-short", { length: 8 }))
@@ -96,6 +113,25 @@ const Account = () => {
     ),
   });
 
+  const refreshOAuthStatus = () => {
+    authService
+      .getOAuthStatus()
+      .then((data) => {
+        setOAuthStatus(data.data);
+      })
+      .catch(toast.axiosError);
+  };
+
+  useEffect(() => {
+    authService
+      .getAvailableOAuth()
+      .then((data) => {
+        setOAuth(data.data);
+      })
+      .catch(toast.axiosError);
+    refreshOAuthStatus();
+  }, []);
+
   return (
     <>
       <Meta title={t("account.title")} />
@@ -143,7 +179,8 @@ const Account = () => {
             onSubmit={passwordForm.onSubmit((values) =>
               authService
                 .updatePassword(values.oldPassword, values.password)
-                .then(() => {
+                .then(async () => {
+                  refreshUser();
                   toast.success(t("account.notify.password.success"));
                   passwordForm.reset();
                 })
@@ -151,10 +188,16 @@ const Account = () => {
             )}
           >
             <Stack>
-              <PasswordInput
-                label={t("account.card.password.old")}
-                {...passwordForm.getInputProps("oldPassword")}
-              />
+              {user?.hasPassword ? (
+                <PasswordInput
+                  label={t("account.card.password.old")}
+                  {...passwordForm.getInputProps("oldPassword")}
+                />
+              ) : (
+                <Text size="sm" color="dimmed">
+                  <FormattedMessage id="account.card.password.noPasswordSet" />
+                </Text>
+              )}
               <PasswordInput
                 label={t("account.card.password.new")}
                 {...passwordForm.getInputProps("password")}
@@ -167,7 +210,79 @@ const Account = () => {
             </Stack>
           </form>
         </Paper>
+        {oauth.length > 0 && (
+          <Paper withBorder p="xl" mt="lg">
+            <Title order={5} mb="xs">
+              <FormattedMessage id="account.card.oauth.title" />
+            </Title>
 
+            <Tabs defaultValue={oauth[0] || ""}>
+              <Tabs.List>
+                {oauth.map((provider) => (
+                  <Tabs.Tab
+                    value={provider}
+                    icon={getOAuthIcon(provider)}
+                    key={provider}
+                  >
+                    {t(`account.card.oauth.${provider}`)}
+                  </Tabs.Tab>
+                ))}
+              </Tabs.List>
+              {oauth.map((provider) => (
+                <Tabs.Panel value={provider} pt="xs" key={provider}>
+                  <Group position="apart">
+                    <Text>
+                      {oauthStatus?.[provider]
+                        ? oauthStatus[provider].providerUsername
+                        : t("account.card.oauth.unlinked")}
+                    </Text>
+                    {oauthStatus?.[provider] ? (
+                      <Button
+                        onClick={() => {
+                          modals.openConfirmModal({
+                            title: t("account.modal.unlink.title"),
+                            children: (
+                              <Text>
+                                {t("account.modal.unlink.description")}
+                              </Text>
+                            ),
+                            labels: {
+                              confirm: t("account.card.oauth.unlink"),
+                              cancel: t("common.button.cancel"),
+                            },
+                            confirmProps: { color: "red" },
+                            onConfirm: () => {
+                              unlinkOAuth(provider)
+                                .then(() => {
+                                  toast.success(
+                                    t("account.notify.oauth.unlinked.success"),
+                                  );
+                                  refreshOAuthStatus();
+                                })
+                                .catch(toast.axiosError);
+                            },
+                          });
+                        }}
+                      >
+                        {t("account.card.oauth.unlink")}
+                      </Button>
+                    ) : (
+                      <Button
+                        component="a"
+                        href={getOAuthUrl(
+                          config.get("general.appUrl"),
+                          provider,
+                        )}
+                      >
+                        {t("account.card.oauth.link")}
+                      </Button>
+                    )}
+                  </Group>
+                </Tabs.Panel>
+              ))}
+            </Tabs>
+          </Paper>
+        )}
         <Paper withBorder p="xl" mt="lg">
           <Title order={5} mb="xs">
             <FormattedMessage id="account.card.security.title" />

frontend/src/pages/account/reverseShares.tsx

@@ -77,6 +77,7 @@ const MyShares = () => {
             showCreateReverseShareModal(
               modals,
               config.get("smtp.enabled"),
+              config.get("share.maxExpiration"),
               getReverseShares,
             )
           }

frontend/src/pages/account/shares.tsx

@@ -16,7 +16,7 @@ import { useModals } from "@mantine/modals";
 import moment from "moment";
 import Link from "next/link";
 import { useEffect, useState } from "react";
-import { TbInfoCircle, TbLink, TbTrash } from "react-icons/tb";
+import { TbEdit, TbInfoCircle, TbLink, TbTrash } from "react-icons/tb";
 import { FormattedMessage } from "react-intl";
 import Meta from "../../components/Meta";
 import showShareInformationsModal from "../../components/account/showShareInformationsModal";
@@ -110,6 +110,11 @@ const MyShares = () => {
                   </td>
                   <td>
                     <Group position="right">
+                      <Link href={`/share/${share.id}/edit`}>
+                        <ActionIcon color="orange" variant="light" size={25}>
+                          <TbEdit />
+                        </ActionIcon>
+                      </Link>
                       <ActionIcon
                         color="blue"
                         variant="light"

frontend/src/pages/admin/config/[category].tsx

@@ -24,10 +24,7 @@ import CenterLoader from "../../../components/core/CenterLoader";
 import useConfig from "../../../hooks/config.hook";
 import configService from "../../../services/config.service";
 import { AdminConfig, UpdateConfig } from "../../../types/config.type";
-import {
-  camelToKebab,
-  capitalizeFirstLetter,
-} from "../../../utils/string.util";
+import { camelToKebab } from "../../../utils/string.util";
 import toast from "../../../utils/toast.util";
 import useTranslate from "../../../hooks/useTranslate.hook";
 
@@ -128,7 +125,7 @@ export default function AppShellDemo() {
             <>
               <Stack>
                 <Title mb="md" order={3}>
-                  {capitalizeFirstLetter(categoryId)}
+                  {t("admin.config.category." + categoryId)}
                 </Title>
                 {configVariables.map((configVariable) => (
                   <Group key={configVariable.key} position="apart">

frontend/src/pages/api/[...all].tsx

@@ -11,6 +11,8 @@ export const config = {
 
 const { apiURL } = getConfig().serverRuntimeConfig;
 
+// A proxy to the API server only used in development.
+// In production this route gets overridden by nginx.
 export default (req: NextApiRequest, res: NextApiResponse) => {
   httpProxyMiddleware(req, res, {
     headers: {

frontend/src/pages/api/health.tsx

@@ -1,14 +0,0 @@
-import axios from "axios";
-import { NextApiRequest, NextApiResponse } from "next";
-import getConfig from "next/config";
-
-const { apiURL } = getConfig().serverRuntimeConfig;
-
-export default async (req: NextApiRequest, res: NextApiResponse) => {
-  const apiStatus = await axios
-    .get(`${apiURL}/api/configs`)
-    .then(() => "OK")
-    .catch(() => "ERROR");
-
-  res.status(apiStatus == "OK" ? 200 : 500).send(apiStatus);
-};

frontend/src/pages/auth/totp/[loginToken].tsx

@@ -0,0 +1,18 @@
+import useTranslate from "../../../hooks/useTranslate.hook";
+import Meta from "../../../components/Meta";
+import TotpForm from "../../../components/auth/TotpForm";
+import { useRouter } from "next/router";
+
+const Totp = () => {
+  const t = useTranslate();
+  const router = useRouter();
+
+  return (
+    <>
+      <Meta title={t("totp.title")} />
+      <TotpForm redirectPath={(router.query.redirect as string) || "/upload"} />
+    </>
+  );
+};
+
+export default Totp;

frontend/src/pages/error.tsx

@@ -0,0 +1,49 @@
+import React from "react";
+import { Button, createStyles, Stack, Text, Title } from "@mantine/core";
+import Meta from "../components/Meta";
+import useTranslate from "../hooks/useTranslate.hook";
+import { useRouter } from "next/router";
+import { FormattedMessage } from "react-intl";
+
+const useStyle = createStyles({
+  title: {
+    fontSize: 100,
+  },
+});
+
+export default function Error() {
+  const { classes } = useStyle();
+  const t = useTranslate();
+  const router = useRouter();
+
+  const params = router.query.params
+    ? (router.query.params as string).split(",").map((param) => {
+        return t(`error.param.${param}`);
+      })
+    : [];
+
+  return (
+    <>
+      <Meta title={t("error.title")} />
+      <Stack align="center">
+        <Title order={3} className={classes.title}>
+          {t("error.description")}
+        </Title>
+        <Text mt="xl" size="lg">
+          <FormattedMessage
+            id={`error.msg.${router.query.error || "default"}`}
+            values={Object.fromEntries(
+              [params].map((value, key) => [key.toString(), value]),
+            )}
+          />
+        </Text>
+        <Button
+          mt="xl"
+          onClick={() => router.push((router.query.redirect as string) || "/")}
+        >
+          {t("error.button.back")}
+        </Button>
+      </Stack>
+    </>
+  );
+}

frontend/src/pages/share/[shareId]/edit.tsx

@@ -0,0 +1,65 @@
+import { LoadingOverlay } from "@mantine/core";
+import { useModals } from "@mantine/modals";
+import { GetServerSidePropsContext } from "next";
+import { useEffect, useState } from "react";
+import showErrorModal from "../../../components/share/showErrorModal";
+import shareService from "../../../services/share.service";
+import { Share as ShareType } from "../../../types/share.type";
+import useTranslate from "../../../hooks/useTranslate.hook";
+import EditableUpload from "../../../components/upload/EditableUpload";
+import Meta from "../../../components/Meta";
+
+export function getServerSideProps(context: GetServerSidePropsContext) {
+  return {
+    props: { shareId: context.params!.shareId },
+  };
+}
+
+const Share = ({ shareId }: { shareId: string }) => {
+  const t = useTranslate();
+  const modals = useModals();
+  const [isLoading, setIsLoading] = useState(true);
+  const [share, setShare] = useState<ShareType>();
+
+  useEffect(() => {
+    shareService
+      .getFromOwner(shareId)
+      .then((share) => {
+        setShare(share);
+      })
+      .catch((e) => {
+        const { error } = e.response.data;
+        if (e.response.status == 404) {
+          if (error == "share_removed") {
+            showErrorModal(
+              modals,
+              t("share.error.removed.title"),
+              e.response.data.message,
+            );
+          } else {
+            showErrorModal(
+              modals,
+              t("share.error.not-found.title"),
+              t("share.error.not-found.description"),
+            );
+          }
+        } else {
+          showErrorModal(modals, t("common.error"), t("common.error.unknown"));
+        }
+      })
+      .finally(() => {
+        setIsLoading(false);
+      });
+  }, []);
+
+  if (isLoading) return <LoadingOverlay visible />;
+
+  return (
+    <>
+      <Meta title={t("share.edit.title", { shareId })} />
+      <EditableUpload shareId={shareId} files={share?.files || []} />
+    </>
+  );
+};
+
+export default Share;

frontend/src/pages/upload/index.tsx

@@ -42,7 +42,14 @@ const Upload = ({
 
   const uploadFiles = async (share: CreateShare, files: FileUpload[]) => {
     setisUploading(true);
-    createdShare = await shareService.create(share);
+
+    try {
+      createdShare = await shareService.create(share);
+    } catch (e) {
+      toast.axiosError(e);
+      setisUploading(false);
+      return;
+    }
 
     const fileUploadPromises = files.map(async (file, fileIndex) =>
       // Limit the number of concurrent uploads to 3
@@ -56,7 +63,7 @@ const Upload = ({
                 file.uploadingProgress = progress;
               }
               return file;
-            })
+            }),
           );
         };
 
@@ -84,7 +91,7 @@ const Upload = ({
                       name: file.name,
                     },
                     chunkIndex,
-                    chunks
+                    chunks,
                   )
                   .then((response) => {
                     fileId = response.id;
@@ -114,7 +121,7 @@ const Upload = ({
             }
           }
         }
-      })
+      }),
     );
 
     Promise.all(fileUploadPromises);
@@ -129,19 +136,20 @@ const Upload = ({
         isReverseShare,
         appUrl: config.get("general.appUrl"),
         allowUnauthenticatedShares: config.get(
-          "share.allowUnauthenticatedShares"
+          "share.allowUnauthenticatedShares",
         ),
         enableEmailRecepients: config.get("email.enableShareEmailRecipients"),
+        maxExpirationInHours: config.get("share.maxExpiration"),
       },
       files,
-      uploadFiles
+      uploadFiles,
     );
   };
 
   useEffect(() => {
     // Check if there are any files that failed to upload
     const fileErrorCount = files.filter(
-      (file) => file.uploadingProgress == -1
+      (file) => file.uploadingProgress == -1,
     ).length;
 
     if (fileErrorCount > 0) {
@@ -151,7 +159,7 @@ const Upload = ({
           {
             withCloseButton: false,
             autoClose: false,
-          }
+          },
         );
       }
       errorToastShown = true;
@@ -194,7 +202,9 @@ const Upload = ({
         showCreateUploadModalCallback={showCreateUploadModalCallback}
         isUploading={isUploading}
       />
-      {files.length > 0 && <FileList files={files} setFiles={setFiles} />}
+      {files.length > 0 && (
+        <FileList<FileUpload> files={files} setFiles={setFiles} />
+      )}
     </>
   );
 };

frontend/src/services/auth.service.ts

@@ -15,24 +15,11 @@ const signIn = async (emailOrUsername: string, password: string) => {
   return response;
 };
 
-const signInTotp = async (
-  emailOrUsername: string,
-  password: string,
-  totp: string,
-  loginToken: string,
-) => {
-  const emailOrUsernameBody = emailOrUsername.includes("@")
-    ? { email: emailOrUsername }
-    : { username: emailOrUsername };
-
-  const response = await api.post("auth/signIn/totp", {
-    ...emailOrUsernameBody,
-    password,
+const signInTotp = (totp: string, loginToken: string) => {
+  return api.post("auth/signIn/totp", {
     totp,
     loginToken,
   });
-
-  return response;
 };
 
 const signUp = async (email: string, username: string, password: string) => {
@@ -96,6 +83,14 @@ const disableTOTP = async (totpCode: string, password: string) => {
   });
 };
 
+const getAvailableOAuth = async () => {
+  return api.get("/oauth/available");
+};
+
+const getOAuthStatus = () => {
+  return api.get("/oauth/status");
+};
+
 export default {
   signIn,
   signInTotp,
@@ -108,4 +103,6 @@ export default {
   enableTOTP,
   verifyTOTP,
   disableTOTP,
+  getAvailableOAuth,
+  getOAuthStatus,
 };

frontend/src/services/share.service.ts

@@ -19,10 +19,18 @@ const completeShare = async (id: string) => {
   return (await api.post(`shares/${id}/complete`)).data;
 };
 
+const revertComplete = async (id: string) => {
+  return (await api.delete(`shares/${id}/complete`)).data;
+};
+
 const get = async (id: string): Promise<Share> => {
   return (await api.get(`shares/${id}`)).data;
 };
 
+const getFromOwner = async (id: string): Promise<Share> => {
+  return (await api.get(`shares/${id}/from-owner`)).data;
+};
+
 const getMetaData = async (id: string): Promise<ShareMetaData> => {
   return (await api.get(`shares/${id}/metaData`)).data;
 };
@@ -63,6 +71,10 @@ const downloadFile = async (shareId: string, fileId: string) => {
   window.location.href = `${window.location.origin}/api/shares/${shareId}/files/${fileId}`;
 };
 
+const removeFile = async (shareId: string, fileId: string) => {
+  await api.delete(`shares/${shareId}/files/${fileId}`);
+};
+
 const uploadFile = async (
   shareId: string,
   readerEvent: ProgressEvent<FileReader>,
@@ -121,14 +133,17 @@ const removeReverseShare = async (id: string) => {
 export default {
   create,
   completeShare,
+  revertComplete,
   getShareToken,
   get,
+  getFromOwner,
   remove,
   getMetaData,
   doesFileSupportPreview,
   getMyShares,
   isShareIdAvailable,
   downloadFile,
+  removeFile,
   uploadFile,
   setReverseShare,
   createReverseShare,

frontend/src/types/File.type.ts

@@ -7,3 +7,5 @@ export type FileMetaData = {
   name: string;
   size: string;
 };
+
+export type FileListItem = FileUpload | (FileMetaData & { deleted?: boolean });

frontend/src/types/user.type.ts

@@ -4,6 +4,7 @@ type User = {
   email: string;
   isAdmin: boolean;
   totpVerified: boolean;
+  hasPassword: boolean;
 };
 
 export type CreateUser = {

frontend/src/utils/oauth.util.tsx

@@ -0,0 +1,29 @@
+import {
+  SiDiscord,
+  SiGithub,
+  SiGoogle,
+  SiMicrosoft,
+  SiOpenid,
+} from "react-icons/si";
+import React from "react";
+import api from "../services/api.service";
+
+const getOAuthUrl = (appUrl: string, provider: string) => {
+  return `${appUrl}/api/oauth/auth/${provider}`;
+};
+
+const getOAuthIcon = (provider: string) => {
+  return {
+    google: <SiGoogle />,
+    microsoft: <SiMicrosoft />,
+    github: <SiGithub />,
+    discord: <SiDiscord />,
+    oidc: <SiOpenid />,
+  }[provider];
+};
+
+const unlinkOAuth = (provider: string) => {
+  return api.post(`/oauth/unlink/${provider}`);
+};
+
+export { getOAuthUrl, getOAuthIcon, unlinkOAuth };

nginx/nginx.conf

@@ -0,0 +1,22 @@
+events {}
+
+http {
+    server {
+        listen 3000;
+        client_max_body_size 100M;
+
+        location /api {
+            proxy_pass http://localhost:8080;
+            proxy_set_header X-Forwarded-Host $host:$server_port;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location / {
+            proxy_pass http://localhost:3333;
+            proxy_set_header X-Forwarded-Host $host:$server_port;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+    }
+}

package.json

@@ -1,6 +1,6 @@
 {
   "name": "pingvin-share",
-  "version": "0.18.1",
+  "version": "0.20.3",
   "scripts": {
     "format": "cd frontend && npm run format && cd ../backend && npm run format",
     "lint": "cd frontend && npm run lint && cd ../backend && npm run lint",