feat: add doge driver (#6201 )

* feat: add doge driver * doc: 补充readme文档 * fix: 对齐meta信息 * fix: 调整结构体名字,与driver保持一致 * perf: merge to s3 * Rename goge.go to doge.go --------- Co-authored-by: Andy Hsu <i@nn.ci>
feat: stand-alone port s3 server (#6242 )
2024-03-25 22:53:44 +08:00 · 2024-03-24 15:16:00 +08:00 · 2024-03-24 11:04:55 +08:00 · 2024-03-24 11:03:18 +08:00 · 2024-03-13 15:11:21 +08:00 · 2024-03-11 20:30:22 +08:00
44 changed files with 1468 additions and 109 deletions
--- a/.air.toml
+++ b/.air.toml
@ -0,0 +1,44 @@
+root = "."
+testdata_dir = "testdata"
+tmp_dir = "tmp"
+
+[build]
+args_bin = ["server"]
+bin = "./tmp/main"
+cmd = "go build -o ./tmp/main ."
+delay = 0
+exclude_dir = ["assets", "tmp", "vendor", "testdata"]
+exclude_file = []
+exclude_regex = ["_test.go"]
+exclude_unchanged = false
+follow_symlink = false
+full_bin = ""
+include_dir = []
+include_ext = ["go", "tpl", "tmpl", "html"]
+include_file = []
+kill_delay = "0s"
+log = "build-errors.log"
+poll = false
+poll_interval = 0
+rerun = false
+rerun_delay = 500
+send_interrupt = false
+stop_on_error = false
+
+[color]
+app = ""
+build = "yellow"
+main = "magenta"
+runner = "green"
+watcher = "cyan"
+
+[log]
+main_only = false
+time = false
+
+[misc]
+clean_on_exit = false
+
+[screen]
+clear_on_rebuild = false
+keep_scroll = true
--- a/.github/workflows/build_docker.yml
+++ b/.github/workflows/build_docker.yml
@ -63,10 +63,15 @@ jobs:
          labels: ${{ steps.meta.outputs.labels }}
          platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/386,linux/arm/v6,linux/s390x

+      - name: Replace dockerfile tag
+        run: |
+          sed -i -e "s/latest/main/g" Dockerfile.ffmpeg
+
      - name: Build and push with ffmpeg
        id: docker_build_ffmpeg
        uses: docker/build-push-action@v5
        with:
+          context: .
          file: Dockerfile.ffmpeg
          push: ${{ github.event_name == 'push' }}
          tags: ${{ steps.meta-ffmpeg.outputs.tags }}
--- a/.github/workflows/release_docker.yml
+++ b/.github/workflows/release_docker.yml
@ -62,6 +62,7 @@ jobs:
        id: docker_build_ffmpeg
        uses: docker/build-push-action@v5
        with:
+          context: .
          file: Dockerfile.ffmpeg
          push: true
          tags: ${{ steps.meta-ffmpeg.outputs.tags }}
--- a/.gitignore
+++ b/.gitignore
@ -24,6 +24,7 @@ output/
 *.json
 /build
 /data/
+/tmp/
 /log/
 /lang/
 /daemon/
--- a/README.md
+++ b/README.md
@ -76,6 +76,7 @@ English | [中文](./README_cn.md)| [日本語](./README_ja.md) | [Contributing]
    - [X] Cloudreve
    - [x] [Dropbox](https://www.dropbox.com/)
    - [x] [FeijiPan](https://www.feijipan.com/)
+    - [x] [dogecloud](https://www.dogecloud.com/product/oss)
 - [x] Easy to deploy and out-of-the-box
 - [x] File preview (PDF, markdown, code, plain text, ...)
 - [x] Image preview in gallery mode
--- a/README_cn.md
+++ b/README_cn.md
@ -75,6 +75,7 @@
    - [X] Cloudreve
    - [x] [Dropbox](https://www.dropbox.com/)
    - [x] [飞机盘](https://www.feijipan.com/)
+    - [x] [多吉云](https://www.dogecloud.com/product/oss)
 - [x] 部署方便，开箱即用
 - [x] 文件预览（PDF、markdown、代码、纯文本……）
 - [x] 画廊模式下的图像预览
--- a/README_ja.md
+++ b/README_ja.md
@ -76,6 +76,7 @@
    - [X] Cloudreve
    - [x] [Dropbox](https://www.dropbox.com/)
    - [x] [FeijiPan](https://www.feijipan.com/)
+    - [x] [dogecloud](https://www.dogecloud.com/product/oss)
 - [x] デプロイが簡単で、すぐに使える
 - [x] ファイルプレビュー (PDF, マークダウン, コード, プレーンテキスト, ...)
 - [x] ギャラリーモードでの画像プレビュー
--- a/cmd/server.go
+++ b/cmd/server.go
@ -91,6 +91,27 @@ the address is defined in config file`,
 				}
 			}()
 		}
+		s3r := gin.New()
+		s3r.Use(gin.LoggerWithWriter(log.StandardLogger().Out), gin.RecoveryWithWriter(log.StandardLogger().Out))
+		server.InitS3(s3r)
+		if conf.Conf.S3.Port != -1 {
+			s3Base := fmt.Sprintf("%s:%d", conf.Conf.Scheme.Address, conf.Conf.S3.Port)
+			utils.Log.Infof("start S3 server @ %s", s3Base)
+			go func() {
+				var err error
+				if conf.Conf.S3.SSL {
+					httpsSrv = &http.Server{Addr: s3Base, Handler: s3r}
+					err = httpsSrv.ListenAndServeTLS(conf.Conf.Scheme.CertFile, conf.Conf.Scheme.KeyFile)
+				}
+				if !conf.Conf.S3.SSL {
+					httpSrv = &http.Server{Addr: s3Base, Handler: s3r}
+					err = httpSrv.ListenAndServe()
+				}
+				if err != nil && !errors.Is(err, http.ErrServerClosed) {
+					utils.Log.Fatalf("failed to start s3 server: %s", err.Error())
+				}
+			}()
+		}
 		// Wait for interrupt signal to gracefully shutdown the server with
 		// a timeout of 1 second.
 		quit := make(chan os.Signal, 1)
--- a/drivers/139/driver.go
+++ b/drivers/139/driver.go
@ -8,18 +8,21 @@ import (
 	"net/http"
 	"strconv"
 	"strings"
+	"time"

 	"github.com/alist-org/alist/v3/drivers/base"
 	"github.com/alist-org/alist/v3/internal/driver"
 	"github.com/alist-org/alist/v3/internal/errs"
 	"github.com/alist-org/alist/v3/internal/model"
 	"github.com/alist-org/alist/v3/pkg/utils"
+	"github.com/alist-org/alist/v3/pkg/cron"
 	log "github.com/sirupsen/logrus"
 )

 type Yun139 struct {
 	model.Storage
 	Addition
+	cron   *cron.Cron
 	Account string
 }

@ -35,6 +38,13 @@ func (d *Yun139) Init(ctx context.Context) error {
 	if d.Authorization == "" {
 		return fmt.Errorf("authorization is empty")
 	}
+	d.cron = cron.NewCron(time.Hour * 24 * 7)
+	d.cron.Do(func() {
+		err := d.refreshToken()
+		if err != nil {
+			log.Errorf("%+v", err)
+		}
+	})
 	switch d.Addition.Type {
 	case MetaPersonalNew:
 		if len(d.Addition.RootFolderID) == 0 {
@ -72,6 +82,9 @@ func (d *Yun139) Init(ctx context.Context) error {
 }

 func (d *Yun139) Drop(ctx context.Context) error {
+	if d.cron != nil {
+		d.cron.Stop()
+	}
 	return nil
 }

--- a/drivers/139/types.go
+++ b/drivers/139/types.go
@ -1,5 +1,9 @@
 package _139

+import (
+	"encoding/xml"
+)
+
 const (
 	MetaPersonal    string = "personal"
 	MetaFamily      string = "family"
@ -230,3 +234,12 @@ type PersonalUploadResp struct {
 		UploadId    string             `json:"uploadId"`
 	}
 }
+
+type RefreshTokenResp struct {
+	XMLName     xml.Name   `xml:"root"`
+	Return      string     `xml:"return"`
+	Token       string     `xml:"token"`
+	Expiretime  int32      `xml:"expiretime"`
+	AccessToken string     `xml:"accessToken"`
+	Desc        string     `xml:"desc"`
+}
--- a/drivers/139/util.go
+++ b/drivers/139/util.go
@ -15,6 +15,7 @@ import (
 	"github.com/alist-org/alist/v3/internal/model"
 	"github.com/alist-org/alist/v3/pkg/utils"
 	"github.com/alist-org/alist/v3/pkg/utils/random"
+	"github.com/alist-org/alist/v3/internal/op"
 	"github.com/go-resty/resty/v2"
 	jsoniter "github.com/json-iterator/go"
 	log "github.com/sirupsen/logrus"
@ -52,6 +53,32 @@ func getTime(t string) time.Time {
 	return stamp
 }

+func (d *Yun139) refreshToken() error {
+	url := "https://aas.caiyun.feixin.10086.cn:443/tellin/authTokenRefresh.do"
+	var resp RefreshTokenResp
+	decode, err := base64.StdEncoding.DecodeString(d.Authorization)
+	if err != nil {
+		return err
+	}
+	decodeStr := string(decode)
+	splits := strings.Split(decodeStr, ":")
+	reqBody := "<root><token>" + splits[2] + "</token><account>" + splits[1] + "</account><clienttype>656</clienttype></root>"
+	_, err = base.RestyClient.R().
+		ForceContentType("application/xml").
+		SetBody(reqBody).
+		SetResult(&resp).
+		Post(url)
+	if err != nil {
+		return err
+	}
+	if resp.Return != "0" {
+		return fmt.Errorf("failed to refresh token: %s", resp.Desc)
+	}
+	d.Authorization = base64.StdEncoding.EncodeToString([]byte(splits[0] + ":" + splits[1] + ":" + resp.Token))
+	op.MustSaveDriverStorage(d)
+	return nil
+}
+
 func (d *Yun139) request(pathname string, method string, callback base.ReqCallback, resp interface{}) ([]byte, error) {
 	url := "https://yun.139.com" + pathname
 	req := base.RestyClient.R()
--- a/drivers/chaoxing/types.go
+++ b/drivers/chaoxing/types.go
@ -139,7 +139,7 @@ type File struct {
 		Topsort          int     `json:"topsort"`
 		Restype          string  `json:"restype"`
 		Size             int_str `json:"size"`
-		UploadDate       string  `json:"uploadDate"`
+		UploadDate       int64   `json:"uploadDate"`
 		FileSize         string  `json:"fileSize"`
 		Name             string  `json:"name"`
 		FileID           string  `json:"fileId"`
@ -265,10 +265,7 @@ func fileToObj(f File) *model.Object {
 			IsFolder: true,
 		}
 	}
-	paserTime, err := time.Parse("2006-01-02 15:04", f.Content.UploadDate)
-	if err != nil {
-		paserTime = time.Now()
-	}
+	paserTime := time.UnixMilli(f.Content.UploadDate)
 	return &model.Object{
 		ID:       fmt.Sprintf("%d$%s", f.ID, f.Content.FileID),
 		Name:     f.Content.Name,
--- a/drivers/ilanzou/driver.go
+++ b/drivers/ilanzou/driver.go
@ -123,14 +123,14 @@ func (d *ILanZou) Link(ctx context.Context, file model.Obj, args model.LinkArgs)
 	query.Set("devType", "6")
 	query.Set("devCode", d.UUID)
 	query.Set("devModel", "chrome")
-	query.Set("devVersion", "120")
+	query.Set("devVersion", d.conf.devVersion)
 	query.Set("appVersion", "")
 	ts, err := getTimestamp(d.conf.secret)
 	if err != nil {
 		return nil, err
 	}
 	query.Set("timestamp", ts)
-	//query.Set("appToken", d.Token)
+	query.Set("appToken", d.Token)
 	query.Set("enable", "1")
 	downloadId, err := mopan.AesEncrypt([]byte(fmt.Sprintf("%s|%s", file.GetID(), d.userID)), d.conf.secret)
 	if err != nil {
@ -143,7 +143,21 @@ func (d *ILanZou) Link(ctx context.Context, file model.Obj, args model.LinkArgs)
 	}
 	query.Set("auth", hex.EncodeToString(auth))
 	u.RawQuery = query.Encode()
-	link := model.Link{URL: u.String()}
+	realURL := u.String()
+	// get the url after redirect
+	res, err := base.NoRedirectClient.R().SetHeaders(map[string]string{
+		//"Origin":  d.conf.site,
+		"Referer": d.conf.site + "/",
+	}).Get(realURL)
+	if err != nil {
+		return nil, err
+	}
+	if res.StatusCode() == 302 {
+		realURL = res.Header().Get("location")
+	} else {
+		return nil, fmt.Errorf("redirect failed, status: %d", res.StatusCode())
+	}
+	link := model.Link{URL: realURL}
 	return &link, nil
 }

--- a/drivers/ilanzou/meta.go
+++ b/drivers/ilanzou/meta.go
@ -15,11 +15,13 @@ type Addition struct {
 }

 type Conf struct {
-	base     string
-	secret   []byte
-	bucket   string
-	unproved string
-	proved   string
+	base       string
+	secret     []byte
+	bucket     string
+	unproved   string
+	proved     string
+	devVersion string
+	site       string
 }

 func init() {
@ -39,11 +41,13 @@ func init() {
 				NoOverwriteUpload: false,
 			},
 			conf: Conf{
-				base:     "https://api.ilanzou.com",
-				secret:   []byte("lanZouY-disk-app"),
-				bucket:   "wpanstore-lanzou",
-				unproved: "unproved",
-				proved:   "proved",
+				base:       "https://api.ilanzou.com",
+				secret:     []byte("lanZouY-disk-app"),
+				bucket:     "wpanstore-lanzou",
+				unproved:   "unproved",
+				proved:     "proved",
+				devVersion: "122",
+				site:       "https://www.ilanzou.com",
 			},
 		}
 	})
@ -63,11 +67,13 @@ func init() {
 				NoOverwriteUpload: false,
 			},
 			conf: Conf{
-				base:     "https://api.feijipan.com",
-				secret:   []byte("dingHao-disk-app"),
-				bucket:   "wpanstore",
-				unproved: "ws",
-				proved:   "app",
+				base:       "https://api.feijipan.com",
+				secret:     []byte("dingHao-disk-app"),
+				bucket:     "wpanstore",
+				unproved:   "ws",
+				proved:     "app",
+				devVersion: "121",
+				site:       "https://www.feijipan.com",
 			},
 		}
 	})
--- a/drivers/ilanzou/util.go
+++ b/drivers/ilanzou/util.go
@ -52,12 +52,16 @@ func (d *ILanZou) request(pathname, method string, callback base.ReqCallback, pr
 		"devType":    "6",
 		"devCode":    d.UUID,
 		"devModel":   "chrome",
-		"devVersion": "120",
+		"devVersion": d.conf.devVersion,
 		"appVersion": "",
 		"timestamp":  ts,
 		//"appToken":   d.Token,
 		"extra": "2",
 	})
+	req.SetHeaders(map[string]string{
+		"Origin":  d.conf.site,
+		"Referer": d.conf.site + "/",
+	})
 	if proved {
 		req.SetQueryParam("appToken", d.Token)
 	}
--- a/drivers/ipfs_api/driver.go
+++ b/drivers/ipfs_api/driver.go
@ -62,7 +62,7 @@ func (d *IPFS) List(ctx context.Context, dir model.Obj, args model.ListArgs) ([]
 	for _, file := range dirs {
 		gateurl := *d.gateURL
 		gateurl.Path = "ipfs/" + file.Hash
-		gateurl.RawQuery = "filename=" + file.Name
+		gateurl.RawQuery = "filename=" + url.PathEscape(file.Name)
 		objlist = append(objlist, &model.ObjectURL{
 			Object: model.Object{ID: file.Hash, Name: file.Name, Size: int64(file.Size), IsFolder: file.Type == 1},
 			Url:    model.Url{Url: gateurl.String()},
@ -73,7 +73,7 @@ func (d *IPFS) List(ctx context.Context, dir model.Obj, args model.ListArgs) ([]
 }

 func (d *IPFS) Link(ctx context.Context, file model.Obj, args model.LinkArgs) (*model.Link, error) {
-	link := d.Gateway + "/ipfs/" + file.GetID() + "/?filename=" + file.GetName()
+	link := d.Gateway + "/ipfs/" + file.GetID() + "/?filename=" + url.PathEscape(file.GetName())
 	return &model.Link{URL: link}, nil
 }

--- a/drivers/mopan/driver.go
+++ b/drivers/mopan/driver.go
@ -295,7 +295,7 @@ func (d *MoPan) Put(ctx context.Context, dstDir model.Obj, stream model.FileStre
 	}

 	if !initUpdload.FileDataExists {
-		utils.Log.Error(d.client.CloudDiskStartBusiness())
+		// utils.Log.Error(d.client.CloudDiskStartBusiness())

 		threadG, upCtx := errgroup.NewGroupWithContext(ctx, d.uploadThread,
 			retry.Attempts(3),
@ -323,6 +323,7 @@ func (d *MoPan) Put(ctx context.Context, dstDir model.Obj, stream model.FileStre
 				if err != nil {
 					return err
 				}
+				req.ContentLength = byteSize
 				resp, err := base.HttpClient.Do(req)
 				if err != nil {
 					return err
--- a/drivers/s3/doge.go
+++ b/drivers/s3/doge.go
@ -0,0 +1,62 @@
+package s3
+
+import (
+	"crypto/hmac"
+	"crypto/sha1"
+	"encoding/hex"
+	"encoding/json"
+	"io"
+	"net/http"
+	"strings"
+)
+
+type TmpTokenResponse struct {
+	Code int                  `json:"code"`
+	Msg  string               `json:"msg"`
+	Data TmpTokenResponseData `json:"data,omitempty"`
+}
+type TmpTokenResponseData struct {
+	Credentials Credentials `json:"Credentials"`
+}
+type Credentials struct {
+	AccessKeyId     string `json:"accessKeyId,omitempty"`
+	SecretAccessKey string `json:"secretAccessKey,omitempty"`
+	SessionToken    string `json:"sessionToken,omitempty"`
+}
+
+func getCredentials(AccessKey, SecretKey string) (rst Credentials, err error) {
+	apiPath := "/auth/tmp_token.json"
+	reqBody, err := json.Marshal(map[string]interface{}{"channel": "OSS_FULL", "scopes": []string{"*"}})
+	if err != nil {
+		return rst, err
+	}
+
+	signStr := apiPath + "\n" + string(reqBody)
+	hmacObj := hmac.New(sha1.New, []byte(SecretKey))
+	hmacObj.Write([]byte(signStr))
+	sign := hex.EncodeToString(hmacObj.Sum(nil))
+	Authorization := "TOKEN " + AccessKey + ":" + sign
+
+	req, err := http.NewRequest("POST", "https://api.dogecloud.com"+apiPath, strings.NewReader(string(reqBody)))
+	if err != nil {
+		return rst, err
+	}
+	req.Header.Add("Content-Type", "application/json")
+	req.Header.Add("Authorization", Authorization)
+	client := http.Client{}
+	resp, err := client.Do(req)
+	if err != nil {
+		return rst, err
+	}
+	defer resp.Body.Close()
+	ret, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return rst, err
+	}
+	var tmpTokenResp TmpTokenResponse
+	err = json.Unmarshal(ret, &tmpTokenResp)
+	if err != nil {
+		return rst, err
+	}
+	return tmpTokenResp.Data.Credentials, nil
+}
--- a/drivers/s3/driver.go
+++ b/drivers/s3/driver.go
@ -26,10 +26,12 @@ type S3 struct {
 	Session    *session.Session
 	client     *s3.S3
 	linkClient *s3.S3
+
+	config driver.Config
 }

 func (d *S3) Config() driver.Config {
-	return config
+	return d.config
 }

 func (d *S3) GetAddition() driver.Additional {
--- a/drivers/s3/meta.go
+++ b/drivers/s3/meta.go
@ -22,15 +22,25 @@ type Addition struct {
 	AddFilenameToDisposition bool   `json:"add_filename_to_disposition" help:"Add filename to Content-Disposition header."`
 }

-var config = driver.Config{
-	Name:        "S3",
-	DefaultRoot: "/",
-	LocalSort:   true,
-	CheckStatus: true,
-}
-
 func init() {
 	op.RegisterDriver(func() driver.Driver {
-		return &S3{}
+		return &S3{
+			config: driver.Config{
+				Name:        "S3",
+				DefaultRoot: "/",
+				LocalSort:   true,
+				CheckStatus: true,
+			},
+		}
+	})
+	op.RegisterDriver(func() driver.Driver {
+		return &S3{
+			config: driver.Config{
+				Name:        "Doge",
+				DefaultRoot: "/",
+				LocalSort:   true,
+				CheckStatus: true,
+			},
+		}
 	})
 }
--- a/drivers/s3/util.go
+++ b/drivers/s3/util.go
@ -21,13 +21,21 @@ import (
 // do others that not defined in Driver interface

 func (d *S3) initSession() error {
+	var err error
+	accessKeyID, secretAccessKey, sessionToken := d.AccessKeyID, d.SecretAccessKey, d.SessionToken
+	if d.config.Name == "Doge" {
+		credentialsTmp, err := getCredentials(d.AccessKeyID, d.SecretAccessKey)
+		if err != nil {
+			return err
+		}
+		accessKeyID, secretAccessKey, sessionToken = credentialsTmp.AccessKeyId, credentialsTmp.SecretAccessKey, credentialsTmp.SessionToken
+	}
 	cfg := &aws.Config{
-		Credentials:      credentials.NewStaticCredentials(d.AccessKeyID, d.SecretAccessKey, d.SessionToken),
+		Credentials:      credentials.NewStaticCredentials(accessKeyID, secretAccessKey, sessionToken),
 		Region:           &d.Region,
 		Endpoint:         &d.Endpoint,
 		S3ForcePathStyle: aws.Bool(d.ForcePathStyle),
 	}
-	var err error
 	d.Session, err = session.NewSession(cfg)
 	return err
 }
--- a/drivers/seafile/driver.go
+++ b/drivers/seafile/driver.go
@ -4,7 +4,6 @@ import (
 	"context"
 	"fmt"
 	"net/http"
-	"path/filepath"
 	"strings"
 	"time"

@ -19,6 +18,7 @@ type Seafile struct {
 	Addition

 	authorization string
+	libraryMap    map[string]*LibraryInfo
 }

 func (d *Seafile) Config() driver.Config {
@ -31,6 +31,8 @@ func (d *Seafile) GetAddition() driver.Additional {

 func (d *Seafile) Init(ctx context.Context) error {
 	d.Address = strings.TrimSuffix(d.Address, "/")
+	d.RootFolderPath = utils.FixAndCleanPath(d.RootFolderPath)
+	d.libraryMap = make(map[string]*LibraryInfo)
 	return d.getToken()
 }

@ -38,10 +40,37 @@ func (d *Seafile) Drop(ctx context.Context) error {
 	return nil
 }

-func (d *Seafile) List(ctx context.Context, dir model.Obj, args model.ListArgs) ([]model.Obj, error) {
+func (d *Seafile) List(ctx context.Context, dir model.Obj, args model.ListArgs) (result []model.Obj, err error) {
 	path := dir.GetPath()
+	if path == d.RootFolderPath {
+		libraries, err := d.listLibraries()
+		if err != nil {
+			return nil, err
+		}
+		if path == "/" && d.RepoId == "" {
+			return utils.SliceConvert(libraries, func(f LibraryItemResp) (model.Obj, error) {
+				return &model.Object{
+					Name:     f.Name,
+					Modified: time.Unix(f.Modified, 0),
+					Size:     f.Size,
+					IsFolder: true,
+				}, nil
+			})
+		}
+	}
+	var repo *LibraryInfo
+	repo, path, err = d.getRepoAndPath(path)
+	if err != nil {
+		return nil, err
+	}
+	if repo.Encrypted {
+		err = d.decryptLibrary(repo)
+		if err != nil {
+			return nil, err
+		}
+	}
 	var resp []RepoDirItemResp
-	_, err := d.request(http.MethodGet, fmt.Sprintf("/api2/repos/%s/dir/", d.Addition.RepoId), func(req *resty.Request) {
+	_, err = d.request(http.MethodGet, fmt.Sprintf("/api2/repos/%s/dir/", repo.Id), func(req *resty.Request) {
 		req.SetResult(&resp).SetQueryParams(map[string]string{
 			"p": path,
 		})
@ -63,9 +92,13 @@ func (d *Seafile) List(ctx context.Context, dir model.Obj, args model.ListArgs)
 }

 func (d *Seafile) Link(ctx context.Context, file model.Obj, args model.LinkArgs) (*model.Link, error) {
-	res, err := d.request(http.MethodGet, fmt.Sprintf("/api2/repos/%s/file/", d.Addition.RepoId), func(req *resty.Request) {
+	repo, path, err := d.getRepoAndPath(file.GetPath())
+	if err != nil {
+		return nil, err
+	}
+	res, err := d.request(http.MethodGet, fmt.Sprintf("/api2/repos/%s/file/", repo.Id), func(req *resty.Request) {
 		req.SetQueryParams(map[string]string{
-			"p":     file.GetPath(),
+			"p":     path,
 			"reuse": "1",
 		})
 	})
@ -78,9 +111,14 @@ func (d *Seafile) Link(ctx context.Context, file model.Obj, args model.LinkArgs)
 }

 func (d *Seafile) MakeDir(ctx context.Context, parentDir model.Obj, dirName string) error {
-	_, err := d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/dir/", d.Addition.RepoId), func(req *resty.Request) {
+	repo, path, err := d.getRepoAndPath(parentDir.GetPath())
+	if err != nil {
+		return err
+	}
+	path, _ = utils.JoinBasePath(path, dirName)
+	_, err = d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/dir/", repo.Id), func(req *resty.Request) {
 		req.SetQueryParams(map[string]string{
-			"p": filepath.Join(parentDir.GetPath(), dirName),
+			"p": path,
 		}).SetFormData(map[string]string{
 			"operation": "mkdir",
 		})
@ -89,22 +127,34 @@ func (d *Seafile) MakeDir(ctx context.Context, parentDir model.Obj, dirName stri
 }

 func (d *Seafile) Move(ctx context.Context, srcObj, dstDir model.Obj) error {
-	_, err := d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/file/", d.Addition.RepoId), func(req *resty.Request) {
+	repo, path, err := d.getRepoAndPath(srcObj.GetPath())
+	if err != nil {
+		return err
+	}
+	dstRepo, dstPath, err := d.getRepoAndPath(dstDir.GetPath())
+	if err != nil {
+		return err
+	}
+	_, err = d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/file/", repo.Id), func(req *resty.Request) {
 		req.SetQueryParams(map[string]string{
-			"p": srcObj.GetPath(),
+			"p": path,
 		}).SetFormData(map[string]string{
 			"operation": "move",
-			"dst_repo":  d.Addition.RepoId,
-			"dst_dir":   dstDir.GetPath(),
+			"dst_repo":  dstRepo.Id,
+			"dst_dir":   dstPath,
 		})
 	}, true)
 	return err
 }

 func (d *Seafile) Rename(ctx context.Context, srcObj model.Obj, newName string) error {
-	_, err := d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/file/", d.Addition.RepoId), func(req *resty.Request) {
+	repo, path, err := d.getRepoAndPath(srcObj.GetPath())
+	if err != nil {
+		return err
+	}
+	_, err = d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/file/", repo.Id), func(req *resty.Request) {
 		req.SetQueryParams(map[string]string{
-			"p": srcObj.GetPath(),
+			"p": path,
 		}).SetFormData(map[string]string{
 			"operation": "rename",
 			"newname":   newName,
@ -114,31 +164,47 @@ func (d *Seafile) Rename(ctx context.Context, srcObj model.Obj, newName string)
 }

 func (d *Seafile) Copy(ctx context.Context, srcObj, dstDir model.Obj) error {
-	_, err := d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/file/", d.Addition.RepoId), func(req *resty.Request) {
+	repo, path, err := d.getRepoAndPath(srcObj.GetPath())
+	if err != nil {
+		return err
+	}
+	dstRepo, dstPath, err := d.getRepoAndPath(dstDir.GetPath())
+	if err != nil {
+		return err
+	}
+	_, err = d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/file/", repo.Id), func(req *resty.Request) {
 		req.SetQueryParams(map[string]string{
-			"p": srcObj.GetPath(),
+			"p": path,
 		}).SetFormData(map[string]string{
 			"operation": "copy",
-			"dst_repo":  d.Addition.RepoId,
-			"dst_dir":   dstDir.GetPath(),
+			"dst_repo":  dstRepo.Id,
+			"dst_dir":   dstPath,
 		})
 	})
 	return err
 }

 func (d *Seafile) Remove(ctx context.Context, obj model.Obj) error {
-	_, err := d.request(http.MethodDelete, fmt.Sprintf("/api2/repos/%s/file/", d.Addition.RepoId), func(req *resty.Request) {
+	repo, path, err := d.getRepoAndPath(obj.GetPath())
+	if err != nil {
+		return err
+	}
+	_, err = d.request(http.MethodDelete, fmt.Sprintf("/api2/repos/%s/file/", repo.Id), func(req *resty.Request) {
 		req.SetQueryParams(map[string]string{
-			"p": obj.GetPath(),
+			"p": path,
 		})
 	})
 	return err
 }

 func (d *Seafile) Put(ctx context.Context, dstDir model.Obj, stream model.FileStreamer, up driver.UpdateProgress) error {
-	res, err := d.request(http.MethodGet, fmt.Sprintf("/api2/repos/%s/upload-link/", d.Addition.RepoId), func(req *resty.Request) {
+	repo, path, err := d.getRepoAndPath(dstDir.GetPath())
+	if err != nil {
+		return err
+	}
+	res, err := d.request(http.MethodGet, fmt.Sprintf("/api2/repos/%s/upload-link/", repo.Id), func(req *resty.Request) {
 		req.SetQueryParams(map[string]string{
-			"p": dstDir.GetPath(),
+			"p": path,
 		})
 	})
 	if err != nil {
@ -150,7 +216,7 @@ func (d *Seafile) Put(ctx context.Context, dstDir model.Obj, stream model.FileSt
 	_, err = d.request(http.MethodPost, u, func(req *resty.Request) {
 		req.SetFileReader("file", stream.GetName(), stream).
 			SetFormData(map[string]string{
-				"parent_dir": dstDir.GetPath(),
+				"parent_dir": path,
 				"replace":    "1",
 			})
 	})
--- a/drivers/seafile/meta.go
+++ b/drivers/seafile/meta.go
@ -11,7 +11,8 @@ type Addition struct {
 	Address  string `json:"address" required:"true"`
 	UserName string `json:"username" required:"true"`
 	Password string `json:"password" required:"true"`
-	RepoId   string `json:"repoId" required:"true"`
+	RepoId   string `json:"repoId" required:"false"`
+	RepoPwd  string `json:"repoPwd" required:"false"`
 }

 var config = driver.Config{
--- a/drivers/seafile/types.go
+++ b/drivers/seafile/types.go
@ -1,14 +1,44 @@
 package seafile

+import "time"
+
 type AuthTokenResp struct {
 	Token string `json:"token"`
 }

-type RepoDirItemResp struct {
+type RepoItemResp struct {
 	Id         string `json:"id"`
-	Type       string `json:"type"` // dir, file
+	Type       string `json:"type"` // repo, dir, file
 	Name       string `json:"name"`
 	Size       int64  `json:"size"`
 	Modified   int64  `json:"mtime"`
 	Permission string `json:"permission"`
 }
+
+type LibraryItemResp struct {
+	RepoItemResp
+	OwnerContactEmail    string `json:"owner_contact_email"`
+	OwnerName            string `json:"owner_name"`
+	Owner                string `json:"owner"`
+	ModifierEmail        string `json:"modifier_email"`
+	ModifierContactEmail string `json:"modifier_contact_email"`
+	ModifierName         string `json:"modifier_name"`
+	Virtual              bool   `json:"virtual"`
+	MtimeRelative        string `json:"mtime_relative"`
+	Encrypted            bool   `json:"encrypted"`
+	Version              int    `json:"version"`
+	HeadCommitId         string `json:"head_commit_id"`
+	Root                 string `json:"root"`
+	Salt                 string `json:"salt"`
+	SizeFormatted        string `json:"size_formatted"`
+}
+
+type RepoDirItemResp struct {
+	RepoItemResp
+}
+
+type LibraryInfo struct {
+	LibraryItemResp
+	decryptedTime    time.Time
+	decryptedSuccess bool
+}
--- a/drivers/seafile/util.go
+++ b/drivers/seafile/util.go
@ -1,8 +1,13 @@
 package seafile

 import (
+	"errors"
 	"fmt"
+	"github.com/alist-org/alist/v3/internal/errs"
+	"github.com/alist-org/alist/v3/pkg/utils"
+	"net/http"
 	"strings"
+	"time"

 	"github.com/alist-org/alist/v3/drivers/base"
 	"github.com/go-resty/resty/v2"
@ -60,3 +65,110 @@ func (d *Seafile) request(method string, pathname string, callback base.ReqCallb
 	}
 	return res.Body(), nil
 }
+
+func (d *Seafile) getRepoAndPath(fullPath string) (repo *LibraryInfo, path string, err error) {
+	libraryMap := d.libraryMap
+	repoId := d.Addition.RepoId
+	if repoId != "" {
+		if len(repoId) == 36 /* uuid */ {
+			for _, library := range libraryMap {
+				if library.Id == repoId {
+					return library, fullPath, nil
+				}
+			}
+		}
+	} else {
+		var repoName string
+		str := fullPath[1:]
+		pos := strings.IndexRune(str, '/')
+		if pos == -1 {
+			repoName = str
+		} else {
+			repoName = str[:pos]
+		}
+		path = utils.FixAndCleanPath(fullPath[1+len(repoName):])
+		if library, ok := libraryMap[repoName]; ok {
+			return library, path, nil
+		}
+	}
+	return nil, "", errs.ObjectNotFound
+}
+
+func (d *Seafile) listLibraries() (resp []LibraryItemResp, err error) {
+	repoId := d.Addition.RepoId
+	if repoId == "" {
+		_, err = d.request(http.MethodGet, "/api2/repos/", func(req *resty.Request) {
+			req.SetResult(&resp)
+		})
+	} else {
+		var oneResp LibraryItemResp
+		_, err = d.request(http.MethodGet, fmt.Sprintf("/api2/repos/%s/", repoId), func(req *resty.Request) {
+			req.SetResult(&oneResp)
+		})
+		if err == nil {
+			resp = append(resp, oneResp)
+		}
+	}
+	if err != nil {
+		return nil, err
+	}
+	libraryMap := make(map[string]*LibraryInfo)
+	var putLibraryMap func(library LibraryItemResp, index int)
+	putLibraryMap = func(library LibraryItemResp, index int) {
+		name := library.Name
+		if index > 0 {
+			name = fmt.Sprintf("%s (%d)", name, index)
+		}
+		if _, exist := libraryMap[name]; exist {
+			putLibraryMap(library, index+1)
+		} else {
+			libraryInfo := LibraryInfo{}
+			data, _ := utils.Json.Marshal(library)
+			_ = utils.Json.Unmarshal(data, &libraryInfo)
+			libraryMap[name] = &libraryInfo
+		}
+	}
+	for _, library := range resp {
+		putLibraryMap(library, 0)
+	}
+	d.libraryMap = libraryMap
+	return resp, nil
+}
+
+var repoPwdNotConfigured = errors.New("library password not configured")
+var repoPwdIncorrect = errors.New("library password is incorrect")
+
+func (d *Seafile) decryptLibrary(repo *LibraryInfo) (err error) {
+	if !repo.Encrypted {
+		return nil
+	}
+	if d.RepoPwd == "" {
+		return repoPwdNotConfigured
+	}
+	now := time.Now()
+	decryptedTime := repo.decryptedTime
+	if repo.decryptedSuccess {
+		if now.Sub(decryptedTime).Minutes() <= 30 {
+			return nil
+		}
+	} else {
+		if now.Sub(decryptedTime).Seconds() <= 10 {
+			return repoPwdIncorrect
+		}
+	}
+	var resp string
+	_, err = d.request(http.MethodPost, fmt.Sprintf("/api2/repos/%s/", repo.Id), func(req *resty.Request) {
+		req.SetResult(&resp).SetFormData(map[string]string{
+			"password": d.RepoPwd,
+		})
+	})
+	repo.decryptedTime = time.Now()
+	if err != nil || !strings.Contains(resp, "success") {
+		repo.decryptedSuccess = false
+		return err
+	}
+	repo.decryptedSuccess = true
+	return nil
+}
+
+
--- a/go.mod
+++ b/go.mod
@ -3,6 +3,7 @@ module github.com/alist-org/alist/v3
 go 1.21

 require (
+	github.com/Mikubill/gofakes3 v0.0.3-0.20230622102024-284c0f988700
 	github.com/SheltonZhu/115driver v1.0.22
 	github.com/Xhofe/go-cache v0.0.0-20220723083548-714439c8af9a
 	github.com/Xhofe/rateg v0.0.0-20230728072201-251a4e1adad4
@ -39,6 +40,7 @@ require (
 	github.com/meilisearch/meilisearch-go v0.26.1
 	github.com/minio/sio v0.3.0
 	github.com/natefinch/lumberjack v2.0.0+incompatible
+	github.com/ncw/swift/v2 v2.0.2
 	github.com/orzogc/fake115uploader v0.3.3-0.20230715111618-58f9eb76f831
 	github.com/pkg/errors v0.9.1
 	github.com/pkg/sftp v1.13.6
@ -47,15 +49,15 @@ require (
 	github.com/sirupsen/logrus v1.9.3
 	github.com/spf13/cobra v1.8.0
 	github.com/stretchr/testify v1.8.4
-	github.com/t3rm1n4l/go-mega v0.0.0-20230228171823-a01a2cda13ca
+	github.com/t3rm1n4l/go-mega v0.0.0-20240219080617-d494b6a8ace7
 	github.com/u2takey/ffmpeg-go v0.5.0
 	github.com/upyun/go-sdk/v3 v3.0.4
 	github.com/winfsp/cgofuse v1.5.1-0.20230130140708-f87f5db493b5
 	github.com/xhofe/tache v0.1.1
-	golang.org/x/crypto v0.18.0
-	golang.org/x/exp v0.0.0-20240110193028-0dcbfd608b1e
+	golang.org/x/crypto v0.19.0
+	golang.org/x/exp v0.0.0-20240222234643-814bf88cf225
 	golang.org/x/image v0.15.0
-	golang.org/x/net v0.20.0
+	golang.org/x/net v0.21.0
 	golang.org/x/oauth2 v0.16.0
 	golang.org/x/time v0.5.0
 	google.golang.org/appengine v1.6.8
@ -137,8 +139,8 @@ require (
 	github.com/jmespath/go-jmespath v0.4.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/jzelinskie/whirlpool v0.0.0-20201016144138-0675e54bb004 // indirect
-	github.com/klauspost/compress v1.16.5 // indirect
-	github.com/klauspost/cpuid/v2 v2.2.5 // indirect
+	github.com/klauspost/compress v1.17.4 // indirect
+	github.com/klauspost/cpuid/v2 v2.2.6 // indirect
 	github.com/kr/fs v0.1.0 // indirect
 	github.com/leodido/go-urn v1.2.4 // indirect
 	github.com/libp2p/go-buffer-pool v0.1.0 // indirect
@ -153,7 +155,7 @@ require (
 	github.com/mattn/go-runewidth v0.0.15 // indirect
 	github.com/mattn/go-sqlite3 v1.14.15 // indirect
 	github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
-	github.com/minio/sha256-simd v1.0.0 // indirect
+	github.com/minio/sha256-simd v1.0.1 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/mapstructure v1.5.0 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
@ -172,7 +174,6 @@ require (
 	github.com/multiformats/go-multihash v0.2.3 // indirect
 	github.com/multiformats/go-multistream v0.4.1 // indirect
 	github.com/multiformats/go-varint v0.0.7 // indirect
-	github.com/ncw/swift/v2 v2.0.2 // indirect
 	github.com/pelletier/go-toml/v2 v2.1.0 // indirect
 	github.com/pierrec/lz4/v4 v4.1.18 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
@ -184,6 +185,8 @@ require (
 	github.com/prometheus/procfs v0.11.1 // indirect
 	github.com/rfjakob/eme v1.1.2 // indirect
 	github.com/rivo/uniseg v0.4.4 // indirect
+	github.com/ryszard/goskiplist v0.0.0-20150312221310-2dfbae5fcf46 // indirect
+	github.com/shabbyrobe/gocovmerge v0.0.0-20190829150210-3e036491d500 // indirect
 	github.com/shirou/gopsutil/v3 v3.23.7 // indirect
 	github.com/shoenig/go-m1cpu v0.1.6 // indirect
 	github.com/skip2/go-qrcode v0.0.0-20200617195104-da1b6568686e // indirect
@ -201,10 +204,11 @@ require (
 	github.com/yusufpapurcu/wmi v1.2.3 // indirect
 	go.etcd.io/bbolt v1.3.7 // indirect
 	golang.org/x/arch v0.5.0 // indirect
-	golang.org/x/sync v0.3.0 // indirect
-	golang.org/x/sys v0.16.0 // indirect
-	golang.org/x/term v0.16.0 // indirect
+	golang.org/x/sync v0.6.0 // indirect
+	golang.org/x/sys v0.17.0 // indirect
+	golang.org/x/term v0.17.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
+	golang.org/x/tools v0.18.0 // indirect
 	google.golang.org/api v0.134.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20230803162519-f966b187b2e5 // indirect
 	google.golang.org/grpc v1.57.0 // indirect
--- a/go.sum
+++ b/go.sum
@ -7,6 +7,8 @@ github.com/BurntSushi/toml v0.3.1 h1:WXkYYl6Yr3qBf1K79EBnL4mak0OimBfB0XUf9Vl28OQ
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/Max-Sum/base32768 v0.0.0-20230304063302-18e6ce5945fd h1:nzE1YQBdx1bq9IlZinHa+HVffy+NmVRoKr+wHN8fpLE=
 github.com/Max-Sum/base32768 v0.0.0-20230304063302-18e6ce5945fd/go.mod h1:C8yoIfvESpM3GD07OCHU7fqI7lhwyZ2Td1rbNbTAhnc=
+github.com/Mikubill/gofakes3 v0.0.3-0.20230622102024-284c0f988700 h1:r3fp2/Ro+0RtpjNY0/wsbN7vRmCW//dXTOZDQTct25Q=
+github.com/Mikubill/gofakes3 v0.0.3-0.20230622102024-284c0f988700/go.mod h1:OSXqXEGUe9CmPiwLMMnVrbXonMf4BeLBkBdLufxxiyY=
 github.com/RoaringBitmap/roaring v1.2.3 h1:yqreLINqIrX22ErkKI0vY47/ivtJr6n+kMhVOVmhWBY=
 github.com/RoaringBitmap/roaring v1.2.3/go.mod h1:plvDsJQpxOC5bw8LRteu/MLWHsHez/3y6cubLI4/1yE=
 github.com/SheltonZhu/115driver v1.0.22 h1:Wp8pN7/gK3YwEO5P18ggbIOHM++lo9eP/pBhuvXfI6U=
@ -32,8 +34,6 @@ github.com/andybalholm/brotli v1.0.4/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHG
 github.com/avast/retry-go v3.0.0+incompatible h1:4SOWQ7Qs+oroOTQOYnAHqelpCO0biHSxpiH9JdtuBj0=
 github.com/avast/retry-go v3.0.0+incompatible/go.mod h1:XtSnn+n/sHqQIpZ10K1qAevBhOOCWBLXXy3hyiqqBrY=
 github.com/aws/aws-sdk-go v1.38.20/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
-github.com/aws/aws-sdk-go v1.49.18 h1:g/iMXkfXeJQ7MvnLwroxWsTTNkHtdVJGxIgrAIEG62M=
-github.com/aws/aws-sdk-go v1.49.18/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go v1.50.24 h1:3o2Pg7mOoVL0jv54vWtuafoZqAeEXLhm1tltWA2GcEw=
 github.com/aws/aws-sdk-go v1.50.24/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k=
@ -262,12 +262,11 @@ github.com/kisielk/errcheck v1.2.0/go.mod h1:/BMXB+zMLi60iA8Vv6Ksmxu/1UDYcXs4uQL
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.15.0/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=
 github.com/klauspost/compress v1.15.6/go.mod h1:PhcZ0MbTNciWF3rruxRgKxI5NkcHHrHUDtV4Yw2GlzU=
-github.com/klauspost/compress v1.16.5 h1:IFV2oUNUzZaz+XyusxpLzpzS8Pt5rh0Z16For/djlyI=
-github.com/klauspost/compress v1.16.5/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE=
-github.com/klauspost/cpuid/v2 v2.0.4/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
+github.com/klauspost/compress v1.17.4 h1:Ej5ixsIri7BrIjBkRZLTo6ghwrEtHFk7ijlczPW4fZ4=
+github.com/klauspost/compress v1.17.4/go.mod h1:/dCuZOvVtNoHsyb+cuJD3itjs3NbnF6KH9zAO4BDxPM=
 github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
-github.com/klauspost/cpuid/v2 v2.2.5 h1:0E5MSMDEoAulmXNFquVs//DdoomxaoTY1kUhbc/qbZg=
-github.com/klauspost/cpuid/v2 v2.2.5/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
+github.com/klauspost/cpuid/v2 v2.2.6 h1:ndNyv040zDGIDh8thGkXYjnFtiN02M1PVVF+JE/48xc=
+github.com/klauspost/cpuid/v2 v2.2.6/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
 github.com/knz/go-libedit v1.10.1/go.mod h1:MZTVkCWyz0oBc7JOWP3wNAzd002ZbM/5hgShxwh4x8M=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
 github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
@ -315,8 +314,8 @@ github.com/matttproud/golang_protobuf_extensions v1.0.4 h1:mmDVorXM7PCGKw94cs5zk
 github.com/matttproud/golang_protobuf_extensions v1.0.4/go.mod h1:BSXmuO+STAnVfrANrmjBb36TMTDstsz7MSK+HVaYKv4=
 github.com/meilisearch/meilisearch-go v0.26.1 h1:3bmo2uLijX7kvBmiZ9LupVfC95TFcRJDgrRTzbOoE4A=
 github.com/meilisearch/meilisearch-go v0.26.1/go.mod h1:SxuSqDcPBIykjWz1PX+KzsYzArNLSCadQodWs8extS0=
-github.com/minio/sha256-simd v1.0.0 h1:v1ta+49hkWZyvaKwrQB8elexRqm6Y0aMLjCNsrYxo6g=
-github.com/minio/sha256-simd v1.0.0/go.mod h1:OuYzVNI5vcoYIAmbIvHPl3N3jUzVedXbKy5RFepssQM=
+github.com/minio/sha256-simd v1.0.1 h1:6kaan5IFmwTNynnKKpDHe6FWHohJOHhCPchzK49dzMM=
+github.com/minio/sha256-simd v1.0.1/go.mod h1:Pz6AKMiUdngCLpeTL/RJY1M9rUuPMYujV5xJjtbRSN8=
 github.com/minio/sio v0.3.0 h1:syEFBewzOMOYVzSTFpp1MqpSZk8rUNbz8VIIc+PNzus=
 github.com/minio/sio v0.3.0/go.mod h1:8b0yPp2avGThviy/+OCJBI6OMpvxoUuiLvE6F1lebhw=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
@ -408,6 +407,10 @@ github.com/rogpeppe/go-internal v1.8.0/go.mod h1:WmiCO8CzOY8rg0OYDC4/i/2WRWAB6po
 github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
 github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/ryszard/goskiplist v0.0.0-20150312221310-2dfbae5fcf46 h1:GHRpF1pTW19a8tTFrMLUcfWwyC0pnifVo2ClaLq+hP8=
+github.com/ryszard/goskiplist v0.0.0-20150312221310-2dfbae5fcf46/go.mod h1:uAQ5PCi+MFsC7HjREoAz1BU+Mq60+05gifQSsHSDG/8=
+github.com/shabbyrobe/gocovmerge v0.0.0-20190829150210-3e036491d500 h1:WnNuhiq+FOY3jNj6JXFT+eLN3CQ/oPIsDPRanvwsmbI=
+github.com/shabbyrobe/gocovmerge v0.0.0-20190829150210-3e036491d500/go.mod h1:+njLrG5wSeoG4Ds61rFgEzKvenR2UHbjMoDHsczxly0=
 github.com/shirou/gopsutil/v3 v3.23.7 h1:C+fHO8hfIppoJ1WdsVm1RoI0RwXoNdfTK7yWXV0wVj4=
 github.com/shirou/gopsutil/v3 v3.23.7/go.mod h1:c4gnmoRC0hQuaLqvxnx1//VXQ0Ms/X9UnJF8pddY5z4=
 github.com/shoenig/go-m1cpu v0.1.6 h1:nxdKQNcEB6vzgA2E2bvzKIYRuNj7XNJ4S/aRSwKzFtM=
@ -444,8 +447,8 @@ github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o
 github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
-github.com/t3rm1n4l/go-mega v0.0.0-20230228171823-a01a2cda13ca h1:I9rVnNXdIkij4UvMT7OmKhH9sOIvS8iXkxfPdnn9wQA=
-github.com/t3rm1n4l/go-mega v0.0.0-20230228171823-a01a2cda13ca/go.mod h1:suDIky6yrK07NnaBadCB4sS0CqFOvUK91lH7CR+JlDA=
+github.com/t3rm1n4l/go-mega v0.0.0-20240219080617-d494b6a8ace7 h1:Jtcrb09q0AVWe3BGe8qtuuGxNSHWGkTWr43kHTJ+CpA=
+github.com/t3rm1n4l/go-mega v0.0.0-20240219080617-d494b6a8ace7/go.mod h1:suDIky6yrK07NnaBadCB4sS0CqFOvUK91lH7CR+JlDA=
 github.com/tklauser/go-sysconf v0.3.11 h1:89WgdJhk5SNwJfu+GKyYveZ4IaJ7xAkecBo+KdJV0CM=
 github.com/tklauser/go-sysconf v0.3.11/go.mod h1:GqXfhXY3kiPa0nAXPDIQIWzJbMCB7AmcWpGR8lSZfqI=
 github.com/tklauser/numcpus v0.6.0/go.mod h1:FEZLMke0lhOUG6w2JadTzp0a+Nl8PF/GFkQ5UVIcaL4=
@ -502,10 +505,10 @@ golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0
 golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
 golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
-golang.org/x/crypto v0.18.0 h1:PGVlW0xEltQnzFZ55hkuX5+KLyrMYhHld1YHO4AKcdc=
-golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg=
-golang.org/x/exp v0.0.0-20240110193028-0dcbfd608b1e h1:723BNChdd0c2Wk6WOE320qGBiPtYx0F0Bbm1kriShfE=
-golang.org/x/exp v0.0.0-20240110193028-0dcbfd608b1e/go.mod h1:iRJReGqOEeBhDZGkGbynYwcHlctCvnjTYIamk7uXpHI=
+golang.org/x/crypto v0.19.0 h1:ENy+Az/9Y1vSrlrvBSyna3PITt4tiZLf7sgCjZBX7Wo=
+golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
+golang.org/x/exp v0.0.0-20240222234643-814bf88cf225 h1:LfspQV/FYTatPTr/3HzIcmiUFH7PGP+OQ6mgDYo3yuQ=
+golang.org/x/exp v0.0.0-20240222234643-814bf88cf225/go.mod h1:CxmFvTBINI24O/j8iY7H1xHzx2i4OsyguNBmN/uPtqc=
 golang.org/x/image v0.0.0-20191009234506-e7c1f5e7dbb8/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
 golang.org/x/image v0.15.0 h1:kOELfmgrmJlw4Cdb7g/QGuB3CvDrXbqEIww/pNtNBm8=
 golang.org/x/image v0.15.0/go.mod h1:HUYqC05R2ZcZ3ejNQsIHQDQiwWM4JBqmm6MKANTp4LE=
@ -523,16 +526,16 @@ golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
-golang.org/x/net v0.20.0 h1:aCL9BSgETF1k+blQaYUBx9hJ9LOGP3gAVemcZlf1Kpo=
-golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY=
+golang.org/x/net v0.21.0 h1:AQyQV4dYCvJ7vGmJyKki9+PBdyvhkSd8EIx/qb0AYv4=
+golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
 golang.org/x/oauth2 v0.16.0 h1:aDkGMBSYxElaoP81NpoUoz2oo2R2wHdZpGToUxfyQrQ=
 golang.org/x/oauth2 v0.16.0/go.mod h1:hqZ+0LWXsiVoZpeld6jVt06P3adbS2Uu911W1SsJv2o=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.3.0 h1:ftCYgMx6zT/asHUrPw8BLLscYtGznsLAnjq5RH9P66E=
-golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
+golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ=
+golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@ -560,16 +563,16 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.10.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.16.0 h1:xWw16ngr6ZMtmxDyKyIgsE93KNKz5HKmMa3b8ALHidU=
-golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.17.0 h1:25cE3gD+tdBA7lp7QfhuV+rJiE9YXTcS3VG1SqssI/Y=
+golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
 golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
-golang.org/x/term v0.16.0 h1:m+B6fahuftsE9qjo0VWp2FW0mB3MTJvR0BaMQrq0pmE=
-golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY=
+golang.org/x/term v0.17.0 h1:mkTF7LCd6WGJNL3K1Ad7kwxNfYAW6a8a8QqtMblp/4U=
+golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@ -589,9 +592,12 @@ golang.org/x/time v0.5.0 h1:o7cqy6amK/52YcAKIPlM3a+Fpj35zvRj2TP+e1xFSfk=
 golang.org/x/time v0.5.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20181030221726-6c7e314b6563/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190829051458-42f498d34c4d/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
+golang.org/x/tools v0.18.0 h1:k8NLag8AGHnn+PHbl7g43CtqZAwG60vZkLqgyZgIHgQ=
+golang.org/x/tools v0.18.0/go.mod h1:GL7B4CwcLLeo59yx/9UWWuNOW1n3VZ4f5axWfML7Lcg=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 google.golang.org/api v0.134.0 h1:ktL4Goua+UBgoP1eL1/60LwZJqa1sIzkLmvoR3hR6Gw=
--- a/internal/bootstrap/data/setting.go
+++ b/internal/bootstrap/data/setting.go
@ -21,7 +21,6 @@ func initSettings() {
 	if err != nil {
 		utils.Log.Fatalf("failed get settings: %+v", err)
 	}
-
 	for i := range settings {
 		if !isActive(settings[i].Key) && settings[i].Flag != model.DEPRECATED {
 			settings[i].Flag = model.DEPRECATED
@ -35,6 +34,9 @@ func initSettings() {
 	// create or save setting
 	for i := range initialSettingItems {
 		item := &initialSettingItems[i]
+		if item.PreDefault == "" {
+			item.PreDefault = item.Value
+		}
 		// err
 		stored, err := op.GetSettingItemByKey(item.Key)
 		if err != nil && !errors.Is(err, gorm.ErrRecordNotFound) {
@ -42,7 +44,7 @@ func initSettings() {
 			continue
 		}
 		// save
-		if stored != nil && item.Key != conf.VERSION {
+		if stored != nil && item.Key != conf.VERSION && stored.Value != item.PreDefault {
 			item.Value = stored.Value
 		}
 		if stored == nil || *item != *stored {
@ -98,7 +100,7 @@ func InitialSettings() []model.SettingItem {
 		// preview settings
 		{Key: conf.TextTypes, Value: "txt,htm,html,xml,java,properties,sql,js,md,json,conf,ini,vue,php,py,bat,gitignore,yml,go,sh,c,cpp,h,hpp,tsx,vtt,srt,ass,rs,lrc", Type: conf.TypeText, Group: model.PREVIEW, Flag: model.PRIVATE},
 		{Key: conf.AudioTypes, Value: "mp3,flac,ogg,m4a,wav,opus,wma", Type: conf.TypeText, Group: model.PREVIEW, Flag: model.PRIVATE},
-		{Key: conf.VideoTypes, Value: "mp4,mkv,avi,mov,rmvb,webm,flv", Type: conf.TypeText, Group: model.PREVIEW, Flag: model.PRIVATE},
+		{Key: conf.VideoTypes, Value: "mp4,mkv,avi,mov,rmvb,webm,flv,m3u8", Type: conf.TypeText, Group: model.PREVIEW, Flag: model.PRIVATE},
 		{Key: conf.ImageTypes, Value: "jpg,tiff,jpeg,png,gif,bmp,svg,ico,swf,webp", Type: conf.TypeText, Group: model.PREVIEW, Flag: model.PRIVATE},
 		//{Key: conf.OfficeTypes, Value: "doc,docx,xls,xlsx,ppt,pptx", Type: conf.TypeText, Group: model.PREVIEW, Flag: model.PRIVATE},
 		{Key: conf.ProxyTypes, Value: "m3u8", Type: conf.TypeText, Group: model.PREVIEW, Flag: model.PRIVATE},
@ -129,7 +131,7 @@ func InitialSettings() []model.SettingItem {
 		// global settings
 		{Key: conf.HideFiles, Value: "/\\/README.md/i", Type: conf.TypeText, Group: model.GLOBAL},
 		{Key: "package_download", Value: "true", Type: conf.TypeBool, Group: model.GLOBAL},
-		{Key: conf.CustomizeHead, Value: `<script src="https://polyfill.io/v3/polyfill.min.js?features=String.prototype.replaceAll"></script>`, Type: conf.TypeText, Group: model.GLOBAL, Flag: model.PRIVATE},
+		{Key: conf.CustomizeHead, PreDefault: `<script src="https://polyfill.io/v3/polyfill.min.js?features=String.prototype.replaceAll"></script>`, Type: conf.TypeText, Group: model.GLOBAL, Flag: model.PRIVATE},
 		{Key: conf.CustomizeBody, Type: conf.TypeText, Group: model.GLOBAL, Flag: model.PRIVATE},
 		{Key: conf.LinkExpiration, Value: "0", Type: conf.TypeNumber, Group: model.GLOBAL, Flag: model.PRIVATE},
 		{Key: conf.SignAll, Value: "true", Type: conf.TypeBool, Group: model.GLOBAL, Flag: model.PRIVATE},
@ -176,6 +178,11 @@ func InitialSettings() []model.SettingItem {
 		{Key: conf.LdapDefaultDir, Value: "/", Type: conf.TypeString, Group: model.LDAP, Flag: model.PRIVATE},
 		{Key: conf.LdapDefaultPermission, Value: "0", Type: conf.TypeNumber, Group: model.LDAP, Flag: model.PRIVATE},
 		{Key: conf.LdapLoginTips, Value: "login with ldap", Type: conf.TypeString, Group: model.LDAP, Flag: model.PUBLIC},
+
+		//s3 settings
+		{Key: conf.S3AccessKeyId, Value: "", Type: conf.TypeString, Group: model.S3, Flag: model.PRIVATE},
+		{Key: conf.S3SecretAccessKey, Value: "", Type: conf.TypeString, Group: model.S3, Flag: model.PRIVATE},
+		{Key: conf.S3Buckets, Value: "[]", Type: conf.TypeString, Group: model.S3, Flag: model.PRIVATE},
 	}
 	initialSettingItems = append(initialSettingItems, tool.Tools.Items()...)
 	if flags.Dev {
--- a/internal/bootstrap/data/user.go
+++ b/internal/bootstrap/data/user.go
@ -31,6 +31,7 @@ func initUser() {
 				PwdHash:  model.TwoHashPwd(adminPassword, salt),
 				Role:     model.ADMIN,
 				BasePath: "/",
+				Authn:    "[]",
 			}
 			if err := op.CreateUser(admin); err != nil {
 				panic(err)
@ -53,6 +54,7 @@ func initUser() {
 				BasePath:   "/",
 				Permission: 0,
 				Disabled:   true,
+				Authn:      "[]",
 			}
 			if err := db.CreateUser(guest); err != nil {
 				utils.Log.Fatalf("[init user] Failed to create guest user: %v", err)
@ -62,6 +64,7 @@ func initUser() {
 		}
 	}
 	hashPwdForOldVersion()
+	updateAuthnForOldVersion()
 }

 func hashPwdForOldVersion() {
@ -80,3 +83,19 @@ func hashPwdForOldVersion() {
 		}
 	}
 }
+
+func updateAuthnForOldVersion() {
+	users, _, err := op.GetUsers(1, -1)
+	if err != nil {
+		utils.Log.Fatalf("[update authn for old version] failed get users: %v", err)
+	}
+	for i := range users {
+		user := users[i]
+		if user.Authn == "" {
+			user.Authn = "[]"
+			if err := db.UpdateUser(&user); err != nil {
+				utils.Log.Fatalf("[update authn for old version] failed update user: %v", err)
+			}
+		}
+	}
+}
--- a/internal/conf/config.go
+++ b/internal/conf/config.go
@ -1,9 +1,10 @@
 package conf

 import (
+	"path/filepath"
+
 	"github.com/alist-org/alist/v3/cmd/flags"
 	"github.com/alist-org/alist/v3/pkg/utils/random"
-	"path/filepath"
 )

 type Database struct {
@ -63,6 +64,12 @@ type Cors struct {
 	AllowHeaders []string `json:"allow_headers" env:"ALLOW_HEADERS"`
 }

+type S3 struct {
+	Enable bool `json:"enable" env:"ENABLE"`
+	Port   int  `json:"port" env:"PORT"`
+	SSL    bool `json:"ssl" env:"SSL"`
+}
+
 type Config struct {
 	Force                 bool        `json:"force" env:"FORCE"`
 	SiteURL               string      `json:"site_url" env:"SITE_URL"`
@ -81,6 +88,7 @@ type Config struct {
 	TlsInsecureSkipVerify bool        `json:"tls_insecure_skip_verify" env:"TLS_INSECURE_SKIP_VERIFY"`
 	Tasks                 TasksConfig `json:"tasks" envPrefix:"TASKS_"`
 	Cors                  Cors        `json:"cors" envPrefix:"CORS_"`
+	S3                    S3          `json:"s3" envPrefix:"S3_"`
 }

 func DefaultConfig() *Config {
@ -142,5 +150,10 @@ func DefaultConfig() *Config {
 			AllowMethods: []string{"*"},
 			AllowHeaders: []string{"*"},
 		},
+		S3: S3{
+			Enable: false,
+			Port:   5246,
+			SSL:    false,
+		},
 	}
 }
--- a/internal/conf/const.go
+++ b/internal/conf/const.go
@ -84,6 +84,11 @@ const (
 	LdapDefaultDir        = "ldap_default_dir"
 	LdapLoginTips         = "ldap_login_tips"

+	//s3
+	S3Buckets         = "s3_buckets"
+	S3AccessKeyId     = "s3_access_key_id"
+	S3SecretAccessKey = "s3_secret_access_key"
+
 	// qbittorrent
 	QbittorrentUrl      = "qbittorrent_url"
 	QbittorrentSeedtime = "qbittorrent_seedtime"
--- a/internal/model/setting.go
+++ b/internal/model/setting.go
@ -10,6 +10,7 @@ const (
 	INDEX
 	SSO
 	LDAP
+	S3
 )

 const (
@ -20,13 +21,14 @@ const (
 )

 type SettingItem struct {
-	Key     string `json:"key" gorm:"primaryKey" binding:"required"` // unique key
-	Value   string `json:"value"`                                    // value
-	Help    string `json:"help"`                                     // help message
-	Type    string `json:"type"`                                     // string, number, bool, select
-	Options string `json:"options"`                                  // values for select
-	Group   int    `json:"group"`                                    // use to group setting in frontend
-	Flag    int    `json:"flag"`                                     // 0 = public, 1 = private, 2 = readonly, 3 = deprecated, etc.
+	Key        string `json:"key" gorm:"primaryKey" binding:"required"` // unique key
+	Value      string `json:"value"`                                    // value
+	PreDefault string `json:"-" gorm:"-:all"`                           // deprecated value
+	Help       string `json:"help"`                                     // help message
+	Type       string `json:"type"`                                     // string, number, bool, select
+	Options    string `json:"options"`                                  // values for select
+	Group      int    `json:"group"`                                    // use to group setting in frontend
+	Flag       int    `json:"flag"`                                     // 0 = public, 1 = private, 2 = readonly, 3 = deprecated, etc.
 }

 func (s SettingItem) IsDeprecated() bool {
--- a/server/handles/user.go
+++ b/server/handles/user.go
@ -41,6 +41,7 @@ func CreateUser(c *gin.Context) {
 	}
 	req.SetPassword(req.Password)
 	req.Password = ""
+	req.Authn = "[]"
 	if err := op.CreateUser(&req); err != nil {
 		common.ErrorResp(c, err, 500, true)
 	} else {
--- a/server/router.go
+++ b/server/router.go
@ -36,6 +36,7 @@ func Init(e *gin.Engine) {
 		g.Use(middlewares.MaxAllowed(conf.Conf.MaxConnections))
 	}
 	WebDav(g.Group("/dav"))
+	S3(g.Group("/s3"))

 	g.GET("/d/*path", middlewares.Down, handles.Down)
 	g.GET("/p/*path", middlewares.Down, handles.Proxy)
@ -170,3 +171,8 @@ func Cors(r *gin.Engine) {
 	config.AllowMethods = conf.Conf.Cors.AllowMethods
 	r.Use(cors.New(config))
 }
+
+func InitS3(e *gin.Engine) {
+	Cors(e)
+	S3Server(e.Group("/"))
+}
--- a/server/s3.go
+++ b/server/s3.go
@ -0,0 +1,45 @@
+package server
+
+import (
+	"context"
+	"path"
+	"strings"
+
+	"github.com/alist-org/alist/v3/internal/conf"
+	"github.com/alist-org/alist/v3/server/common"
+	"github.com/alist-org/alist/v3/server/s3"
+	"github.com/gin-gonic/gin"
+)
+
+func S3(g *gin.RouterGroup) {
+	if !conf.Conf.S3.Enable {
+		g.Any("/*path", func(c *gin.Context) {
+			common.ErrorStrResp(c, "S3 server is not enabled", 403)
+		})
+		return
+	}
+	if conf.Conf.S3.Port != -1 {
+		g.Any("/*path", func(c *gin.Context) {
+			common.ErrorStrResp(c, "S3 server bound to single port", 403)
+		})
+		return
+	}
+	h, _ := s3.NewServer(context.Background())
+
+	g.Any("/*path", func(c *gin.Context) {
+		adjustedPath := strings.TrimPrefix(c.Request.URL.Path, path.Join(conf.URL.Path, "/s3"))
+		c.Request.URL.Path = adjustedPath
+		gin.WrapH(h)(c)
+	})
+}
+
+func S3Server(g *gin.RouterGroup) {
+	if !conf.Conf.S3.Enable {
+		g.Any("/*path", func(c *gin.Context) {
+			common.ErrorStrResp(c, "S3 server is not enabled", 403)
+		})
+		return
+	}
+	h, _ := s3.NewServer(context.Background())
+	g.Any("/*path", gin.WrapH(h))
+}
--- a/server/s3/backend.go
+++ b/server/s3/backend.go
@ -0,0 +1,432 @@
+// Credits: https://pkg.go.dev/github.com/rclone/rclone@v1.65.2/cmd/serve/s3
+// Package s3 implements a fake s3 server for alist
+package s3
+
+import (
+	"context"
+	"encoding/hex"
+	"fmt"
+	"io"
+	"path"
+	"strings"
+	"sync"
+	"time"
+
+	"github.com/Mikubill/gofakes3"
+	"github.com/alist-org/alist/v3/internal/errs"
+	"github.com/alist-org/alist/v3/internal/fs"
+	"github.com/alist-org/alist/v3/internal/model"
+	"github.com/alist-org/alist/v3/internal/op"
+	"github.com/alist-org/alist/v3/internal/stream"
+	"github.com/alist-org/alist/v3/pkg/http_range"
+	"github.com/alist-org/alist/v3/pkg/utils"
+	"github.com/ncw/swift/v2"
+)
+
+var (
+	emptyPrefix = &gofakes3.Prefix{}
+	timeFormat  = "Mon, 2 Jan 2006 15:04:05.999999999 GMT"
+)
+
+// s3Backend implements the gofacess3.Backend interface to make an S3
+// backend for gofakes3
+type s3Backend struct {
+	meta *sync.Map
+}
+
+// newBackend creates a new SimpleBucketBackend.
+func newBackend() gofakes3.Backend {
+	return &s3Backend{
+		meta: new(sync.Map),
+	}
+}
+
+// ListBuckets always returns the default bucket.
+func (b *s3Backend) ListBuckets() ([]gofakes3.BucketInfo, error) {
+	buckets, err := getAndParseBuckets()
+	if err != nil {
+		return nil, err
+	}
+	var response []gofakes3.BucketInfo
+	ctx := context.Background()
+	for _, b := range buckets {
+		node, _ := fs.Get(ctx, b.Path, &fs.GetArgs{})
+		response = append(response, gofakes3.BucketInfo{
+			// Name:         gofakes3.URLEncode(b.Name),
+			Name:         b.Name,
+			CreationDate: gofakes3.NewContentTime(node.ModTime()),
+		})
+	}
+	return response, nil
+}
+
+// ListBucket lists the objects in the given bucket.
+func (b *s3Backend) ListBucket(bucketName string, prefix *gofakes3.Prefix, page gofakes3.ListBucketPage) (*gofakes3.ObjectList, error) {
+	bucket, err := getBucketByName(bucketName)
+	if err != nil {
+		return nil, err
+	}
+	bucketPath := bucket.Path
+
+	if prefix == nil {
+		prefix = emptyPrefix
+	}
+
+	// workaround
+	if strings.TrimSpace(prefix.Prefix) == "" {
+		prefix.HasPrefix = false
+	}
+	if strings.TrimSpace(prefix.Delimiter) == "" {
+		prefix.HasDelimiter = false
+	}
+
+	response := gofakes3.NewObjectList()
+	path, remaining := prefixParser(prefix)
+
+	err = b.entryListR(bucketPath, path, remaining, prefix.HasDelimiter, response)
+	if err == gofakes3.ErrNoSuchKey {
+		// AWS just returns an empty list
+		response = gofakes3.NewObjectList()
+	} else if err != nil {
+		return nil, err
+	}
+
+	return b.pager(response, page)
+}
+
+// HeadObject returns the fileinfo for the given object name.
+//
+// Note that the metadata is not supported yet.
+func (b *s3Backend) HeadObject(bucketName, objectName string) (*gofakes3.Object, error) {
+	ctx := context.Background()
+	bucket, err := getBucketByName(bucketName)
+	if err != nil {
+		return nil, err
+	}
+	bucketPath := bucket.Path
+
+	fp := path.Join(bucketPath, objectName)
+	fmeta, _ := op.GetNearestMeta(fp)
+	node, err := fs.Get(context.WithValue(ctx, "meta", fmeta), fp, &fs.GetArgs{})
+	if err != nil {
+		return nil, gofakes3.KeyNotFound(objectName)
+	}
+
+	if node.IsDir() {
+		return nil, gofakes3.KeyNotFound(objectName)
+	}
+
+	size := node.GetSize()
+	// hash := getFileHashByte(fobj)
+
+	meta := map[string]string{
+		"Last-Modified": node.ModTime().Format(timeFormat),
+		"Content-Type":  utils.GetMimeType(fp),
+	}
+
+	if val, ok := b.meta.Load(fp); ok {
+		metaMap := val.(map[string]string)
+		for k, v := range metaMap {
+			meta[k] = v
+		}
+	}
+
+	return &gofakes3.Object{
+		Name: objectName,
+		// Hash:     hash,
+		Metadata: meta,
+		Size:     size,
+		Contents: noOpReadCloser{},
+	}, nil
+}
+
+// GetObject fetchs the object from the filesystem.
+func (b *s3Backend) GetObject(bucketName, objectName string, rangeRequest *gofakes3.ObjectRangeRequest) (obj *gofakes3.Object, err error) {
+	ctx := context.Background()
+	bucket, err := getBucketByName(bucketName)
+	if err != nil {
+		return nil, err
+	}
+	bucketPath := bucket.Path
+
+	fp := path.Join(bucketPath, objectName)
+	fmeta, _ := op.GetNearestMeta(fp)
+	node, err := fs.Get(context.WithValue(ctx, "meta", fmeta), fp, &fs.GetArgs{})
+	if err != nil {
+		return nil, gofakes3.KeyNotFound(objectName)
+	}
+
+	if node.IsDir() {
+		return nil, gofakes3.KeyNotFound(objectName)
+	}
+
+	link, file, err := fs.Link(ctx, fp, model.LinkArgs{})
+	if err != nil {
+		return nil, err
+	}
+
+	size := file.GetSize()
+	rnge, err := rangeRequest.Range(size)
+	if err != nil {
+		return nil, err
+	}
+
+	if link.RangeReadCloser == nil && link.MFile == nil && len(link.URL) == 0 {
+		return nil, fmt.Errorf("the remote storage driver need to be enhanced to support s3")
+	}
+	remoteFileSize := file.GetSize()
+	remoteClosers := utils.EmptyClosers()
+	rangeReaderFunc := func(ctx context.Context, start, length int64) (io.ReadCloser, error) {
+		if length >= 0 && start+length >= remoteFileSize {
+			length = -1
+		}
+		rrc := link.RangeReadCloser
+		if len(link.URL) > 0 {
+
+			rangedRemoteLink := &model.Link{
+				URL:    link.URL,
+				Header: link.Header,
+			}
+			var converted, err = stream.GetRangeReadCloserFromLink(remoteFileSize, rangedRemoteLink)
+			if err != nil {
+				return nil, err
+			}
+			rrc = converted
+		}
+		if rrc != nil {
+			remoteReader, err := rrc.RangeRead(ctx, http_range.Range{Start: start, Length: length})
+			remoteClosers.AddClosers(rrc.GetClosers())
+			if err != nil {
+				return nil, err
+			}
+			return remoteReader, nil
+		}
+		if link.MFile != nil {
+			_, err := link.MFile.Seek(start, io.SeekStart)
+			if err != nil {
+				return nil, err
+			}
+			//remoteClosers.Add(remoteLink.MFile)
+			//keep reuse same MFile and close at last.
+			remoteClosers.Add(link.MFile)
+			return io.NopCloser(link.MFile), nil
+		}
+		return nil, errs.NotSupport
+	}
+
+	var rdr io.ReadCloser
+	if rnge != nil {
+		rdr, err = rangeReaderFunc(ctx, rnge.Start, rnge.Length)
+		if err != nil {
+			return nil, err
+		}
+	} else {
+		rdr, err = rangeReaderFunc(ctx, 0, -1)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	meta := map[string]string{
+		"Last-Modified": node.ModTime().Format(timeFormat),
+		"Content-Type":  utils.GetMimeType(fp),
+	}
+
+	if val, ok := b.meta.Load(fp); ok {
+		metaMap := val.(map[string]string)
+		for k, v := range metaMap {
+			meta[k] = v
+		}
+	}
+
+	return &gofakes3.Object{
+		// Name: gofakes3.URLEncode(objectName),
+		Name: objectName,
+		// Hash:     "",
+		Metadata: meta,
+		Size:     size,
+		Range:    rnge,
+		Contents: rdr,
+	}, nil
+}
+
+// TouchObject creates or updates meta on specified object.
+func (b *s3Backend) TouchObject(fp string, meta map[string]string) (result gofakes3.PutObjectResult, err error) {
+	//TODO: implement
+	return result, gofakes3.ErrNotImplemented
+}
+
+// PutObject creates or overwrites the object with the given name.
+func (b *s3Backend) PutObject(
+	bucketName, objectName string,
+	meta map[string]string,
+	input io.Reader, size int64,
+) (result gofakes3.PutObjectResult, err error) {
+	ctx := context.Background()
+	bucket, err := getBucketByName(bucketName)
+	if err != nil {
+		return result, err
+	}
+	bucketPath := bucket.Path
+
+	fp := path.Join(bucketPath, objectName)
+	reqPath := path.Dir(fp)
+	fmeta, _ := op.GetNearestMeta(fp)
+	_, err = fs.Get(context.WithValue(ctx, "meta", fmeta), reqPath, &fs.GetArgs{})
+	if err != nil {
+		return result, gofakes3.KeyNotFound(objectName)
+	}
+
+	var ti time.Time
+
+	if val, ok := meta["X-Amz-Meta-Mtime"]; ok {
+		ti, _ = swift.FloatStringToTime(val)
+	}
+
+	if val, ok := meta["mtime"]; ok {
+		ti, _ = swift.FloatStringToTime(val)
+	}
+
+	obj := model.Object{
+		Name:     path.Base(fp),
+		Size:     size,
+		Modified: ti,
+		Ctime:    time.Now(),
+	}
+	stream := &stream.FileStream{
+		Obj:      &obj,
+		Reader:   input,
+		Mimetype: meta["Content-Type"],
+	}
+
+	err = fs.PutDirectly(ctx, reqPath, stream)
+	if err != nil {
+		return result, err
+	}
+
+	if err := stream.Close(); err != nil {
+		// remove file when close error occurred (FsPutErr)
+		_ = fs.Remove(ctx, fp)
+		return result, err
+	}
+
+	b.meta.Store(fp, meta)
+
+	return result, nil
+}
+
+// DeleteMulti deletes multiple objects in a single request.
+func (b *s3Backend) DeleteMulti(bucketName string, objects ...string) (result gofakes3.MultiDeleteResult, rerr error) {
+	for _, object := range objects {
+		if err := b.deleteObject(bucketName, object); err != nil {
+			utils.Log.Errorf("serve s3", "delete object failed: %v", err)
+			result.Error = append(result.Error, gofakes3.ErrorResult{
+				Code:    gofakes3.ErrInternal,
+				Message: gofakes3.ErrInternal.Message(),
+				Key:     object,
+			})
+		} else {
+			result.Deleted = append(result.Deleted, gofakes3.ObjectID{
+				Key: object,
+			})
+		}
+	}
+
+	return result, nil
+}
+
+// DeleteObject deletes the object with the given name.
+func (b *s3Backend) DeleteObject(bucketName, objectName string) (result gofakes3.ObjectDeleteResult, rerr error) {
+	return result, b.deleteObject(bucketName, objectName)
+}
+
+// deleteObject deletes the object from the filesystem.
+func (b *s3Backend) deleteObject(bucketName, objectName string) error {
+	ctx := context.Background()
+	bucket, err := getBucketByName(bucketName)
+	if err != nil {
+		return err
+	}
+	bucketPath := bucket.Path
+
+	fp := path.Join(bucketPath, objectName)
+	fmeta, _ := op.GetNearestMeta(fp)
+	// S3 does not report an error when attemping to delete a key that does not exist, so
+	// we need to skip IsNotExist errors.
+	if _, err := fs.Get(context.WithValue(ctx, "meta", fmeta), fp, &fs.GetArgs{}); err != nil && !errs.IsObjectNotFound(err) {
+		return err
+	}
+
+	fs.Remove(ctx, fp)
+	return nil
+}
+
+// CreateBucket creates a new bucket.
+func (b *s3Backend) CreateBucket(name string) error {
+	return gofakes3.ErrNotImplemented
+}
+
+// DeleteBucket deletes the bucket with the given name.
+func (b *s3Backend) DeleteBucket(name string) error {
+	return gofakes3.ErrNotImplemented
+}
+
+// BucketExists checks if the bucket exists.
+func (b *s3Backend) BucketExists(name string) (exists bool, err error) {
+	buckets, err := getAndParseBuckets()
+	if err != nil {
+		return false, err
+	}
+	for _, b := range buckets {
+		if b.Name == name {
+			return true, nil
+		}
+	}
+	return false, nil
+}
+
+// CopyObject copy specified object from srcKey to dstKey.
+func (b *s3Backend) CopyObject(srcBucket, srcKey, dstBucket, dstKey string, meta map[string]string) (result gofakes3.CopyObjectResult, err error) {
+	if srcBucket == dstBucket && srcKey == dstKey {
+		//TODO: update meta
+		return result, nil
+	}
+
+	ctx := context.Background()
+	srcB, err := getBucketByName(srcBucket)
+	if err != nil {
+		return result, err
+	}
+	srcBucketPath := srcB.Path
+
+	srcFp := path.Join(srcBucketPath, srcKey)
+	fmeta, _ := op.GetNearestMeta(srcFp)
+	srcNode, err := fs.Get(context.WithValue(ctx, "meta", fmeta), srcFp, &fs.GetArgs{})
+
+	c, err := b.GetObject(srcBucket, srcKey, nil)
+	if err != nil {
+		return
+	}
+	defer func() {
+		_ = c.Contents.Close()
+	}()
+
+	for k, v := range c.Metadata {
+		if _, found := meta[k]; !found && k != "X-Amz-Acl" {
+			meta[k] = v
+		}
+	}
+	if _, ok := meta["mtime"]; !ok {
+		meta["mtime"] = swift.TimeToFloatString(srcNode.ModTime())
+	}
+
+	_, err = b.PutObject(dstBucket, dstKey, meta, c.Contents, c.Size)
+	if err != nil {
+		return
+	}
+
+	return gofakes3.CopyObjectResult{
+		ETag:         `"` + hex.EncodeToString(c.Hash) + `"`,
+		LastModified: gofakes3.NewContentTime(srcNode.ModTime()),
+	}, nil
+}
--- a/server/s3/ioutils.go
+++ b/server/s3/ioutils.go
@ -0,0 +1,36 @@
+// Credits: https://pkg.go.dev/github.com/rclone/rclone@v1.65.2/cmd/serve/s3
+// Package s3 implements a fake s3 server for alist
+package s3
+
+import "io"
+
+type noOpReadCloser struct{}
+
+type readerWithCloser struct {
+	io.Reader
+	closer func() error
+}
+
+var _ io.ReadCloser = &readerWithCloser{}
+
+func (d noOpReadCloser) Read(b []byte) (n int, err error) {
+	return 0, io.EOF
+}
+
+func (d noOpReadCloser) Close() error {
+	return nil
+}
+
+func limitReadCloser(rdr io.Reader, closer func() error, sz int64) io.ReadCloser {
+	return &readerWithCloser{
+		Reader: io.LimitReader(rdr, sz),
+		closer: closer,
+	}
+}
+
+func (rwc *readerWithCloser) Close() error {
+	if rwc.closer != nil {
+		return rwc.closer()
+	}
+	return nil
+}
--- a/server/s3/list.go
+++ b/server/s3/list.go
@ -0,0 +1,53 @@
+// Credits: https://pkg.go.dev/github.com/rclone/rclone@v1.65.2/cmd/serve/s3
+// Package s3 implements a fake s3 server for alist
+package s3
+
+import (
+	"path"
+	"strings"
+
+	"github.com/Mikubill/gofakes3"
+)
+
+func (b *s3Backend) entryListR(bucket, fdPath, name string, addPrefix bool, response *gofakes3.ObjectList) error {
+	fp := path.Join(bucket, fdPath)
+
+	dirEntries, err := getDirEntries(fp)
+	if err != nil {
+		return err
+	}
+
+	for _, entry := range dirEntries {
+		object := entry.GetName()
+
+		// workround for control-chars detect
+		objectPath := path.Join(fdPath, object)
+
+		if !strings.HasPrefix(object, name) {
+			continue
+		}
+
+		if entry.IsDir() {
+			if addPrefix {
+				// response.AddPrefix(gofakes3.URLEncode(objectPath))
+				response.AddPrefix(objectPath)
+				continue
+			}
+			err := b.entryListR(bucket, path.Join(fdPath, object), "", false, response)
+			if err != nil {
+				return err
+			}
+		} else {
+			item := &gofakes3.Content{
+				// Key:          gofakes3.URLEncode(objectPath),
+				Key:          objectPath,
+				LastModified: gofakes3.NewContentTime(entry.ModTime()),
+				ETag:         getFileHash(entry),
+				Size:         entry.GetSize(),
+				StorageClass: gofakes3.StorageStandard,
+			}
+			response.Add(item)
+		}
+	}
+	return nil
+}
--- a/server/s3/logger.go
+++ b/server/s3/logger.go
@ -0,0 +1,27 @@
+// Credits: https://pkg.go.dev/github.com/rclone/rclone@v1.65.2/cmd/serve/s3
+// Package s3 implements a fake s3 server for alist
+package s3
+
+import (
+	"fmt"
+
+	"github.com/Mikubill/gofakes3"
+	"github.com/alist-org/alist/v3/pkg/utils"
+)
+
+// logger output formatted message
+type logger struct{}
+
+// print log message
+func (l logger) Print(level gofakes3.LogLevel, v ...interface{}) {
+	switch level {
+	default:
+		fallthrough
+	case gofakes3.LogErr:
+		utils.Log.Errorf("serve s3: %s", fmt.Sprintln(v...))
+	case gofakes3.LogWarn:
+		utils.Log.Infof("serve s3: %s", fmt.Sprintln(v...))
+	case gofakes3.LogInfo:
+		utils.Log.Debugf("serve s3: %s", fmt.Sprintln(v...))
+	}
+}
--- a/server/s3/pager.go
+++ b/server/s3/pager.go
@ -0,0 +1,67 @@
+// Credits: https://pkg.go.dev/github.com/rclone/rclone@v1.65.2/cmd/serve/s3
+// Package s3 implements a fake s3 server for alist
+package s3
+
+import (
+	"sort"
+
+	"github.com/Mikubill/gofakes3"
+)
+
+// pager splits the object list into smulitply pages.
+func (db *s3Backend) pager(list *gofakes3.ObjectList, page gofakes3.ListBucketPage) (*gofakes3.ObjectList, error) {
+	// sort by alphabet
+	sort.Slice(list.CommonPrefixes, func(i, j int) bool {
+		return list.CommonPrefixes[i].Prefix < list.CommonPrefixes[j].Prefix
+	})
+	// sort by modtime
+	sort.Slice(list.Contents, func(i, j int) bool {
+		return list.Contents[i].LastModified.Before(list.Contents[j].LastModified.Time)
+	})
+	tokens := page.MaxKeys
+	if tokens == 0 {
+		tokens = 1000
+	}
+	if page.HasMarker {
+		for i, obj := range list.Contents {
+			if obj.Key == page.Marker {
+				list.Contents = list.Contents[i+1:]
+				break
+			}
+		}
+		for i, obj := range list.CommonPrefixes {
+			if obj.Prefix == page.Marker {
+				list.CommonPrefixes = list.CommonPrefixes[i+1:]
+				break
+			}
+		}
+	}
+
+	response := gofakes3.NewObjectList()
+	for _, obj := range list.CommonPrefixes {
+		if tokens <= 0 {
+			break
+		}
+		response.AddPrefix(obj.Prefix)
+		tokens--
+	}
+
+	for _, obj := range list.Contents {
+		if tokens <= 0 {
+			break
+		}
+		response.Add(obj)
+		tokens--
+	}
+
+	if len(list.CommonPrefixes)+len(list.Contents) > int(page.MaxKeys) {
+		response.IsTruncated = true
+		if len(response.Contents) > 0 {
+			response.NextMarker = response.Contents[len(response.Contents)-1].Key
+		} else {
+			response.NextMarker = response.CommonPrefixes[len(response.CommonPrefixes)-1].Prefix
+		}
+	}
+
+	return response, nil
+}
--- a/server/s3/server.go
+++ b/server/s3/server.go
@ -0,0 +1,27 @@
+// Credits: https://pkg.go.dev/github.com/rclone/rclone@v1.65.2/cmd/serve/s3
+// Package s3 implements a fake s3 server for alist
+package s3
+
+import (
+	"context"
+	"math/rand"
+	"net/http"
+
+	"github.com/Mikubill/gofakes3"
+)
+
+// Make a new S3 Server to serve the remote
+func NewServer(ctx context.Context) (h http.Handler, err error) {
+	var newLogger logger
+	faker := gofakes3.New(
+		newBackend(),
+		// gofakes3.WithHostBucket(!opt.pathBucketMode),
+		gofakes3.WithLogger(newLogger),
+		gofakes3.WithRequestID(rand.Uint64()),
+		gofakes3.WithoutVersioning(),
+		gofakes3.WithV4Auth(authlistResolver()),
+		gofakes3.WithIntegrityCheck(true), // Check Content-MD5 if supplied
+	)
+
+	return faker.Server(), nil
+}
--- a/server/s3/utils.go
+++ b/server/s3/utils.go
@ -0,0 +1,160 @@
+// Credits: https://pkg.go.dev/github.com/rclone/rclone@v1.65.2/cmd/serve/s3
+// Package s3 implements a fake s3 server for alist
+package s3
+
+import (
+	"context"
+	"encoding/json"
+	"strings"
+
+	"github.com/Mikubill/gofakes3"
+	"github.com/alist-org/alist/v3/internal/conf"
+	"github.com/alist-org/alist/v3/internal/errs"
+	"github.com/alist-org/alist/v3/internal/fs"
+	"github.com/alist-org/alist/v3/internal/model"
+	"github.com/alist-org/alist/v3/internal/op"
+	"github.com/alist-org/alist/v3/internal/setting"
+)
+
+type Bucket struct {
+	Name string `json:"name"`
+	Path string `json:"path"`
+}
+
+func getAndParseBuckets() ([]Bucket, error) {
+	var res []Bucket
+	err := json.Unmarshal([]byte(setting.GetStr(conf.S3Buckets)), &res)
+	return res, err
+}
+
+func getBucketByName(name string) (Bucket, error) {
+	buckets, err := getAndParseBuckets()
+	if err != nil {
+		return Bucket{}, err
+	}
+	for _, b := range buckets {
+		if b.Name == name {
+			return b, nil
+		}
+	}
+	return Bucket{}, gofakes3.BucketNotFound(name)
+}
+
+func getDirEntries(path string) ([]model.Obj, error) {
+	ctx := context.Background()
+	meta, _ := op.GetNearestMeta(path)
+	fi, err := fs.Get(context.WithValue(ctx, "meta", meta), path, &fs.GetArgs{})
+	if errs.IsNotFoundError(err) {
+		return nil, gofakes3.ErrNoSuchKey
+	} else if err != nil {
+		return nil, gofakes3.ErrNoSuchKey
+	}
+
+	if !fi.IsDir() {
+		return nil, gofakes3.ErrNoSuchKey
+	}
+
+	dirEntries, err := fs.List(context.WithValue(ctx, "meta", meta), path, &fs.ListArgs{})
+	if err != nil {
+		return nil, err
+	}
+
+	return dirEntries, nil
+}
+
+// func getFileHashByte(node interface{}) []byte {
+// 	b, err := hex.DecodeString(getFileHash(node))
+// 	if err != nil {
+// 		return nil
+// 	}
+// 	return b
+// }
+
+func getFileHash(node interface{}) string {
+	// var o fs.Object
+
+	// switch b := node.(type) {
+	// case vfs.Node:
+	// 	fsObj, ok := b.DirEntry().(fs.Object)
+	// 	if !ok {
+	// 		fs.Debugf("serve s3", "File uploading - reading hash from VFS cache")
+	// 		in, err := b.Open(os.O_RDONLY)
+	// 		if err != nil {
+	// 			return ""
+	// 		}
+	// 		defer func() {
+	// 			_ = in.Close()
+	// 		}()
+	// 		h, err := hash.NewMultiHasherTypes(hash.NewHashSet(hash.MD5))
+	// 		if err != nil {
+	// 			return ""
+	// 		}
+	// 		_, err = io.Copy(h, in)
+	// 		if err != nil {
+	// 			return ""
+	// 		}
+	// 		return h.Sums()[hash.MD5]
+	// 	}
+	// 	o = fsObj
+	// case fs.Object:
+	// 	o = b
+	// }
+
+	// hash, err := o.Hash(context.Background(), hash.MD5)
+	// if err != nil {
+	// 	return ""
+	// }
+	// return hash
+	return ""
+}
+
+func prefixParser(p *gofakes3.Prefix) (path, remaining string) {
+	idx := strings.LastIndexByte(p.Prefix, '/')
+	if idx < 0 {
+		return "", p.Prefix
+	}
+	return p.Prefix[:idx], p.Prefix[idx+1:]
+}
+
+// // FIXME this could be implemented by VFS.MkdirAll()
+// func mkdirRecursive(path string, VFS *vfs.VFS) error {
+// 	path = strings.Trim(path, "/")
+// 	dirs := strings.Split(path, "/")
+// 	dir := ""
+// 	for _, d := range dirs {
+// 		dir += "/" + d
+// 		if _, err := VFS.Stat(dir); err != nil {
+// 			err := VFS.Mkdir(dir, 0777)
+// 			if err != nil {
+// 				return err
+// 			}
+// 		}
+// 	}
+// 	return nil
+// }
+
+// func rmdirRecursive(p string, VFS *vfs.VFS) {
+// 	dir := path.Dir(p)
+// 	if !strings.ContainsAny(dir, "/\\") {
+// 		// might be bucket(root)
+// 		return
+// 	}
+// 	if _, err := VFS.Stat(dir); err == nil {
+// 		err := VFS.Remove(dir)
+// 		if err != nil {
+// 			return
+// 		}
+// 		rmdirRecursive(dir, VFS)
+// 	}
+// }
+
+func authlistResolver() map[string]string {
+	s3accesskeyid := setting.GetStr(conf.S3AccessKeyId)
+	s3secretaccesskey := setting.GetStr(conf.S3SecretAccessKey)
+	if s3accesskeyid == "" && s3secretaccesskey == "" {
+		return nil
+	}
+	authList := make(map[string]string)
+	authList[s3accesskeyid] = s3secretaccesskey
+	return authList
+}
--- a/server/webdav/prop.go
+++ b/server/webdav/prop.go
@ -14,6 +14,7 @@ import (
 	"net/http"
 	"path"
 	"strconv"
+	"strings"
 	"time"

 	"github.com/alist-org/alist/v3/internal/model"
@ -385,6 +386,10 @@ func findLastModified(ctx context.Context, ls LockSystem, name string, fi model.
 	return fi.ModTime().UTC().Format(http.TimeFormat), nil
 }
 func findCreationDate(ctx context.Context, ls LockSystem, name string, fi model.Obj) (string, error) {
+	userAgent := ctx.Value("userAgent").(string)
+	if strings.Contains(strings.ToLower(userAgent), "microsoft-webdav") {
+		return fi.CreateTime().UTC().Format(http.TimeFormat), nil
+	}
 	return fi.CreateTime().UTC().Format(time.RFC3339), nil
 }

--- a/server/webdav/webdav.go
+++ b/server/webdav/webdav.go
@ -6,6 +6,7 @@
 package webdav // import "golang.org/x/net/webdav"

 import (
+	"context"
 	"errors"
 	"fmt"
 	"net/http"
@ -619,6 +620,8 @@ func (h *Handler) handlePropfind(w http.ResponseWriter, r *http.Request) (status
 		return status, err
 	}
 	ctx := r.Context()
+	userAgent := r.Header.Get("User-Agent")
+	ctx = context.WithValue(ctx, "userAgent", userAgent)
 	user := ctx.Value("user").(*model.User)
 	reqPath, err = user.JoinPath(reqPath)
 	if err != nil {
Author	SHA1	Message	Date
二丫讲梵	cf08aa3668	feat: add doge driver (#6201 ) * feat: add doge driver * doc: 补充readme文档 * fix: 对齐meta信息 * fix: 调整结构体名字,与driver保持一致 * perf: merge to s3 * Rename goge.go to doge.go --------- Co-authored-by: Andy Hsu <i@nn.ci>	2024-03-25 22:53:44 +08:00
itsHenry	9c84b6596f	feat: stand-alone port s3 server (#6242 ) * feat: single port s3 server * fix: unable to PUT files if not in root dir	2024-03-24 15:16:00 +08:00
健忘症	022e0ca292	fix(139): incorrect refreshTokenResp serialization (#6248 )	2024-03-24 11:04:55 +08:00
陈佳	88947f6676	fix(ipfs): url escape filename (#6245 close #6027 ) This resolves #6027	2024-03-24 11:03:18 +08:00
Mmx	b07ddfbc13	fix(ci): replace dockerfile tag step may have no effect (#6206 )	2024-03-13 15:11:21 +08:00
Andy Hsu	9a0a63d34c	fix(ilanzou): add referer to request header (close #6171 )	2024-03-11 20:30:22 +08:00
健忘症	195c869272	feat(139): refresh token periodically (#6146 ) * 139定时刷新token * fix build fail	2024-03-11 20:10:26 +08:00
itsHenry	bdfc1591bd	fix: webauthn logspam (#6181 )	2024-03-10 16:48:25 +08:00
renovate[bot]	82222840fe	fix(deps): update golang.org/x/exp digest to 814bf88 (#6144 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2024-03-09 14:58:36 +08:00
foxxorcat	45e009a22c	fix(mopan): upload error (close #6158 in #6166 )	2024-03-09 14:54:49 +08:00
mlkt	ac68079a76	feat(seafile): improve features, support access to encrypted library, etc (#6160 )	2024-03-08 15:33:42 +08:00
Andy Hsu	2a17d0c2cd	fix: settings reset to default after restart if set to empty (close #6143 )	2024-03-05 16:29:26 +08:00
renovate[bot]	6f6a8e6dfc	fix(deps): update github.com/t3rm1n4l/go-mega digest to d494b6a (#6081 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2024-03-04 15:12:22 +08:00
Andy Hsu	7d9ecba99c	fix: add `m3u8` to default video types (close #6142 )	2024-03-04 14:26:00 +08:00
Sukka	ae6984714d	fix: remove default polyfill (#6130 close #6100 ) * refactor(setting): replace `polyfill.io`` * fix: remove default polyfill --------- Co-authored-by: Andy Hsu <i@nn.ci>	2024-03-02 15:36:28 +08:00
itsHenry	d0f88bd1cb	feat: s3 server support (#6088 close #5186 ) Currently tested: List, Get, Remove	2024-03-02 15:35:10 +08:00
wolfsilver	f8b1f87a5f	fix: support for Microsoft WebDAV (#6133 close #6104 ) * Add support for Microsoft WebDAV * add import	2024-03-02 14:59:55 +08:00
Kevin Z	71e4e1ab6e	fix(chaoxing): json cannot unmarshal content.uploadDate (close #6119 in #6124 )	2024-03-01 13:37:09 +08:00
Andy Hsu	7e6522c81e	ci: build ffmpeg image with dev version	2024-02-24 18:10:45 +08:00
Andy Hsu	94a80bccfe	fix(feiji): unable to get link (close #6082 )	2024-02-24 18:04:08 +08:00