chore(release): version v0.9.0

feat: support tls
feat: list all ifaces when listening 0.0.0.0
2026-04-09 17:13:02 +03:00 · 2022-06-02 16:31:43 +08:00 · 2022-06-02 12:15:06 +08:00 · 2022-06-02 09:44:40 +08:00 · 2022-06-02 09:08:55 +08:00 · 2022-06-02 08:32:31 +08:00
11 changed files with 2112 additions and 454 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -0,0 +1,179 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [0.9.0] - 2022-06-02
+
+### Documentation
+
+- Improve readme
+
+### Features
+
+- Support path prefix
+- List all ifaces when listening 0.0.0.0
+- Support tls
+
+## [0.8.0] - 2022-06-01
+
+### Bug Fixes
+
+- Some typos
+- Caught 500 if no permission to access dir
+
+### Features
+
+- Cli add allow-symlink option
+- Add some headers to res
+- Support render-index/render-spa
+
+### Miscellaneous Tasks
+
+- Move src/assets out of src
+- Update description
+- Upgrade version
+
+## [0.7.0] - 2022-05-31
+
+### Bug Fixes
+
+- Downloaded zip file has no.zip ext in firefox
+- Unzip override existed file in uploadonly mode
+- Miss file 500
+- Not found dir when allow_upload is false
+
+### Features
+
+- Drag and drop uploads, upload folder
+
+### Miscellaneous Tasks
+
+- Upgrade version
+
+## [0.6.0] - 2022-05-31
+
+### Features
+
+- Delete confirm
+- Distinct upload and delete operation
+- Support range requests
+
+### Miscellaneous Tasks
+
+- Upgrade version
+
+### Refactor
+
+- Improve code quality
+
+## [0.5.0] - 2022-05-30
+
+### Features
+
+- Add mime and cache headers to response
+- Add no-auth-read options
+- Unzip zip file when unload
+
+### Miscellaneous Tasks
+
+- Reorganize web static files
+- Rename src/static to src/assets
+- Upgrade version
+
+## [0.4.0] - 2022-05-29
+
+### Features
+
+- Replace --static option to --no-edit
+- Add cors
+
+### Miscellaneous Tasks
+
+- Upgrade version
+
+## [0.3.0] - 2022-05-29
+
+### Documentation
+
+- Update readme demo png
+
+### Features
+
+- Automatically create dir while uploading
+- Support searching
+
+### Refactor
+
+- Handler zip
+
+### Styling
+
+- Optimize css
+
+## [0.2.1] - 2022-05-28
+
+### Bug Fixes
+
+- Cannot upload in root
+- Optimize download zip
+
+### Documentation
+
+- Improve readme
+
+### Features
+
+- Aware RUST_LOG
+
+## [0.2.0] - 2022-05-28
+
+### Documentation
+
+- Update demo png
+- Improve readme
+
+### Features
+
+- Add logger
+- Download folder as zip file
+
+### Miscellaneous Tasks
+
+- Update cargo metadata
+
+## [0.1.0] - 2022-05-26
+
+### Bug Fixes
+
+- Caught server error when symlink broken
+
+### Documentation
+
+- Improve readme
+- Update readme
+
+### Features
+
+- Add basic auth and readonly mode
+- Support delete operation
+- Remove parent path
+
+### Miscellaneous Tasks
+
+- Add readme and license
+- Update cargo metadata
+
+### Styling
+
+- Cargo fmt
+- Update index page
+
+### Build
+
+- Remove dev deps
+
+### Ci
+
+- Init ci
+
+<!-- generated by git-cliff -->
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2,6 +2,105 @@
 # It is not intended for manual editing.
 version = 3

+[[package]]
+name = "adler"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f26201604c87b1e01bd3d98f8d5d9a8fcbb815e8cedb41ffccbeb4bf593a35fe"
+
+[[package]]
+name = "async-channel"
+version = "1.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2114d64672151c0c5eaa5e131ec84a74f06e1e559830dabba01ca30605d66319"
+dependencies = [
+ "concurrent-queue",
+ "event-listener",
+ "futures-core",
+]
+
+[[package]]
+name = "async-compression"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "345fd392ab01f746c717b1357165b76f0b67a60192007b234058c9045fdcf695"
+dependencies = [
+ "bzip2",
+ "flate2",
+ "futures-core",
+ "memchr",
+ "pin-project-lite",
+ "tokio",
+ "xz2",
+ "zstd",
+ "zstd-safe",
+]
+
+[[package]]
+name = "async-fs"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b3ca4f8ff117c37c278a2f7415ce9be55560b846b5bc4412aaa5d29c1c3dae2"
+dependencies = [
+ "async-lock",
+ "blocking",
+ "futures-lite",
+]
+
+[[package]]
+name = "async-lock"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e97a171d191782fba31bb902b14ad94e24a68145032b7eedf871ab0bc0d077b6"
+dependencies = [
+ "event-listener",
+]
+
+[[package]]
+name = "async-task"
+version = "4.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30696a84d817107fc028e049980e09d5e140e8da8f1caeb17e8e950658a3cea9"
+
+[[package]]
+name = "async-walkdir"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "826d88d73e87e7504b635b6e427561faa6a65f4a2f59e75efcbfa51a0876bb90"
+dependencies = [
+ "async-fs",
+ "futures-lite",
+]
+
+[[package]]
+name = "async_io_utilities"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0248112abfeab682c97306bc1e180ee957260107a55a437cedf9a3acca92135e"
+dependencies = [
+ "tokio",
+]
+
+[[package]]
+name = "async_zip"
+version = "0.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0a5c419dca9559f15d04befbf9ff01c39ca16d4c0abd56f60daaf87a386b929"
+dependencies = [
+ "async-compression",
+ "async_io_utilities",
+ "chrono",
+ "crc32fast",
+ "thiserror",
+ "tokio",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "065374052e7df7ee4047b1160cca5e1467a12351a40b3da123c870ba0b8eda2a"
+
 [[package]]
 name = "autocfg"
 version = "1.1.0"
@@ -20,18 +119,102 @@ version = "1.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"

+[[package]]
+name = "block-buffer"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf7fe51849ea569fd452f37822f606a5cabb684dc918707a0193fd4664ff324"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "blocking"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6ccb65d468978a086b69884437ded69a90faab3bbe6e67f242173ea728acccc"
+dependencies = [
+ "async-channel",
+ "async-task",
+ "atomic-waker",
+ "fastrand",
+ "futures-lite",
+ "once_cell",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37ccbd214614c6783386c1af30caf03192f17891059cecc394b4fb119e363de3"
+
 [[package]]
 name = "bytes"
 version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c4872d67bab6358e59559027aa3b9157c53d9358c51423c17554809a8858e0f8"

+[[package]]
+name = "bzip2"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6afcd980b5f3a45017c57e57a2fcccbb351cc43a356ce117ef760ef8052b89b0"
+dependencies = [
+ "bzip2-sys",
+ "libc",
+]
+
+[[package]]
+name = "bzip2-sys"
+version = "0.1.11+1.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "736a955f3fa7875102d57c82b8cac37ec45224a07fd32d58f9f7a186b6cd4cdc"
+dependencies = [
+ "cc",
+ "libc",
+ "pkg-config",
+]
+
+[[package]]
+name = "c_linked_list"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4964518bd3b4a8190e832886cdc0da9794f12e8e6c1613a9e90ff331c4c8724b"
+
+[[package]]
+name = "cache-padded"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1db59621ec70f09c5e9b597b220c7a2b43611f4710dc03ceb8748637775692c"
+
+[[package]]
+name = "cc"
+version = "1.0.73"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2fff2a6927b3bb87f9595d67196a70493f627687a71d87a0d692242c33f58c11"
+dependencies = [
+ "jobserver",
+]
+
 [[package]]
 name = "cfg-if"
 version = "1.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"

+[[package]]
+name = "chrono"
+version = "0.4.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "670ad68c9088c2a963aaa298cb369688cf3f9465ce5e2d4ca10e6e0098a1ce73"
+dependencies = [
+ "libc",
+ "num-integer",
+ "num-traits",
+ "time",
+ "winapi 0.3.9",
+]
+
 [[package]]
 name = "clap"
 version = "3.1.18"
@@ -55,20 +238,104 @@ dependencies = [
 ]

 [[package]]
-name = "duf"
-version = "0.1.0"
+name = "concurrent-queue"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30ed07550be01594c6026cff2a1d7fe9c8f683caa798e12b68694ac9e88286a3"
 dependencies = [
+ "cache-padded",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59a6001667ab124aebae2a495118e11d30984c3a653e99d86d58971708cf5e4b"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b540bd8bc810d3885c6ea91e2018302f68baba2129ab3e88f32389ee9370880d"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57952ca27b5e3606ff4dd79b0020231aaf9d6aa76dc05fd30137538c50bd3ce8"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2fb860ca6fafa5552fb6d0e816a69c8e49f0908bf524e30a90d97c85892d506"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "duf"
+version = "0.9.0"
+dependencies = [
+ "async-walkdir",
+ "async_zip",
 "base64",
+ "chrono",
 "clap",
 "futures",
+ "get_if_addrs",
+ "headers",
 "hyper",
+ "mime_guess",
 "percent-encoding",
+ "rustls",
+ "rustls-pemfile",
 "serde",
 "serde_json",
 "tokio",
+ "tokio-rustls",
+ "tokio-stream",
 "tokio-util",
 ]

+[[package]]
+name = "event-listener"
+version = "2.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77f3309417938f28bf8228fcff79a4a37103981e3e186d2ccd19c74b38f4eb71"
+
+[[package]]
+name = "fastrand"
+version = "1.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3fcf0cee53519c866c09b5de1f6c56ff9d647101f81c1964fa632e148896cdf"
+dependencies = [
+ "instant",
+]
+
+[[package]]
+name = "flate2"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39522e96686d38f4bc984b9198e3a0613264abaebaff2c5c918bfa6b6da09af"
+dependencies = [
+ "cfg-if",
+ "crc32fast",
+ "libc",
+ "miniz_oxide",
+]
+
 [[package]]
 name = "fnv"
 version = "1.0.7"
@@ -123,6 +390,21 @@ version = "0.3.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc4045962a5a5e935ee2fdedaa4e08284547402885ab326734432bed5d12966b"

+[[package]]
+name = "futures-lite"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7694489acd39452c77daa48516b894c153f192c3578d5a839b62c58099fcbf48"
+dependencies = [
+ "fastrand",
+ "futures-core",
+ "futures-io",
+ "memchr",
+ "parking",
+ "pin-project-lite",
+ "waker-fn",
+]
+
 [[package]]
 name = "futures-macro"
 version = "0.3.21"
@@ -164,12 +446,75 @@ dependencies = [
 "slab",
 ]

+[[package]]
+name = "gcc"
+version = "0.3.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f5f3913fa0bfe7ee1fd8248b6b9f42a5af4b9d65ec2dd2c3c26132b950ecfc2"
+
+[[package]]
+name = "generic-array"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd48d33ec7f05fbfa152300fdad764757cbded343c1aa1cff2fbaf4134851803"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "get_if_addrs"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "abddb55a898d32925f3148bd281174a68eeb68bbfd9a5938a57b18f506ee4ef7"
+dependencies = [
+ "c_linked_list",
+ "get_if_addrs-sys",
+ "libc",
+ "winapi 0.2.8",
+]
+
+[[package]]
+name = "get_if_addrs-sys"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d04f9fb746cf36b191c00f3ede8bde9c8e64f9f4b05ae2694a9ccf5e3f5ab48"
+dependencies = [
+ "gcc",
+ "libc",
+]
+
 [[package]]
 name = "hashbrown"
 version = "0.11.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ab5ef0d4909ef3724cc8cce6ccc8572c5c817592e9285f5464f8e86f8bd3726e"

+[[package]]
+name = "headers"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cff78e5788be1e0ab65b04d306b2ed5092c815ec97ec70f4ebd5aee158aa55d"
+dependencies = [
+ "base64",
+ "bitflags",
+ "bytes",
+ "headers-core",
+ "http",
+ "httpdate",
+ "mime",
+ "sha-1",
+]
+
+[[package]]
+name = "headers-core"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7f66481bfee273957b1f20485a4ff3362987f85b2c236580d81b4eb7a326429"
+dependencies = [
+ "http",
+]
+
 [[package]]
 name = "hermit-abi"
 version = "0.1.19"
@@ -215,9 +560,9 @@ checksum = "c4a1e36c821dbe04574f602848a19f742f4fb3c98d40449f11bcad18d6b17421"

 [[package]]
 name = "hyper"
-version = "0.14.18"
+version = "0.14.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b26ae0a80afebe130861d90abf98e3814a4f28a4c6ffeb5ab8ebb2be311e0ef2"
+checksum = "42dc3c131584288d375f2d07f822b0cb012d8c6fb899a5b9fdb3cb7eb9b6004f"
 dependencies = [
 "bytes",
 "futures-channel",
@@ -238,20 +583,47 @@ dependencies = [

 [[package]]
 name = "indexmap"
-version = "1.8.1"
+version = "1.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0f647032dfaa1f8b6dc29bd3edb7bbef4861b8b8007ebb118d6db284fd59f6ee"
+checksum = "e6012d540c5baa3589337a98ce73408de9b5a25ec9fc2c6fd6be8f0d39e0ca5a"
 dependencies = [
 "autocfg",
 "hashbrown",
 ]

+[[package]]
+name = "instant"
+version = "0.1.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a5bbe824c507c5da5956355e86a746d82e0e1464f65d862cc5e71da70e94b2c"
+dependencies = [
+ "cfg-if",
+]
+
 [[package]]
 name = "itoa"
 version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "112c678d4050afce233f4f2852bb2eb519230b3cf12f33585275537d7e41578d"

+[[package]]
+name = "jobserver"
+version = "0.1.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af25a77299a7f711a01975c35a6a424eb6862092cc2d6c72c4ed6cbc56dfc1fa"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.57"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "671a26f820db17c2a2750743f1dd03bafd15b98c9f30c7c2628c024c05d73397"
+dependencies = [
+ "wasm-bindgen",
+]
+
 [[package]]
 name = "lazy_static"
 version = "1.4.0"
@@ -273,12 +645,48 @@ dependencies = [
 "cfg-if",
 ]

+[[package]]
+name = "lzma-sys"
+version = "0.1.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdb4b7c3eddad11d3af9e86c487607d2d2442d185d848575365c4856ba96d619"
+dependencies = [
+ "cc",
+ "libc",
+ "pkg-config",
+]
+
 [[package]]
 name = "memchr"
 version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2dffe52ecf27772e601905b7522cb4ef790d2cc203488bbd0e2fe85fcb74566d"

+[[package]]
+name = "mime"
+version = "0.3.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a60c7ce501c71e03a9c9c0d35b861413ae925bd979cc7a4e30d060069aaac8d"
+
+[[package]]
+name = "mime_guess"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4192263c238a5f0d0c6bfd21f336a313a4ce1c450542449ca191bb657b4642ef"
+dependencies = [
+ "mime",
+ "unicase",
+]
+
+[[package]]
+name = "miniz_oxide"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2b29bd4bc3f33391105ebee3589c19197c4271e3e5a9ec9bfe8127eeff8f082"
+dependencies = [
+ "adler",
+]
+
 [[package]]
 name = "mio"
 version = "0.8.3"
@@ -287,10 +695,29 @@ checksum = "713d550d9b44d89174e066b7a6217ae06234c10cb47819a88290d2b353c31799"
 dependencies = [
 "libc",
 "log",
- "wasi",
+ "wasi 0.11.0+wasi-snapshot-preview1",
 "windows-sys",
 ]

+[[package]]
+name = "num-integer"
+version = "0.1.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "225d3389fb3509a24c93f5c29eb6bde2586b98d9f016636dff58d7c6f7569cd9"
+dependencies = [
+ "autocfg",
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "578ede34cf02f8924ab9447f50c28075b4d3e5b269972345e7e0372b38c6cdcd"
+dependencies = [
+ "autocfg",
+]
+
 [[package]]
 name = "num_cpus"
 version = "1.13.1"
@@ -313,6 +740,12 @@ version = "6.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "21326818e99cfe6ce1e524c2a805c189a99b5ae555a35d19f9a284b427d86afa"

+[[package]]
+name = "parking"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "427c3892f9e783d91cc128285287e70a59e206ca452770ece88a76f7a3eddd72"
+
 [[package]]
 name = "percent-encoding"
 version = "2.1.0"
@@ -331,6 +764,12 @@ version = "0.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"

+[[package]]
+name = "pkg-config"
+version = "0.3.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1df8c4ec4b0627e53bdf214615ad287367e482558cf84b109250b37464dc03ae"
+
 [[package]]
 name = "proc-macro2"
 version = "1.0.39"
@@ -349,12 +788,58 @@ dependencies = [
 "proc-macro2",
 ]

+[[package]]
+name = "ring"
+version = "0.16.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3053cf52e236a3ed746dfc745aa9cacf1b791d846bdaf412f60a8d7d6e17c8fc"
+dependencies = [
+ "cc",
+ "libc",
+ "once_cell",
+ "spin",
+ "untrusted",
+ "web-sys",
+ "winapi 0.3.9",
+]
+
+[[package]]
+name = "rustls"
+version = "0.20.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5aab8ee6c7097ed6057f43c187a62418d0c05a4bd5f18b3571db50ee0f9ce033"
+dependencies = [
+ "log",
+ "ring",
+ "sct",
+ "webpki",
+]
+
+[[package]]
+name = "rustls-pemfile"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7522c9de787ff061458fe9a829dc790a3f5b22dc571694fc5883f448b94d9a9"
+dependencies = [
+ "base64",
+]
+
 [[package]]
 name = "ryu"
 version = "1.0.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f3f6f92acf49d1b98f7a81226834412ada05458b7364277387724a237f062695"

+[[package]]
+name = "sct"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d53dcdb7c9f8158937a7981b48accfd39a43af418591a5d008c7b22b5e1b7ca4"
+dependencies = [
+ "ring",
+ "untrusted",
+]
+
 [[package]]
 name = "serde"
 version = "1.0.137"
@@ -386,6 +871,17 @@ dependencies = [
 "serde",
 ]

+[[package]]
+name = "sha-1"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "028f48d513f9678cda28f6e4064755b3fbb2af6acd672f2c209b62323f7aea0f"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
 [[package]]
 name = "slab"
 version = "0.4.6"
@@ -399,9 +895,15 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "66d72b759436ae32898a2af0a14218dbf55efde3feeb170eb623637db85ee1e0"
 dependencies = [
 "libc",
- "winapi",
+ "winapi 0.3.9",
 ]

+[[package]]
+name = "spin"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e63cff320ae2c57904679ba7cb63280a3dc4613885beafb148ee7bf9aa9042d"
+
 [[package]]
 name = "syn"
 version = "1.0.95"
@@ -419,6 +921,37 @@ version = "0.15.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b1141d4d61095b28419e22cb0bbf02755f5e54e0526f97f1e3d1d160e60885fb"

+[[package]]
+name = "thiserror"
+version = "1.0.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd829fe32373d27f76265620b5309d0340cb8550f523c1dda251d6298069069a"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0396bc89e626244658bef819e22d0cc459e795a5ebe878e6ec336d1674a8d79a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "time"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db9e6914ab8b1ae1c260a4ae7a49b6c5611b40328a735b21862567685e73255"
+dependencies = [
+ "libc",
+ "wasi 0.10.0+wasi-snapshot-preview1",
+ "winapi 0.3.9",
+]
+
 [[package]]
 name = "tokio"
 version = "1.18.2"
@@ -434,7 +967,7 @@ dependencies = [
 "pin-project-lite",
 "socket2",
 "tokio-macros",
- "winapi",
+ "winapi 0.3.9",
 ]

 [[package]]
@@ -448,6 +981,28 @@ dependencies = [
 "syn",
 ]

+[[package]]
+name = "tokio-rustls"
+version = "0.23.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c43ee83903113e03984cb9e5cebe6c04a5116269e900e3ddba8f068a62adda59"
+dependencies = [
+ "rustls",
+ "tokio",
+ "webpki",
+]
+
+[[package]]
+name = "tokio-stream"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50145484efff8818b5ccd256697f36863f587da82cf8b409c53adf1e840798e3"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+]
+
 [[package]]
 name = "tokio-util"
 version = "0.7.2"
@@ -506,12 +1061,45 @@ version = "0.2.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "59547bce71d9c38b83d9c0e92b6066c4253371f15005def0c30d9657f50c7642"

+[[package]]
+name = "typenum"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dcf81ac59edc17cc8697ff311e8f5ef2d99fcbd9817b34cec66f90b6c3dfd987"
+
+[[package]]
+name = "unicase"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50f37be617794602aabbeee0be4f259dc1778fabe05e2d67ee8f79326d5cb4f6"
+dependencies = [
+ "version_check",
+]
+
 [[package]]
 name = "unicode-ident"
 version = "1.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d22af068fba1eb5edcb4aea19d382b2a3deb4c8f9d475c589b6ada9e0fd493ee"

+[[package]]
+name = "untrusted"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a156c684c91ea7d62626509bce3cb4e1d9ed5c4d978f7b4352658f96a4c26b4a"
+
+[[package]]
+name = "version_check"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49874b5167b65d7193b8aba1567f5c7d93d001cafc34600cee003eda787e483f"
+
+[[package]]
+name = "waker-fn"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d5b2c62b4012a3e1eca5a7e077d13b3bf498c4073e33ccd58626607748ceeca"
+
 [[package]]
 name = "want"
 version = "0.3.0"
@@ -522,12 +1110,98 @@ dependencies = [
 "try-lock",
 ]

+[[package]]
+name = "wasi"
+version = "0.10.0+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a143597ca7c7793eff794def352d41792a93c481eb1042423ff7ff72ba2c31f"
+
 [[package]]
 name = "wasi"
 version = "0.11.0+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"

+[[package]]
+name = "wasm-bindgen"
+version = "0.2.80"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27370197c907c55e3f1a9fbe26f44e937fe6451368324e009cba39e139dc08ad"
+dependencies = [
+ "cfg-if",
+ "wasm-bindgen-macro",
+]
+
+[[package]]
+name = "wasm-bindgen-backend"
+version = "0.2.80"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53e04185bfa3a779273da532f5025e33398409573f348985af9a1cbf3774d3f4"
+dependencies = [
+ "bumpalo",
+ "lazy_static",
+ "log",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.80"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17cae7ff784d7e83a2fe7611cfe766ecf034111b49deb850a3dc7699c08251f5"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.80"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "99ec0dc7a4756fffc231aab1b9f2f578d23cd391390ab27f952ae0c9b3ece20b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-backend",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.80"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d554b7f530dee5964d9a9468d95c1f8b8acae4f282807e7d27d4b03099a46744"
+
+[[package]]
+name = "web-sys"
+version = "0.3.57"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b17e741662c70c8bd24ac5c5b18de314a2c26c32bf8346ee1e6f53de919c283"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webpki"
+version = "0.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f095d78192e208183081cc07bc5515ef55216397af48b873e5edcd72637fa1bd"
+dependencies = [
+ "ring",
+ "untrusted",
+]
+
+[[package]]
+name = "winapi"
+version = "0.2.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "167dc9d6949a9b857f3451275e911c3f44255842c1f7a76f33c55103a909087a"
+
 [[package]]
 name = "winapi"
 version = "0.3.9"
@@ -592,3 +1266,41 @@ name = "windows_x86_64_msvc"
 version = "0.36.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c811ca4a8c853ef420abd8592ba53ddbbac90410fab6903b3e79972a631f7680"
+
+[[package]]
+name = "xz2"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c179869f34fc7c01830d3ce7ea2086bc3a07e0d35289b667d0a8bf910258926c"
+dependencies = [
+ "lzma-sys",
+]
+
+[[package]]
+name = "zstd"
+version = "0.11.2+zstd.1.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20cc960326ece64f010d2d2107537f26dc589a6573a316bd5b1dba685fa5fde4"
+dependencies = [
+ "zstd-safe",
+]
+
+[[package]]
+name = "zstd-safe"
+version = "5.0.2+zstd.1.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d2a5585e04f9eea4b2a3d1eca508c4dee9592a89ef6f450c11719da0726f4db"
+dependencies = [
+ "libc",
+ "zstd-sys",
+]
+
+[[package]]
+name = "zstd-sys"
+version = "2.0.1+zstd.1.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fd07cbbc53846d9145dbffdf6dd09a7a0aa52be46741825f5c97bdd4f73f12b"
+dependencies = [
+ "cc",
+ "libc",
+]
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,26 +1,36 @@
 [package]
 name = "duf"
-version = "0.1.0"
+version = "0.9.0"
 edition = "2021"
 authors = ["sigoden <sigoden@gmail.com>"]
-description = "Duf is a simple file server."
+description = "Duf is a fully functional file server."
 license = "MIT OR Apache-2.0"
 homepage = "https://github.com/sigoden/duf"
 repository = "https://github.com/sigoden/duf"
 autotests = false
 categories = ["command-line-utilities", "web-programming::http-server"]
-keywords = ["static", "file", "server", "upload", "http", "cli"]
+keywords = ["static", "file", "server", "http", "cli"]

 [dependencies]
 clap = { version = "3", default-features = false, features = ["std", "cargo"] }
+chrono = "0.4"
 tokio = { version = "1", features = ["rt-multi-thread", "macros", "fs", "io-util"]}
+tokio-rustls = "0.23"
+tokio-stream = { version = "0.1", features = ["net"] }
+tokio-util = { version = "0.7",  features = ["codec", "io-util"] }
 hyper = { version = "0.14", features = ["http1", "server", "tcp", "stream"] }
 percent-encoding = "2.1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-tokio-util = { version = "0.7", features = ["codec", "io-util"] }
 futures = "0.3"
-base64 = "0.13.0"
+base64 = "0.13"
+async_zip = "0.0.7"
+async-walkdir = "0.2.0"
+headers = "0.3.7"
+mime_guess = "2.0.4"
+get_if_addrs = "0.5.3"
+rustls = { version = "0.20", default-features = false, features = ["tls12"] }
+rustls-pemfile = "1"

 [profile.release]
 lto = true
--- a/README.md
+++ b/README.md
@@ -3,15 +3,20 @@
 [![CI](https://github.com/sigoden/duf/actions/workflows/ci.yaml/badge.svg)](https://github.com/sigoden/duf/actions/workflows/ci.yaml)
 [![Crates](https://img.shields.io/crates/v/duf.svg)](https://crates.io/crates/duf)

-Duf is a simple file server.
+Duf is a fully functional file server.

-![demo](https://user-images.githubusercontent.com/4012553/170497689-02aa836d-b49e-4dbb-a98b-37db2d5e9e13.png)
+![demo](https://user-images.githubusercontent.com/4012553/171526189-09afc2de-793f-4216-b3d5-31ea408d3610.png)

 ## Features

 - Serve static files
- Upload/Delete files
- Support basic auth
+- Download folder as zip file
+- Search files
+- Upload files and folders (Drag & Drop)
+- Delete files
+- Basic authentication
+- Upload zip file then unzip
+- Serve through https
 - Easy to use with curl

 ## Install
@@ -34,23 +39,57 @@ You can run this command to start serving your current working directory on 127.
 duf
 ```

-...or specify which folder you want to serve:
+...or specify which folder you want to serve.

 ```
 duf folder_name
 ```

-Finally, run this command to see a list of all available option
+Listen on all Interfaces and port 3000

+```
+duf -b 0.0.0.0 -p 3000
+```

+Allow all operations such as upload, delete

-## Curl
+```sh
+duf --allow-all
+# or
+duf -A
+```
+
+Only allow upload operation
+
+```
+duf --allow-upload
+```
+
+Serve a single page application (SPA)
+
+```
+duf --render-spa
+```
+
+Serve https 
+
+```
+duf --tls-cert my.crt --tls-key my.key
+```
+
+### Api

 Download a file
 ```
 curl http://127.0.0.1:5000/some-file

-curl -o some-file.zip http://127.0.0.1:5000/some-file.zip
+curl -o some-file2 http://127.0.0.1:5000/some-file
+```
+
+Download a folder as zip file
+
+```
+curl -o some-folder.zip http://127.0.0.1:5000/some-folder?zip
 ```

 Upload a file
@@ -59,6 +98,12 @@ Upload a file
 curl --upload-file some-file http://127.0.0.1:5000/some-file
 ```

+Unzip zip file when unload
+
+```
+curl --upload-file some-folder.zip http://127.0.0.1:5000/some-folder.zip?unzip
+```
+
 Delete a file/folder

 ```
--- a/assets/index.css
+++ b/assets/index.css
@@ -4,16 +4,21 @@ html {
  color: #24292e;
 }

-.head {
-  display: flex;
-  align-items: baseline;
-  padding: 1em 1em 0;
+body {
+  width: 700px;
 }

-.head input {
+.hidden {
  display: none;
 }

+.head {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  padding: 1em 1em 0;
+}
+
 .breadcrumb {
  font-size: 1.25em;
 }
@@ -44,8 +49,48 @@ html {
  padding-left: 0.5em;
 }

+.toolbox {
+  display: flex;
+}
+
+.searchbar {
+  display: flex;
+  flex-wrap: nowrap;
+  width: 246px;
+  height: 22px;
+  background-color: #fafafa;
+  transition: all .15s;
+  border: 1px #ddd solid;
+  border-radius: 15px;
+  margin: 0 0 2px 10px;
+}
+
+.searchbar #search {
+  box-sizing: border-box;
+  width: 100%;
+  height: 100%;
+  font-size: 16px;
+  line-height: 16px;
+  padding: 1px;
+  font-family: helvetica neue,luxi sans,Tahoma,hiragino sans gb,STHeiti,sans-serif;
+  background-color: transparent;
+  border: none;
+  outline: none;
+}
+
+.searchbar .icon {
+  color: #9a9a9a;
+  padding: 3px 3px;
+  cursor: pointer;
+}
+
 .upload-control {
  cursor: pointer;
+  padding-left: 0.25em;
+}
+
+.upload-control input {
+  display: none;
 }

 .main {
@@ -64,22 +109,23 @@ html {
 }

 .main .cell-name {
-  width: 300px;
+  width: 400px;
 }

 .main .cell-mtime {
-  width: 150px;
+  width: 120px;
  padding-left: 0.6em;
 }

 .main .cell-size {
  text-align: right;
-  width: 100px;
+  width: 70px;
  padding-left: 0.6em;
 }

 .main .cell-actions {
-  width: 100px;
+  width: 60px;
+  display: flex;
  padding-left: 0.6em;
 }

@@ -108,9 +154,11 @@ html {
  text-decoration: underline;
 }

+.action-btn {
+  padding-left: 0.4em;
+}
+
 .uploaders {
-  display: flex;
-  flex-wrap: wrap;
  padding: 0.5em 0;
 }

--- a/assets/index.html
+++ b/assets/index.html
@@ -0,0 +1,53 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width" />
+  __SLOT__
+</head>
+<body>
+  <div class="head">
+    <div class="breadcrumb"></div>
+    <div class="toolbox">
+      <div>
+        <a href="?zip" title="Download folder as a .zip file">
+          <svg width="16" height="16" viewBox="0 0 16 16"><path d="M.5 9.9a.5.5 0 0 1 .5.5v2.5a1 1 0 0 0 1 1h12a1 1 0 0 0 1-1v-2.5a.5.5 0 0 1 1 0v2.5a2 2 0 0 1-2 2H2a2 2 0 0 1-2-2v-2.5a.5.5 0 0 1 .5-.5z"/><path d="M7.646 11.854a.5.5 0 0 0 .708 0l3-3a.5.5 0 0 0-.708-.708L8.5 10.293V1.5a.5.5 0 0 0-1 0v8.793L5.354 8.146a.5.5 0 1 0-.708.708l3 3z"/></svg>
+        </a>
+      </div>
+      <div class="upload-control hidden" title="Upload files">
+        <label for="file">
+          <svg width="16" height="16" viewBox="0 0 16 16"><path d="M.5 9.9a.5.5 0 0 1 .5.5v2.5a1 1 0 0 0 1 1h12a1 1 0 0 0 1-1v-2.5a.5.5 0 0 1 1 0v2.5a2 2 0 0 1-2 2H2a2 2 0 0 1-2-2v-2.5a.5.5 0 0 1 .5-.5z"/><path d="M7.646 1.146a.5.5 0 0 1 .708 0l3 3a.5.5 0 0 1-.708.708L8.5 2.707V11.5a.5.5 0 0 1-1 0V2.707L5.354 4.854a.5.5 0 1 1-.708-.708l3-3z"/></svg>
+        </label>
+        <input type="file" id="file" name="file" multiple>
+      </div>
+    </div>
+    <form class="searchbar">
+      <div class="icon">
+        <svg width="16" height="16" fill="currentColor" viewBox="0 0 16 16"><path d="M11.742 10.344a6.5 6.5 0 1 0-1.397 1.398h-.001c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1zM12 6.5a5.5 5.5 0 1 1-11 0 5.5 5.5 0 0 1 11 0z"/></svg>
+      </div>
+      <input id="search" name="q" type="text" maxlength="128" autocomplete="off" tabindex="1">
+      <input type="submit" hidden />
+    </form>
+  </div>
+  <div class="main">
+    <div class="uploaders">
+    </div>
+    <table>
+      <thead>
+        <tr>
+          <th class="cell-name">Name</th>
+          <th class="cell-mtime">Date modify</th>
+          <th class="cell-size">Size</th>
+          <th class="cell-actions">Actions</th>
+        </tr>
+      </thead>
+      <tbody>
+      </tbody>
+    </table>
+  </div>
+  <script>
+    window.addEventListener("DOMContentLoaded", ready);
+  </script>
+</body>
+</html>
--- a/assets/index.js
+++ b/assets/index.js
@@ -0,0 +1,247 @@
+let $tbody, $uploaders;
+let baseDir;
+
+class Uploader {
+  idx;
+  file;
+  name;
+  $elem;
+  static globalIdx = 0;
+  constructor(file, dirs) {
+    this.name = [...dirs, file.name].join("/");
+    this.idx = Uploader.globalIdx++;
+    this.file = file;
+  }
+
+  upload() {
+    const { file, idx, name } = this;
+    let url = getUrl(name);
+    if (file.name == baseDir + ".zip") {
+      url += "?unzip";
+    }
+    $uploaders.insertAdjacentHTML("beforeend", `
+  <div class="uploader path">
+    <div><svg height="16" viewBox="0 0 12 16" width="12"><path fill-rule="evenodd" d="M6 5H2V4h4v1zM2 8h7V7H2v1zm0 2h7V9H2v1zm0 2h7v-1H2v1zm10-7.5V14c0 .55-.45 1-1 1H1c-.55 0-1-.45-1-1V2c0-.55.45-1 1-1h7.5L12 4.5zM11 5L8 2H1v12h10V5z"></path></svg></div>
+    <a href="${url}" id="file${idx}">${name} (0%)</a>
+  </div>`);
+    this.$elem = document.getElementById(`file${idx}`);
+
+    const ajax = new XMLHttpRequest();
+    ajax.upload.addEventListener("progress", e => this.progress(e), false);
+    ajax.addEventListener("readystatechange", () => {
+      if(ajax.readyState === 4) {
+        if (ajax.status == 200) {
+          this.complete();
+        } else {
+          this.fail();
+        }
+      }
+    })
+    ajax.addEventListener("error", () => this.fail(), false);
+    ajax.addEventListener("abort", () => this.fail(), false);
+    ajax.open("PUT", url);
+    ajax.send(file);
+  }
+
+  progress(event) {
+    const percent = (event.loaded / event.total) * 100;
+    this.$elem.innerHTML = `${this.name} (${percent.toFixed(2)}%)`;
+  }
+
+  complete() {
+    this.$elem.innerHTML = `${this.name}`;
+  }
+
+  fail() {
+    this.$elem.innerHTML = `<strike>${this.name}</strike>`;
+  }
+}
+
+function addBreadcrumb(value) {
+  const $breadcrumb = document.querySelector(".breadcrumb");
+  const parts = value.split("/").filter(v => !!v);
+  const len = parts.length;
+  let path = "";
+  for (let i = 0; i < len; i++) {
+    const name = parts[i];
+    if (i > 0) {
+      path  += "/" + name;
+    }
+    if (i === len - 1) {
+      $breadcrumb.insertAdjacentHTML("beforeend", `<b>${name}</b>`);
+      baseDir = name;
+    } else if (i === 0) {
+      $breadcrumb.insertAdjacentHTML("beforeend", `<a href="/"><b>${name}</b></a>`);
+    } else {
+      $breadcrumb.insertAdjacentHTML("beforeend", `<a href="${encodeURI(path)}">${name}</a>`);
+    }
+    $breadcrumb.insertAdjacentHTML("beforeend", `<span class="separator">/</span>`);
+  }
+}
+
+function addPath(file, index) {
+  const url = getUrl(file.name)
+  let actionDelete = "";
+  let actionDownload = "";
+  if (file.path_type.endsWith("Dir")) {
+    actionDownload = `
+    <div class="action-btn">
+      <a href="${url}?zip" title="Download folder as a .zip file">
+        <svg width="16" height="16" viewBox="0 0 16 16"><path d="M.5 9.9a.5.5 0 0 1 .5.5v2.5a1 1 0 0 0 1 1h12a1 1 0 0 0 1-1v-2.5a.5.5 0 0 1 1 0v2.5a2 2 0 0 1-2 2H2a2 2 0 0 1-2-2v-2.5a.5.5 0 0 1 .5-.5z"/><path d="M7.646 11.854a.5.5 0 0 0 .708 0l3-3a.5.5 0 0 0-.708-.708L8.5 10.293V1.5a.5.5 0 0 0-1 0v8.793L5.354 8.146a.5.5 0 1 0-.708.708l3 3z"/></svg>
+      </a>
+    </div>`;
+  } else {
+    actionDownload = `
+    <div class="action-btn" >
+      <a href="${url}" title="Download file" download>
+        <svg width="16" height="16" viewBox="0 0 16 16"><path d="M.5 9.9a.5.5 0 0 1 .5.5v2.5a1 1 0 0 0 1 1h12a1 1 0 0 0 1-1v-2.5a.5.5 0 0 1 1 0v2.5a2 2 0 0 1-2 2H2a2 2 0 0 1-2-2v-2.5a.5.5 0 0 1 .5-.5z"/><path d="M7.646 11.854a.5.5 0 0 0 .708 0l3-3a.5.5 0 0 0-.708-.708L8.5 10.293V1.5a.5.5 0 0 0-1 0v8.793L5.354 8.146a.5.5 0 1 0-.708.708l3 3z"/></svg>
+      </a>
+    </div>`;
+  }
+  if (DATA.allow_delete) {
+    actionDelete = `
+    <div onclick="deletePath(${index})" class="action-btn" id="deleteBtn${index}" title="Delete ${file.name}">
+      <svg width="16" height="16" fill="currentColor"viewBox="0 0 16 16"><path d="M6.854 7.146a.5.5 0 1 0-.708.708L7.293 9l-1.147 1.146a.5.5 0 0 0 .708.708L8 9.707l1.146 1.147a.5.5 0 0 0 .708-.708L8.707 9l1.147-1.146a.5.5 0 0 0-.708-.708L8 8.293 6.854 7.146z"/><path d="M14 14V4.5L9.5 0H4a2 2 0 0 0-2 2v12a2 2 0 0 0 2 2h8a2 2 0 0 0 2-2zM9.5 3A1.5 1.5 0 0 0 11 4.5h2V14a1 1 0 0 1-1 1H4a1 1 0 0 1-1-1V2a1 1 0 0 1 1-1h5.5v2z"/></svg>
+    </div>`;
+  }
+  let actionCell = `
+  <td class="cell-actions">
+    ${actionDownload}
+    ${actionDelete}
+  </td>`
+
+  $tbody.insertAdjacentHTML("beforeend", `
+<tr id="addPath${index}">
+<td class="path cell-name">
+  <div>${getSvg(file.path_type)}</div>
+  <a href="${url}" title="${file.name}">${file.name}</a>
+</td>
+<td class="cell-mtime">${formatMtime(file.mtime)}</td>
+<td class="cell-size">${formatSize(file.size)}</td>
+${actionCell}
+</tr>`)
+}
+
+async function deletePath(index) {
+  const file = DATA.paths[index];
+  if (!file) return;
+
+  if (!confirm(`Delete \`${file.name}\`?`)) return;
+
+  try {
+    const res = await fetch(getUrl(file.name), {
+      method: "DELETE",
+    });
+    if (res.status === 200) {
+        document.getElementById(`addPath${index}`).remove();
+    } else {
+      throw new Error(await res.text())
+    }
+  } catch (err) {
+    alert(`Cannot delete \`${file.name}\`, ${err.message}`);
+  }
+}
+
+function dropzone() {
+    ["drag", "dragstart", "dragend", "dragover", "dragenter", "dragleave", "drop"].forEach(name => {
+      document.addEventListener(name, e => {
+          e.preventDefault();
+          e.stopPropagation();
+      });
+    });
+    document.addEventListener("drop", e => {
+      if (!e.dataTransfer.items[0].webkitGetAsEntry) {
+        const files = e.dataTransfer.files.filter(v => v.size > 0);
+        for (const file of files) {
+          new Uploader(file, []).upload();
+        }
+      } else {
+        const entries = [];
+        const len = e.dataTransfer.items.length;
+        for (let i = 0; i < len; i++) {
+          entries.push(e.dataTransfer.items[i].webkitGetAsEntry());
+        }
+        addFileEntries(entries, [])
+      }
+    });
+}
+
+async function addFileEntries(entries, dirs) {
+  for (const entry of entries) {
+    if (entry.isFile) {
+      entry.file(file => {
+        new Uploader(file, dirs).upload();
+      });
+    } else if (entry.isDirectory) {
+      const dirReader = entry.createReader()
+      dirReader.readEntries(entries => addFileEntries(entries, [...dirs, entry.name]));
+    }
+  }
+}
+
+
+function getUrl(name) {
+    let url = location.href.split('?')[0];
+    if (!url.endsWith("/")) url += "/";
+    url += encodeURI(name);
+    return url;
+}
+
+function getSvg(path_type) {
+  switch (path_type) {
+    case "Dir":
+      return `<svg height="16" viewBox="0 0 14 16" width="14"><path fill-rule="evenodd" d="M13 4H7V3c0-.66-.31-1-1-1H1c-.55 0-1 .45-1 1v10c0 .55.45 1 1 1h12c.55 0 1-.45 1-1V5c0-.55-.45-1-1-1zM6 4H1V3h5v1z"></path></svg>`;
+    case "File":
+      return `<svg height="16" viewBox="0 0 12 16" width="12"><path fill-rule="evenodd" d="M6 5H2V4h4v1zM2 8h7V7H2v1zm0 2h7V9H2v1zm0 2h7v-1H2v1zm10-7.5V14c0 .55-.45 1-1 1H1c-.55 0-1-.45-1-1V2c0-.55.45-1 1-1h7.5L12 4.5zM11 5L8 2H1v12h10V5z"></path></svg>`;
+    case "SymlinkDir":
+      return `<svg height="16" viewBox="0 0 14 16" width="14"><path fill-rule="evenodd" d="M13 4H7V3c0-.66-.31-1-1-1H1c-.55 0-1 .45-1 1v10c0 .55.45 1 1 1h12c.55 0 1-.45 1-1V5c0-.55-.45-1-1-1zM1 3h5v1H1V3zm6 9v-2c-.98-.02-1.84.22-2.55.7-.71.48-1.19 1.25-1.45 2.3.02-1.64.39-2.88 1.13-3.73C4.86 8.43 5.82 8 7.01 8V6l4 3-4 3H7z"></path></svg>`;
+    default:
+      return `<svg height="16" viewBox="0 0 12 16" width="12"><path fill-rule="evenodd" d="M8.5 1H1c-.55 0-1 .45-1 1v12c0 .55.45 1 1 1h10c.55 0 1-.45 1-1V4.5L8.5 1zM11 14H1V2h7l3 3v9zM6 4.5l4 3-4 3v-2c-.98-.02-1.84.22-2.55.7-.71.48-1.19 1.25-1.45 2.3.02-1.64.39-2.88 1.13-3.73.73-.84 1.69-1.27 2.88-1.27v-2H6z"></path></svg>`;
+  }
+}
+
+function formatMtime(mtime) {
+  if (!mtime) return ""
+  const date = new Date(mtime);
+  const year = date.getFullYear();
+  const month = padZero(date.getMonth() + 1, 2);
+  const day = padZero(date.getDate(), 2);
+  const hours = padZero(date.getHours(), 2);
+  const minutes = padZero(date.getMinutes(), 2);
+  return `${year}/${month}/${day} ${hours}:${minutes}`;
+}
+
+function padZero(value, size) {
+  return ("0".repeat(size) + value).slice(-1 * size)
+}
+
+function formatSize(size) {
+  if (!size) return ""
+  const sizes = ['B', 'KB', 'MB', 'GB', 'TB'];
+  if (size == 0) return '0 Byte';
+  const i = parseInt(Math.floor(Math.log(size) / Math.log(1024)));
+  return Math.round(size / Math.pow(1024, i), 2) + ' ' + sizes[i];
+}
+
+function ready() {
+  $tbody = document.querySelector(".main tbody");
+  $uploaders = document.querySelector(".uploaders");
+
+  addBreadcrumb(DATA.breadcrumb);
+  if (Array.isArray(DATA.paths)) {
+    const len = DATA.paths.length;
+    for (let i = 0; i < len; i++) {
+      addPath(DATA.paths[i], i);
+    }
+  }
+  if (DATA.allow_upload) {
+    dropzone();
+    document.querySelector(".upload-control").classList.remove(["hidden"]);
+    document.getElementById("file").addEventListener("change", e => {
+      const files = e.target.files;
+      for (let file of files) {
+        new Uploader(file, []).upload();
+      }
+    });
+  }
+}
--- a/src/args.rs
+++ b/src/args.rs
@@ -1,52 +1,105 @@
 use clap::crate_description;
 use clap::{Arg, ArgMatches};
-use std::env;
-use std::fs::canonicalize;
+use rustls::{Certificate, PrivateKey};
 use std::net::SocketAddr;
 use std::path::{Path, PathBuf};
+use std::{env, fs, io};

 use crate::BoxResult;

 const ABOUT: &str = concat!("\n", crate_description!()); // Add extra newline.

 fn app() -> clap::Command<'static> {
-    let arg_port = Arg::new("port")
-        .short('p')
-        .long("port")
-        .default_value("5000")
-        .help("Specify port to listen on")
-        .value_name("port");
-
-    let arg_address = Arg::new("address")
+    clap::command!()
+        .about(ABOUT)
+        .arg(
+            Arg::new("address")
                .short('b')
                .long("bind")
                .default_value("127.0.0.1")
                .help("Specify bind address")
-        .value_name("address");
-
-    let arg_path = Arg::new("path")
+                .value_name("address"),
+        )
+        .arg(
+            Arg::new("port")
+                .short('p')
+                .long("port")
+                .default_value("5000")
+                .help("Specify port to listen on")
+                .value_name("port"),
+        )
+        .arg(
+            Arg::new("path")
                .default_value(".")
                .allow_invalid_utf8(true)
-        .help("Path to a directory for serving files");
-
-    let arg_readonly = Arg::new("readonly")
-        .short('r')
-        .long("readonly")
-        .help("Only serve static files, no operations like upload and delete");
-
-    let arg_auth = Arg::new("auth")
+                .help("Path to a root directory for serving files"),
+        )
+        .arg(
+            Arg::new("path-prefix")
+                .long("path-prefix")
+                .value_name("path")
+                .help("Specify an url path prefix"),
+        )
+        .arg(
+            Arg::new("allow-all")
+                .short('A')
+                .long("allow-all")
+                .help("Allow all operations"),
+        )
+        .arg(
+            Arg::new("allow-upload")
+                .long("allow-upload")
+                .help("Allow upload operation"),
+        )
+        .arg(
+            Arg::new("allow-delete")
+                .long("allow-delete")
+                .help("Allow delete operation"),
+        )
+        .arg(
+            Arg::new("allow-symlink")
+                .long("allow-symlink")
+                .help("Allow symlink to directories/files outside root directory"),
+        )
+        .arg(
+            Arg::new("render-index")
+                .long("render-index")
+                .help("Render existing index.html when requesting a directory"),
+        )
+        .arg(
+            Arg::new("render-spa")
+                .long("render-spa")
+                .help("Render spa, rewrite all not-found requests to `index.html"),
+        )
+        .arg(
+            Arg::new("auth")
                .short('a')
                .long("auth")
-        .help("Authenticate with user and pass")
-        .value_name("user:pass");
-
-    clap::command!()
-        .about(ABOUT)
-        .arg(arg_address)
-        .arg(arg_port)
-        .arg(arg_path)
-        .arg(arg_readonly)
-        .arg(arg_auth)
+                .help("Use HTTP authentication for all operations")
+                .value_name("user:pass"),
+        )
+        .arg(
+            Arg::new("no-auth-read")
+                .long("no-auth-read")
+                .help("Do not authenticate read operations like static serving"),
+        )
+        .arg(
+            Arg::new("cors")
+                .long("cors")
+                .help("Enable CORS, sets `Access-Control-Allow-Origin: *`"),
+        )
+        .arg(
+            Arg::new("tls-cert")
+                .long("tls-cert")
+                .value_name("path")
+                .help("Path to an SSL/TLS certificate to serve with HTTPS"),
+        )
+        .arg(
+            Arg::new("tls-key")
+                .long("tls-key")
+                .value_name("path")
+                .help("Path to the SSL/TLS certificate's private key"),
+        )
 }

 pub fn matches() -> ArgMatches {
@@ -58,8 +111,16 @@ pub struct Args {
    pub address: String,
    pub port: u16,
    pub path: PathBuf,
-    pub readonly: bool,
+    pub path_prefix: Option<String>,
    pub auth: Option<String>,
+    pub no_auth_read: bool,
+    pub allow_upload: bool,
+    pub allow_delete: bool,
+    pub allow_symlink: bool,
+    pub render_index: bool,
+    pub render_spa: bool,
+    pub cors: bool,
+    pub tls: Option<(Vec<Certificate>, PrivateKey)>,
 }

 impl Args {
@@ -70,17 +131,39 @@ impl Args {
    pub fn parse(matches: ArgMatches) -> BoxResult<Args> {
        let address = matches.value_of("address").unwrap_or_default().to_owned();
        let port = matches.value_of_t::<u16>("port")?;
-        let path = matches.value_of_os("path").unwrap_or_default();
-        let path = Args::parse_path(path)?;
-        let readonly = matches.is_present("readonly");
+        let path = Args::parse_path(matches.value_of_os("path").unwrap_or_default())?;
+        let path_prefix = matches.value_of("path-prefix").map(|v| v.to_owned());
+        let cors = matches.is_present("cors");
        let auth = matches.value_of("auth").map(|v| v.to_owned());
+        let no_auth_read = matches.is_present("no-auth-read");
+        let allow_upload = matches.is_present("allow-all") || matches.is_present("allow-upload");
+        let allow_delete = matches.is_present("allow-all") || matches.is_present("allow-delete");
+        let allow_symlink = matches.is_present("allow-all") || matches.is_present("allow-symlink");
+        let render_index = matches.is_present("render-index");
+        let render_spa = matches.is_present("render-spa");
+        let tls = match (matches.value_of("tls-cert"), matches.value_of("tls-key")) {
+            (Some(certs_file), Some(key_file)) => {
+                let certs = load_certs(certs_file)?;
+                let key = load_private_key(key_file)?;
+                Some((certs, key))
+            }
+            _ => None,
+        };

        Ok(Args {
            address,
            port,
            path,
-            readonly,
+            path_prefix,
            auth,
+            no_auth_read,
+            cors,
+            allow_delete,
+            allow_upload,
+            allow_symlink,
+            render_index,
+            render_spa,
+            tls,
        })
    }

@@ -94,7 +177,7 @@ impl Args {
        env::current_dir()
            .and_then(|mut p| {
                p.push(path); // If path is absolute, it replaces the current path.
-                canonicalize(p)
+                std::fs::canonicalize(p)
            })
            .or_else(|err| {
                bail!(
@@ -119,3 +202,35 @@ impl Args {
            })
    }
 }
+
+// Load public certificate from file.
+pub fn load_certs(filename: &str) -> BoxResult<Vec<Certificate>> {
+    // Open certificate file.
+    let certfile =
+        fs::File::open(&filename).map_err(|e| format!("Failed to open {}: {}", &filename, e))?;
+    let mut reader = io::BufReader::new(certfile);
+
+    // Load and return certificate.
+    let certs = rustls_pemfile::certs(&mut reader).map_err(|_| "Failed to load certificate")?;
+    if certs.is_empty() {
+        return Err("Expected at least one certificate".into());
+    }
+    Ok(certs.into_iter().map(Certificate).collect())
+}
+
+// Load private key from file.
+pub fn load_private_key(filename: &str) -> BoxResult<PrivateKey> {
+    // Open keyfile.
+    let keyfile =
+        fs::File::open(&filename).map_err(|e| format!("Failed to open {}: {}", &filename, e))?;
+    let mut reader = io::BufReader::new(keyfile);
+
+    // Load and return a single private key.
+    let keys = rustls_pemfile::rsa_private_keys(&mut reader)
+        .map_err(|e| format!("There was a problem with reading private key: {:?}", e))?;
+
+    if keys.len() != 1 {
+        return Err("Expected a single private key".into());
+    }
+    Ok(PrivateKey(keys[0].to_owned()))
+}
--- a/src/index.html
+++ b/src/index.html
@@ -1,210 +0,0 @@
-<!DOCTYPE html>
-<html>
-
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width" />
-  <title>Duf</title>
-  __STYLE__
-</head>
-<body>
-  <div class="head">
-    <div class="breadcrumb"></div>
-  </div>
-  <div class="main">
-    <div class="uploaders">
-    </div>
-    <table>
-      <thead>
-        <tr>
-          <th class="cell-name">Name</th>
-          <th class="cell-mtime">Date modify</th>
-          <th class="cell-size">Size</th>
-        </tr>
-      </thead>
-      <tbody>
-      </tbody>
-    </table>
-  </div>
-  <script>
-
-    const $head = document.querySelector(".head");
-    const $tbody = document.querySelector(".main tbody");
-    const $breadcrumb = document.querySelector(".breadcrumb");
-    const $uploaders = document.querySelector(".uploaders");
-    const $uploadControl = document.querySelector(".upload-control");
-    const { breadcrumb, paths, readonly } = __DATA__;
-    let uploaderIdx = 0;
-
-    class Uploader {
-      idx = 0;
-      file;
-      path;
-      $elem;
-      constructor(idx, file) {
-        this.idx = idx;
-        this.file = file;
-        this.path = location.pathname + "/" + file.name;
-      }
-
-      upload() {
-        const { file, idx, path } = this;
-        $uploaders.insertAdjacentHTML("beforeend", `
-      <div class="uploader path">
-        <div><svg height="16" viewBox="0 0 12 16" width="12"><path fill-rule="evenodd" d="M6 5H2V4h4v1zM2 8h7V7H2v1zm0 2h7V9H2v1zm0 2h7v-1H2v1zm10-7.5V14c0 .55-.45 1-1 1H1c-.55 0-1-.45-1-1V2c0-.55.45-1 1-1h7.5L12 4.5zM11 5L8 2H1v12h10V5z"></path></svg></div>
-        <a href="${path}" id="file${idx}">${file.name} (0%)</a>
-      </div>`);
-        this.$elem = document.getElementById(`file${idx}`);
-
-        const ajax = new XMLHttpRequest();
-        ajax.upload.addEventListener("progress", e => this.progress(e), false);
-        ajax.addEventListener("load", e => this.complete(e), false);
-        ajax.addEventListener("error", e => this.error(e), false);
-        ajax.addEventListener("abort", e => this.abort(e), false);
-        ajax.open("PUT", path);
-        ajax.send(file);
-      }
-
-      progress(event) {
-        const percent = (event.loaded / event.total) * 100;
-        this.$elem.innerHTML = `${this.file.name} (${percent.toFixed(2)}%)`;
-      }
-
-      complete(event) {
-        this.$elem.innerHTML = `${this.file.name}`;
-      }
-
-      error(event) {
-        this.$elem.innerHTML = `${this.file.name} (x)`;
-      }
-      
-      abort(event) {
-        this.$elem.innerHTML = `${this.file.name} (x)`;
-      }
-    }
-
-    function addBreadcrumb(value) {
-      const parts = value.split("/").filter(v => !!v);
-      const len = parts.length;
-      let path = "";
-      for (let i = 0; i < len; i++) {
-        const name = parts[i];
-        if (i > 0) {
-          path  += "/" + name;
-        }
-        if (i === len - 1) {
-          $breadcrumb.insertAdjacentHTML("beforeend", `<b>${name}</b>`);
-        } else if (i === 0) {
-          $breadcrumb.insertAdjacentHTML("beforeend", `<a href="/"><b>${name}</b></a>`);
-        } else {
-          $breadcrumb.insertAdjacentHTML("beforeend", `<a href="${encodeURI(path)}">${name}</a>`);
-        }
-        $breadcrumb.insertAdjacentHTML("beforeend", `<span class="separator">/</span>`);
-      }
-    }
-
-    function addPath(file, index) {
-      const actionTd = readonly ? "" : `
-      <td class="cell-actions">
-        <div onclick="deletePath(${index})" class="delete-btn" id="deleteBtn${index}" title="Delete ${file.name}">
-          <svg width="18" height="18" viewBox="0 0 40 40"><path d="M28,40H11.8c-3.3,0-5.9-2.7-5.9-5.9V16c0-0.6,0.4-1,1-1s1,0.4,1,1v18.1c0,2.2,1.8,3.9,3.9,3.9H28c2.2,0,3.9-1.8,3.9-3.9V16   c0-0.6,0.4-1,1-1s1,0.4,1,1v18.1C33.9,37.3,31.2,40,28,40z"/></g><g><path d="M33.3,4.9h-7.6C25.2,2.1,22.8,0,19.9,0s-5.3,2.1-5.8,4.9H6.5c-2.3,0-4.1,1.8-4.1,4.1S4.2,13,6.5,13h26.9   c2.3,0,4.1-1.8,4.1-4.1S35.6,4.9,33.3,4.9z M19.9,2c1.8,0,3.3,1.2,3.7,2.9h-7.5C16.6,3.2,18.1,2,19.9,2z M33.3,11H6.5   c-1.1,0-2.1-0.9-2.1-2.1c0-1.1,0.9-2.1,2.1-2.1h26.9c1.1,0,2.1,0.9,2.1,2.1C35.4,10.1,34.5,11,33.3,11z"/></g><g><path d="M12.9,35.1c-0.6,0-1-0.4-1-1V17.4c0-0.6,0.4-1,1-1s1,0.4,1,1v16.7C13.9,34.6,13.4,35.1,12.9,35.1z"/></g><g><path d="M26.9,35.1c-0.6,0-1-0.4-1-1V17.4c0-0.6,0.4-1,1-1s1,0.4,1,1v16.7C27.9,34.6,27.4,35.1,26.9,35.1z"/></g><g><path d="M19.9,35.1c-0.6,0-1-0.4-1-1V17.4c0-0.6,0.4-1,1-1s1,0.4,1,1v16.7C20.9,34.6,20.4,35.1,19.9,35.1z"/></svg>
-        </div>
-      </td>`
-
-      $tbody.insertAdjacentHTML("beforeend", `
-  <tr id="addPath${index}">
-    <td class="path cell-name">
-      <div>${getSvg(file.path_type)}</div>
-      <a href="${encodeURI(file.path)}" title="${file.name}">${file.name}</a>
-    </td>
-    <td class="cell-mtime">${formatMtime(file.mtime)}</td>
-    <td class="cell-size">${formatSize(file.size)}</td>
-    ${actionTd}
-  </tr>`)
-    }
-
-    async function deletePath(index) {
-      const file = paths[index];
-      if (!file) return;
-      try {
-        const res = await fetch(encodeURI(file.path), {
-          method: "DELETE",
-        });
-        if (res.status !== 200) {
-          const text = await res.text();
-          throw new Error(text);
-        }
-        document.getElementById(`addPath${index}`).remove();
-      } catch (err) {
-        alert(`Failed to delete ${file.name}, ${err.message}`);
-      }
-    }
-
-    function addUploadControl() {
-      $head.insertAdjacentHTML("beforeend", `
-    <div class="upload-control" title="Upload file">
-      <label for="file">
-        <svg viewBox="0 0 384.97 384.97" width="14" height="14"><path d="M372.939,264.641c-6.641,0-12.03,5.39-12.03,12.03v84.212H24.061v-84.212c0-6.641-5.39-12.03-12.03-12.03 S0,270.031,0,276.671v96.242c0,6.641,5.39,12.03,12.03,12.03h360.909c6.641,0,12.03-5.39,12.03-12.03v-96.242 C384.97,270.019,379.58,264.641,372.939,264.641z"></path><path d="M117.067,103.507l63.46-62.558v235.71c0,6.641,5.438,12.03,12.151,12.03c6.713,0,12.151-5.39,12.151-12.03V40.95 l63.46,62.558c4.74,4.704,12.439,4.704,17.179,0c4.74-4.704,4.752-12.319,0-17.011l-84.2-82.997 c-4.692-4.656-12.584-4.608-17.191,0L99.888,86.496c-4.752,4.704-4.74,12.319,0,17.011 C104.628,108.211,112.327,108.211,117.067,103.507z"></path></svg>
-      </label>
-      <input type="file" id="file" name="file" multiple>
-    </div>
-`);
-    }
-
-    function getSvg(path_type) {
-      switch (path_type) {
-        case "Dir":
-          return `<svg height="16" viewBox="0 0 14 16" width="14"><path fill-rule="evenodd" d="M13 4H7V3c0-.66-.31-1-1-1H1c-.55 0-1 .45-1 1v10c0 .55.45 1 1 1h12c.55 0 1-.45 1-1V5c0-.55-.45-1-1-1zM6 4H1V3h5v1z"></path></svg>`;
-        case "File":
-          return `<svg height="16" viewBox="0 0 12 16" width="12"><path fill-rule="evenodd" d="M6 5H2V4h4v1zM2 8h7V7H2v1zm0 2h7V9H2v1zm0 2h7v-1H2v1zm10-7.5V14c0 .55-.45 1-1 1H1c-.55 0-1-.45-1-1V2c0-.55.45-1 1-1h7.5L12 4.5zM11 5L8 2H1v12h10V5z"></path></svg>`;
-        case "SymlinkDir":
-          return `<svg height="16" viewBox="0 0 14 16" width="14"><path fill-rule="evenodd" d="M13 4H7V3c0-.66-.31-1-1-1H1c-.55 0-1 .45-1 1v10c0 .55.45 1 1 1h12c.55 0 1-.45 1-1V5c0-.55-.45-1-1-1zM1 3h5v1H1V3zm6 9v-2c-.98-.02-1.84.22-2.55.7-.71.48-1.19 1.25-1.45 2.3.02-1.64.39-2.88 1.13-3.73C4.86 8.43 5.82 8 7.01 8V6l4 3-4 3H7z"></path></svg>`;
-        default:
-          return `<svg height="16" viewBox="0 0 12 16" width="12"><path fill-rule="evenodd" d="M8.5 1H1c-.55 0-1 .45-1 1v12c0 .55.45 1 1 1h10c.55 0 1-.45 1-1V4.5L8.5 1zM11 14H1V2h7l3 3v9zM6 4.5l4 3-4 3v-2c-.98-.02-1.84.22-2.55.7-.71.48-1.19 1.25-1.45 2.3.02-1.64.39-2.88 1.13-3.73.73-.84 1.69-1.27 2.88-1.27v-2H6z"></path></svg>`;
-      }
-    }
-
-    function formatMtime(mtime) {
-      if (!mtime) return ""
-      const date = new Date(mtime);
-      const year = date.getFullYear();
-      const month = padZero(date.getMonth() + 1, 2);
-      const day = padZero(date.getDate(), 2);
-      const hours = padZero(date.getHours(), 2);
-      const minutes = padZero(date.getMinutes(), 2);
-      return `${year}/${month}/${day} ${hours}:${minutes}`;
-    }
-
-    function padZero(value, size) {
-      return ("0".repeat(size) + value).slice(-1 * size)
-    }
-
-    function formatSize(size) {
-      if (!size) return ""
-      const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB'];
-      if (size == 0) return '0 Byte';
-      const i = parseInt(Math.floor(Math.log(size) / Math.log(1024)));
-      return Math.round(size / Math.pow(1024, i), 2) + ' ' + sizes[i];
-    }
-
-
-
-    document.addEventListener('DOMContentLoaded', () => {
-      addBreadcrumb(breadcrumb);
-      paths.forEach((file, index) => addPath(file, index));
-      if (!readonly) {
-        addUploadControl();
-        document.querySelector(".main thead tr").insertAdjacentHTML("beforeend", `<th class="cell-actions">Actions</th>`);
-        document.getElementById("file").addEventListener("change", e => {
-          const files = e.target.files;
-          for (const file of files) {
-            uploaderIdx += 1;
-            const uploader = new Uploader(uploaderIdx, file);
-            uploader.upload();
-          }
-        });
-      }
-    });
-  </script>
-</body>
-</html>
--- a/src/main.rs
+++ b/src/main.rs
@@ -14,11 +14,12 @@ use crate::server::serve;

 #[tokio::main]
 async fn main() {
-    Args::parse(matches())
-        .map(serve)
-        .unwrap_or_else(handle_err)
-        .await
-        .unwrap_or_else(handle_err);
+    run().await.unwrap_or_else(handle_err)
+}
+
+async fn run() -> BoxResult<()> {
+    let args = Args::parse(matches())?;
+    serve(args).await
 }

 fn handle_err<T>(err: Box<dyn std::error::Error>) -> T {
--- a/src/server.rs
+++ b/src/server.rs
@@ -1,115 +1,252 @@
 use crate::{Args, BoxResult};

+use async_walkdir::WalkDir;
+use async_zip::read::seek::ZipFileReader;
+use async_zip::write::{EntryOptions, ZipFileWriter};
+use async_zip::Compression;
+use chrono::Local;
+use futures::stream::StreamExt;
 use futures::TryStreamExt;
-use hyper::header::HeaderValue;
+use get_if_addrs::get_if_addrs;
+use headers::{
+    AcceptRanges, AccessControlAllowHeaders, AccessControlAllowOrigin, ContentLength, ContentRange,
+    ContentType, ETag, HeaderMap, HeaderMapExt, IfModifiedSince, IfNoneMatch, IfRange,
+    LastModified, Range,
+};
+use hyper::header::{
+    HeaderValue, ACCEPT, AUTHORIZATION, CONTENT_DISPOSITION, CONTENT_TYPE, ORIGIN, RANGE,
+    WWW_AUTHENTICATE,
+};
 use hyper::service::{make_service_fn, service_fn};
 use hyper::{Body, Method, StatusCode};
 use percent_encoding::percent_decode;
+use rustls::ServerConfig;
 use serde::Serialize;
 use std::convert::Infallible;
+use std::fs::Metadata;
+use std::net::IpAddr;
 use std::path::{Path, PathBuf};
 use std::sync::Arc;
 use std::time::SystemTime;
+use tokio::fs::File;
+use tokio::io::{AsyncReadExt, AsyncSeekExt, AsyncWrite};
+use tokio::net::TcpListener;
 use tokio::{fs, io};
+use tokio_rustls::TlsAcceptor;
 use tokio_util::codec::{BytesCodec, FramedRead};
-use tokio_util::io::StreamReader;
+use tokio_util::io::{ReaderStream, StreamReader};

 type Request = hyper::Request<Body>;
 type Response = hyper::Response<Body>;

-macro_rules! status_code {
-    ($status:expr) => {
-        hyper::Response::builder()
-            .status($status)
-            .body($status.canonical_reason().unwrap_or_default().into())
-            .unwrap()
+const INDEX_HTML: &str = include_str!("../assets/index.html");
+const INDEX_CSS: &str = include_str!("../assets/index.css");
+const INDEX_JS: &str = include_str!("../assets/index.js");
+const INDEX_NAME: &str = "index.html";
+const BUF_SIZE: usize = 1024 * 16;
+
+macro_rules! status {
+    ($res:ident, $status:expr) => {
+        *$res.status_mut() = $status;
+        *$res.body_mut() = Body::from($status.canonical_reason().unwrap_or_default());
    };
 }

-const INDEX_HTML: &str = include_str!("index.html");
-const INDEX_CSS: &str = include_str!("index.css");
-
 pub async fn serve(args: Args) -> BoxResult<()> {
-    let address = args.address()?;
-    let inner = Arc::new(InnerService::new(args));
-    let make_svc = make_service_fn(move |_| {
+    let args = Arc::new(args);
+    let socket_addr = args.address()?;
+    let inner = Arc::new(InnerService::new(args.clone()));
+    if let Some((certs, key)) = args.tls.as_ref() {
+        let config = ServerConfig::builder()
+            .with_safe_defaults()
+            .with_no_client_auth()
+            .with_single_cert(certs.clone(), key.clone())?;
+        let tls_acceptor = TlsAcceptor::from(Arc::new(config));
+        let arc_acceptor = Arc::new(tls_acceptor);
+        let listener = TcpListener::bind(&socket_addr).await.unwrap();
+        let incoming = tokio_stream::wrappers::TcpListenerStream::new(listener);
+        let incoming = hyper::server::accept::from_stream(incoming.filter_map(|socket| async {
+            match socket {
+                Ok(stream) => match arc_acceptor.clone().accept(stream).await {
+                    Ok(val) => Some(Ok::<_, Infallible>(val)),
+                    Err(_) => None,
+                },
+                Err(_) => None,
+            }
+        }));
+        let server = hyper::Server::builder(incoming).serve(make_service_fn(move |_| {
            let inner = inner.clone();
-        async {
+            async move {
                Ok::<_, Infallible>(service_fn(move |req| {
                    let inner = inner.clone();
-                inner.handle(req)
+                    inner.call(req)
                }))
            }
-    });
-
-    let server = hyper::Server::try_bind(&address)?.serve(make_svc);
-    let address = server.local_addr();
-    eprintln!("Files served on http://{}", address);
+        }));
+        print_listening(args.address.as_str(), args.port, true);
        server.await?;
+    } else {
+        let server = hyper::Server::bind(&socket_addr).serve(make_service_fn(move |_| {
+            let inner = inner.clone();
+            async move {
+                Ok::<_, Infallible>(service_fn(move |req| {
+                    let inner = inner.clone();
+                    inner.call(req)
+                }))
+            }
+        }));
+        print_listening(args.address.as_str(), args.port, false);
+        server.await?;
+    }

    Ok(())
 }

 struct InnerService {
-    args: Args,
+    args: Arc<Args>,
 }

 impl InnerService {
-    pub fn new(args: Args) -> Self {
+    pub fn new(args: Arc<Args>) -> Self {
        Self { args }
    }

-    pub async fn handle(self: Arc<Self>, req: Request) -> Result<Response, hyper::Error> {
-        if !self.auth_guard(&req).unwrap_or_default() {
-            let mut res = status_code!(StatusCode::UNAUTHORIZED);
-            res.headers_mut()
-                .insert("WWW-Authenticate", HeaderValue::from_static("Basic"));
+    pub async fn call(self: Arc<Self>, req: Request) -> Result<Response, hyper::Error> {
+        let method = req.method().clone();
+        let uri = req.uri().clone();
+        let cors = self.args.cors;
+
+        let timestamp = Local::now().format("%d/%b/%Y %H:%M:%S");
+        let mut res = match self.handle(req).await {
+            Ok(res) => {
+                println!(r#"[{}] "{} {}" - {}"#, timestamp, method, uri, res.status());
+                res
+            }
+            Err(err) => {
+                let mut res = Response::default();
+                let status = StatusCode::INTERNAL_SERVER_ERROR;
+                status!(res, status);
+                eprintln!(
+                    r#"[{}] "{} {}" - {} {}"#,
+                    timestamp, method, uri, status, err
+                );
+                res
+            }
+        };
+
+        if cors {
+            add_cors(&mut res);
+        }
+        Ok(res)
+    }
+
+    pub async fn handle(self: Arc<Self>, req: Request) -> BoxResult<Response> {
+        let mut res = Response::default();
+
+        if !self.auth_guard(&req, &mut res) {
            return Ok(res);
        }

-        let res = if req.method() == Method::GET {
-            self.handle_static(req).await
-        } else if req.method() == Method::PUT {
-            if self.args.readonly {
-                return Ok(status_code!(StatusCode::FORBIDDEN));
+        let req_path = req.uri().path();
+
+        let path = match self.extract_path(req_path) {
+            Some(v) => v,
+            None => {
+                status!(res, StatusCode::FORBIDDEN);
+                return Ok(res);
            }
-            self.handle_upload(req).await
-        } else if req.method() == Method::DELETE {
-            self.handle_delete(req).await
+        };
+        let path = path.as_path();
+
+        let query = req.uri().query().unwrap_or_default();
+
+        let meta = fs::metadata(path).await.ok();
+
+        let is_miss = meta.is_none();
+        let is_dir = meta.map(|v| v.is_dir()).unwrap_or_default();
+        let is_file = !is_miss && !is_dir;
+
+        let allow_upload = self.args.allow_upload;
+        let allow_delete = self.args.allow_delete;
+        let render_index = self.args.render_index;
+        let render_spa = self.args.render_spa;
+
+        if !self.args.allow_symlink && !is_miss && !self.is_root_contained(path).await {
+            status!(res, StatusCode::NOT_FOUND);
+            return Ok(res);
+        }
+
+        match *req.method() {
+            Method::GET => {
+                let headers = req.headers();
+                if is_dir {
+                    if render_index || render_spa {
+                        self.handle_render_index(path, headers, &mut res).await?;
+                    } else if query == "zip" {
+                        self.handle_zip_dir(path, &mut res).await?;
+                    } else if query.starts_with("q=") {
+                        self.handle_query_dir(path, &query[3..], &mut res).await?;
                    } else {
-            return Ok(status_code!(StatusCode::NOT_FOUND));
-        };
-        Ok(res.unwrap_or_else(|_| status_code!(StatusCode::INTERNAL_SERVER_ERROR)))
+                        self.handle_ls_dir(path, true, &mut res).await?;
                    }
-
-    async fn handle_static(&self, req: Request) -> BoxResult<Response> {
-        let path = match self.get_file_path(req.uri().path())? {
-            Some(path) => path,
-            None => return Ok(status_code!(StatusCode::FORBIDDEN)),
-        };
-        match fs::metadata(&path).await {
-            Ok(meta) => {
-                if meta.is_dir() {
-                    self.handle_send_dir(path.as_path()).await
+                } else if is_file {
+                    self.handle_send_file(path, headers, &mut res).await?;
+                } else if render_spa {
+                    self.handle_render_spa(path, headers, &mut res).await?;
+                } else if allow_upload && req_path.ends_with('/') {
+                    self.handle_ls_dir(path, false, &mut res).await?;
                } else {
-                    self.handle_send_file(path.as_path()).await
+                    status!(res, StatusCode::NOT_FOUND);
                }
            }
-            Err(_) => Ok(status_code!(StatusCode::NOT_FOUND)),
+            Method::OPTIONS => {
+                status!(res, StatusCode::NO_CONTENT);
            }
+            Method::PUT => {
+                if !allow_upload || (!allow_delete && is_file) {
+                    status!(res, StatusCode::FORBIDDEN);
+                } else {
+                    self.handle_upload(path, req, &mut res).await?;
+                }
+            }
+            Method::DELETE => {
+                if !allow_delete {
+                    status!(res, StatusCode::FORBIDDEN);
+                } else if !is_miss {
+                    self.handle_delete(path, is_dir).await?
+                } else {
+                    status!(res, StatusCode::NOT_FOUND);
+                }
+            }
+            _ => {
+                status!(res, StatusCode::METHOD_NOT_ALLOWED);
+            }
+        }
+        Ok(res)
    }

-    async fn handle_upload(&self, mut req: Request) -> BoxResult<Response> {
-        let path = match self.get_file_path(req.uri().path())? {
-            Some(path) => path,
-            None => return Ok(status_code!(StatusCode::FORBIDDEN)),
+    async fn handle_upload(
+        &self,
+        path: &Path,
+        mut req: Request,
+        res: &mut Response,
+    ) -> BoxResult<()> {
+        let ensure_parent = match path.parent() {
+            Some(parent) => match fs::metadata(parent).await {
+                Ok(meta) => meta.is_dir(),
+                Err(_) => {
+                    fs::create_dir_all(parent).await?;
+                    true
+                }
+            },
+            None => false,
        };
-
-        if !fs::metadata(&path.parent().unwrap()).await?.is_dir() {
-            return Ok(status_code!(StatusCode::FORBIDDEN));
+        if !ensure_parent {
+            status!(res, StatusCode::FORBIDDEN);
+            return Ok(());
        }

-        let mut file = fs::File::create(path).await?;
+        let mut file = fs::File::create(&path).await?;

        let body_with_io_error = req
            .body_mut()
@@ -121,150 +258,360 @@ impl InnerService {

        io::copy(&mut body_reader, &mut file).await?;

-        return Ok(status_code!(StatusCode::OK));
-    }
-
-    async fn handle_delete(&self, req: Request) -> BoxResult<Response> {
-        let path = match self.get_file_path(req.uri().path())? {
-            Some(path) => path,
-            None => return Ok(status_code!(StatusCode::FORBIDDEN)),
-        };
-
-        let meta = fs::metadata(&path).await?;
-        if meta.is_file() {
-            fs::remove_file(path).await?;
+        let query = req.uri().query().unwrap_or_default();
+        if query == "unzip" {
+            let root = path.parent().unwrap();
+            let mut zip = ZipFileReader::new(File::open(&path).await?).await?;
+            for i in 0..zip.entries().len() {
+                let entry = &zip.entries()[i];
+                let entry_name = entry.name();
+                let entry_path = root.join(entry_name);
+                if entry_name.ends_with('/') {
+                    fs::create_dir_all(entry_path).await?;
                } else {
-            fs::remove_dir_all(path).await?;
+                    if !self.args.allow_delete && fs::metadata(&entry_path).await.is_ok() {
+                        continue;
                    }
-        Ok(status_code!(StatusCode::OK))
+                    if let Some(parent) = entry_path.parent() {
+                        if fs::symlink_metadata(parent).await.is_err() {
+                            fs::create_dir_all(&parent).await?;
+                        }
+                    }
+                    let mut outfile = fs::File::create(&entry_path).await?;
+                    let mut reader = zip.entry_reader(i).await?;
+                    io::copy(&mut reader, &mut outfile).await?;
+                }
+            }
+            fs::remove_file(&path).await?;
        }

-    async fn handle_send_dir(&self, path: &Path) -> BoxResult<Response> {
-        let mut rd = fs::read_dir(path).await?;
+        Ok(())
+    }
+
+    async fn handle_delete(&self, path: &Path, is_dir: bool) -> BoxResult<()> {
+        match is_dir {
+            true => fs::remove_dir_all(path).await?,
+            false => fs::remove_file(path).await?,
+        }
+        Ok(())
+    }
+
+    async fn handle_ls_dir(&self, path: &Path, exist: bool, res: &mut Response) -> BoxResult<()> {
        let mut paths: Vec<PathItem> = vec![];
+        if exist {
+            let mut rd = match fs::read_dir(path).await {
+                Ok(rd) => rd,
+                Err(_) => {
+                    status!(res, StatusCode::FORBIDDEN);
+                    return Ok(());
+                }
+            };
            while let Some(entry) = rd.next_entry().await? {
                let entry_path = entry.path();
-            if let Ok(item) = self.get_path_item(entry_path).await {
+                if let Ok(Some(item)) = self.to_pathitem(entry_path, path.to_path_buf()).await {
                    paths.push(item);
                }
            }
+        }
+        self.send_index(path, paths, res)
+    }

+    async fn handle_query_dir(
+        &self,
+        path: &Path,
+        query: &str,
+        res: &mut Response,
+    ) -> BoxResult<()> {
+        let mut paths: Vec<PathItem> = vec![];
+        let mut walkdir = WalkDir::new(path);
+        while let Some(entry) = walkdir.next().await {
+            if let Ok(entry) = entry {
+                if !entry
+                    .file_name()
+                    .to_string_lossy()
+                    .to_lowercase()
+                    .contains(&query.to_lowercase())
+                {
+                    continue;
+                }
+                if fs::symlink_metadata(entry.path()).await.is_err() {
+                    continue;
+                }
+                if let Ok(Some(item)) = self.to_pathitem(entry.path(), path.to_path_buf()).await {
+                    paths.push(item);
+                }
+            }
+        }
+        self.send_index(path, paths, res)
+    }
+
+    async fn handle_zip_dir(&self, path: &Path, res: &mut Response) -> BoxResult<()> {
+        let (mut writer, reader) = tokio::io::duplex(BUF_SIZE);
+        let filename = path.file_name().unwrap().to_str().unwrap();
+        let path = path.to_owned();
+        tokio::spawn(async move {
+            if let Err(e) = zip_dir(&mut writer, &path).await {
+                eprintln!("Failed to zip {}, {}", path.display(), e);
+            }
+        });
+        let stream = ReaderStream::new(reader);
+        *res.body_mut() = Body::wrap_stream(stream);
+        res.headers_mut().insert(
+            CONTENT_DISPOSITION,
+            HeaderValue::from_str(&format!("attachment; filename=\"{}.zip\"", filename,)).unwrap(),
+        );
+        Ok(())
+    }
+
+    async fn handle_render_index(
+        &self,
+        path: &Path,
+        headers: &HeaderMap<HeaderValue>,
+        res: &mut Response,
+    ) -> BoxResult<()> {
+        let path = path.join(INDEX_NAME);
+        if fs::metadata(&path)
+            .await
+            .ok()
+            .map(|v| v.is_file())
+            .unwrap_or_default()
+        {
+            self.handle_send_file(&path, headers, res).await?;
+        } else {
+            status!(res, StatusCode::NOT_FOUND);
+        }
+        Ok(())
+    }
+
+    async fn handle_render_spa(
+        &self,
+        path: &Path,
+        headers: &HeaderMap<HeaderValue>,
+        res: &mut Response,
+    ) -> BoxResult<()> {
+        if path.extension().is_none() {
+            let path = self.args.path.join(INDEX_NAME);
+            self.handle_send_file(&path, headers, res).await?;
+        } else {
+            status!(res, StatusCode::NOT_FOUND);
+        }
+        Ok(())
+    }
+
+    async fn handle_send_file(
+        &self,
+        path: &Path,
+        headers: &HeaderMap<HeaderValue>,
+        res: &mut Response,
+    ) -> BoxResult<()> {
+        let (file, meta) = tokio::join!(fs::File::open(path), fs::metadata(path),);
+        let (mut file, meta) = (file?, meta?);
+        let mut maybe_range = true;
+        if let Some((etag, last_modified)) = extract_cache_headers(&meta) {
+            let cached = {
+                if let Some(if_none_match) = headers.typed_get::<IfNoneMatch>() {
+                    !if_none_match.precondition_passes(&etag)
+                } else if let Some(if_modified_since) = headers.typed_get::<IfModifiedSince>() {
+                    !if_modified_since.is_modified(last_modified.into())
+                } else {
+                    false
+                }
+            };
+            res.headers_mut().typed_insert(last_modified);
+            res.headers_mut().typed_insert(etag.clone());
+            if cached {
+                status!(res, StatusCode::NOT_MODIFIED);
+                return Ok(());
+            }
+            if headers.typed_get::<Range>().is_some() {
+                maybe_range = headers
+                    .typed_get::<IfRange>()
+                    .map(|if_range| !if_range.is_modified(Some(&etag), Some(&last_modified)))
+                    // Always be fresh if there is no validators
+                    .unwrap_or(true);
+            } else {
+                maybe_range = false;
+            }
+        }
+        let file_range = if maybe_range {
+            if let Some(content_range) = headers
+                .typed_get::<Range>()
+                .and_then(|range| to_content_range(&range, meta.len()))
+            {
+                res.headers_mut().typed_insert(content_range.clone());
+                *res.status_mut() = StatusCode::PARTIAL_CONTENT;
+                content_range.bytes_range()
+            } else {
+                None
+            }
+        } else {
+            None
+        };
+        if let Some(mime) = mime_guess::from_path(&path).first() {
+            res.headers_mut().typed_insert(ContentType::from(mime));
+        }
+        let body = if let Some((begin, end)) = file_range {
+            file.seek(io::SeekFrom::Start(begin)).await?;
+            let stream = FramedRead::new(file.take(end - begin + 1), BytesCodec::new());
+            Body::wrap_stream(stream)
+        } else {
+            let stream = FramedRead::new(file, BytesCodec::new());
+            Body::wrap_stream(stream)
+        };
+        *res.body_mut() = body;
+        res.headers_mut().typed_insert(AcceptRanges::bytes());
+        res.headers_mut()
+            .typed_insert(ContentLength(meta.len() as u64));
+
+        Ok(())
+    }
+
+    fn send_index(
+        &self,
+        path: &Path,
+        mut paths: Vec<PathItem>,
+        res: &mut Response,
+    ) -> BoxResult<()> {
        paths.sort_unstable();
-        let breadcrumb = self.get_breadcrumb(path);
-        let data = SendDirData {
-            breadcrumb,
+        let rel_path = match self.args.path.parent() {
+            Some(p) => path.strip_prefix(p).unwrap(),
+            None => path,
+        };
+        let data = IndexData {
+            breadcrumb: normalize_path(rel_path),
            paths,
-            readonly: self.args.readonly,
+            allow_upload: self.args.allow_upload,
+            allow_delete: self.args.allow_delete,
        };
        let data = serde_json::to_string(&data).unwrap();
+        let output = INDEX_HTML.replace(
+            "__SLOT__",
+            &format!(
+                r#"
+<title>Files in {}/ - Duf</title>
+<style>{}</style>
+<script>var DATA = {}; {}</script>
+"#,
+                rel_path.display(),
+                INDEX_CSS,
+                data,
+                INDEX_JS
+            ),
+        );
+        *res.body_mut() = output.into();

-        let mut output =
-            INDEX_HTML.replace("__STYLE__", &format!("<style>\n{}</style>", INDEX_CSS));
-        output = output.replace("__DATA__", &data);
-
-        Ok(hyper::Response::builder().body(output.into()).unwrap())
+        Ok(())
    }

-    async fn handle_send_file(&self, path: &Path) -> BoxResult<Response> {
-        let file = fs::File::open(path).await?;
-        let stream = FramedRead::new(file, BytesCodec::new());
-        let body = Body::wrap_stream(stream);
-        Ok(Response::new(body))
+    fn auth_guard(&self, req: &Request, res: &mut Response) -> bool {
+        let pass = {
+            match &self.args.auth {
+                None => true,
+                Some(auth) => match req.headers().get(AUTHORIZATION) {
+                    Some(value) => match value.to_str().ok().map(|v| {
+                        let mut it = v.split(' ');
+                        (it.next(), it.next())
+                    }) {
+                        Some((Some("Basic"), Some(tail))) => base64::decode(tail)
+                            .ok()
+                            .and_then(|v| String::from_utf8(v).ok())
+                            .map(|v| v.as_str() == auth)
+                            .unwrap_or_default(),
+                        _ => false,
+                    },
+                    None => self.args.no_auth_read && req.method() == Method::GET,
+                },
            }
-
-    fn auth_guard(&self, req: &Request) -> BoxResult<bool> {
-        if let Some(auth) = &self.args.auth {
-            if let Some(value) = req.headers().get("Authorization") {
-                let value = value.to_str()?;
-                let value = if value.contains("Basic ") {
-                    &value[6..]
-                } else {
-                    return Ok(false);
        };
-                let value = base64::decode(value)?;
-                let value = std::str::from_utf8(&value)?;
-                return Ok(value == auth);
-            } else {
-                return Ok(false);
+        if !pass {
+            status!(res, StatusCode::UNAUTHORIZED);
+            res.headers_mut()
+                .insert(WWW_AUTHENTICATE, HeaderValue::from_static("Basic"));
        }
-        }
-        Ok(true)
+        pass
    }

-    async fn get_path_item<P: AsRef<Path>>(&self, path: P) -> BoxResult<PathItem> {
+    async fn is_root_contained(&self, path: &Path) -> bool {
+        fs::canonicalize(path)
+            .await
+            .ok()
+            .map(|v| v.starts_with(&self.args.path))
+            .unwrap_or_default()
+    }
+
+    fn extract_path(&self, path: &str) -> Option<PathBuf> {
+        let decoded_path = percent_decode(path[1..].as_bytes()).decode_utf8().ok()?;
+        let slashes_switched = if cfg!(windows) {
+            decoded_path.replace('/', "\\")
+        } else {
+            decoded_path.into_owned()
+        };
+        let stripped_path = match self.strip_path_prefix(&slashes_switched) {
+            Some(path) => path,
+            None => return None,
+        };
+        Some(self.args.path.join(&stripped_path))
+    }
+
+    fn strip_path_prefix<'a, P: AsRef<Path>>(&self, path: &'a P) -> Option<&'a Path> {
+        let path = path.as_ref();
+        match self.args.path_prefix.as_deref() {
+            Some(prefix) => {
+                let prefix = prefix.trim_start_matches('/');
+                path.strip_prefix(prefix).ok()
+            }
+            None => Some(path),
+        }
+    }
+
+    async fn to_pathitem<P: AsRef<Path>>(
+        &self,
+        path: P,
+        base_path: P,
+    ) -> BoxResult<Option<PathItem>> {
        let path = path.as_ref();
-        let base_path = &self.args.path;
        let rel_path = path.strip_prefix(base_path).unwrap();
-        let meta = fs::metadata(&path).await?;
-        let s_meta = fs::symlink_metadata(&path).await?;
+        let (meta, meta2) = tokio::join!(fs::metadata(&path), fs::symlink_metadata(&path));
+        let (meta, meta2) = (meta?, meta2?);
+        let is_symlink = meta2.is_symlink();
+        if !self.args.allow_symlink && is_symlink && !self.is_root_contained(path).await {
+            return Ok(None);
+        }
        let is_dir = meta.is_dir();
-        let is_symlink = s_meta.file_type().is_symlink();
        let path_type = match (is_symlink, is_dir) {
            (true, true) => PathType::SymlinkDir,
            (false, true) => PathType::Dir,
            (true, false) => PathType::SymlinkFile,
            (false, false) => PathType::File,
        };
-        let mtime = meta
-            .modified()?
-            .duration_since(SystemTime::UNIX_EPOCH)
-            .ok()
-            .map(|v| v.as_millis() as u64);
+        let mtime = to_timestamp(&meta.modified()?);
        let size = match path_type {
            PathType::Dir | PathType::SymlinkDir => None,
            PathType::File | PathType::SymlinkFile => Some(meta.len()),
        };
-        let name = rel_path
-            .file_name()
-            .and_then(|v| v.to_str())
-            .unwrap_or_default()
-            .to_owned();
-        Ok(PathItem {
+        let name = normalize_path(rel_path);
+        Ok(Some(PathItem {
            path_type,
            name,
-            path: format!("/{}", normalize_path(rel_path)),
            mtime,
            size,
-        })
-    }
-
-    fn get_breadcrumb(&self, path: &Path) -> String {
-        let path = match self.args.path.parent() {
-            Some(p) => path.strip_prefix(p).unwrap(),
-            None => path,
-        };
-        normalize_path(path)
-    }
-
-    fn get_file_path(&self, path: &str) -> BoxResult<Option<PathBuf>> {
-        let decoded_path = percent_decode(path[1..].as_bytes()).decode_utf8()?;
-        let slashes_switched = if cfg!(windows) {
-            decoded_path.replace('/', "\\")
-        } else {
-            decoded_path.into_owned()
-        };
-        let path = self.args.path.join(&slashes_switched);
-        if path.starts_with(&self.args.path) {
-            Ok(Some(path))
-        } else {
-            Ok(None)
-        }
+        }))
    }
 }

 #[derive(Debug, Serialize, Eq, PartialEq, Ord, PartialOrd)]
-struct SendDirData {
+struct IndexData {
    breadcrumb: String,
    paths: Vec<PathItem>,
-    readonly: bool,
+    allow_upload: bool,
+    allow_delete: bool,
 }

 #[derive(Debug, Serialize, Eq, PartialEq, Ord, PartialOrd)]
 struct PathItem {
    path_type: PathType,
    name: String,
-    path: String,
-    mtime: Option<u64>,
+    mtime: u64,
    size: Option<u64>,
 }

@@ -276,6 +623,12 @@ enum PathType {
    SymlinkFile,
 }

+fn to_timestamp(time: &SystemTime) -> u64 {
+    time.duration_since(SystemTime::UNIX_EPOCH)
+        .unwrap()
+        .as_millis() as u64
+}
+
 fn normalize_path<P: AsRef<Path>>(path: P) -> String {
    let path = path.as_ref().to_str().unwrap_or_default();
    if cfg!(windows) {
@@ -284,3 +637,108 @@ fn normalize_path<P: AsRef<Path>>(path: P) -> String {
        path.to_string()
    }
 }
+
+fn add_cors(res: &mut Response) {
+    res.headers_mut()
+        .typed_insert(AccessControlAllowOrigin::ANY);
+    res.headers_mut().typed_insert(
+        vec![RANGE, CONTENT_TYPE, ACCEPT, ORIGIN, WWW_AUTHENTICATE]
+            .into_iter()
+            .collect::<AccessControlAllowHeaders>(),
+    );
+}
+
+async fn zip_dir<W: AsyncWrite + Unpin>(writer: &mut W, dir: &Path) -> BoxResult<()> {
+    let mut writer = ZipFileWriter::new(writer);
+    let mut walkdir = WalkDir::new(dir);
+    while let Some(entry) = walkdir.next().await {
+        if let Ok(entry) = entry {
+            let entry_path = entry.path();
+            let meta = match fs::symlink_metadata(entry.path()).await {
+                Ok(meta) => meta,
+                Err(_) => continue,
+            };
+            if !meta.is_file() {
+                continue;
+            }
+            let filename = match entry_path.strip_prefix(dir).ok().and_then(|v| v.to_str()) {
+                Some(v) => v,
+                None => continue,
+            };
+            let entry_options = EntryOptions::new(filename.to_owned(), Compression::Deflate);
+            let mut file = File::open(&entry_path).await?;
+            let mut file_writer = writer.write_entry_stream(entry_options).await?;
+            io::copy(&mut file, &mut file_writer).await?;
+            file_writer.close().await?;
+        }
+    }
+    writer.close().await?;
+    Ok(())
+}
+
+fn extract_cache_headers(meta: &Metadata) -> Option<(ETag, LastModified)> {
+    let mtime = meta.modified().ok()?;
+    let timestamp = to_timestamp(&mtime);
+    let size = meta.len();
+    let etag = format!(r#""{}-{}""#, timestamp, size)
+        .parse::<ETag>()
+        .unwrap();
+    let last_modified = LastModified::from(mtime);
+    Some((etag, last_modified))
+}
+
+fn to_content_range(range: &Range, complete_length: u64) -> Option<ContentRange> {
+    use core::ops::Bound::{Included, Unbounded};
+    let mut iter = range.iter();
+    let bounds = iter.next();
+
+    if iter.next().is_some() {
+        // Found multiple byte-range-spec. Drop.
+        return None;
+    }
+
+    bounds.and_then(|b| match b {
+        (Included(start), Included(end)) if start <= end && start < complete_length => {
+            ContentRange::bytes(
+                start..=end.min(complete_length.saturating_sub(1)),
+                complete_length,
+            )
+            .ok()
+        }
+        (Included(start), Unbounded) if start < complete_length => {
+            ContentRange::bytes(start.., complete_length).ok()
+        }
+        (Unbounded, Included(end)) if end > 0 => {
+            ContentRange::bytes(complete_length.saturating_sub(end).., complete_length).ok()
+        }
+        _ => None,
+    })
+}
+
+fn print_listening(address: &str, port: u16, tls: bool) {
+    let addrs = retrive_listening_addrs(address);
+    let protocol = if tls { "https" } else { "http" };
+    if addrs.len() == 1 {
+        eprintln!("Listening on {}://{}:{}", protocol, addrs[0], port);
+    } else {
+        eprintln!("Listening on:");
+        for addr in addrs {
+            eprintln!("  {}://{}:{}", protocol, addr, port);
+        }
+    }
+}
+
+fn retrive_listening_addrs(address: &str) -> Vec<String> {
+    if address == "0.0.0.0" {
+        if let Ok(interfaces) = get_if_addrs() {
+            let mut ifaces: Vec<IpAddr> = interfaces
+                .into_iter()
+                .map(|v| v.ip())
+                .filter(|v| v.is_ipv4())
+                .collect();
+            ifaces.sort();
+            return ifaces.into_iter().map(|v| v.to_string()).collect();
+        }
+    }
+    vec![address.to_owned()]
+}
Author	SHA1	Message	Date
sigoden	201afa6725	chore(release): version v0.9.0	2022-06-02 16:31:43 +08:00
sigoden	e2d7f996c7	feat: support tls	2022-06-02 12:15:06 +08:00
sigoden	97978719b3	feat: list all ifaces when listening 0.0.0.0	2022-06-02 09:44:40 +08:00
sigoden	9aa16d3a10	docs: improve readme	2022-06-02 09:08:55 +08:00
sigoden	d208b5cb6b	feat: support path prefix	2022-06-02 08:32:31 +08:00
sigoden	605c6c56c4	chore: upgrade version	2022-06-01 23:12:52 +08:00
sigoden	8718562889	chore: update description	2022-06-01 22:55:11 +08:00
sigoden	830d3343f4	feat: support render-index/render-spa closes #5	2022-06-01 22:49:55 +08:00
sigoden	1fe391f9d9	chore: move src/assets out of src	2022-06-01 20:26:03 +08:00
sigoden	b88381167b	feat: add some headers to res	2022-06-01 20:02:35 +08:00
sigoden	35ed4394df	fix: caught 500 if no permission to access dir releated #4	2022-06-01 19:59:35 +08:00
sigoden	f43d0b646d	fix: some typos close #6	2022-05-31 22:38:00 +08:00
sigoden	a9294f602c	feat: cli add allow-symlink option	2022-05-31 21:22:44 +08:00
sigoden	584d33940a	chore: upgrade version	2022-05-31 17:02:55 +08:00
sigoden	fc090b6930	fix: not found dir when allow_upload is false	2022-05-31 16:55:52 +08:00
sigoden	19d7b36462	feat: drag and drop uploads, upload folder close #3	2022-05-31 16:47:06 +08:00
sigoden	755554d3f2	fix: miss file 500	2022-05-31 16:32:50 +08:00
sigoden	6a097e0496	fix: unzip override existed file in uploadonly mode	2022-05-31 15:20:47 +08:00
sigoden	412d42e338	fix: downloaded zip file has no.zip ext in firefox close #2	2022-05-31 14:39:07 +08:00
sigoden	ec60752ba2	chore: upgrade version	2022-05-31 11:10:15 +08:00
sigoden	ed7f5e425a	feat: support range requests	2022-05-31 10:58:32 +08:00
sigoden	3032052923	feat: distinct upload and delete operation	2022-05-31 09:23:35 +08:00
sigoden	be3ae2fe00	feat: delete confirm close #1	2022-05-31 08:01:03 +08:00
sigoden	fb03f7ddb8	refactor: improve code quality	2022-05-31 07:56:05 +08:00
sigoden	54df4633e1	chore: upgrade version	2022-05-30 16:06:31 +08:00
sigoden	6b293c0f2e	chore: rename src/static to src/assets	2022-05-30 14:32:41 +08:00
sigoden	62696b45fd	feat: unzip zip file when unload	2022-05-30 14:30:08 +08:00
sigoden	d9547ad00b	feat: add no-auth-read options	2022-05-30 12:40:57 +08:00
sigoden	8fbc742c52	chore: reorganize web static files	2022-05-30 12:31:29 +08:00
sigoden	d8d5aae898	feat: add mime and cache headers to response	2022-05-30 11:22:28 +08:00
sigoden	a263d18963	chore: upgrade version	2022-05-29 20:50:47 +08:00
sigoden	10aabcb2f2	feat: add cors	2022-05-29 17:33:21 +08:00
sigoden	06ce7b0175	feat: replace --static option to --no-edit	2022-05-29 17:01:30 +08:00
sigoden	4841ebb76d	docs: update readme demo png	2022-05-29 13:16:58 +08:00
sigoden	586b209c89	feat: support searching	2022-05-29 13:10:41 +08:00
sigoden	2eba975066	styles: optimize css	2022-05-29 11:38:54 +08:00
sigoden	c8a25b54ab	feat: Automatically create dir while uploading	2022-05-29 10:53:19 +08:00
sigoden	8900dde7e7	refactor: handler zip	2022-05-29 06:57:16 +08:00
sigoden	06d2b81824	fix: optimize download zip	2022-05-28 22:28:49 +08:00
sigoden	3673a64ec7	feat: aware RUST_LOG	2022-05-28 20:43:20 +08:00
sigoden	d9a917176a	fix: cannot upload in root	2022-05-28 20:40:49 +08:00
sigoden	cdb7b5fc87	docs: improve readme	2022-05-28 19:48:54 +08:00
sigoden	76569581dd	docs: improve readme	2022-05-28 19:03:50 +08:00
sigoden	ae11a39804	feat: download folder as zip file	2022-05-28 19:00:16 +08:00
sigoden	63e6906393	feat: add logger	2022-05-27 09:21:17 +08:00
sigoden	e6ea7e4f75	chore: update cargo metadata	2022-05-26 21:43:58 +08:00
sigoden	8db039c53b	docs: update demo png	2022-05-26 21:36:14 +08:00