RevokeToken adds a token hash to the revoked list and persists to DB.

Save wraps StorageBackend.Save

SearchItems queries the database for items matching the search criteria for a single source. When nameGlobPatterns is non-empty (and largest is false)

SearchItemsMultiSource queries the database for items matching the search criteria across multiple sources. When nameGlobPatterns is non-empty (and la

SearchMultiSourcesParsed searches multiple sources using pre-built options.

ShouldBubbleUpToFolderPreview checks if a file type should be used for folder previews. Only images, videos, and audio files with album art should bub

ShouldServeOriginalImage reports whether an on-disk image is already within preview bounds.

SyncFolderSizesToDB syncs in-memory folder sizes to the database after a scan completes Only syncs folders marked as dirty (changed) and processes in

UpdateFolderSizesIfChanged updates ONLY the size field for folders where the size actually changed This is a single SQL operation that filters unchang

UpdateRulePath updates the path for a specific access rule (used by PATCH API endpoint).

UpdateRules updates all access rules that match oldPath to point to newPath. Handles both exact matches and subdirectories. Similar to share.Storage.U

UpdateSharePath updates the path for a specific share identified by hash

UpdateShares updates all shares that match oldSource and oldPath to point to newSource and newPath. Handles both exact matches and subdirectories, reg

ValidateJwtAuth checks JWT config and sets defaults. Call when JWT auth is enabled.

ValidateOrigin checks if the given origin is in the configured whitelist. Returns true if the origin is allowed, false otherwise.

addMetadataToChildren runs concurrent ffmpeg/tag extraction for audio/video children. Each goroutine is registered on wg. Caller must invoke wg.Wait()

applyOrientationToPreviewBytes applies EXIF orientation to image bytes using the imaging library. orientation is the string from exiftool -Orientation

archiveAttachmentStem is the filename stem (no extension) for Content-Disposition on multi-item / directory downloads. It prefers the client file path

archiveGetDeliversThroughEOF reports whether this GET serves through the last byte (full body or Range that ends at size-1).

attemptBulkInsert runs one transactional bulk insert. Returns success=true when committed; transient=true when SQLITE_BUSY-like errors allow a retry (

buildOnlyOfficeCallbackURL constructs the callback URL that OnlyOffice server will use to notify us of changes

buildOnlyOfficeDownloadURL constructs the download URL that OnlyOffice server will use to fetch the file

buildPathMapRecursive recursively builds the path mapping using reflection

buildStructPathMap builds a dynamic mapping from YAML paths to Go struct types/fields using reflection

calculateDirScore returns a 1-10 score based on directory count

calculateTimeScore returns a 1-10 score based on scan time

checkAccessibilityProbe verifies the DB file is readable: sqlite_master and optionally one row from index_items. If index_items is absent (brand-new f

checkForNewChildDirectories detects new top-level directories and creates scanners for them Also detects deleted directories and signals their scanner

checkIntegrityAndRecreateIfNeeded checks database integrity. If corruption is detected, deletes the database file and returns an error to trigger recr

combineYAMLFiles combines multiple YAML files from a directory into a single YAML document This allows YAML anchors defined in one file to be referenc

computeHeaderChecksum calculates MD5 hash of only the first 8KB of a file This is the fastest initial pass to eliminate non-matching files

computeMiddleChecksum calculates MD5 hash of header + middle portion Only called when header checksums match (progressive verification)

configureImagingParallelism limits kovidgoyal/imaging to one thread per resize. Concurrent preview jobs are capped separately by imageSem (like OG fil

convertHEICToJPEGWithFFmpeg converts a HEIC file to JPEG format using FFmpeg This function handles all FFmpeg-related logic and parameters

convertImageWithFFmpeg converts any image file (including problematic JPEGs) to resized JPEG using FFmpeg This is used as a fallback for JPEG files th

copyDirectory handles copying directories recursively.

createConfig orchestrates the configuration process by asking the user a series of questions.

Helper functions for OnlyOffice log context management

createTarGzWithLevel writes a tar.gz archive into w with the given gzip compression level (0=default, 1-9).

credentialToLibrary converts our BoltDB-safe WebAuthnCredential to the library's Credential.

Helper function to check if last rune is valid

decryptSecret uses AES-GCM to decrypt a ciphertext using its key and nonce. It returns the plaintext secret or an error.

detectExternalSubtitles finds external subtitle files in the same directory

determineSourceType determines which type of favicon source we have

encryptSecret uses AES-GCM to encrypt a plaintext secret. It returns the base64-encoded ciphertext and nonce, or an error.

ensureScanUpdatedPaths initializes scan path tracking for the current scan session.

evaluateIndexRules checks if a path should be accessible based on index rules Returns whether the path is viewable and/or indexable Does NOT check use

evaluateRuleForUser evaluates a single rule for a user and returns if a specific rule was found.

extractGroupsFromOIDCClaims extracts groups from OIDC claims supporting nested paths. Supports both direct claims (e.g., "groups") and nested claims u

extractUserFromExpiredToken attempts to extract user information from an expired token This is used by withOrWithoutUserHelper to get user context eve

filenamesSimilar checks if two normalized filenames are similar enough to be considered duplicates

filterFilesByPermission filters files to only include those the user is permitted to access This is called early in the duplicate search process to av

finalizeResponse handles final response adjustments (OnlyOffice ID, scope stripping).

findDuplicatesInIndex finds duplicates using the shared IndexDB with resource limits

findRasterCompanion looks for a raster companion file for an SVG favicon Returns the companion data and path, or error if not found