2,954 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Stefan Melmuk	f96c5e8a1e	filter handlebars logs	2023-10-07 16:24:21 +02:00
tuhana	3d4be24902	Fix typos	2023-10-05 20:08:26 +03:00
Mathieu Valois	bf41d74501	Adds LastActive on /admin/users API route	2023-10-03 16:41:06 +02:00
Stefan Melmuk	01e33a4919	csp: rename anonaddy.com to addy.io	2023-10-03 08:21:02 +02:00
Daniel García	bc26bfa589	Merge pull request #3911 from BlackDex/fix-arm-build ... Fix arm builds	2023-09-22 13:48:11 -06:00
BlackDex	ccc51e7580	Fix arm builds ... Because of some changes in the packages of Debian we need to add an extra package to request it also to install	2023-09-22 21:44:20 +02:00
Daniel García	99a59bc4f3	Merge pull request #3910 from BlackDex/update-git-workflow ... Update GitHub Workflow	2023-09-22 13:05:53 -06:00
BlackDex	a77482575a	Update GitHub Workflow ... - Updated GitHub actions - Fixed an issue with testing MSRV (It didn't)	2023-09-22 20:31:31 +02:00
Daniel García	bbd630f1ee	Merge pull request #3831 from BlackDex/fix-3819 ... Fix Login With Device without MasterPassword	2023-09-02 14:41:44 +02:00
Daniel García	d18b793c71	Merge branch 'main' into fix-3819	2023-09-01 23:39:02 +02:00
Daniel García	d3a1d875d5	Merge pull request #3821 from stefan0xC/update-to-v2023.8.2 ... update web-vault to v2023.8.2	2023-09-01 23:37:14 +02:00
BlackDex	d6e0ace192	Fix Login With Device without MasterPassword ... It looks like either something changed in the latest v2023.8.x versions, or when using Biometrics to login, but the MasterPasswordHash is an optional value during the Approve action. This PR makes the MasterPasswordHash an optional value which resolves this issues. Bitwarden works the same way. I also changed the EncKey to an Option in the database since empty strings as a default value is not nice in databases, better to use `null` in these cases. Fixes #3819	2023-09-01 21:03:50 +02:00
Stefan Melmuk	60cbfa59bf	update web-vault to v2023.8.2	2023-09-01 07:45:48 +02:00
Daniel García	5ab7010c37	Fix reference to rust-toolchain.toml in Docker	2023-09-01 00:12:48 +02:00
Daniel García	ad2cfd8b97	Merge pull request #3808 from BlackDex/update-rust-and-crates ... Update Rust and Crates	2023-09-01 00:07:14 +02:00
BlackDex	32543c46da	Update Rust and Crates ... - Updated Rust to v1.72.0 - Updated all the crates Including a CVE https://github.com/dani-garcia/vaultwarden/security/dependabot/21 - Updated GitHub Workflows - Run `cargo fmt` which has some new fmt's - Moved from `rust-toolchain` to `rust-toolchain.toml`	2023-08-31 22:45:53 +02:00
Daniel García	66bff73ebf	Merge pull request #3730 from BlackDex/update-admin-interface ... 1.29.2 Update admin interface	2023-08-31 21:31:10 +02:00
BlackDex	83d5432cbf	Update admin interface ... - Updated the admin interface dependencies. - Replace bootstrap-native with bootstrap - Added auto theme with an option to switch to dark/light - Some small color changes - Added an dev only function to always load static files from disk	2023-08-31 21:14:53 +02:00
Daniel García	f579a4154c	Merge pull request #3806 from BlackDex/fix-3776 ... Allow Authorization header for Web Sockets	2023-08-31 20:46:07 +02:00
Daniel García	f5a19c5f8b	Merge pull request #3797 from stefan0xC/add-plans-all-endpoint ... add new secretsmanager plan for web-v2023.8.x	2023-08-31 20:37:04 +02:00
BlackDex	aa9bc1f785	Allow Authorization header for Web Sockets ... Some clients (Thirdparty) might use the `Authorization` header instead of a query param. We didn't supported this since all the official clients do not seem to use this way of working. But Bitwarden does check both ways. This PR adds an extra check for this header which can be optional. Fixes #3776	2023-08-31 12:35:20 +02:00
Stefan Melmuk	f162e85e44	add UserDecryptionOptions to login response (#3813) ... needed for web-v2023.8.2+ compatibility due to the inclusion of the new trusted device encryption feature. without this change, the web vault will assume that you don't have a master password set and force you to set one.	2023-08-31 11:02:36 +02:00
Stefan Melmuk	33ef70c192	add minimal secretsmanager plan for web-v2023.8.x ... in web-v2023.8.x the getPlans() call was changed from `/plans/` to `/plans/all` and the create new organization form also requires a bitwardenProduct to differentiate between plans for PasswordManager and the SecretsManager	2023-08-24 22:39:16 +02:00
Mathijs van Veluw	3d2df6ce11	Merge pull request #3751 from BlackDex/optimize-icon-fetching ... Optimized Favicon downloading	2023-08-13 19:31:43 +02:00
BlackDex	6cdcb3b297	Optimized Favicon downloading ... Some optimizations in regards to downloading Favicon's. I also encounterd some issues with accessing some sites where the connection got dropped or closed early. This seems a reqwest/hyper thingy, https://github.com/hyperium/hyper/issues/2136. This is now also fixed. General: - Decreased struct size - Decreased memory allocations - Optimized tokenizer a bit more to only emit tags when all attributes are there and are valid. reqwest/hyper connection issue: The following changes helped solve the connection issues to some sites. The endresult is that some icons are now able to be downloaded always instead of sometimes. - Enabled some extra reqwest features, `deflate` and `native-tls-alpn` (Which do not bring in any extra crates since other crates already enabled them, but they were not active for Vaultwarden it self) - Configured reqwest to have a max amount of idle pool connections per host - Configured reqwest to timeout the idle connections in 10 seconds	2023-08-13 19:13:00 +02:00
Mathijs van Veluw	d1af468700	Merge pull request #3769 from GeekCornerGH/feature/bump-web-vault-v2023.7.1 ... chore: Bump web vault to v2023.7.1 and bump Rust	2023-08-13 19:10:18 +02:00
GeekCornerGH	ae1c53f4e5	build (deps): Bump Rust version and sync lockfile	2023-08-13 18:52:23 +02:00
GeekCorner	bc57c4b193	feat (web vault): Bump web vault to v2023.7.1	2023-08-13 18:18:00 +02:00
Mathijs van Veluw	61ae4c9cf5	Merge pull request #3592 from quexten/feature/login-with-device ... Implement "login with device"	2023-08-13 18:15:09 +02:00
Bernd Schoolmann	8d7b3db33d	Implement login-with-device	2023-08-13 17:54:18 +02:00
Daniel García	e9ec3741ae	Merge pull request #3573 from BlackDex/update-base-images-and-versions ... Update images to Bookworm and PQ15 and Rust v1.71	2023-08-12 23:55:14 +02:00
Daniel García	dacd50f3f1	Merge pull request #3740 from BlackDex/fix-ldap-import-org-status ... Fix UserOrg status during LDAP Import	2023-08-12 22:19:20 +02:00
Daniel García	9412112639	Merge pull request #3734 from BlackDex/fix-env-template ... Fix .env.template file	2023-08-12 22:18:33 +02:00
BlackDex	aaeae16983	Update images to Bookworm and PQ15 ... This PR updates the base images to use Debian Bookworm as base image. Also the MUSL/Alpine builds now use OpenSSLv3 and PostgreSQL v15. The GHA Workflows are updated to use Ubuntu 22.04 to better match the versions of Debian Bookworm. Also: - Enabled spares crate registry - Updated workflow actions - Updated Rust to v1.71.0 - The rust-musl images now use musl v1.2.3 for the 32bit arch's if the Rust version is v1.71.0 or higher. The 64bit arch's already used musl v1.2.3. - Updated crates. Improves / Closes #3434	2023-08-12 12:29:33 +02:00
BlackDex	d892880dd2	Fix UserOrg status during LDAP Import ... When a user does not have an account yet and SMTP was disabled it would set the UserOrg status still to Accepted, though that would make it possible to verify the user by the Org Admin's. This would fail, since the user didn't actually crated his account, and therefor no PublicKey existed. This PR fixes this behaviour by checking if the password is empty and if so, puts the user to an `Invited` state instead of `Accepted`. Fixes #3737	2023-07-31 20:40:48 +02:00
BlackDex	4395e8e888	Fix .env.template file ... There was one item missing and one item wrongly named. This has been fixed including a spellcheck.	2023-07-29 13:20:57 +02:00
Daniel García	3dbfc484a5	Merge pull request #3704 from BlackDex/remove-debug-code ... 1.29.1 Remove debug code during attachment download	2023-07-17 18:22:56 +02:00
BlackDex	4ec2507073	Remove debug code during attachment download ... There was some debug code during attachment downloads. This produces extra logs not needed or even wanted.	2023-07-17 15:36:54 +02:00
Daniel García	ab65d7989b	Merge pull request #3690 from BlackDex/fix-issue-3685 ... Fix some external_id issues	2023-07-14 20:43:51 +02:00
Daniel García	8707728cdb	Merge pull request #3686 from GeekCornerGH/feat/add-forwardemail-support ... feat: Add support for forwardemail	2023-07-14 20:43:32 +02:00
BlackDex	631d022e17	Fix some external_id issues ... - Do not update `externalId` on group updates Groups are only updated via the web-vault currently, and those do not send the `externalId` value, and thus we need to prevent updating it. - Refactored some other ExternalId functions - Prevent empty `externalId` on `Collections` - Return `externalId` for users Fixes #3685	2023-07-12 22:04:18 +02:00
GeekCorner	211f4492fa	feat: Add support for forwardemail	2023-07-12 10:50:41 +02:00
Daniel García	61f9081827	Merge pull request #3678 from BlackDex/fix-org-api-creation-postgres ... Fix Org API Key generation on PosgreSQL	2023-07-10 17:59:53 +02:00
BlackDex	a8e5384c4a	Fix Org API Key generation on PosgreSQL ... Using PostgreSQL creating or rotating the Org API Key failed because of some query mismatch. This PR fixes that. Fixes https://github.com/dani-garcia/vaultwarden/discussions/3671#discussioncomment-6400394	2023-07-10 15:29:06 +02:00
Mathijs van Veluw	1c7338c7c4	Merge pull request #3659 from BlackDex/fix-org-creation ... 1.29.0 Fix org creation regresion	2023-07-06 10:39:59 +02:00
BlackDex	08f37b9935	Fix org creation regresion ... A previous PR added a field which isn't there on the initial creation of an org. This PR fixes that.	2023-07-06 10:14:04 +02:00
Daniel García	4826ddca4c	Merge pull request #3651 from tessus/fix/branch-on-HEAD ... fix version when compiled at a specific commit	2023-07-05 18:45:08 +02:00
Helmut K. C. Tessarek	2b32b6f78c	fix version when compiled at a specific commit ... When a specific commit is checked out from the main branch, the vaultwarden version is reported as `vaultwarden x.y.z-githash (HEAD)`. This is a problem, because the admin interface reports this as a version from a branch called HEAD, while in reality the commit was from the main branch.	2023-07-04 18:08:52 -04:00
Daniel García	a6cfdddfd8	Merge pull request #3649 from BlackDex/update-crates ... Update crates and small clippy fix	2023-07-04 20:56:05 +02:00
Daniel García	814ce9a6ac	Merge pull request #3632 from sirux88/fix-reset-password-check-issue ... fix missing password check while manual reset password enrollment	2023-07-04 20:55:34 +02:00