mirrors/vaultwarden
Watch
1
0
Fork
You've already forked vaultwarden
 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-08-22 12:04:56 -04:00
Code Issues Releases Packages Wiki Activity
3,065 commits 5 branches 87 tags 53 MiB
Commit graph

3,065 commits

This branch
This branch
All branches
Author SHA1 Message Date
Stefan Melmuk
4737192853
 		fix email as 2fa with auth requests (#6736) 
* fix email as 2fa with auth requests

* increase expiry time of auth_requests to 15 minutes
 2026-01-22 23:25:11 +01:00
Stefan Melmuk
0c6817cb4e
 		hide password hints via CSS (#6726) 2026-01-18 15:25:20 +01:00
Stefan Melmuk
25a71d913f
 		use email instead of empty name for webauhn (#6733) 
* if empty use email instead of name for webauhn

* use email as display name if name is empty
 2026-01-18 15:23:21 +01:00
Mathijs van Veluw
b2cd556f3e
 		Fix User API Key login (#6712) 
When using the latest Bitwarden CLI and logging in using the API Key, it expects some extra fields, same as for normal login.
This PR adds those fields and login is possible again via API Key.

Fixes #6709

Signed-off-by: BlackDex <black.dex@gmail.com>
 2026-01-14 13:11:43 +01:00
Mathijs van Veluw
4352fffeec
 		Fix web-vault version check and update web-vault (#6686) 1.35.2 2026-01-09 13:21:10 +01:00
Stefan Melmuk
8d08697cf8
 		improve sso callback path (#6676) 
* normalize base_url for sso_callback_path

* clean url when embedding images
 2026-01-06 17:10:00 +00:00
Stefan Melmuk
9f1df42259
 		allow MasterPasswordHash for Android (#6673) 2026-01-06 14:24:05 +00:00
Stefan Melmuk
1e1f9957cd
 		return no content with status code 204 (#6665) 2026-01-05 18:52:24 +00:00
Stefan Melmuk
bf37657c08
 		update web-vault to fix org creation (#6646) 2026-01-01 16:52:11 +00:00
Daniel García
3e2cef7e8b
 		Try old refresh token if we fail to decode jwt (#6629) 1.35.1 2025-12-29 22:54:51 +01:00
Mathijs van Veluw
2af9d21158
 		Misc updates (#6627) 
- Update crates and toml
- Update web-vault to v2025.12.1
- Update workflows

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-12-29 22:27:12 +01:00
Daniel
c4f6c4e63b
 		Re-add alpine tag (#6626) 
- fixes https://github.com/dani-garcia/vaultwarden/issues/6619
- also optimize the process while at it
 2025-12-29 22:25:15 +01:00
Daniel García
eb2a56aea1
 		Update lockfile (#6600) 2025-12-28 01:07:17 +01:00
Daniel García
a4907f3539
 		Add wrapped named variants to UserDecryptionOptions (#6598) 1.35.0 2025-12-27 23:35:04 +01:00
Daniel
8801b47d80
 		Remove unnecessary output sharing between jobs (#6555) 
Split step into 2 parts, since only 1 part is needed in the build job
 2025-12-23 16:27:53 +01:00
Daniel
1ae9dc4119
 		Simplify binary extraction (#6554) 2025-12-23 16:26:28 +01:00
Mathijs van Veluw
02377eeac8
 		Update crates (#6585) 
Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-12-23 16:25:56 +01:00
Mathijs van Veluw
d9c75508c2
 		Fix posting cipher with readonly collections (#6578) 
* Fix posting cipher with readonly collections

This fix will check if a collection is writeable for the user, and if not error out early instead of creating the cipher first and leaving it.
It will also save some database transactions.

Fixes #6562

Signed-off-by: BlackDex <black.dex@gmail.com>

* Adjust code to delete on error

Signed-off-by: BlackDex <black.dex@gmail.com>

---------

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-12-21 18:51:58 +01:00
Mathijs van Veluw
0ab7784b06
 		Update web-vault to v2025.12.0 (#6577) 
Updated web-vault
Updated one crate

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-12-21 00:01:30 +01:00
Daniel García
5c91058ba0
 		Add UserDecryptionOptions on /sync too (#6574) 2025-12-20 00:37:46 +01:00
Mathijs van Veluw
229b58fe4e
 		Update crates and Rust (#6551) 
* Update crates and Rust

- Updated all the crates
- Updated Rust to v1.92.0
- Updated to Alpine v3.23
- Adjusted some nightly clippy lints

Signed-off-by: BlackDex <black.dex@gmail.com>

* Add new updates

Signed-off-by: BlackDex <black.dex@gmail.com>

* Updated more crates and fix mariadb

Updated more crates
Also removed older MariaDB library since Diesel has fixed this in the v2.3.5 version.

Signed-off-by: BlackDex <black.dex@gmail.com>

* Fix icon-fetch error

Signed-off-by: BlackDex <black.dex@gmail.com>

* Update GHA workflows

Signed-off-by: BlackDex <black.dex@gmail.com>

---------

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-12-19 17:38:13 +01:00
Daniel García
061d320c7f
 		Add new accountKeys and masterPasswordUnlock fields (#6572) 
* Add new accountKeys and masterPasswordUnlock fields

* Fmt
 2025-12-19 13:34:43 +01:00
Stefan Melmuk
2c73c6c2f2
 		support UriMatchDefaults policy (#6570) 2025-12-19 12:07:58 +01:00
Daniel
b920caf285
 		Revert to gzip compression (#6566) 
- zstd support has been added in Docker v23
- Debian Bookworm/Bullseye ships with Docker v20.10
- Revert for now to maintain compatibility with older releases
 2025-12-19 12:07:05 +01:00
Stefan Melmuk
57bdab1550
 		add empty /api/tasks endpoint (#6557) 2025-12-14 15:32:21 +01:00
Daniel
b77c01b8bb
 		Further fixes for the release workflow (#6533) 2025-12-07 16:07:07 +01:00
Mathijs van Veluw
9cca120fb3
 		Fix release workflow (#6532) 2025-12-07 13:12:05 +01:00
Stefan Melmuk
4ad8baf7be
 		fix email as 2fa for sso (#6495) 
* fix email as 2fa for sso

* allow saving device without updating `updated_at`

* check if email is some

* allow device to be saved in postgresql

* use twofactor_incomplete table

* no need to update device.updated_at
 2025-12-06 22:22:33 +01:00
Timshel
8f689d8795
 		Improve sso auth flow (#6205) 
Co-authored-by: Timshel <timshel@users.noreply.github.com>
 2025-12-06 22:20:04 +01:00
Timshel
2d91a9460b
 		Fix admin invite with SSO (#6498) 
Co-authored-by: Timshel <timshel@users.noreply.github.com>
 2025-12-06 22:14:20 +01:00
Timshel
e81e6a5060
 		Android want response property in camelCase (#6513) 
Co-authored-by: Timshel <timshel@480s>
 2025-12-06 22:13:51 +01:00
Timshel
76d0856bbe
 		Org.put_policy type not in body anymore (#6514) 
Co-authored-by: Timshel <timshel@480s>
 2025-12-06 22:12:46 +01:00
Timshel
f0e79fd391
 		Iterate over tags on release (#6518) 
Co-authored-by: Timshel <timshel@480s>
 2025-12-06 22:12:25 +01:00
k725
5981705375
 		fix: typo (#6528) 2025-12-06 22:11:58 +01:00
Mathijs van Veluw
07569a06da
 		Update crates and workflows and some fixes (#6508) 
- Updated all the crates except for Diesel.
  Diesel is pinned at v2.3.3 since newer versions break MySQL/MariaDB.
- Updated all the GHA workflows
- Fixed an issue with a migration breaking on an empty MySQL/MariaDB database.

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-30 15:16:23 +01:00
Mathijs van Veluw
cb2f5741ac
 		Some small admin js/css updates (#6501) 
* Some small admin js/css updates

- Updated JS libraries
- Fixed some eslint errors
- Small update on the theme icon's to be a bit smaller and better sized.
  Used OXVG via OXVGUI to shrink and optimze them.

Probably Fixes #6493

Signed-off-by: BlackDex <black.dex@gmail.com>

* Adjust the size of the moon to be more inline with the other icons

Signed-off-by: BlackDex <black.dex@gmail.com>

---------

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-29 22:57:57 +01:00
Mathijs van Veluw
c9d527d84f
 		Add option to prefer IPv6 resolving (#6494) 
This PR adds an option to prefer IPv6 resolving before IPv4.
On IPv6 only systems this could be very useful, but will not solve IPv4 only domains of course.
For that you need a DNS64 + NAT64 solution

Fixes #6301

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-26 01:26:10 +01:00
Mathijs van Veluw
7c7f4f5d4f
 		Update crates and Rust version (#6485) 
* Update crates and Rust version

- Update all crates (where possible)
  Adjusted code where needed
- Fixed some nightly clippy lints

Signed-off-by: BlackDex <black.dex@gmail.com>

* Fix some issues/comments

Signed-off-by: BlackDex <black.dex@gmail.com>

* Update some crates

Signed-off-by: BlackDex <black.dex@gmail.com>

---------

Signed-off-by: BlackDex <black.dex@gmail.com>
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2025-11-23 22:03:30 +01:00
Stefan Melmuk
aad1f19b45
 		fix email as 2fa provider (#6473) 2025-11-23 21:55:20 +01:00
Timshel
35e1a306f3
 		Fix around singleorg policy (#6247) 
Co-authored-by: Timshel <timshel@users.noreply.github.com>
 2025-11-23 21:54:37 +01:00
Mathijs van Veluw
7f7b412220
 		Fix icon redirect caching (#6487) 
As reported in #6477, redirection of favicon's didn't allowed caching.
This commit fixes this by adding the `Cached` wrapper around the response.
It will use the same TTL's used for downloading icon's locally.

Also removed `_` as valid domain character, these should not be used in FQDN's at all.
Those only serve as special chars used in domain labels, mostly used in SRV or TXT records.

Fixes #6477

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-23 21:50:31 +01:00
Daniel
bb41f64c0a
 		Switch to multiple runners per arch (#6472) 
- now uses arm64 native runners for faster compilation
 2025-11-23 21:48:23 +01:00
Ephemera42
319d982113
 		Add pm-25373-windows-biometrics-v2 feature flag (#6468) 2025-11-14 18:46:50 +01:00
Stefan Melmuk
95a0c667e4
 		remove invalid emergency access dummy value (#6463) 2025-11-14 18:46:42 +01:00
Joep Duin
b519832086
 		Fix: admin theme emoji alignment (#6459) 
* Fix: admin theme dropdown emoji alignment

* Sprites
 2025-11-14 18:46:31 +01:00
Mathijs van Veluw
2ee40d6105
 		Fix KDF Change with new web-vault (#6458) 
The newer web-vault's use a different json to update the KDF settings.
This commit fixes this by updating the struct and adjust the validation settings.

Fixes #6457

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-11 19:37:32 +01:00
Timshel
0182567a62
 		Playwright against abitrary web-vault (#6380) 
* Playwright improvements

* Playwright fix for the extension setup

---------

Co-authored-by: Timshel <timshel@users.noreply.github.com>
 2025-11-11 19:23:35 +01:00
Mathijs van Veluw
f9751a0a1d
 		Use an older version of mariadb to prevent a panic (#6453) 
* Use an older version of mariadb to prevent a panic

The Debian builds use a newer version of libmariadb which causes Diesel to panic on certain queries.
This commit prevents this by using an older version of libmariadb which doesn't cause this panic.

The Alpine based versions use a patched version which reverts the commit in the libmariadb library which causes this panic.
In the future this might be fixed in Diesel it self (https://github.com/dani-garcia/vaultwarden/issues/6416#issuecomment-3508822097), but until then, we use an older version of the library.

Fixes #6416

Signed-off-by: BlackDex <black.dex@gmail.com>

* Update GHA versions

Signed-off-by: BlackDex <black.dex@gmail.com>

* Resolve docker build check issue

Signed-off-by: BlackDex <black.dex@gmail.com>

---------

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-10 18:03:45 +01:00
Mathijs van Veluw
9017ca265a
 		Optimizations and build speedup (#6339) 
* Optimizations and build speedup

With this commit I have changed several components to be more efficient.
This can be less llvm-lines generated or less `clone()` calls.

 ### Config
- Re-ordered the `make_config` macro to be more efficient
- Created a custom Deserializer for `ConfigBuilder` less code and more efficient
- Use struct's for the `prepare_json` function instead of generating a custom JSON object.
  This generates less code and is more efficient.
- Updated the `get_support_string` function to handle the masking differently.
  This generates less code and also was able to remove some sub-macro-calls

 ### Error
- Added an extra new call to prevent duplicate Strings in generated macro code.
  This generated less llvm-lines and seems to be more efficient.
- Created a custom Serializer for `ApiError` and `CompactApiError`
  This makes that struct smaller in size, so better for memory, but also less llvm-lines.

 ### General
- Removed `once_lock` and replace it all with Rust's std LazyLock
- Added and fixed some Clippy lints which reduced `clone()` calls for example.
- Updated build profiles for more efficiency
  Also added a new profile specifically for CI, which should decrease the build check
- Updated several GitHub Workflows for better security and use the new `ci` build profile
- Updated to Rust v1.90.0 which uses a new linker `rust-lld` which should help in faster building
- Updated the Cargo.toml for all crates to better use the `workspace` variables
- Added a `typos` Workflow and Pre-Commit, which should help in detecting spell error's.
  Also fixed a few found by it.

Signed-off-by: BlackDex <black.dex@gmail.com>

* Fix release profile

Signed-off-by: BlackDex <black.dex@gmail.com>

* Update typos and remove mimalloc check from pre-commit checks

Signed-off-by: BlackDex <black.dex@gmail.com>

* Misc fixes and updated typos

Signed-off-by: BlackDex <black.dex@gmail.com>

* Update crates and workflows

Signed-off-by: BlackDex <black.dex@gmail.com>

* Fix formating and pre-commit

Signed-off-by: BlackDex <black.dex@gmail.com>

* Update to Rust v1.91 and update crates

Signed-off-by: BlackDex <black.dex@gmail.com>

* Update web-vault to v2025.10.1 and xx to v1.8.0

Signed-off-by: BlackDex <black.dex@gmail.com>

---------

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-01 22:21:04 +01:00
Mathijs van Veluw
8d30285160
 		Fix issue with key-rotation and emergency-access (#6421) 
When a user has an unconfirmed emergency-access user, and tries to do a key-rotation, the validation fails.
The reason is that Bitwarden only returns new keys for confirmed users, not for invited or accepted.

This commit fixes this by only requesting confirmed or higher status emergency-access users.

Signed-off-by: BlackDex <black.dex@gmail.com>
 2025-11-01 22:20:38 +01:00