mirrors/vaultwarden
Watch
1
0
Fork
You've already forked vaultwarden
 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-08-22 20:14:57 -04:00
Code Issues Releases Packages Wiki Activity
3,007 commits 5 branches 87 tags 53 MiB
Commit graph vaultwarden/src
Author SHA1 Message Date
Daniel García
a2bf8def2a
 		Change API and structs to camelCase (#4386) 
* Change API inputs/outputs and structs to camelCase

* Fix fields and password history

* Use convert_json_key_lcase_first

* Make sends lowercase

* Update admin and templates

* Update org revoke

* Fix sends expecting size to be a string on mobile

* Convert two-factor providers to string
 2024-06-23 21:31:02 +02:00
Daniel García
8f05a90b96
 		Fix some more nightly errors and remove lint that will become an error by default (#4661) 2024-06-20 20:25:40 +02:00
Daniel García
9082e7cebb
 		Fix some nightly build errors (#4657) 2024-06-20 09:35:52 +02:00
Mathijs van Veluw
55fdee3bf8
 		Update crates, web-vault and GHA (#4648) 
- Updated all crates including Diesel and the new mysqlclient-sys
- Updated the MSRV to v1.78 as that is what Diesel mandates
- Added the mimalloc crate as a patch for now to fix armv6 static builds
  This probably makes #4606 possible
- Updated web-vault to v2024.5.1
- Updated GitHub Actions
  Fixed an issue with the localhost images for extracting the musl binaries.
 2024-06-19 13:06:58 +02:00
Daniel García
377969ea67
 		Update rust and remove unused header values (#4645) 
* Update rust and remove unused header values

* Missed one unused var
 2024-06-16 22:05:17 +02:00
Mathijs van Veluw
f05398a6b3
 		Update admin interface dependencies (#4581) 
- Updated JS/CSS dependencies
- Fixed a small issue regarding DNS IP detection
  fixes #3946
  fixes #3947
 2024-05-25 15:39:36 +02:00
Timshel
9555ac7bb8
 		Remove compatibility route (#4578) 2024-05-25 15:29:58 +02:00
Stefan Melmuk
f01ef40a8e
 		differentiate external groups by organization id (#4586) 2024-05-25 15:20:36 +02:00
FDHoho007
753a9e0bae
 		Fix public api for domains with path prefix (#4500) 2024-05-19 20:33:31 +02:00
Stefan Melmuk
f5fb69b64f
 		also delete organization_api_key (#4557) 2024-05-19 20:33:00 +02:00
Daniel García
0fe93edea6
 		Some fixes for the new mobile apps (#4526) 2024-04-27 23:24:04 +02:00
Stefan Melmuk
e9aa5a545e
 		fix emergency access invites (#4337) 
* fix emergency access invites with no mail

when mail is disabled instead of accepting emergency access for all
invited users automatically, we only accept if the user already exists

on registration of a new account any open emergency access invitations
will be accepted, if mail is disabled

also prevent invited emergency access contacts to register if emergency
access is disabled (this is only relevant for when mail is enabled, if
mail is disabled they should have an Invitation entry)

* delete emergency access invitations

if an invited user is deleted in the /admin panel their emergency
access invitation will remain in the database which causes
the to_json_grantee_details fn to panic

* improve missing emergency access grantees

instead of returning an empty emergency access contact the entry should
not be added to the list. also the error handling can be improved a bit.
 2024-04-27 22:16:05 +02:00
Stefan Melmuk
9dcc738f85
 		improve access to collections via groups (#4441) 
* refactor get_org_collections_details

* improve access to collection check

* fix get_org_collection_detail too
 2024-04-27 22:09:00 +02:00
Kristof Mattei
84a7c7da5d
 		Pass in collection ids to notifier when sharing cipher. (#4517) 2024-04-27 21:53:10 +02:00
Daniel García
27dc67fadd
 		Implement custom DNS resolver (#3988) 2024-04-27 20:25:34 +02:00
Mathijs van Veluw
e1a8df96db
 		Update Key Rotation web-vault v2024.3.x (#4446) 
Key rotation was changed since 2024.1.x.
Multiple other items were added to be rotated like password-reset and emergency-access data to be part of just one POST instead of having multiple.

See: https://github.com/dani-garcia/bw_web_builds/pull/157
 2024-04-06 14:42:53 +02:00
Mathijs van Veluw
e42a37c6c1
 		Update crates and some Clippy fixes (#4475) 
- Updated all crates including reqwest
- Fixed some clippy lints reported by nightly Rust
 2024-04-06 13:55:10 +02:00
Daniel García
2d98aa3045
 		Use async verify for Yubikey (#4448) 2024-03-23 16:03:17 +01:00
Mathijs van Veluw
93636eb3c3
 		Update Rust and crates (#4445) 
- Updated Rust to v1.77.0
- Updated several crates
  The `reqwest` update included `trust-dns` > `hickory-dns` changes.
  Also, `reqwest` v0.12 is not working correctly for us, that is something to investigate.
- Fixed a new clippy warning
 2024-03-23 15:40:34 +01:00
Mathijs van Veluw
1e42755187
 		Update chrono and sqlite (#4436) 
- Updated sqlite crate
- Updated chrono crate

The latter needed a lot of changes done, mostly `Duration` to `TimeDelta`.
And some changes on how to use Naive.
 2024-03-19 19:47:30 +01:00
guangwu
ce8efcc48f
 		fix: typos (#4440) 
Signed-off-by: guoguangwu <guoguangwug@gmail.com>
 2024-03-19 19:47:14 +01:00
Stefan Melmuk
79ce5b49bc
 		automatically use email address as 2fa provider (#4317) 2024-03-17 22:35:02 +01:00
Matlink
7c3cad197c
 		Fix #3624: fix manager permission within groups (#3754) 
* Fix #3624: fix manager permission within groups

* Query returns UUID only

* Fix issue when user is manager and in a group having access to all collections

* optimize condition check

* fix(groups): renaming and optimizations

* fix: wrong organization group membership detection

* Simplify group membership check

Co-authored-by: Stefan Melmuk <509385+stefan0xC@users.noreply.github.com>

* Remove unused statement

* improve check if the user has access via groups

instead of returning the two lists of member ids and later checking if
they contain the uuid of the current user, we really only care if
the current user has full access via a group or if they have
access to a given collection via a group

* improve comments for get_org_collections_details

* small refactor to make it easier to review

* fix(groups): query full access via group only when necessary

Co-authored-by: Mathijs van Veluw <black.dex@gmail.com>

* chore(fmt): apply rustfmt

---------

Co-authored-by: Stefan Melmuk <509385+stefan0xC@users.noreply.github.com>
Co-authored-by: Stefan Melmuk <stefan.melmuk@gmail.com>
Co-authored-by: Mathijs van Veluw <black.dex@gmail.com>
 2024-03-17 22:11:34 +01:00
gzfrozen
000c606029
 		Change timestamp data type. (#4355) 
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2024-03-17 22:04:37 +01:00
Jacques B
29144b2ce0
 		Small improvements around email change (#4415) 2024-03-17 19:55:03 +01:00
Helmut K. C. Tessarek
ea04b6f151
 		refactor: replace panic with a graceful exit (#4402) 
* refactor: replace panic with a graceful exit

* fix: clippy errors

* fix: typo

* Update src/main.rs

Co-authored-by: Stefan Melmuk <509385+stefan0xC@users.noreply.github.com>

---------

Co-authored-by: Stefan Melmuk <509385+stefan0xC@users.noreply.github.com>
 2024-03-17 19:53:41 +01:00
Mathijs van Veluw
3427217686
 		Remove custom WebSocket code (#4001) 
* Remove custom WebSocket code

Remove our custom WebSocket code and only use the Rocket code.
Removed all options in regards to WebSockets
Added a new option `WEBSOCKET_DISABLED` which defaults too `false`.
This can be used to disable WebSockets if you really do not want to use it.

* Addressed remarks given and some updates

- Addressed comments given during review
- Updated crates, including Rocket to the latest merged v0.5 changes
- Removed an extra header which should not be sent for websocket connections

* Updated suggestions and crates

- Addressed the suggestions
- Updated Rocket to latest rc4
  Also made the needed code changes
- Updated all other crates
  Pinned `openssl` and `openssl-sys`

---------

Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2024-03-17 19:52:55 +01:00
Daniel García
a1fbd6d729
 		Improve JWT key initialization and avoid saving public key (#4085) 2024-03-17 15:11:20 +01:00
Krapp
2cbfe6fa5b
 		Fix comment in events.rs (#4408) 
I think
` // Collection events`
was repeated twice
 2024-03-17 14:29:31 +01:00
one230six
d86c4f2c23
 		Signed-off-by: one230six <723682061@qq.com> (#4422) 
Signed-off-by: one230six <723682061@qq.com>
 2024-03-17 14:28:10 +01:00
Calvin Li
d0c22b9fc9
 		fix: web API call for jquery 3.7.1 (#4400) 2024-03-02 19:09:36 +01:00
Mathijs van Veluw
d6b97090fa
 		Update crates, GHA and a Python/JS scripts (#4357) 
- Update all crates
- Update GHA
- Update Global Domains script to use main instead of master
  Also fixed some Python linting warnings
- Updated Admin JS and CSS libraries
 2024-02-25 23:26:46 +01:00
Mathijs van Veluw
b9bdc9b8e2
 		Update Rust, crates and web-vault (#4328) 
- Updated Rust to v1.76.0
- Updated crates
- Updated web-vault to v2024.1.2b
- Fixed some Clippy lints
- Moved lint check configuration Cargo.toml
- Fixed issue with Reset Password Enrollment when logged-in via device
 2024-02-08 22:16:29 +01:00
Mathijs van Veluw
569add453d
 		Add Kubernetes environment detection (#4290) 
Also check if we are running within a Kubernetes environment.
These do not always run using Docker or Podman of course.

Also renamed all the functions and variables to use `container` instead
of `docker`.
 2024-02-02 21:44:19 +01:00
Stefan Melmuk
0b2383ab56
 		fix push device registration (#4297) 
don't try to register a push device when the device is new
it will be registered when the push token is saved

fixes #4296
 2024-01-31 22:31:22 +01:00
Stefan Melmuk
3b283c289e
 		register missing push devices at login (#3792) 
save the push token of new device even if push notifications are not
enabled and provide a way to register the push device at login

unregister device if there already is a push token saved unless the
new token has already been registered.

also the `unregister_push_device` function used the wrong argument
cf. 08d380900b/src/Core/Services/Implementations/RelayPushRegistrationService.cs (L43)
 2024-01-30 19:14:25 +01:00
Stefan Melmuk
4b9384cb2b
 		err on invalid feature flag (#4263) 
* err on invalid feature flag

* print all invalid flags and improve error message
 2024-01-28 23:36:27 +01:00
Mathijs van Veluw
0f39d96518
 		Fix attachment upload size check (#4282) 
The min/max were reversed with the `add` and `sub` functions.
This caused the files to always be out of bounds in the check.

Fixes #4281
 2024-01-28 23:32:09 +01:00
Daniel García
edf7484a70
 		Improve file limit handling (#4242) 
* Improve file limit handling

* Oops

* Update PostgreSQL migration

* Review comments

---------

Co-authored-by: BlackDex <black.dex@gmail.com>
 2024-01-27 02:43:26 +01:00
Jacques B
8b66e34415
 		Return 404 when user public_key is empty (#4271) 2024-01-26 20:34:36 +01:00
Stefan Melmuk
1b801406d6
 		prevent side effects if groups are disabled (#4265) 2024-01-25 22:02:07 +01:00
Helmut K. C. Tessarek
5e46a43306
 		fix: use black text for update badge (better contrast) (#4245) 2024-01-25 21:58:05 +01:00
Mathijs van Veluw
5c77431c2d
 		Fix bulk collection deletion (#4257) 
The bulk collection delete seems to have removed the extra org_id in the
posted data. Now we only use the org_id from the path.

Fixes #4253
 2024-01-25 21:57:35 +01:00
Mathijs van Veluw
890e668071
 		Update crates and fix icon issue (#4237) 
- Fix icon download issue by removing the deflate feature
- Updated all the crates
- Updated Handlebars code

Fixes #4224
 2024-01-12 20:44:37 +01:00
Stefan Melmuk
596c167312
 		improve emergency access when not enabled (#4227) 
* improve emergency access when not enabled

* display note that emergency access is disabled
 2024-01-10 19:02:36 +01:00
Stefan Melmuk
2c36993792
 		enforce 2FA policy on removal of second factor and login (#3803) 
* enforce 2fa policy on removal of second factor

users should be revoked when their second factors are removed.

we want to revoke users so they don't have to be invited again and
organization admins and owners are aware that they no longer have
access.

we make an exception for non-confirmed users to speed up the invitation
process as they would have to be restored before they can accept their
invitation or be confirmed.

if email is enabled, invited users have to add a second factor before
they can accept the invitation to an organization with 2fa policy.
and if it is not enabled that check is done when confirming the user.

* use &str instead of String in log_event()

* enforce the 2fa policy on login

if a user doesn't have a second factor check if they are in an
organization that has the 2fa policy enabled to revoke their access
 2024-01-01 19:41:40 +01:00
THONY
d672ad3f76
 		US or EU Data Region Selection (#3752) 
* add selection of data region for push

* fix cargo check + rewrite config + add check url

* fix clippy error

* add comment in .env.template, adapt config.rs

* Update .env.template

Co-authored-by: William Desportes <williamdes@wdes.fr>

* Update .env.template

Co-authored-by: William Desportes <williamdes@wdes.fr>

* Revert "Update .env.template"

This reverts commit 5bed974ba7b9f481792d2228834585f053d47dc3.

* Revert "Update .env.template"

This reverts commit 0760eff95dfaf2a9cf97bb25f6cf7660bdf55173.

* fix /connect/token to push identity

* fix /connect/token to push identity

* Fixed formatting when solving merge conflicts

---------

Co-authored-by: William Desportes <williamdes@wdes.fr>
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2024-01-01 16:01:57 +01:00
Matlink
a641b48884
 		Fix #3413: push to users accessing the collections using groups (#3757) 
* Fix #3413: push to users acessing the collections using groups

* Notify groups only when enabled
 2024-01-01 15:46:03 +01:00
Philipp Kolberg
98b2178c7d
 		Allow customizing the featureStates (#4168) 
* Allow customizing the featureStates

Use a comma separated list of features to enable using the FEATURE_FLAGS env variable

* Move feature flag parsing to util

* Fix formatting

* Update supported feature flags

* Rename feature_flags to experimental_client_feature_flags

Additionally, use a caret (^) instead of an exclamation mark (!) to disable features

* Fix formatting issue.

* Add documentation to env template

* Remove functionality to disable feature flags

* Fix JSON key for feature states

* Convert error to warning when feature flag is unrecognized

* Simplify parsing of feature flags

* Fix default value of feature flags in env template

* Fix formatting
 2024-01-01 15:44:02 +01:00
Mathijs van Veluw
76a3f0f531
 		Fix Single Org Policy check (#4207) 
There was an error in the single org policy check to determine how many
users there are in an org. The `or` check was at the wrong location in
the DSL.

This is now fixed.

Fixes #4205
 2024-01-01 15:42:57 +01:00