mirrors/vaultwarden
Watch
1
0
Fork
You've already forked vaultwarden
 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-08-24 04:54:57 -04:00
Code Issues Releases Packages Wiki Activity
3,007 commits 5 branches 87 tags 54 MiB
Commit graph

3,007 commits

This branch
This branch
All branches
Author SHA1 Message Date
Daniel García
65dad5a9d1
 		Merge branch 'jjlin-icons' into main 2022-01-23 23:43:30 +01:00
Daniel García
ba9ad14fbb
 		Merge branch 'icons' of https://github.com/jjlin/vaultwarden into jjlin-icons 2022-01-23 23:43:24 +01:00
Daniel García
62c7a4d491
 		Merge branch 'BlackDex-fix-emergency-invite-register' into main 2022-01-23 23:42:42 +01:00
Daniel García
14e3dcad8e
 		Merge branch 'fix-emergency-invite-register' of https://github.com/BlackDex/vaultwarden into BlackDex-fix-emergency-invite-register 2022-01-23 23:42:35 +01:00
Daniel García
f4a9645b54
 		Remove references to "bwrs" #2195 
Squashed commit of the following:

commit 1bdf1c7954e0731c95703d10118f3874ab5155d3
Merge: 8ba6e61 7257251
Author: Daniel García <dani-garcia@users.noreply.github.com>
Date:   Sun Jan 23 23:40:17 2022 +0100

    Merge branch 'remove-bwrs' of https://github.com/RealOrangeOne/vaultwarden into RealOrangeOne-remove-bwrs

commit 7257251ecf
Author: Jake Howard <git@theorangeone.net>
Date:   Thu Jan 6 17:48:18 2022 +0000

    Use `or_else` to save potentially unnecessary function call

commit 40ae81dd3c
Author: Jake Howard <git@theorangeone.net>
Date:   Wed Jan 5 21:18:24 2022 +0000

    Move $BWRS_VERSION fallback into build.rs

commit 743ef74b30
Author: Jake Howard <git@theorangeone.net>
Date:   Sat Jan 1 23:08:27 2022 +0000

    Revert "Add feature to enable use of `Option::or` in const context"

    This reverts commit fe8e043b8a.

    We want to run on stable soon, where these features are not supported

commit a1f0da638c
Author: Jake Howard <git@theorangeone.net>
Date:   Sat Jan 1 13:04:47 2022 +0000

    Rename web vault version file

    https://github.com/dani-garcia/bw_web_builds/pull/58

commit fe8e043b8a
Author: Jake Howard <git@theorangeone.net>
Date:   Sat Jan 1 12:56:44 2022 +0000

    Add feature to enable use of `Option::or` in const context

commit 687435c8b2
Author: Jake Howard <git@theorangeone.net>
Date:   Sat Jan 1 12:27:28 2022 +0000

    Continue to allow using `$BWRS_VERSION`

commit 8e2f708e50
Author: Jake Howard <git@theorangeone.net>
Date:   Fri Dec 31 11:41:34 2021 +0000

    Remove references to "bwrs"

    The only remaining one is getting the version of the web vault, which requires coordinating with the web vault patching.
 2022-01-23 23:40:59 +01:00
Jeremy Lin
8f7900759f Fix scope and refresh_token for API key logins 
API key logins use a scope of `api`, not `api offline_access`. Since
`offline_access` is not requested, no `refresh_token` is returned either.
 2022-01-21 23:10:15 -08:00
Jeremy Lin
69ee4a70b4 Add support for API keys 
This is mainly useful for CLI-based login automation.
 2022-01-21 23:10:11 -08:00
iamdoubz
e4e16ed50f Upgrade Feature-Policy to Permissions-Policy 
Convert old, soon to be defunct, Feature-Policy with its replacement Permissions-Policy
 2022-01-12 10:36:50 -06:00
Jeremy Lin
a16c656770 Add support for legacy HTTP 301/302 redirects for external icons 
At least on Android, it seems the Bitwarden mobile client responds to
HTTP 307, but not to HTTP 308 for some reason.
 2022-01-08 23:40:35 -08:00
BlackDex
76b7de15de
 		Fix emergency access invites for new users 
If a new user gets invited it should check if the user is invited via
emergency access, if so, allow that user to register.
 2022-01-07 18:55:48 +01:00
Daniel García
8ba6e61fd5
 		Merge pull request #2197 from BlackDex/issue-2196 
Fix issue with Bitwarden CLI.
 2022-01-02 23:47:40 +01:00
Daniel García
a30a1c9703
 		Merge pull request #2194 from BlackDex/issue-2154 
Fixed issue #2154
 2022-01-02 23:46:32 +01:00
Daniel García
76687e2df7
 		Merge pull request #2188 from jjlin/icons 
Add config option to set the HTTP redirect code for external icons
 2022-01-02 23:46:23 +01:00
BlackDex
bf5aefd129
 		Fix issue with Bitwarden CLI. 
The CLI seems to send a String instead of an Integer for the maximum access count.
It now accepts both types and converts it to an i32 in all cases.

Fixes #2196
 2021-12-31 15:59:58 +01:00
BlackDex
1fa178d1d3
 		Fixed issue #2154 
For emergency access invitations we need to check if invites are
allowed, not if sign-ups are allowed.
 2021-12-31 11:53:21 +01:00
Jeremy Lin
b7eedbcddc Add config option to set the HTTP redirect code for external icons 
The default code is 307 (temporary) to make it easier to test different icon
services, but once a service has been decided on, users should ideally switch
to using permanent redirects for cacheability.
 2021-12-30 23:06:52 -08:00
Daniel García
920371929b
 		Merge pull request #2182 from RealOrangeOne/cache-expires-header 
Set `Expires` header when caching responses
 2021-12-30 01:38:39 +01:00
Jake Howard
6ddbe84bde
 		Remove unnecessary return 2021-12-29 16:29:42 +00:00
Jake Howard
690d0ed1bb
 		Add our own HTTP date formatter 2021-12-29 16:21:28 +00:00
Jake Howard
248e7dabc2
 		Collapse field name definition 
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2021-12-28 21:54:09 +00:00
Jake Howard
4584cfe3c1
 		Additionally set expires header when caching responses 
Browsers are rather smart, but also dumb. This uses the `Expires` header
alongside `cache-control` to better prompt the browser to actually
cache.

Unfortunately, firefox still tries to "race" its own cache, in an
attempt to respond to requests faster, so still ends up making a bunch
of requests which could have been cached. Doesn't appear there's any way
around this.
 2021-12-28 16:24:47 +00:00
Daniel García
cc646b1519
 		Merge branch 'BlackDex-multi-db-dockers' into main 2021-12-27 21:55:36 +01:00
Daniel García
e501dc6d0e
 		Merge branch 'multi-db-dockers' of https://github.com/BlackDex/vaultwarden into BlackDex-multi-db-dockers 2021-12-27 21:55:28 +01:00
Daniel García
85ac9783f0
 		Merge branch 'ratelimit' into main 2021-12-27 21:55:15 +01:00
BlackDex
5b430f22bc
 		Support all DB's for Alpine and Debian 
- Using my own rust-musl build containers we now support all database
types for both Debian and Alpine.
- Added new Alpine containers for armv6 and arm64/aarch64
- The Debian builds can also be done wihout dpkg magic stuff, probably
some fixes in Rust regarding linking (Or maybe OpenSSL or Diesel), in
any case, it works now without hacking dpkg and apt.
- Updated toolchain and crates
 2021-12-26 21:59:28 +01:00
Daniel García
d4eb21c2d9
 		Better document the new rate limiting 2021-12-25 01:12:09 +01:00
Daniel García
6bf8a9d93d
 		Merge pull request #2171 from jjlin/global-domains 
Sync global_domains.json
 2021-12-25 00:55:50 +01:00
Jeremy Lin
605419ae1b Sync global_domains.json to bitwarden/server@5a8f334 (TransferWise) 2021-12-24 13:25:16 -08:00
Daniel García
b89ffb2731
 		Merge pull request #2170 from BlackDex/issue-2136 
Small changes to icon log messages.
 2021-12-24 20:40:30 +01:00
Daniel García
bda123b1eb
 		Merge pull request #2169 from BlackDex/issue-2151 
Fixed #2151
 2021-12-24 20:40:07 +01:00
BlackDex
2c94ea075c
 		Small changes to icon log messages. 
As requested in #2136, some small changes on the type of log messages
and wording used.

Resolves #2136
 2021-12-24 18:24:25 +01:00
BlackDex
4bd8eae07e
 		Fixed #2151 2021-12-24 17:59:12 +01:00
Daniel García
5529264c3f
 		Basic ratelimit for user login (including 2FA) and admin login 2021-12-22 21:48:49 +01:00
Daniel García
0a5df06e77
 		Merge pull request #2158 from jjlin/icons 
Add support for external icon services
 2021-12-22 15:46:30 +01:00
Jeremy Lin
2f9ac61a4e Add support for external icon services 
If an external icon service is configured, icon requests return an HTTP
redirect to the corresponding icon at the external service.

An external service may be useful for various reasons, such as if:

* The Vaultwarden instance has no external network connectivity.
* The Vaultwarden instance has trouble handling large bursts of icon requests.
* There are concerns that an attacker may probe the instance to try to detect
  whether icons for certain sites have been cached, which would suggest that
  the instance contains entries for those sites.
* The external icon service does a better job of providing icons than the
  built-in fetcher.
 2021-12-20 01:34:31 -08:00
Daniel García
840cf8740a
 		Merge pull request #2156 from jjlin/global-domains 
Sync global_domains.json
 2021-12-19 17:39:45 +01:00
Jeremy Lin
d8869adf52 Sync global_domains.json to bitwarden/server@224bfb6 (Wells Fargo) 2021-12-18 16:19:05 -08:00
Jeremy Lin
a631fc0077 Sync global_domains.json to bitwarden/server@2f518fb (Ubisoft) 2021-12-18 16:19:05 -08:00
Daniel García
9e4d372213
 		Update web vault to 2.25.0 1.23.1 2021-12-13 00:02:13 +01:00
Daniel García
d0bf0ab237
 		Merge pull request #2125 from BlackDex/trust-dns 
Enabled trust-dns and some updates.
 2021-12-08 00:26:31 +01:00
BlackDex
e327583aa5
 		Enabled trust-dns and some updates. 
- Enabled trust-dns feature which seems to help a bit when DNS is
causing long timeouts. Though in the blocking version it is less visible
then on the async branch.
- Updated crates
- Removed some redundant code
- Updated javascript/css libraries

Resolves #2118
Resolves #2119
 2021-12-01 19:01:55 +01:00
Daniel García
ead2f02cbd
 		Merge pull request #2084 from BlackDex/minimize-macro-recursion 
Macro recursion decrease and other optimizations
 2021-11-06 22:00:37 +01:00
BlackDex
c453528dc1
 		Macro recursion decrease and other optimizations 
- Decreased `recursion_limit` from 512 to 87
  Mainly done by optimizing the config macro's.
  This fixes an issue with the rust-analyzer which doesn't go beyond 128
- Removed Regex for masking sensitive values and replaced it with a map()
  This is much faster then using a Regex.
- Refactored the get_support_json macro's
- All items above also lowered the binary size and possibly compile-time
- Removed `_conn: DbConn` from several functions, these caused unnecessary database connections for functions who didn't used that at all
- Decreased json response for `/plans`
- Updated libraries and where needed some code changes
  This also fixes some rare issues with SMTP https://github.com/lettre/lettre/issues/678
- Using Rust 2021 instead of 2018
- Updated rust nightly
 2021-11-06 17:44:53 +01:00
Daniel García
6ae48aa8c2
 		Merge pull request #2080 from jjlin/fix-postgres-migration 
Fix PostgreSQL migration
 2021-11-01 14:33:47 +01:00
Daniel García
88643fd9d5
 		Merge pull request #2078 from jjlin/fix-ea-reject 
Fix missing encrypted key after emergency access reject
 2021-11-01 14:33:39 +01:00
Daniel García
73e0002219
 		Merge pull request #2073 from jjlin/fix-access-logic 
Fix conflict resolution logic for `read_only` and `hide_passwords` flags
 2021-11-01 14:33:29 +01:00
Jeremy Lin
c49ee47de0 Fix PostgreSQL migration 
The PostgreSQL migration should have used `TIMESTAMP` rather than `DATETIME`.
 2021-10-31 17:50:00 -07:00
Jeremy Lin
14408396bb Fix missing encrypted key after emergency access reject 
Rejecting an emergency access request should transition the grantor/grantee
relationship back into the `Confirmed` state, and the grantor's encrypted key
should remain in escrow rather than being cleared, or else future emergency
access requsts from that grantee will fail.
 2021-10-31 02:14:18 -07:00
Jeremy Lin
6cbb724069 Fix conflict resolution logic for read_only and hide_passwords flags 
For one of these flags to be in effect for a cipher, upstream requires all of
(rather than any of) the collections the cipher is in to have that flag set.

Also, some of the logic for loading access restrictions was wrong. I think
that only malicious clients that also had knowledge of the UUIDs of ciphers
they didn't have access to would have been able to take advantage of that.
 2021-10-29 13:47:56 -07:00
Daniel García
a2316ca091
 		Merge pull request #2067 from jjlin/incomplete-2fa 
Add email notifications for incomplete 2FA logins
 2021-10-28 18:00:03 +02:00