mirrors/vaultwarden
Watch
1
0
Fork
You've already forked vaultwarden
 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-08-23 12:34:59 -04:00
Code Issues Releases Packages Wiki Activity
3,065 commits 5 branches 87 tags 54 MiB
Commit graph

3,065 commits

This branch
This branch
All branches
Author SHA1 Message Date
Daniel García
5725d297b4
 		Merge pull request #3363 from BlackDex/gha-test 
Add support for Quay.io and GHCR.io as registries
 2023-03-24 17:11:58 +01:00
Daniel García
a428f05e77
 		Merge pull request #3354 from stefan0xC/bulk-delete-endpoints 
add endpoints to bulk delete collections/groups
 2023-03-24 17:09:56 +01:00
BlackDex
467ecfdc99
 		Add support for Quay.io and GHCR.io as registries 
- Added support for Quay.io
- Added support for GHCR.io

To enable support for these container image registries the following needs to be added.

As `Actions secrets and variables` - `Secrets`
- `DOCKERHUB_TOKEN` and `DOCKERHUB_USERNAME`
- `QUAY_TOKEN` and `QUAY_USERNAME`

As `Actions secrets and variables` - `Variables` - `Repository Variables`
- `DOCKERHUB_REPO`
- `GHCR_REPO`
- `QUAY_REPO`

The `DOCKERHUB_REPO` currently configured in `Secrets` can be removed if wanted, probably best after this PR has been merged.

If one of the vars/secrets are not configured it will skip that specific registry!
 2023-03-23 16:38:27 +01:00
Stefan Melmuk
ed8091a994
 		don't use assert() in production code 
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2023-03-23 00:26:28 +01:00
Stefan Melmuk
56cad93e0f
 		add endpoint to bulk delete collections 2023-03-23 00:26:28 +01:00
Stefan Melmuk
3cf67e0b8d
 		add endpoint to bulk delete groups 2023-03-23 00:26:26 +01:00
Daniel García
5800aceb2d
 		Update web vault to v2023.3.0 and dependencies 2023-03-22 21:30:30 +01:00
Daniel García
729b563160
 		Merge pull request #3332 from BlackDex/merge-clientip-with-headers 
Merge ClientIp with Headers.
 2023-03-15 22:28:03 +01:00
Daniel García
6b5618a5fc
 		Merge pull request #3348 from BlackDex/update-rust-and-crates 
Update Rust, MSRV and Crates
 2023-03-15 22:08:06 +01:00
Daniel García
2aa72eb240
 		Merge pull request #3329 from jjlin/knowndevices-header 
Add support for `/api/devices/knowndevice` with HTTP header params
 2023-03-15 22:03:15 +01:00
BlackDex
c8655c4f89
 		Update Rust, MSRV and Crates 
- Updated all the crates
- Updated Rust and MSRV
 2023-03-15 20:41:12 +01:00
Jeremy Lin
daaa03d1b3 Add support for /api/devices/knowndevice with HTTP header params 
Upstream PR: https://github.com/bitwarden/server/pull/2682
 2023-03-11 12:03:05 -08:00
BlackDex
9e5b94924f
 		Merge ClientIp with Headers. 
Since we now use the `ClientIp` Guard on a lot more places, it also
increases the size of binary, and the macro generated code because of
this extra Guard. By merging the `ClientIp` Guard with the several
`Header` guards we have it reduces the amount of code generated
(including LLVM IR), but also a small speedup in build time.

I also spotted some small `json!()` optimizations which also reduced the
amount of code generated.
 2023-03-11 16:58:32 +01:00
Mathijs van Veluw
f21089900e
 		Merge pull request #3310 from BlackDex/msrv-changes 
Upd Crates, Rust, MSRV, GHA and remove Backtrace
 2023-03-07 12:06:05 +01:00
BlackDex
0c0e632bc9
 		Upd Crates, Rust, MSRV, GHA and remove Backtrace 
- Changed MSRV to v1.65.
  Discussed this with @dani-garcia, and we will support **N-2**.
  This is/will be the same as for the `time` crate we use.
  Also updated the wiki regarding this https://github.com/dani-garcia/vaultwarden/wiki/Building-binary
- Removed backtrace crate in favor of `std::backtrace` stable since v1.65
- Updated Rust to v1.67.1
- Updated all the crates
- Updated the GHA action versions
- Adjusted the GHA MSRV build to extract the MSRV from `Cargo.toml`
 2023-03-07 09:17:42 +01:00
Daniel García
a13a5bd1d8
 		Merge pull request #3315 from BlackDex/issue-3311 
Fix web-vault Member UI show/edit/save
 2023-03-06 21:13:34 +01:00
Daniel García
3b34b429f3
 		Merge pull request #3307 from jjlin/head-routes 
Add HEAD routes to avoid spurious error messages
 2023-03-06 21:12:54 +01:00
Daniel García
97ffd17789
 		Merge pull request #3289 from BlackDex/admin-token-hash-support 
Admin token Argon2 hashing support
 2023-03-06 21:12:41 +01:00
BlackDex
10c5476d31
 		Fix web-vault Member UI show/edit/save 
There was a small bug left in regards to the web-vault v2023.2.0 fixes.
This PR fixes the left items. I think all should be addressed now.
When editing a User, you were not able to see or edit groups, or see
wich collections a user bellonged to.

Fixes #3311
 2023-03-06 17:07:21 +01:00
Jeremy Lin
d3626eba2a Add HEAD routes to avoid spurious error messages 
Rocket automatically implements a HEAD route when there's a matching GET
route, but relying on this behavior also means a spurious error gets
logged due to <https://github.com/SergioBenitez/Rocket/issues/1098>.

Add explicit HEAD routes for `/` and `/alive` to prevent uptime monitoring
services from generating error messages like `No matching routes for HEAD /`.
With these new routes, `HEAD /` only checks that the server can respond over
the network, while `HEAD /alive` also checks that the database connection is
alive, similar to `GET /alive`.
 2023-03-05 09:51:42 -08:00
BlackDex
de157b2654
 		Admin token Argon2 hashing support 
Added support for Argon2 hashing support for the `ADMIN_TOKEN` instead
of only supporting a plain text string.

The hash must be a PHC string which can be generated via the `argon2`
CLI **or** via the also built-in hash command in Vaultwarden.

You can simply run `vaultwarden hash` to generate a hash based upon a
password the user provides them self.

Added a warning during startup and within the admin settings panel is
the `ADMIN_TOKEN` is not an Argon2 hash.

Within the admin environment a user can ignore that warning and it will
not be shown for at least 30 days. After that the warning will appear
again unless the `ADMIN_TOKEN` has be converted to an Argon2 hash.

I have also tested this on my RaspberryPi 2b and there the `Bitwarden`
preset takes almost 4.5 seconds to generate/verify the Argon2 hash.

Using the `OWASP` preset it is below 1 second, which I think should be
fine for low-graded hardware. If it is needed people could use lower
memory settings, but in those cases I even doubt Vaultwarden it self
would run. They can always use the `argon2` CLI and generate a faster hash.
 2023-03-04 16:15:30 +01:00
Mathijs van Veluw
337cbfaf22
 		Merge pull request #3290 from dpinse/test 
Fix confirmation for removing 2FA and deauthing sessions in admin panel
 2023-03-01 06:38:28 +01:00
Dylan Pinsonneault
f88b6d961e Fix confirmation for removing 2FA and deauthing sessions in admin panel 2023-02-28 20:38:33 -05:00
Daniel García
0426051541
 		Merge pull request #3281 from BlackDex/fix-web-vault-issues 
Fix the web-vault v2023.2.0 API calls
 2023-02-28 23:45:59 +01:00
Daniel García
4556f668de
 		Merge pull request #3288 from BlackDex/admin-interface-updates 
Some Admin Interface updates
 2023-02-28 23:43:01 +01:00
Daniel García
da8225a3bd
 		Merge pull request #3282 from JCBird1012/main 
Add confirmation for removing 2FA and deauthing sessions in admin panel
 2023-02-28 23:42:47 +01:00
BlackDex
f10e6b6ac2
 		Some Admin Interface updates 
- Updated datatables
- Added NTP Time check
- Added Collections, Groups and Events count for orgs
- Renamed `Items` to `Ciphers`
- Some small style updates
 2023-02-28 20:43:22 +01:00
BlackDex
7ec00d3850
 		Fix the web-vault v2023.2.0 API calls 
- Supports the new Collection/Group/User editing UI's
- Support `/partial` endpoint for cipher updating to allow folder and favorite update for read-only ciphers.
- Prevent `Favorite`, `Folder`, `read-only` and `hide-passwords` from being added to the organizational sync.
- Added and corrected some `Object` key's to the output json.

Fixes #3279
 2023-02-27 16:37:58 +01:00
Jonathan Elias Caicedo
8f8d7418ed
 		Add confirmation for removing 2FA and deauth sessions in admin panel 2023-02-24 16:24:48 -05:00
Mathijs van Veluw
af6d17b701
 		Merge pull request #3277 from jjlin/org-vault-display 
Fix vault item display in org vault view
 2023-02-23 13:45:47 +01:00
Jeremy Lin
61183d001c Fix vault item display in org vault view 
In the org vault view, the Bitwarden web vault currently tries to fetch the
groups for an org regardless of whether it claims to have group support.
If this errors out, no vault items are displayed.
 2023-02-22 12:17:13 -08:00
Daniel García
024d12db08
 		Update web vault to v2023.2.0 and dependencies 2023-02-21 22:48:20 +01:00
Daniel García
dc7951efaf
 		Add missing collections/details endpoint, based on the existing one 2023-02-21 21:58:37 +01:00
Daniel García
06e14fea55
 		Merge branch 'mittler-works-search_user_by_email' 2023-02-21 21:37:28 +01:00
Nils Mittler
0f656b4889
 		Apply rewording 2023-02-21 21:37:24 +01:00
Nils Mittler
6fa1dc50be
 		Apply Admin Session Lifetime to JWT 2023-02-21 21:37:24 +01:00
Nils Mittler
2bb41367bc
 		Make the admin cookie lifetime adjustable 2023-02-21 21:37:24 +01:00
Misterbabou
20d8886bfa
 		Fix Collection Read Only access for groups 
I messed up with identation sorry it's my first PR

Fix Collection Read Only access for groups

Fix Collection Read Only access for groups

With indentation modification
 2023-02-21 21:37:23 +01:00
BlackDex
59ef82b740
 		Fix Organization delete when groups are configured 
With existing groups configured within an org, deleting that org would
fail because of Foreign Key issues.

This PR fixes this by making sure the groups get deleted before the org does.

Fixes #3247
 2023-02-21 21:37:23 +01:00
BlackDex
fc543154c0
 		Validate all needed fields for client API login 
During the client API login we need to have a `device_identifier`, `device_name` and `device_type`.
When these were not provided Vaultwarden would panic.

This PR add checks for these fields and makes sure it returns a better error message instead of causing a panic.
 2023-02-21 21:37:23 +01:00
r3drun3
569b464157
 		docs: add build status badge in readme 2023-02-21 21:37:23 +01:00
Daniel García
adf83c698d
 		Merge branch 'mittler-works-adjustable_admin_cookie_lifetime' 2023-02-21 21:30:19 +01:00
Misterbabou
8fcbc58ee2
 		Fix Collection Read Only access for groups 
I messed up with identation sorry it's my first PR

Fix Collection Read Only access for groups

Fix Collection Read Only access for groups

With indentation modification
 2023-02-21 21:30:15 +01:00
BlackDex
2dcbb2be59
 		Fix Organization delete when groups are configured 
With existing groups configured within an org, deleting that org would
fail because of Foreign Key issues.

This PR fixes this by making sure the groups get deleted before the org does.

Fixes #3247
 2023-02-21 21:30:14 +01:00
BlackDex
7026e004e1
 		Validate all needed fields for client API login 
During the client API login we need to have a `device_identifier`, `device_name` and `device_type`.
When these were not provided Vaultwarden would panic.

This PR add checks for these fields and makes sure it returns a better error message instead of causing a panic.
 2023-02-21 21:30:14 +01:00
r3drun3
a3084feaee
 		docs: add build status badge in readme 2023-02-21 21:30:14 +01:00
Daniel García
e7d36de784
 		Merge branch 'Misterbabou-issue-3249' 2023-02-21 21:29:13 +01:00
BlackDex
54cc47b14e
 		Fix Organization delete when groups are configured 
With existing groups configured within an org, deleting that org would
fail because of Foreign Key issues.

This PR fixes this by making sure the groups get deleted before the org does.

Fixes #3247
 2023-02-21 21:29:09 +01:00
BlackDex
fac44888cd
 		Validate all needed fields for client API login 
During the client API login we need to have a `device_identifier`, `device_name` and `device_type`.
When these were not provided Vaultwarden would panic.

This PR add checks for these fields and makes sure it returns a better error message instead of causing a panic.
 2023-02-21 21:29:08 +01:00
r3drun3
9f056523c9
 		docs: add build status badge in readme 2023-02-21 21:29:08 +01:00