mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-11-13 09:39:19 -05:00
| Filename | Latest commit message | Latest commit date |
|---|---|---|
7c82fbed0c* Implement V2 key rotation support * Clear user key ids left stale by key rotations * Refuse key ids that aren't 32 lowercase hex characters, like upstream * Save the signature key pair before the v2 account state * Gate v2 logins on upstream's v2 encryption check * Document the v2 encryption feature flags * Remove the v2 upgrade feature flags With force-upgrade-v2-encryption on, the clients loop on any v1 account that stays v1 on a vault route: the migration check runs fullSync(false), which writes lastSync, which triggers the scheduler again. No server response stops it, so don't serve the flag until the clients fix it. pm-30144-sdk-key-rotation and pm-31050-no-logout-key-upgrade-rotation only serve that upgrade, so they go too. * Move the v2 upgrade token migration to its own version Diesel identifies a migration by the date in its folder name alone, and silently drops one of two folders that share it. The Custom Roles migration uses the same date. * Refuse rotations from a replaced user key, like upstream Both rotation endpoints accept the optional oldUserKeyId. When it and the stored key id are both set and differ, the rotation is refused with a 409 asking the client to sync, before the account keys are checked or anything is written. Also correct the comment on saving the signature key pair first: by then the vault data is already re-encrypted, so a failure there doesn't keep the account usable. * Update the v2 client minimum in .env.template and the key pair comments V2 accounts need 2026.10.1, or 2026.10.2 for the desktop app, so the per-flag versions are only enough to create one. The comments on saving the signature key pair now cover the rotation of an account that is already v2. |
||
| .. | ||
| 2018-01-14-171611_create_tables | ||
| 2018-02-17-205753_create_collections_and_orgs | ||
| 2018-04-27-155151_create_users_ciphers | ||
| 2018-05-08-161616_create_collection_cipher_map | ||
| 2018-05-25-232323_update_attachments_reference | ||
| 2018-06-01-112529_update_devices_twofactor_remember | ||
| 2018-07-11-181453_create_u2f_twofactor | ||
| 2018-08-27-172114_update_ciphers | ||
| 2018-09-10-111213_add_invites | ||
| 2018-09-19-144557_add_kdf_columns | ||
| 2018-11-27-152651_add_att_key_columns | ||
| 2019-05-26-216651_rename_key_and_type_columns | ||
| 2019-10-10-083032_add_column_to_twofactor | ||
| 2019-11-17-011009_add_email_verification | ||
| 2020-03-13-205045_add_policy_table | ||
| 2020-04-09-235005_add_cipher_delete_date | ||
| 2020-07-01-214531_add_hide_passwords | ||
| 2020-08-02-025025_add_favorites_table | ||
| 2020-11-30-224000_add_user_enabled | ||
| 2020-12-09-173101_add_stamp_exception | ||
| 2021-03-11-190243_add_sends | ||
| 2021-03-15-163412_rename_send_key | ||
| 2021-04-30-233251_add_reprompt | ||
| 2021-05-11-205202_add_hide_email | ||
| 2021-07-01-203140_add_password_reset_keys | ||
| 2021-08-30-193501_create_emergency_access | ||
| 2021-10-24-164321_add_2fa_incomplete | ||
| 2022-01-17-234911_add_api_key | ||
| 2022-03-02-210038_update_devices_primary_key | ||
| 2022-07-27-110000_add_group_support | ||
| 2022-10-18-170602_add_events | ||
| 2023-01-06-151600_add_reset_password_support | ||
| 2023-01-11-205851_add_avatar_color | ||
| 2023-01-31-222222_add_argon2 | ||
| 2023-02-18-125735_push_uuid_table | ||
| 2023-06-02-200424_create_organization_api_key | ||
| 2023-06-17-200424_create_auth_requests_table | ||
| 2023-06-28-133700_add_collection_external_id | ||
| 2023-09-01-170620_update_auth_request_table | ||
| 2023-09-02-212336_move_user_external_id | ||
| 2023-09-10-133000_add_sso | ||
| 2023-09-14-133000_add_users_organizations_invited_by_email | ||
| 2023-10-21-221242_add_cipher_key | ||
| 2024-01-12-210182_change_attachment_size | ||
| 2024-02-14-140000_change_time_stamp_data_type | ||
| 2024-02-14-170000_add_state_to_sso_nonce | ||
| 2024-02-26-170000_add_pkce_to_sso_nonce | ||
| 2024-03-06-170000_add_sso_users | ||
| 2024-03-13_170000_sso_userscascade | ||
| 2024-06-05-131359_add_2fa_duo_store | ||
| 2024-09-04-091351_use_device_type_for_mails | ||
| 2025-01-09-172300_add_manage | ||
| 2025-08-20-120000_sso_nonce_to_auth | ||
| 2026-03-09-005927_add_archives | ||
| 2026-04-25-120000_sso_auth_binding | ||
| 2026-05-05-120000_sso_auth_error | ||
| 2026-09-02-120000_add_key_id | ||
| 2026-10-07-120000_add_org_policy_revision_date | ||
| 2026-10-08-120000_cipher_data_longtext | ||
| 2026-10-09-120000_user_crypto_v2 | ||
| 2026-10-10-120000_add_custom_role_permissions | ||
| 2026-11-02-120000_reset_user_key_id | ||
| 2026-11-04-120000_add_v2_upgrade_token | ||