mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-11-09 07:39:22 -05:00
| Filename | Latest commit message | Latest commit date |
|---|---|---|
acbf49018f* 2FA using userVerificationToken * Fix 2FA Yubikeys * TwoFactor.find_by_user_and_type take enum parameter not i32 * log_user_event take enum parameter not i32 * Fix 2fa webauthn * Prevent 2FA claims reuse * 2fa webauthn return keys when deleting * 2fa reset twofactor_remember * Reject 2FA verification tokens issued for another provider The Email and Duo claims only have optional fields, so a userVerificationToken minted for another provider deserialized into them and was accepted. Each provider's claims now reject unknown fields, with a test that every token only parses as its own provider. Also fix the email 2FA login in the Playwright user setup, which used an undefined `mailBuffer`. --------- Co-authored-by: Timshel <timshel@users.noreply.github.com> Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com> |
||
| .. | ||
| setups | ||
| collection.spec.ts | ||
| cyphers.spec.ts | ||
| emergency.spec.ts | ||
| login.smtp.spec.ts | ||
| login.spec.ts | ||
| organization.smtp.spec.ts | ||
| organization.spec.ts | ||
| secrets.spec.ts | ||
| send.spec.ts | ||
| sso_login.smtp.spec.ts | ||
| sso_login.spec.ts | ||
| sso_organization.smtp.spec.ts | ||
| sso_organization.spec.ts | ||