bf20355c5e
Merge branch 'duo'
6 years ago
0136c793b4
Implement better user status API, in the future we'll probably want a way to disable users.
...
We should migrate from the empty password hash to a separate column then.
6 years ago
2e12114350
Always create the user when inviting from admin panel
6 years ago
d3a8a278e6
Add new endpoint for retrieving all users
6 years ago
8d9827c55f
Implement selection between global config and user settings for duo keys.
6 years ago
cad63f9761
Auto generate akey
6 years ago
bf446f44f9
Enable DATA_FOLDER to affect default CONFIG_FILE path
6 years ago
621f607297
Update dependencies and fix some warnings
6 years ago
754087b990
Add global duo config and document options in .env template
6 years ago
cfbeb56371
Implement user duo, initial version
...
TODO:
- At the moment each user needs to configure a DUO application and input the API keys, we need to check if multiple users can register with the same keys correctly and if so we could implement a global setting.
- Sometimes the Duo frame doesn't load correctly, but canceling, reloading the page and logging in again seems to fix it for me.
6 years ago
c5832f2b30
With the latest fern, syslog can be a config option instead of a build flag
6 years ago
2475c36a75
Implement log_level config option
6 years ago
c384f9c0ca
Set default log level to Info, we don't use debug anyway and it just fills the logs with other crates info.
6 years ago
6b686c18f7
Fixed long e-mail message extending 1000 lines.
...
- Added quoted_printable crate to encode the e-mail messages.
- Change the way the e-mail gets build to use custom part headers.
6 years ago
7976d39d9d
Adjust whitespace
6 years ago
5ee9676941
Break up long line to stop SMTP from breaking
6 years ago
4b40cda910
Added domain blacklist regex for icons service and improved valid domain check.
...
Reorganized the icons code a bit.
6 years ago
4689ed7b30
Changed uppercase deserializer to avoid a clone.
6 years ago
61515160a7
Allow changing error codes and create an empty error.
...
Return 404 instead of 400 when no accounts breached.
6 years ago
e93538cea9
Add option to use wrapped TLS in email, instead of STARTTLS upgrade
6 years ago
b4244b28b6
Update admin page scripts and fixed broken tooltip
6 years ago
43f9038325
Add option to force resync clients in admin panel
6 years ago
339044f8aa
Add warning about config panel values overriding env vars.
6 years ago
0718a090e1
Trim spaces from admin token during authentication and validate that the admin panel token is not empty
6 years ago
9e1f030a80
Explicitly close SMTP connection in case of error.
6 years ago
04922f6aa0
Some formatting and dependency updates
6 years ago
7d2bc9e162
Added option to force 2fa at logins and made some changes to two factor code.
...
Added newlines to config options to keep them a reasonable length.
6 years ago
10756b0920
Update dependencies and fix some lints
6 years ago
d156170971
Minor typo fix conect => connect
6 years ago
473f8b8e31
remove some unneeded mutability
6 years ago
5794969f5b
Merge pull request #406 from shauder/feature/disable-admin-token
...
Allow the Admin token to be disabled in the advanced menu
6 years ago
8b5b06c3d1
Allow the Admin token to be disabled in the advanced menu
6 years ago
b50c27b619
Print a warning when an env variable is being overriden by the config file, and reorganize the main file a bit.
...
Modified the JWT key generation, now it should also show the output of OpenSSL in the logs.
6 years ago
5ee04e31e5
Updated dependencies, removed some unnecessary clones and fixed some lints
6 years ago
bf6ae91a6d
Remove margins on small devices
6 years ago
828e3a5795
Add extra padding when the toolbar collapses in small devices
6 years ago
7b5bcd45f8
Show read-only options in the config panel and the env variable names in the tooltips
6 years ago
0b903fc5f4
Extended the template file and refer to wiki
6 years ago
4df686f49e
Add an option to not enable WAL (should help in #399 )
6 years ago
d7eeaaf249
Escape user data from admin panel when calling JS
6 years ago
84fb6aaddb
Set correct MIME type
6 years ago
a744b9437a
Implemented multiple U2f keys, key names, and compromised checks
6 years ago
6027b969f5
Delete old devices when deauthorizing user sessions
6 years ago
93805a5d7b
Fix Yubikeys deleted on error
6 years ago
8526055bb7
Added images to email templates
6 years ago
a79334ea4c
Added static email image routes
6 years ago
d3773a433a
Removed list of mounted routes at startup by default, with option to add it back. This would get annoying when starting the server frequently, because it printed ~130 lines of mostly useless info
6 years ago
0f0a87becf
Add version to initial message
6 years ago
3b27dbb0aa
Added config option for icon download timeout
6 years ago
9636f33fdb
Implement constant time equal check for admin, 2fa recover and 2fa remember tokens
6 years ago
79fdfd6524
Add missing url parameter
6 years ago
d086a99e5b
Implemented HTML emails with text alternative
6 years ago
22b0b95209
Added HTML templates (+14 squashed commit)
...
Squashed commit:
[ece2260] Plaintext send_org_invite
[01d4884] Plaintext pw_hint_some
[6ce5173] Plaintext pw_hint_none
[881af3e] Plaintext invite_confirmed
[ce78621] Plaintext invite_accepted
[13a44a4] Rename send_org_invite.hbs to send_org_invite.html.hbs
[b52bf2f] Rename pw_hint_some.hbs to pw_hint_some.html.hbs
[e0d1aeb] Rename pw_hint_none.hbs to pw_hint_none.html.hbs
[898dbcd] Rename invite_confirmed.hbs to invite_confirmed.html.hbs
[107af31] Rename invite_accepted.hbs to invite_accepted.html.hbs
[d26d662] Updated send_org_invite template
[71f47af] Updated pw_hint_some template
[c2ca3c2] Updated pw_hint_none template
[50f8bfb] Updated invite_accepted template
[17f96f8] Updated invite_confirmed template
6 years ago
28d1588e73
Show version in admin panel
6 years ago
f3b1a5ff3e
Error when admin panel is disabled
6 years ago
330e90a6ac
Hide secrets in config panel
6 years ago
820c8b0dce
Change use of deserialize_with for Option iterator
6 years ago
8b4a6f2a64
Fixed some clippy lints and changed update_uuid_revision to only use one db query
6 years ago
ef63342e20
Add reset user config button
6 years ago
89840790e7
Fix .env path traversal issue
6 years ago
a72809b225
Yubico and SMTP enable/disable master switches
6 years ago
9976e4736e
Add groups
6 years ago
dc92f07232
Added env variable to select config file. Initial work towards groups and added tooltips with descriptions and nicer names
6 years ago
3db815b969
Implemented config form and fixed config priority
6 years ago
ade293cf52
Save config
6 years ago
877408b808
Implement basic config loading and updating. No save to file yet.
6 years ago
86ed75bf7c
Config can now be serialized / deserialized
6 years ago
20d8d800f3
Updated dependencies
6 years ago
08ca47cadb
Update revision when adding or removing cipher from collection
6 years ago
5272b465cc
Update revision of affected users when deleting Collection
6 years ago
637f655b6f
Do not allocate uneccessary Vec
6 years ago
b3f7394c06
Do not update revision at the end, as we already did that
6 years ago
1a5ecd4d4a
cipher does not need to be mutable
6 years ago
bd65c4e312
Remove superfluous cipher.save() call
6 years ago
bce656c787
Retry updating revision - fixes #383
6 years ago
9026cc8d42
Fixed issue when the iconlist is smaller then 5
...
When the iconlist was smaller then 5 items, it would cause a panic.
Solved by using .truncate() on the iconlist.
6 years ago
574b040142
Loop through the iconlist until an icon is found
...
Loop for a maximum of 5 times through the iconlist or until a
successful download of an icon.
6 years ago
c13f115473
Fixed issue #380
...
- Created a separate function for parsing the sizes attribute
- Parsing sizes now with regex
- Should work with any non-digit separator
6 years ago
bc461d9baa
Some small changes on the iter of the cookies
6 years ago
5016e30cf2
Added cookies to the icon download request.
...
Some sites use XSRF Tokens, or other Tokens to verify a subseqense
response. The cookies which are sent during the page request are now
used when downloading the favicon.
A site which uses this is mijn.ing.nl.
6 years ago
f42ac5f2c0
Update web vault error message
6 years ago
2a60414031
Reuse the client between requests, and use the client when downloading the icons themselves
6 years ago
feb74a5e86
Changed the way to fix the href
...
- Using url from reqwest to fix href, this fixes:
+ "//domain.com/icon.png"
+ "relative/path/to/icon.png"
+ "/absolute/path/to/icon.png"
- Removed fix_href function
- Some variable changes
6 years ago
c0e350b734
Disable icon downloads, accept optional query after icon href, format and clippy fixes
6 years ago
bef1183c49
Only send one notification per vault import and purge, improve move ciphers functions
6 years ago
f935f5cf46
Remove local icon extractor
6 years ago
07388d327f
Merge pull request #370 from BlackDex/favicons
...
Added better favicon downloader.
6 years ago
4de16b2d17
Removed unwrap and added ?
6 years ago
da068a43c1
Moved function call to get_icon_url to prevent error bubbeling
6 years ago
9657463717
Added better favicon downloader.
6 years ago
69036cc6a4
Add disabled user badge (no password) and deauthorize button to admin page.
6 years ago
700e084101
Add 2FA icon to admin panel
6 years ago
a1dc47b826
Change config to thread-safe system, needed for a future config panel.
...
Improved some two factor methods.
6 years ago
86de0ca17b
Fix editing users from collections menu
6 years ago
fc0e239bdf
No point calling find_by_uuid now we don't use the result.
6 years ago
928ad6c1d8
Fix the list of users with access to a collection to display correctly.
...
https://github.com/dani-garcia/bitwarden_rs/issues/364
6 years ago
ddd49596ba
Fix invite empty email
6 years ago
b8cabadd43
Fix admin page links
6 years ago
ce42b07a80
Update Diesel to 1.4 and other dependencies
6 years ago
bfd93e5b13
Show organizations in admin panel, implement reload templates option
6 years ago
a797459560
Implement HIBP check [WIP].
...
Add extra security attributes to admin cookie.
Error handling.
6 years ago
6cbb683f99
Rename admin templates to match email
6 years ago
92bbb98d48
Created base template
6 years ago
834c847746
Implement admin JWT cookie, separate JWT issuers for each type of token and migrate admin page to handlebars template
6 years ago
97aa407fe4
Move email templates to subfolder
6 years ago
d8116a80df
Add Feature-Policy header
6 years ago
e0aec8d373
Use new i64::to_be_bytes and remove byteorder dep
...
(https://doc.rust-lang.org/stable/std/primitive.i64.html#method.to_be_bytes )
6 years ago
1ce2587330
Correct update cipher order: first save cipher, then cipher-folder, then notify
6 years ago
71a10e0378
Fix sharing the item to organization.
6 years ago
9bf13b7872
Can't return inside multipart closure
6 years ago
d420992f8c
Update some function calls to use ?
6 years ago
c259a0e3e2
Save recovery code when using yubikey and stop repeating headers.user everywhere
6 years ago
432be274ba
Improve org mismatch check, consider different orgs
6 years ago
484bf5b703
Check that the client is not updating an outdated cipher, that should be part of an org now
6 years ago
4bf32af60e
Fix folder notifications, enable template strict mode and add missing option to env template
6 years ago
0e4a746eeb
Added SMTP_FROM_NAME
6 years ago
2fe919cc5e
Embed the default templates
6 years ago
bcd750695f
Default to $data_folder/templates and remove dev option (use `TEMPLATES_FOLDER=src/static/templates` instead)
6 years ago
19b6bb0fd6
Initial stab at templates
6 years ago
f571df7367
Revert yubikey feature, not needed anymore
6 years ago
de51bc782e
Updated dependencies, removing need for yubico fork
6 years ago
c5aef60bd7
Implement unofficial warning message
6 years ago
6f52104324
Fix casing error in Attachment, should fix 'Attachment doesn't exist' errors
6 years ago
1d7f704754
Send CipherUpdate when adding and deleting attachments
6 years ago
1d034749f7
Fix AArch64 build by disabling yubico
6 years ago
320266606e
Implement put collections
6 years ago
a0a08c4c5a
Include IP in invalid admin token error
6 years ago
4309df8334
Only create invitations when SMTP is disabled, and ignore invitations if we have a token.
...
Disallow users from accepting invitation twice
6 years ago
f1161c65fb
Make sure an invitation is created when reinviting
6 years ago
50eeb4f651
Remove whitespace before processing tokens
6 years ago
21b85b78b1
Changed reinvite check and removed obsolete comment
6 years ago
673adde9f1
Make the admin retype the user name before deleting
6 years ago
c9063a06b4
Print unauthorized error message
6 years ago
5e37471488
Merge pull request #323 from njfox/invite_accepted_email
...
Send email notifications when invitations are accepted/confirmed
6 years ago
0a74e79cea
Refactor generate_invite_claims, make org_name and org_id optional
6 years ago
7db66f73f0
Refactor invited_by_email check
6 years ago
2f5bdc23f6
Fix formatting and add vault link to notification emails
6 years ago
cec28a85ac
Update admin page to work with new invitation flow
6 years ago
5f49ecd7f3
Updated dependencies to use u2f crate directly, and some style changes
6 years ago
736c0e62f2
Send emails to inviters/invitees when invites are accepted/confirmed
6 years ago
43eb064351
Replace invite/reinvite email functions with generic send_email
6 years ago
30e768613b
Start using rustfmt and some style changes to make some lines shorter
6 years ago
adb8052689
Updated Error to implement Display and Debug, instead of using custom methods
6 years ago
1483829c94
Removed invalid todo
6 years ago
acb9d1b3c6
Remove config option for admin email, embdedded admin page, managed IO::Error, and added security and cache headers globally
6 years ago
301919d9d4
Modified navigation bar and corrected some comments
6 years ago
2bb0b15e04
Implemented better errors for JWT
6 years ago
250a2b340f
Use new Errors in latest changes
6 years ago
b2fc0499f6
Finish invite functionality, and remove virtual organization
6 years ago
6a99849a1e
Implemented proper error handling, now we can do `user.save($conn)?;` and it works.
...
In the future, maybe we can do the same with the `find_by_id` methods that return an Option.
6 years ago
Daniel García
ViViDboarder
BlackDex
Nick Fox
Frank Petrilli
Дамјан Георгиевски
Shane Faulkner
Miroslav Prasil
TheMardy
TheMardy
Stephen White
TBK