Commit Graph

1370 Commits (c28246cf34bcf1f4ecfbfde88e5d6655a44ebcb7)

Author SHA1 Message Date
Daniel García 0dcea75764
Remove unused lifetime and double referencing
3 years ago
Daniel García 46e0f3c43a
Load RSA keys as pem format directly, and using openssl crate, backported from async branch
3 years ago
Daniel García 2cd17fe7af
Add token with short expiration time to send url
3 years ago
Jeremy Lin 49579e4ce7 Avoid `Error parsing LastKnownRevisionDate` warning for mobile clients
3 years ago
Daniel García 9254cf9d9c
Fix clippy lints
3 years ago
BlackDex 8615736e84 Multiple Admin Interface fixes and some others.
3 years ago
Daniel García 5772836be5
Fix admin page with handlebars 4
4 years ago
Daniel García c380d9c379
Support for webauthn and u2f->webauthn migrations
4 years ago
Jeremy Lin 3f7e4712cd Fix attachment size limit calculation for v2 uploads
4 years ago
Jeremy Lin c2ef331df9 Rework file ID generation
4 years ago
Jeremy Lin 5fef7983f4 Clean up attachment error handling
4 years ago
Jeremy Lin 29ed82a359 Add support for v2 attachment upload APIs
4 years ago
Jeremy Lin 848d17ffb9 Sync global_domains.json to bitwarden/server@7857053 (Amazon)
4 years ago
BlackDex f270f2ed65 Updated icon fetching and crates.
4 years ago
Jeremy Lin 9133e2927d Fix attachment downloads
4 years ago
Jeremy Lin 38104ba7cf `cargo fmt` changes
4 years ago
Daniel García 8e6c6a1dc4
Merge pull request #1689 from jjlin/hide-email
4 years ago
Daniel García 7a9cfc45da
Merge pull request #1688 from jjlin/config-sends-allowed
4 years ago
Daniel García 9e24b9065c
Merge pull request #1682 from dongcarl/2021-05-admin-granular-http-codes
4 years ago
Daniel García 1c2b376ca2
Merge pull request #1663 from dongcarl/2021-05-invite_user-return
4 years ago
Jeremy Lin 029008bad5 Add support for the `Send Options` policy
4 years ago
Jeremy Lin d3449bfa00 Add support for hiding the sender's email address in Bitwarden Sends
4 years ago
Jeremy Lin a9a5706764 Add support for password reprompt
4 years ago
Jeremy Lin 3ff8014add Add `sends_allowed` config setting
4 years ago
Carl Dong e60bdc7efe admin: Make invite_user error codes more specific
4 years ago
Carl Dong cccd8262fa admin: Add /users/<uuid> route
4 years ago
Carl Dong 68e5d95d25 admin: Specifically return 404 for user not found
4 years ago
Carl Dong 5f458b288a admin: Return newly-created user in invite_user
4 years ago
BlackDex 7cb19ef767 Updated branding, email and crates
4 years ago
Daniel García b8010be26b
Extract some FromDb trait impls outside the macros so they aren't repeated, and fix some clippy lints
4 years ago
Olivier Martin 39167d333a Merge commit '0d631329873196935ba29db985c5e32def391251' into 2fa_enforcement
4 years ago
Daniel García 7b5d5d1302
Rename references to the discourse forum
4 years ago
Olivier Martin f707f86c8e Merge commit '1e5306b8203a7ebe24047910e6c690c18c6d827a' into 2fa_enforcement
4 years ago
Daniel García 1e5306b820
Remove warning when compiling only with mysql and add compatibility mode with the old docker script names
4 years ago
Daniel García 2b4dd6f137
Fix branch name
4 years ago
Olivier Martin cc021a4784 project name and links in new email templates
4 years ago
Olivier Martin e3c4609c2a Merge commit '3da44a8d30e76f48b84f5b888e0b33427037037c' into 2fa_enforcement
4 years ago
Daniel García 3da44a8d30
Fix formatting
4 years ago
Daniel García 34ea10475d
Project renaming
4 years ago
Olivier Martin 89a68741d6 ran cargo fmt --all
4 years ago
Olivier Martin 2421d49d9a Merge branch 'master' of github.com:dani-garcia/bitwarden_rs into 2fa_enforcement
4 years ago
Daniel García 305de2e2cd
Format the changes from merge to master
4 years ago
Daniel García 95d906bdbb
Merge branch 'master' into fmt
4 years ago
Daniel García 4bb0d7bc05
Merge pull request #1587 from RealOrangeOne/request-proxy
4 years ago
Olivier Martin 1db37bf3d0 make error toast display detailed message
4 years ago
Olivier Martin d75a80bd2d Resolves dani-garcia/bitwarden_rs#981
4 years ago
Jeremy Lin 244bad3a24 Warn that the SQLite backup feature doesn't produce a complete backup
4 years ago
Jake Howard 994669fb69
Merge remote-tracking branch 'origin/master' into fmt
4 years ago
Jake Howard 3ab90259f2
Modify rustfmt file
4 years ago
Jake Howard 155109dea1
Extract client creation to a single place
4 years ago
Daniel García b268c3dd1c
Update web vault and add unnoficialserver response
4 years ago
Daniel García 4e64dbdde4
Merge pull request #1579 from jjlin/job-scheduler
4 years ago
Daniel García a2955daffe
Merge pull request #1576 from jjlin/global-domains
4 years ago
Daniel García d3921b973b
Merge pull request #1583 from BlackDex/icon-updates
4 years ago
Jeremy Lin 90e0b7fec6 Offset scheduled jobs by 5 minutes
4 years ago
Jeremy Lin d77333576b Add support for auto-deleting trashed items
4 years ago
Jeremy Lin 73ff8d79f7 Add a generic job scheduler
4 years ago
BlackDex 95fc88ae5b Some admin interface updates.
4 years ago
BlackDex 1d0eaac260 Updated icon fetching.
4 years ago
Jeremy Lin 3565bfc939 Sync global_domains.json to bitwarden/server@261916d (Stack Exchange)
4 years ago
Jake Howard 93c881a7a9
Reflow some lines manually
4 years ago
Jake Howard 0af3956abd
Run `cargo fmt` on codebase
4 years ago
BlackDex 9caf4bf383 Misc changes.
4 years ago
BlackDex 3a3390963c Icon and SMTP Debug fixes.
4 years ago
Daniel García fd27759a95
Merge pull request #1546 from RealOrangeOne/clippy-run
4 years ago
Daniel García 01d8056c73
Merge pull request #1545 from RealOrangeOne/icon-client-cache
4 years ago
Jake Howard 81fa33ebb5
Remove unnecessary reference
4 years ago
Jake Howard e8aa3bc066
Merge branch 'master' into clippy-run
4 years ago
Jake Howard 0bf0125e82
Reverse negation on ordering
4 years ago
Jake Howard 6209e778e5
Icons should always be cached using full TTL
4 years ago
BlackDex 57e17d0648 Updated diagnostics page
4 years ago
Jake Howard 3e5971b9db
Remove unnecessary result return types
4 years ago
Jake Howard 47c2625d38
Prevent `clippy` complaining at method
4 years ago
Jake Howard 49af9cf4f5
Correctly camelCase acronyms
4 years ago
Jake Howard 6b1daeba05
Implement `From` over `Into`
4 years ago
Jake Howard 9f1240d8d9
Only construct JSON object if it's useful
4 years ago
Jake Howard a8138be69b
Use `if let` more
4 years ago
Jake Howard ea57dc3bc9
Use `matches` macro
4 years ago
Jake Howard 131348a49f
Add immutable caching for vault assets
4 years ago
Jake Howard b22564cb00
Cache icons on the client
4 years ago
Daniel García 8ea01a67f6
Merge pull request #1529 from mprasil/more-generic-send-error-messages
4 years ago
Miro Prasil aa5cc642e1 Use constant for the "inaccessible" error message
4 years ago
Jeremy Lin f842a80cdb Sync global_domains.json to bitwarden/server@455e4b2 (ProtonMail/ProtonVPN)
4 years ago
Miro Prasil 4b6a574ee0 Return generic message when Send not available
4 years ago
Daniel García f9ebb780f9
Update dependencies
4 years ago
Daniel García 1fc6c30652
Send deletion thread and updated users revision
4 years ago
Daniel García 46a1a013cd
Update user revision date with sends
4 years ago
Daniel García 551810c486
Fix updating file send
4 years ago
Daniel García b987ba506d
Merge pull request #1493 from jjlin/send
4 years ago
Daniel García 84810f2bb2
Remove unnecessary fields from send access
4 years ago
Jeremy Lin 424d666a50 Add support for the Disable Send policy
4 years ago
Daniel García d93c344176
Merge branch 'master' into cors
4 years ago
Daniel García b9c3213b90
Merge pull request #1487 from jjlin/send
4 years ago
Daniel García 95e24ffc51
rename send key -> akey
4 years ago
Jeremy Lin 00d56d7295 Send access check fixes
4 years ago
Daniel García 8da5b99482
Send API
4 years ago
Daniel García 2969e87b52
Add separate host-only fromrequest handler
4 years ago
Daniel García ce62e898c3
Remove debug impl from database structs
4 years ago
Jeremy Lin 7d0e234b34 CORS fixes
4 years ago
Daniel García dad1b1bee9
Updated dependencies
4 years ago
Jeremy Lin a75d050001 Fix custom org name in invitation confirmation email
4 years ago
Daniel García 75cfd10f11
Merge pull request #1444 from jjlin/remove-md5
4 years ago
Jeremy Lin 513056f711 Check for data folder on startup
4 years ago
Jeremy Lin 39106d440a Remove `md5.js` dependency
4 years ago
Jeremy Lin e37ff60617 Change `twofactorauth.org` to `2fa.directory`
4 years ago
Paolo Barbolini d956d42903 Remove unnecessary allocations
4 years ago
Daniel García c836f88ff2
Remove soup and use a newer html5ever directly
4 years ago
Daniel García 8b660ae090
Swap structopt for a simpler alternative
4 years ago
Daniel García 9323c57f49
Remove debug print
4 years ago
Daniel García 85e3c73525
Basic experimental ldap import support with the official directory connector
4 years ago
BlackDex e794b397d3 Fixed small buggy in validation
4 years ago
Mathijs van Veluw 4cd5b06b7f
Merge branch 'master' into admin-interface
4 years ago
Mathijs van Veluw 9e5fd2d576
Merge branch 'master' into admin-interface
4 years ago
Mathijs van Veluw ecb46f591c
Merge branch 'master' into misc-updates
4 years ago
Daniel García d62d53aa8e
Merge pull request #1341 from BlackDex/dep-update
4 years ago
Jeremy Lin 83d556ff0c Sync global_domains.json to bitwarden/server@cf84453 (Disney, Sony)
4 years ago
BlackDex 705d840ea3 Extra features for admin interface.
4 years ago
BlackDex 7dff8c01dd JSON Response updates and small fixes
4 years ago
BlackDex 5860679624 Updated dependencies and small mail fixes
4 years ago
Jeremy Lin 67c657003d Fix collection access issues for owner/admin users
4 years ago
Jeremy Lin 1d4f900e48 Add cipher response to restore operations
4 years ago
Jeremy Lin 9f86196a9d Add support for the Personal Ownership policy
4 years ago
BlackDex 235ff44736 Updated the admin interface
4 years ago
BlackDex de86aa671e Fix Key Rotation during password change
4 years ago
Daniel García e38771bbbd
Merge pull request #1267 from jjlin/datetime-cleanup
4 years ago
Daniel García a3f9a8d7dc
Merge pull request #1265 from jjlin/cipher-rev-date
4 years ago
Jeremy Lin 455a23361f Clean up datetime output and code
4 years ago
BlackDex 1a8ec04733 Small update on favicon downloading
4 years ago
Jeremy Lin 4e60df7a08 Fix stale data check failure when cloning a cipher
4 years ago
BlackDex 48baf723a4 Updated icon downloading
4 years ago
Daniel García d15d24f4ff
Merge pull request #1242 from BlackDex/allow-manager-role
4 years ago
Daniel García 8d992d637e
Merge pull request #1257 from jjlin/cipher-rev-date
4 years ago
Daniel García b32f4451ee
Merge branch 'master' into admin-disable-user
4 years ago
Jeremy Lin a9e9a397d8 Validate cipher updates with revision date
4 years ago
janost 1eb5495802 Show latest active device as last active on admin page
4 years ago
BlackDex 7cf8809d77 Adding Manager Role support
4 years ago
janost 043aa27aa3 Implement admin ability to enable/disable users
4 years ago
janost e8ef76b8f9 Read config vars from files
4 years ago
janost caddf21fca Log proper namespace in the err!() macro
4 years ago
BlackDex 6faaeaae66 Updated email processing.
4 years ago
BlackDex 3fed323385 Fixed plain/text email format
4 years ago
BlackDex 58a928547d Updated admin settings page.
4 years ago
Daniel García 558410c5bd
Merge pull request #1220 from jameshurst/master
4 years ago
BlackDex d11d663c5c Added error handling during dotenv loading
4 years ago
James Hurst 771233176f Fix for negcached icons
4 years ago
James Hurst ed70b07d81 Return 404 instead of fallback icon
4 years ago
Ave fa364c3f2c
Ensure that a user is actually in an org when applying policies
4 years ago
Daniel García b5f9fe4d3b
Fix #1206
4 years ago
Daniel García 013d4c28b2
Try to fix #1218
4 years ago
Jeremy Lin 95caaf2a40 Add missing admin endpoints for deleting ciphers
4 years ago
Fabian van Steen b41a0d840c
Correction of verify_email error message
4 years ago
Rob Watson b9daa59e5d Add DATABASE_MAX_CONNS config setting
4 years ago
Daniel García 448e6ac917
Invalidate sessions when changing password or kdf values
4 years ago
Daniel García 729c9cff41
Retry initial db connection, with adjustable option
4 years ago
Mathijs van Veluw c698bca2b9
Merge branch 'master' into mariadb-fk-issues
4 years ago
BlackDex c64560016e Add /api/accounts/verify-password endpoint
4 years ago
BlackDex 978be0b4a9 Fixed foreign-key (mariadb) errors.
4 years ago
Daniel García 2f3e18caa9
Merge pull request #1146 from BlackDex/user-orgs-table-enhancement
4 years ago
BlackDex 6a291040bd As requested here: https://bitwardenrs.discourse.group/t/searchable-user-list-on-admin-panel/299
4 years ago
BlackDex f847c6e225 Updated the config options descriptions.
4 years ago
Daniel García 99da5fbebb
Merge pull request #1143 from BlackDex/better-lettre-errors
4 years ago
BlackDex 6a0d024c69 Format some common Lettre errors a bit simpler
4 years ago
BlackDex 9a47821642 Fixed creating a new organization
4 years ago
Daniel García d69968313b
Merge pull request #1140 from jjlin/UserOrgType-cmp
4 years ago
Daniel García 3c377d97dc
Merge pull request #1137 from BlackDex/smtp-multi-auth-mechanism
4 years ago
Jeremy Lin 0eee907c88 Simplify implementation of `UserOrgType::cmp()`
4 years ago
BlackDex c877583979 Allow multiple SMTP Auth meganisms.
4 years ago
BlackDex 844cf70345 Updated lettre (and other crates) and workflow.
4 years ago
Daniel García a0d92a167c
Merge pull request #1125 from jjlin/org-cipher-visibility
4 years ago
Jeremy Lin 4c3b328aca Hide ciphers from non-selected collections for org owners/admins
4 years ago
aaxdev 260ffee093 Improving code
4 years ago
aaxdev c59cfe3371 Fix MsgPack headers and support mobile SignalR
4 years ago
Daniel García 0822c0c128
Update admin page dependencies
4 years ago
Daniel García aaba1e8368
Fix some clippy warnings and remove unused function
4 years ago
Jeremy Lin 175d647e47 Delete associated favorites when deleting a cipher or user
4 years ago
Daniel García 0365b7c6a4
Add support for multiple simultaneous database features by using macros.
4 years ago
Daniel García 19889187a5
Merge pull request #1106 from jjlin/favorites
4 years ago
Daniel García 9571277c44
Merge pull request #1112 from jjlin/token-size-docs
4 years ago
Daniel García a202da9e23
Merge pull request #1099 from jjlin/global-domains
4 years ago
Jeremy Lin c05dc50f53 Add more docs on the `email_token_size` setting
4 years ago
Jeremy Lin d9684bef6b Generate tokens more simply and uniformly
4 years ago
Jeremy Lin db0c45c172 Sync global_domains.json to bitwarden/server@8383a08 (Yandex)
4 years ago
Jeremy Lin ad4393e3f7 Sync global_domains.json to bitwarden/server@80f57d2 (Amazon updates)
4 years ago
Jeremy Lin f83a8a36d1 Track favorites on a per-user basis
4 years ago
Jeremy Lin 0e9eba8c8b Maximize similarity between MySQL and SQLite/PostgreSQL schemas
4 years ago
Jeremy Lin d5c760960a Sync global_domains.json to bitwarden/server@af85e17 (eBay India updates)
4 years ago
Jeremy Lin 2c6ef2bc68 Sync global_domains.json to bitwarden/server@2c43019 (eBay updates)
4 years ago
Jeremy Lin 7032ae5587 Sync global_domains.json to bitwarden/server@6aed80a (Amazon updates)
4 years ago
Jeremy Lin 6d9f03e84b Sync global_domains.json to bitwarden/server@61b11e3
4 years ago
Daniel García 6a972e4b19
Make the admin URL redirect try to use the referrer first, and use /admin when DOMAIN is not configured and the referrer check doesn't work, to allow users without DOMAIN configured to use the admin page correctly
4 years ago
Daniel García 93b7ded1e6
Remove unneccessary shim for backtrace
4 years ago
Daniel García 29c6b145ca
Remove redundant user fetching from login
4 years ago
Daniel García a7a479623c
Merge pull request #1087 from jjlin/org-creation-users
4 years ago
Jeremy Lin 05b308b8b4 Sync global_domains.json with upstream
4 years ago
Jeremy Lin 570d6c8bf9 Add support for restricting org creation to certain users
4 years ago
Daniel García ad48e9ed0f
Fix unlock on desktop clients
4 years ago
Jeremy Lin a846f6c610 Fix soft delete notifications
4 years ago
Daniel García fd1354d00e
Merge pull request #1067 from jjlin/log-time-fmt
4 years ago
Jeremy Lin 071a3b2a32 Log timestamps with milliseconds by default
4 years ago
Daniel García 32cfaab5ee
Updated dependencies and changed rocket request imports
4 years ago
Jeremy Lin d348f12a0e Add config option for log timestamp format
4 years ago
Jeremy Lin de70fbf88a Use `strip_prefix()` instead of `trim_start_matches()` as appropriate
4 years ago
Daniel García 1e950c7dbc
Replace IP support in preparation for compiling on stable, included some tests to check that the code matches the unstable implementation
4 years ago
Daniel García f14e19a3d8
Don't compile the regexes each time
4 years ago
Daniel García 668d5c23dc
Removed try_trait and some formatting, particularly around imports
4 years ago
Jeremy Lin 790146bfac Fix error in PostgreSQL build
4 years ago
Jeremy Lin a28ebcb401 Use local time in email notifications for new device logins
4 years ago
Daniel García 77e47ddd1f
Merge pull request #1042 from jjlin/hide-passwords
4 years ago
Daniel García 596c9b8691
Add option to set name during HELO in email settings
4 years ago
Armaan Tobaccowalla 624791e09a
Allow postgres:// DATABASE_URL
4 years ago
Jeremy Lin f9a73a9bbe More cipher optimization/cleanup
4 years ago
Jeremy Lin 35868dd72c Optimize cipher queries
4 years ago
Jeremy Lin 979d010dc2 Add support for hiding passwords in a collection
4 years ago
Daniel García a87646b8cb
Some format changes to main.rs
5 years ago
BlackDex 24c914799d Fixes #1022 cloning with attachments
5 years ago
BlackDex 325691e588 Fixed wrong status if there is an update.
5 years ago
Robert Kaussow afbf1db331 add back openssl crate
5 years ago
BlackDex ac2723f898 Updated Organizations overview
5 years ago
BlackDex 2fffaec226 Added attachment info per user and some layout fix
5 years ago
BlackDex 5c54dfee3a Fixed an issue when DNS resolving fails.
5 years ago
BlackDex b47cf97409 Updated js/css libraries and fixed smallscreen err
5 years ago
Daniel García 5e802f8aa3
Update lettre to alpha release instead of git commit, and update the rest of dependencies while we are at it
5 years ago
Daniel García 0bdeb02a31
Merge pull request #1009 from jjlin/email-subject
5 years ago
Jeremy Lin 39d1a09704 Avoid double-slashes in the admin URL
5 years ago
Jeremy Lin a447e4e7ef Don't HTML-escape email subject lines
5 years ago
BlackDex b6fde857a7 Added version check to diagnostics
5 years ago
BlackDex 3c66deb5cc Redesign of the admin interface.
5 years ago
Jeremy Lin a314933557 Allow email changes for existing accounts even when signups are disabled
5 years ago
Daniel García c5d7e3f2bc
Merge pull request #1003 from frdescam/fix_arm_displaysize
5 years ago
Daniel García c95a2881b5
Merge pull request #998 from frdescam/fix_email_templates
5 years ago
fdeĉ 4c3727b4a3 use format! for rounding to fix arm issue
5 years ago
Daniel García a8870eef0d
Convert to f32 before rounding to fix arm issue
5 years ago
François afaebc6cf3 fixing hard coded width email templates
5 years ago
François 8f4a1f4fc2 fixing bad width in 2FA email template
5 years ago
Daniel García 0807783388
Add ip on totp miss
5 years ago
Daniel García dc2f8e5c85
Merge pull request #994 from jjlin/help-text
5 years ago
Daniel García aee1ea032b
Merge pull request #989 from theycallmesteve/update_responses
5 years ago
Jeremy Lin 322a08edfb Update startup banner to direct usage/config questions to the forum
5 years ago
theycallmesteve 08afc312c3
Add missing items to profileOrganization response model
5 years ago
theycallmesteve 5571a5d8ed
Update post_keys to return a keys response model
5 years ago
theycallmesteve 6a8c65493f
Rename collection_user_details to collection_read_only to reflect the response model
5 years ago
theycallmesteve dfdf4473ea
Rename to_json_list to to_json_provder to reflect the response model
5 years ago
theycallmesteve 42e37ebea1
Apply upstream global domain values and whitespace fixes
5 years ago
theycallmesteve 632f4d5453
Whitespace fixes
5 years ago
Daniel García 6c5e35ce5c
Change the mails content types to more closely match what we sent before
5 years ago
Daniel García 4ff15f6dc2
Merge pull request #978 from AltiUP/patch-1
5 years ago
Daniel García ec8028aef2
Merge pull request #979 from jjlin/admin-redirect
5 years ago
Daniel García 63cbd9ef9c
Update lettre to latest master
5 years ago
Daniel García 9cca64003a
Remove unused dependency and simple feature, update dependencies and fix some clippy lints
5 years ago
Jeremy Lin 819d5e2dc8 Use absolute URIs for admin page redirects
5 years ago
Christophe Gherardi 3b06ab296b
Delete the call to the map file
5 years ago
Daniel García 0de52c6c99
Merge pull request #957 from jjlin/domain-whitelist
5 years ago
Daniel García e3b00b59a7
Initial support for soft deletes
5 years ago
BlackDex 1ee8e44912 Fixed issue #965
5 years ago
Jeremy Lin 86685c1cd2 Ensure email domain comparison is case-insensitive
5 years ago
Jeremy Lin 0a68de6c24 Warn on empty `ADMIN_TOKEN` instead of bailing out
5 years ago
Jeremy Lin e4d08836e2 Make org owner invitations respect the email domain whitelist
5 years ago
Jeremy Lin c2a324e5da Clean up domain whitelist logic
5 years ago
Jeremy Lin 6cd8512bbd Fix Duo auth failure with non-lowercased email addresses
5 years ago
Jeremy Lin 7407b8326a Fix attachment size limit calculation
5 years ago
Daniel García adf47827c9
Make sure the data field is always returned, otherwise the mobile apps seem to have issues
5 years ago
Jeremy Lin 862d401077 Fix WebSocket notifications
5 years ago
Jeremy Lin c06162b22f Handle `devicePushToken`
5 years ago
Daniel García 7a6a3e4160
Set the cargo version and allow changing it during build time with BWRS_VERSION.
5 years ago
Daniel García 94341f9f3f
Fix token error while accepting invite
5 years ago
Daniel García ff19fb3426
Merge pull request #919 from BlackDex/issue-908
5 years ago
BlackDex baac8d9627 Fixed issue #908
5 years ago
BlackDex 669b101e6a Fixing issue #908
5 years ago
Daniel García d2d9fb08cc
Revert "Use opportunistic TLS in SMTP connections"
5 years ago
BlackDex 35f30088b2 Fixing issue #759 by disabling Foreign Key Checks.
5 years ago
Daniel García dce054e632
Merge pull request #912 from ymage/openssl_as_default
5 years ago
Ymage ba725e1c25 Make openssl crate as default (non feature-flipped)
5 years ago
Daniel García 7d9c7017c9
Merge pull request #911 from BlackDex/upgrade-rocket
5 years ago
BlackDex bd09fe1a3d Updated code so backtraces are logged also.
5 years ago
BlackDex bcbe6177b8 Merge branch 'master' of https://github.com/dani-garcia/bitwarden_rs into log-panics
5 years ago
BlackDex 9b1d07365e Updated ring
5 years ago
BlackDex 37b212427c Updated jsonwebtoken
5 years ago
BlackDex 078234d8b3 Small change for rocket compatibilty
5 years ago
Daniel García 2ee07ea1d8
Fix empty data when cloning cipher
5 years ago
Daniel García 40c339db9b
Fix postgres policies, second try
5 years ago
Daniel García 402c1cd06c
Merge pull request #906 from BlackDex/upgrade-reqwest
5 years ago
Daniel García 819f340f39
Fix issue with postgres
5 years ago
BlackDex 1b4b40c95d Updated reqwest to the latest version.
5 years ago
Daniel García afd9f4e278
Allow the smtp mechanism to be provided without quotes and all lowercase
5 years ago
Daniel García 47a9461f39
Merge pull request #903 from TheBinaryLoop/patch-1
5 years ago
Daniel García c6f64d8368
Merge pull request #901 from sleweke/feature/opportunistic_tls
5 years ago
Daniel García a30d5f4cf9
Fix cloning issues
5 years ago
Daniel García 3fa78e7bb1
Initial version of policies
5 years ago
Lukas Eßmann a8a7e4f9a5
Updated domains with new values vualt
5 years ago
Samuel Leweke 5d3b765a23 Use opportunistic TLS in SMTP connections
5 years ago
Daniel García 70f3ab8ec3
Migrate lazy_static to once_cell, less macro magic and slightly faster
5 years ago
BlackDex 84dc2eda1f Changed javascript default argument construction
5 years ago
BlackDex 390d10d656 Relocated SMTP test input+button.
5 years ago
zethra cc404b4edc
Added command line flags for help and version
5 years ago
BlackDex 97fb7b5b96 Added urlpath to smtpTest function
5 years ago
BlackDex 5a974c7b94 Added SMTP test button in the admin gui
5 years ago
BlackDex 7439aeb63e Make panics logable (as warn)
5 years ago
Daniel García cd8907542a
Make sure the provided domain contains the protocol and show a useful error when it doesn't
5 years ago
Daniel García ad9f2b2d8e
Removed test urlpath
5 years ago
Daniel García 2f4a9865e1
Use absolute paths in the admin page
5 years ago
Jeremy Lin 29a0795219 Add backend support for alternate base dir (subdir/subpath) hosting
5 years ago
Daniel García 325039c316
Attachment size limits, per-user and per-organization
5 years ago
Miro Prasil 03233429f4 Remove check from Invitation:take()
5 years ago
Miroslav Prasil 0a72c4b6db Do not disable invitations via admin API
5 years ago
Daniel García 8867626de8
Add option to change invitation org name, fixes #825
5 years ago
Daniel García f5916ec396
Fix backwards indices
5 years ago
Daniel García ebb36235a7
Cache icons in the clients
5 years ago
Daniel García def174a517
Convert email domains to punycode
5 years ago
Daniel García 480ba933fa
Don't error if admin token is empty but disabled
5 years ago
Miro Prasil c4101162d6 SIGNUPS_ALLOWED with no whitelist [fixes #830]
5 years ago
Daniel García 632d55265b
Merge pull request #824 from tomuta/fix_change_email
5 years ago
tomuta e277f7d1c1 Fix change email when no whitelist is configured
5 years ago
Daniel García ff7b4a3d38
Update handlebars to 3.0 which included performance improvements.
5 years ago
Daniel García d212dfe735
Accept y/n, True/False, 1/0 as booleans in environment vars
5 years ago
Daniel García 84ed185579
Update u2f to 0.2, which requires OpenSSL but also might solve the problems we've had with certificates.
5 years ago
Michael Powers e196ba6e86
Switch error handling to ? operator instead of explicit handling.
5 years ago
Michael Powers 76743aee48
Fixes #635 - Unique constraint violation when using U2F tokens on PostgreSQL
5 years ago
Daniel García 96a189deb9
Merge pull request #803 from aeolyus/master
5 years ago
Daniel García 8c229920ad
Protect websocket server against panics
5 years ago
Richard Huang d592323e39
minor typo conect -> connect
5 years ago
Daniel García 36ae946655
Avoid some to_string in the request logging and include message to disable web vault when not found.
5 years ago
Daniel García cb6f392774
When receiving a comma separated list as IP, pick the first
5 years ago
Daniel García 88c56de97b
Config option for client IP header
5 years ago
Daniel García e274af6e3d
Print current server time when failing TOTP, and use chrono as the rest of the server
5 years ago
Daniel García a0ece3754b
Formatting
5 years ago
Daniel García 2545469713
Fix crash when page URL points to huge file
5 years ago
Daniel García 5cabf4d040
Fix IP not shown when failed login (Fixes #761)
5 years ago
Daniel García a03db6d224
Also hide options requests, unless using debug or trace
5 years ago
Daniel García 8d1b72b951
Collapsed log messages from 3 lines per request to 2 and hidden the ones valued as less informative.
5 years ago
Daniel García 912e1f93b7
Fix some lints
5 years ago
Daniel García adc443ea80
Add endpoint to delete specific U2F key
5 years ago
Daniel García 0d32179d07
Logout button in admin page
5 years ago
Daniel García 12928b832c
Fix broken tests
5 years ago
Daniel García 1e224220a8
Updated deps and fixed some lints
5 years ago
Daniel García 924ba153aa
Merge pull request #730 from tomuta/email_verification
5 years ago
tomuta bd1e8be328 Implement change-email, email-verification, account-recovery, and welcome notifications
5 years ago
Daniel García 4b71197c97
Merge pull request #738 from ntimo/task/add-netcup-global-domains
5 years ago
BlackDex b209c1bc4d Add an option to fetch and parse href="data:image"
5 years ago
ntimo 2b8d08a3f4
Added netcup domains to global domains
5 years ago
Daniel García cbadf00941
Update web vault to fix twofactorauth.org integration
5 years ago
tomuta 64d6f72e6c Add the ability to disable signups, but allow signups from a whitelist
5 years ago
Timo N b889e5185e
Added tv.apple.com to global domains
5 years ago
BlackDex 3f6809bcdf Fixed issue/request #705
5 years ago
BlackDex c52adef919 Added configurable smtp timeout.
5 years ago
BlackDex 2ffc3eac4d Clippy fix
5 years ago
BlackDex 0ff7fd939e Next attempt for issue #709 fix
5 years ago
BlackDex ca7c5129b2 Fixed issue #709 creating icon_cache directory.
5 years ago
Daniel García b4dfc24040
Merge pull request #703 from patrickli/bugfix/dont-sync-excluded-global-domains
5 years ago
Patrick Li 85dbf4e16c
Don't include excluded global equivalent domains during sync
5 years ago
BlackDex 3442eb1b9d Trying to fix issue #687
5 years ago
Daniel García e449912f05
Generate recovery codes for email and duo
5 years ago
Daniel García d29b6bee28
Remove unnecessary clones and other clippy fixes
5 years ago
Miro Prasil 00a11b1b78 Stop leaking usernames when SIGNUPS_ALLOWED=false
5 years ago
BlackDex ee550be80c Added http favicon url when response failed
5 years ago
Daniel García fccc0a4b05
Update rocket to latest master
5 years ago
Jellyfrog ebc47dc161
Remove unneeded WS logging
5 years ago
vpl 3b7a5bd102 Move 2FA email config to after SMTP config
5 years ago
vpl 2edecf34ff Use user_uuid instead of mut twofactor
5 years ago
vpl 18bc8331f9 Send email when preparing 2FA JsonError
5 years ago
BlackDex 603a964579 Fixed issue #663.
5 years ago
Daniel García dc515b83f3
Merge pull request #657 from BlackDex/totp-timedrift
5 years ago
BlackDex 9466f02696 Recoded TOTP time drift validation
5 years ago
BlackDex 2cde814aaa Fixed a bug with the sqlite backup feature.
5 years ago
BlackDex d989a19f76 Merge branch 'master' of https://github.com/dani-garcia/bitwarden_rs into totp-timedrift
5 years ago
Daniel García d292269ea0
Make the blacklist logic be cached
5 years ago
BlackDex ebf40099f2 Updated authenticator TOTP
5 years ago
BlackDex edc482c8ea Changed HIBP Error message.
5 years ago
BlackDex 6e5c03cc78 Some modification when no HIBP API Key is set
5 years ago
Daniel García 881c1978eb
Error when the URL scheme doesn't match the database type
5 years ago
Daniel García 662bc27523
Updated dependencies and fixed disable_admin_token description
5 years ago
Daniel García e6b763026e
Merge branch 'master' into icon-security
5 years ago
Daniel García c182583e09
Merge pull request #644 from BlackDex/issue-565
5 years ago
Daniel García d821389c2e
Merge pull request #639 from vverst/cors-update
5 years ago
BlackDex be2916333b Fixed issue #565
5 years ago
BlackDex 9124d8a3fb Updated icon blacklisting.
5 years ago
vpl 7b1da527a6 Change CORS headers
5 years ago
Miro Prasil d6e9af909b Remove the unnecessary check for sqlite
5 years ago
Miro Prasil acdd42935b Add sqlite binary into the docker images
5 years ago
vpl 56f12dc982 Use Access-Control-Allow-Method
5 years ago
Daniel García 4c07f05b3a
Remove Result<T, E: Debug> in preparation of deprecation as Rocket responder.
5 years ago
Michael Powers f5f9861a78
Adds support for PostgreSQL which resolves #87 and is mentioned in #246.
5 years ago
Daniel García df8114f8be
Updated client kdf iterations to 100000 and fixed some lints
5 years ago
vpl 5a2f968d7a Set correct response headers, status code
5 years ago
vpl 16d88402cb Initial version of CORS support
5 years ago
Daniel García 7dcf18151d
Fix onsubmit
5 years ago
Daniel García e3404dd322
Use the local scripts instead of cloudflare, remove jquery and update config so disabling a master toggle doesn't remove the values
5 years ago
Daniel García bfc517ee80
Remove unused warning
5 years ago
Daniel García 4a7d2a1e28
Rename static files endpoint
5 years ago
Daniel García c07c9995ea
Merge pull request #555 from vverst/email-codes
5 years ago
ViViDboarder 672a245548 Remove unecessary clone
5 years ago
vpl 5d50b1ee3c Merge remote-tracking branch 'upstream/master' into email-codes
5 years ago
vpl c99df1c310 Compare token using crypto::ct_eq
5 years ago
vpl 591ae10144 Get token from single u64
5 years ago
ViViDboarder 2d2745195e Allow explicitly defined smtp auth mechansim
5 years ago
Daniel García 026f9da035
Allow removing users two factors
5 years ago
Daniel García d23d4f2c1d
Allow editing HIBP key in the admin panel
5 years ago
Daniel García 515b87755a
Update HIBP to v3, requires paid API key, fixes #583
5 years ago
vpl ee7837d022 Add option to require new device emails
5 years ago
Daniel García 07743e490b
Ignore error sending device email
5 years ago
BlackDex e7b6238f43 Added reqwest proxy support
5 years ago
vpl ad2225b6e5 Add configuration options for Email 2FA
5 years ago
vpl 5609103a97 Use ring to generate email token
5 years ago
vpl 6d460b44b0 Use saved token for email 2fa codes
5 years ago
vpl efd8d9f528 Remove some unused imports, unneeded mut variables
5 years ago
vpl 29aedd388e Add email code logic and move two_factor into separate modules
5 years ago
vpl 27e0e41835 Add email authenticator logic
5 years ago
vpl 0b60f20eb3 Add email message for twofactor email codes
5 years ago
Daniel García c9c3f07171
Updated dependencies and fixed panic getting icons
5 years ago
vpl df71f57d86 Move send device email to end of password login
5 years ago
vpl 60e39a9dd1 Move retrieve/new device from connData to separate function
5 years ago
vpl bc6a53b847 Add new device email when user logs in
5 years ago
Daniel García 05a1137828
Move backend checks to build.rs to fail fast, and updated dependencies
5 years ago
Nick Fox 2e300da057
Fix #468 - Percent-encode the email address in invite link
5 years ago
Cubity_First 6989fc7bdb
Corrected Spelling
6 years ago
Daniel García 76f38621de
Update dependencies and remove unwraps from Cipher::to_json
6 years ago
Daniel García 12af32b9ea
Don't print DB URL
6 years ago
Daniel García 9add8e19eb
Update dependencies and remove travis unused feature
6 years ago
Daniel García 5710703c50
Make sure the backup option only appears when using sqlite
6 years ago
Daniel García 1322b876e9
Merge pull request #493 from endyman/feature/initial_mysql_support
6 years ago
Daniel García 9ed2ba61c6
Merge pull request #475 from TheMardy/master
6 years ago
Nils Domrose 62a461ae15 remove syslog from ci, make features flag more clear
6 years ago
Nils Domrose 4859932d35 fixed typo
6 years ago
Nils Domrose dc36f0cb6c re-added sqlite check_db code, cleanup
6 years ago
Nils Domrose ff759397f6 initial mysql support
6 years ago
Emil Madsen 233b48bdad Fix missing joinable in schema
6 years ago
Emil Madsen e22e290f67 Fix key and type variable names for mysql
6 years ago
Emil Madsen ab95a69dc8 Rework migrations for MySQL
6 years ago
Emil Madsen 85c8a01f4a Merge branch 'master' of github.com:Skeen/bitwarden_rs
6 years ago
Emil Madsen 42af7c6dab MySQL database
6 years ago
Daniel García 4f45cc081f
Update ring to 0.14, jwt to 6.0, and u2f
6 years ago
TheMardy ef551f4cc6 Create Backup funcitonality
6 years ago
Daniel García 5521a86693
Change path for served images to avoid collision with vault images
6 years ago
Daniel García 3160780549
Merge pull request #401 from TheMardy/master
6 years ago
TheMardy f0701657a9 Changed to Bitwarden_RS Logo
6 years ago
Daniel García 874f5c34bd
Formatting
6 years ago
Daniel García 253faaf023
Use users duo host when required, instead of always using the global one
6 years ago
Daniel García 3d843a6a51
Merge pull request #460 from janost/organization-vault-purge
6 years ago
janost 03fdf36bf9 Fixed purging organization vault
6 years ago
Daniel García fdcc32beda
Validate Duo credentials when custom
6 years ago
Daniel García bf20355c5e
Merge branch 'duo'
6 years ago
Daniel García 0136c793b4
Implement better user status API, in the future we'll probably want a way to disable users.
6 years ago
Daniel García 2e12114350
Always create the user when inviting from admin panel
6 years ago
ViViDboarder d3a8a278e6 Add new endpoint for retrieving all users
6 years ago
Daniel García 8d9827c55f
Implement selection between global config and user settings for duo keys.
6 years ago
Daniel García cad63f9761
Auto generate akey
6 years ago
Daniel García bf446f44f9
Enable DATA_FOLDER to affect default CONFIG_FILE path
6 years ago
Daniel García 621f607297
Update dependencies and fix some warnings
6 years ago
Daniel García 754087b990
Add global duo config and document options in .env template
6 years ago
Daniel García cfbeb56371
Implement user duo, initial version
6 years ago
Daniel García c5832f2b30
With the latest fern, syslog can be a config option instead of a build flag
6 years ago
Daniel García 2475c36a75
Implement log_level config option
6 years ago
Daniel García c384f9c0ca
Set default log level to Info, we don't use debug anyway and it just fills the logs with other crates info.
6 years ago
BlackDex 6b686c18f7 Fixed long e-mail message extending 1000 lines.
6 years ago
Nick Fox 7976d39d9d
Adjust whitespace
6 years ago
Nick Fox 5ee9676941
Break up long line to stop SMTP from breaking
6 years ago
Daniel García 4b40cda910
Added domain blacklist regex for icons service and improved valid domain check.
6 years ago
Daniel García 4689ed7b30
Changed uppercase deserializer to avoid a clone.
6 years ago
Daniel García 61515160a7
Allow changing error codes and create an empty error.
6 years ago
Daniel García e93538cea9
Add option to use wrapped TLS in email, instead of STARTTLS upgrade
6 years ago
Daniel García b4244b28b6
Update admin page scripts and fixed broken tooltip
6 years ago
Daniel García 43f9038325
Add option to force resync clients in admin panel
6 years ago
Daniel García 339044f8aa
Add warning about config panel values overriding env vars.
6 years ago
Daniel García 0718a090e1
Trim spaces from admin token during authentication and validate that the admin panel token is not empty
6 years ago
Daniel García 9e1f030a80
Explicitly close SMTP connection in case of error.
6 years ago
Daniel García 04922f6aa0
Some formatting and dependency updates
6 years ago
Daniel García 7d2bc9e162
Added option to force 2fa at logins and made some changes to two factor code.
6 years ago
Daniel García 10756b0920
Update dependencies and fix some lints
6 years ago
Frank Petrilli d156170971
Minor typo fix conect => connect
6 years ago
Дамјан Георгиевски 473f8b8e31 remove some unneeded mutability
6 years ago
Daniel García 5794969f5b
Merge pull request #406 from shauder/feature/disable-admin-token
6 years ago
Shane Faulkner 8b5b06c3d1 Allow the Admin token to be disabled in the advanced menu
6 years ago
Daniel García b50c27b619
Print a warning when an env variable is being overriden by the config file, and reorganize the main file a bit.
6 years ago
Daniel García 5ee04e31e5
Updated dependencies, removed some unnecessary clones and fixed some lints
6 years ago
Daniel García bf6ae91a6d
Remove margins on small devices
6 years ago
Daniel García 828e3a5795
Add extra padding when the toolbar collapses in small devices
6 years ago
Daniel García 7b5bcd45f8
Show read-only options in the config panel and the env variable names in the tooltips
6 years ago
Miroslav Prasil 0b903fc5f4 Extended the template file and refer to wiki
6 years ago
Miroslav Prasil 4df686f49e Add an option to not enable WAL (should help in #399)
6 years ago
Daniel García d7eeaaf249
Escape user data from admin panel when calling JS
6 years ago
TheMardy 84fb6aaddb Set correct MIME type
6 years ago
Daniel García a744b9437a
Implemented multiple U2f keys, key names, and compromised checks
6 years ago
Daniel García 6027b969f5
Delete old devices when deauthorizing user sessions
6 years ago
Daniel García 93805a5d7b
Fix Yubikeys deleted on error
6 years ago
TheMardy 8526055bb7 Added images to email templates
6 years ago
TheMardy a79334ea4c Added static email image routes
6 years ago
Daniel García d3773a433a
Removed list of mounted routes at startup by default, with option to add it back. This would get annoying when starting the server frequently, because it printed ~130 lines of mostly useless info
6 years ago
Daniel García 0f0a87becf
Add version to initial message
6 years ago
BlackDex 3b27dbb0aa Added config option for icon download timeout
6 years ago
Daniel García 9636f33fdb
Implement constant time equal check for admin, 2fa recover and 2fa remember tokens
6 years ago
Daniel García 79fdfd6524
Add missing url parameter
6 years ago
Daniel García d086a99e5b
Implemented HTML emails with text alternative
6 years ago
TheMardy 22b0b95209
Added HTML templates (+14 squashed commit)
6 years ago
Daniel García 28d1588e73
Show version in admin panel
6 years ago
Daniel García f3b1a5ff3e
Error when admin panel is disabled
6 years ago
Daniel García 330e90a6ac
Hide secrets in config panel
6 years ago
Daniel García 820c8b0dce
Change use of deserialize_with for Option iterator
6 years ago
Daniel García 8b4a6f2a64
Fixed some clippy lints and changed update_uuid_revision to only use one db query
6 years ago
Daniel García ef63342e20
Add reset user config button
6 years ago
Daniel García 89840790e7
Fix .env path traversal issue
6 years ago
Daniel García a72809b225
Yubico and SMTP enable/disable master switches
6 years ago
Daniel García 9976e4736e
Add groups
6 years ago
Daniel García dc92f07232
Added env variable to select config file. Initial work towards groups and added tooltips with descriptions and nicer names
6 years ago
Daniel García 3db815b969
Implemented config form and fixed config priority
6 years ago
Daniel García ade293cf52
Save config
6 years ago
Daniel García 877408b808
Implement basic config loading and updating. No save to file yet.
6 years ago
Daniel García 86ed75bf7c
Config can now be serialized / deserialized
6 years ago
Daniel García 20d8d800f3
Updated dependencies
6 years ago
Miroslav Prasil 08ca47cadb Update revision when adding or removing cipher from collection
6 years ago
Miroslav Prasil 5272b465cc Update revision of affected users when deleting Collection
6 years ago
Miroslav Prasil 637f655b6f Do not allocate uneccessary Vec
6 years ago
Miroslav Prasil b3f7394c06 Do not update revision at the end, as we already did that
6 years ago
Miroslav Prasil 1a5ecd4d4a cipher does not need to be mutable
6 years ago
Miroslav Prasil bd65c4e312 Remove superfluous cipher.save() call
6 years ago
Miroslav Prasil bce656c787 Retry updating revision - fixes #383
6 years ago
BlackDex 9026cc8d42 Fixed issue when the iconlist is smaller then 5
6 years ago
BlackDex 574b040142 Loop through the iconlist until an icon is found
6 years ago
BlackDex c13f115473 Fixed issue #380
6 years ago
BlackDex bc461d9baa Some small changes on the iter of the cookies
6 years ago
BlackDex 5016e30cf2 Added cookies to the icon download request.
6 years ago
Daniel García f42ac5f2c0
Update web vault error message
6 years ago
Daniel García 2a60414031
Reuse the client between requests, and use the client when downloading the icons themselves
6 years ago
BlackDex feb74a5e86 Changed the way to fix the href
6 years ago
Daniel García c0e350b734
Disable icon downloads, accept optional query after icon href, format and clippy fixes
6 years ago
Daniel García bef1183c49
Only send one notification per vault import and purge, improve move ciphers functions
6 years ago
Daniel García f935f5cf46
Remove local icon extractor
6 years ago
Daniel García 07388d327f
Merge pull request #370 from BlackDex/favicons
6 years ago
BlackDex 4de16b2d17 Removed unwrap and added ?
6 years ago
BlackDex da068a43c1 Moved function call to get_icon_url to prevent error bubbeling
6 years ago
BlackDex 9657463717 Added better favicon downloader.
6 years ago
Daniel García 69036cc6a4
Add disabled user badge (no password) and deauthorize button to admin page.
6 years ago
Daniel García 700e084101
Add 2FA icon to admin panel
6 years ago
Daniel García a1dc47b826
Change config to thread-safe system, needed for a future config panel.
6 years ago
Daniel García 86de0ca17b
Fix editing users from collections menu
6 years ago
Stephen White fc0e239bdf No point calling find_by_uuid now we don't use the result.
6 years ago
Stephen White 928ad6c1d8 Fix the list of users with access to a collection to display correctly.
6 years ago
Daniel García ddd49596ba
Fix invite empty email
6 years ago
Daniel García b8cabadd43
Fix admin page links
6 years ago
Daniel García ce42b07a80
Update Diesel to 1.4 and other dependencies
6 years ago
Daniel García bfd93e5b13
Show organizations in admin panel, implement reload templates option
6 years ago
Daniel García a797459560
Implement HIBP check [WIP].
6 years ago
Daniel García 6cbb683f99
Rename admin templates to match email
6 years ago
Daniel García 92bbb98d48
Created base template
6 years ago
Daniel García 834c847746
Implement admin JWT cookie, separate JWT issuers for each type of token and migrate admin page to handlebars template
6 years ago
Daniel García 97aa407fe4
Move email templates to subfolder
6 years ago
TBK d8116a80df Add Feature-Policy header
6 years ago
Daniel García e0aec8d373
Use new i64::to_be_bytes and remove byteorder dep
6 years ago
Daniel García 1ce2587330
Correct update cipher order: first save cipher, then cipher-folder, then notify
6 years ago
Miroslav Prasil 71a10e0378 Fix sharing the item to organization.
6 years ago
Daniel García 9bf13b7872
Can't return inside multipart closure
6 years ago
Daniel García d420992f8c
Update some function calls to use ?
6 years ago