aboutsummaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2024-06-20Merge branch 'main' into remove_upcaseremove_upcaseDaniel García
2024-06-20Convert two-factor providers to stringDaniel García
2024-06-20Fix sends expecting size to be a string on mobileDaniel García
2024-06-20Fix some more nightly errors and remove lint that will become an error by ↵Daniel García
default (#4661)
2024-06-20Fix some nightly build errors (#4657)Daniel García
2024-06-19Update org revokeDaniel García
2024-06-19Update admin and templatesDaniel García
2024-06-19Make sends lowercaseDaniel García
2024-06-19Use convert_json_key_lcase_firstDaniel García
2024-06-19Fix fields and password historyDaniel García
2024-06-19Change API inputs/outputs and structs to camelCaseDaniel García
2024-06-19Update crates, web-vault and GHA (#4648)Mathijs van Veluw
- Updated all crates including Diesel and the new mysqlclient-sys - Updated the MSRV to v1.78 as that is what Diesel mandates - Added the mimalloc crate as a patch for now to fix armv6 static builds This probably makes #4606 possible - Updated web-vault to v2024.5.1 - Updated GitHub Actions Fixed an issue with the localhost images for extracting the musl binaries.
2024-06-16Update rust and remove unused header values (#4645)Daniel García
* Update rust and remove unused header values * Missed one unused var
2024-05-25Update admin interface dependencies (#4581)Mathijs van Veluw
- Updated JS/CSS dependencies - Fixed a small issue regarding DNS IP detection fixes #3946 fixes #3947
2024-05-25Remove compatibility route (#4578)Timshel
2024-05-25differentiate external groups by organization id (#4586)Stefan Melmuk
2024-05-19Fix public api for domains with path prefix (#4500)FDHoho007
2024-05-19also delete organization_api_key (#4557)Stefan Melmuk
2024-04-27Some fixes for the new mobile apps (#4526)Daniel García
2024-04-27fix emergency access invites (#4337)Stefan Melmuk
* fix emergency access invites with no mail when mail is disabled instead of accepting emergency access for all invited users automatically, we only accept if the user already exists on registration of a new account any open emergency access invitations will be accepted, if mail is disabled also prevent invited emergency access contacts to register if emergency access is disabled (this is only relevant for when mail is enabled, if mail is disabled they should have an Invitation entry) * delete emergency access invitations if an invited user is deleted in the /admin panel their emergency access invitation will remain in the database which causes the to_json_grantee_details fn to panic * improve missing emergency access grantees instead of returning an empty emergency access contact the entry should not be added to the list. also the error handling can be improved a bit.
2024-04-27improve access to collections via groups (#4441)Stefan Melmuk
* refactor get_org_collections_details * improve access to collection check * fix get_org_collection_detail too
2024-04-27Pass in collection ids to notifier when sharing cipher. (#4517)Kristof Mattei
2024-04-27Implement custom DNS resolver (#3988)Daniel García
2024-04-06Update Key Rotation web-vault v2024.3.x (#4446)Mathijs van Veluw
Key rotation was changed since 2024.1.x. Multiple other items were added to be rotated like password-reset and emergency-access data to be part of just one POST instead of having multiple. See: https://github.com/dani-garcia/bw_web_builds/pull/157
2024-04-06Update crates and some Clippy fixes (#4475)Mathijs van Veluw
- Updated all crates including reqwest - Fixed some clippy lints reported by nightly Rust
2024-03-23Use async verify for Yubikey (#4448)Daniel García
2024-03-23Update Rust and crates (#4445)Mathijs van Veluw
- Updated Rust to v1.77.0 - Updated several crates The `reqwest` update included `trust-dns` > `hickory-dns` changes. Also, `reqwest` v0.12 is not working correctly for us, that is something to investigate. - Fixed a new clippy warning
2024-03-19Update chrono and sqlite (#4436)Mathijs van Veluw
- Updated sqlite crate - Updated chrono crate The latter needed a lot of changes done, mostly `Duration` to `TimeDelta`. And some changes on how to use Naive.
2024-03-19fix: typos (#4440)guangwu
Signed-off-by: guoguangwu <[email protected]>
2024-03-17automatically use email address as 2fa provider (#4317)Stefan Melmuk
2024-03-17Fix #3624: fix manager permission within groups (#3754)Matlink
* Fix #3624: fix manager permission within groups * Query returns UUID only * Fix issue when user is manager and in a group having access to all collections * optimize condition check * fix(groups): renaming and optimizations * fix: wrong organization group membership detection * Simplify group membership check Co-authored-by: Stefan Melmuk <[email protected]> * Remove unused statement * improve check if the user has access via groups instead of returning the two lists of member ids and later checking if they contain the uuid of the current user, we really only care if the current user has full access via a group or if they have access to a given collection via a group * improve comments for get_org_collections_details * small refactor to make it easier to review * fix(groups): query full access via group only when necessary Co-authored-by: Mathijs van Veluw <[email protected]> * chore(fmt): apply rustfmt --------- Co-authored-by: Stefan Melmuk <[email protected]> Co-authored-by: Stefan Melmuk <[email protected]> Co-authored-by: Mathijs van Veluw <[email protected]>
2024-03-17Change timestamp data type. (#4355)gzfrozen
Co-authored-by: Daniel García <[email protected]>
2024-03-17Small improvements around email change (#4415)Jacques B
2024-03-17refactor: replace panic with a graceful exit (#4402)Helmut K. C. Tessarek
* refactor: replace panic with a graceful exit * fix: clippy errors * fix: typo * Update src/main.rs Co-authored-by: Stefan Melmuk <[email protected]> --------- Co-authored-by: Stefan Melmuk <[email protected]>
2024-03-17Remove custom WebSocket code (#4001)Mathijs van Veluw
* Remove custom WebSocket code Remove our custom WebSocket code and only use the Rocket code. Removed all options in regards to WebSockets Added a new option `WEBSOCKET_DISABLED` which defaults too `false`. This can be used to disable WebSockets if you really do not want to use it. * Addressed remarks given and some updates - Addressed comments given during review - Updated crates, including Rocket to the latest merged v0.5 changes - Removed an extra header which should not be sent for websocket connections * Updated suggestions and crates - Addressed the suggestions - Updated Rocket to latest rc4 Also made the needed code changes - Updated all other crates Pinned `openssl` and `openssl-sys` --------- Co-authored-by: Daniel García <[email protected]>
2024-03-17Improve JWT key initialization and avoid saving public key (#4085)Daniel García
2024-03-17Fix comment in events.rs (#4408)Krapp
I think ` // Collection events` was repeated twice
2024-03-17Signed-off-by: one230six <[email protected]> (#4422)one230six
Signed-off-by: one230six <[email protected]>
2024-03-02fix: web API call for jquery 3.7.1 (#4400)1.30.5Calvin Li
2024-02-25Update crates, GHA and a Python/JS scripts (#4357)1.30.4Mathijs van Veluw
- Update all crates - Update GHA - Update Global Domains script to use main instead of master Also fixed some Python linting warnings - Updated Admin JS and CSS libraries
2024-02-08Update Rust, crates and web-vault (#4328)Mathijs van Veluw
- Updated Rust to v1.76.0 - Updated crates - Updated web-vault to v2024.1.2b - Fixed some Clippy lints - Moved lint check configuration Cargo.toml - Fixed issue with Reset Password Enrollment when logged-in via device
2024-02-02Add Kubernetes environment detection (#4290)Mathijs van Veluw
Also check if we are running within a Kubernetes environment. These do not always run using Docker or Podman of course. Also renamed all the functions and variables to use `container` instead of `docker`.
2024-01-31fix push device registration (#4297)Stefan Melmuk
don't try to register a push device when the device is new it will be registered when the push token is saved fixes #4296
2024-01-30register missing push devices at login (#3792)Stefan Melmuk
save the push token of new device even if push notifications are not enabled and provide a way to register the push device at login unregister device if there already is a push token saved unless the new token has already been registered. also the `unregister_push_device` function used the wrong argument cf. https://github.com/bitwarden/server/blob/08d380900b540f8d1a734c7abccaf80e59a91ced/src/Core/Services/Implementations/RelayPushRegistrationService.cs#L43
2024-01-28err on invalid feature flag (#4263)Stefan Melmuk
* err on invalid feature flag * print all invalid flags and improve error message
2024-01-28Fix attachment upload size check (#4282)Mathijs van Veluw
The min/max were reversed with the `add` and `sub` functions. This caused the files to always be out of bounds in the check. Fixes #4281
2024-01-27Improve file limit handling (#4242)Daniel García
* Improve file limit handling * Oops * Update PostgreSQL migration * Review comments --------- Co-authored-by: BlackDex <[email protected]>
2024-01-26Return 404 when user public_key is empty (#4271)Jacques B
2024-01-25prevent side effects if groups are disabled (#4265)Stefan Melmuk
2024-01-25fix: use black text for update badge (better contrast) (#4245)Helmut K. C. Tessarek