Skip to content
Snippets Groups Projects
  1. Mar 27, 2021
  2. Mar 25, 2021
  3. Mar 23, 2021
  4. Mar 22, 2021
  5. Mar 17, 2021
  6. Mar 16, 2021
  7. Mar 15, 2021
  8. Mar 14, 2021
  9. Mar 04, 2021
  10. Feb 28, 2021
    • Jeremy Lin's avatar
      Check for data folder on startup · 513056f7
      Jeremy Lin authored
      Currently, when starting up for the first time (running standalone, outside
      of Docker), bitwarden_rs panics when the `openssl` tool isn't able to create
      `data/rsa_key.pem` due to the `data` dir not existing. Instead, print a more
      helpful error message telling the user to create the directory.
      513056f7
  11. Feb 27, 2021
  12. Feb 07, 2021
  13. Feb 06, 2021
  14. Feb 03, 2021
    • BlackDex's avatar
      Extra features for admin interface. · 705d840e
      BlackDex authored
      - Able to modify the user type per organization
      - Able to remove a whole organization
      - Added podman detection
      - Only show web-vault update when not running a containerized
        bitwarden_rs
      
      Solves #936
      705d840e
  15. Jan 31, 2021
    • BlackDex's avatar
      JSON Response updates and small fixes · 7dff8c01
      BlackDex authored
      Updated several json response models.
      Also fixed a few small bugs.
      
      ciphers.rs:
        - post_ciphers_create:
          * Prevent cipher creation to organization without a collection.
        - update_cipher_from_data:
          * ~~Fixed removal of user_uuid which prevent user-owned shared-cipher to be not editable anymore when set to read-only.~~
          * Cleanup the json_data by removing the `Response` key/values from several objects.
        - delete_all:
          * Do not delete all Collections during the Purge of an Organization (same as upstream).
      
      cipher.rs:
        - Cipher::to_json:
          * Updated json response to match upstream.
          * Return empty json object if there is no type_data instead of values which should not be set for the type_data.
      
      organizations.rs:
        * Added two new endpoints to prevent Javascript errors regarding tax
      
      organization.rs:
        - Organization::to_json:
          * Updated response model to match upstream
        - UserOrganization::to_json:
          * Updated response model to match upstream
      
      collection.rs:
        - Collection::{to_json, to_json_details}:
          * Updated the json response model, and added a detailed version used during the sync
        - hide_passwords_for_user:
          * Added this function to return if the passwords should be hidden or not for the user at the specific collection (used by `to_json_details`)
      
      Update 1: Some small changes after comments from @jjlin.
      Update 2: Fixed vault purge by user to make sure the cipher is not part of an organization.
      
      Resolves #971
      Closes #990, Closes #991
      7dff8c01
    • BlackDex's avatar
      Updated dependencies and small mail fixes · 58606796
      BlackDex authored
      - Updated rust nightly
      - Updated depenencies
      - Removed unicode support for regex (less dependencies)
      - Fixed dependency and nightly changes/deprications
      - Some mail changes for less spam point triggering
      58606796
  16. Jan 25, 2021
  17. Jan 24, 2021
  18. Jan 19, 2021
    • BlackDex's avatar
      Updated the admin interface · 235ff447
      BlackDex authored
      Mostly updated the admin interface, also some small other items.
      
      - Added more diagnostic information to (hopefully) decrease issue
        reporting, or at least solve them quicker.
      - Added an option to generate a support string which can be used to
        copy/paste on the forum or during the creation of an issue. It will
      try to hide the sensitive information automatically.
      - Changed the `Created At` and `Last Active` info to be in a column and
        able to sort them in the users overview.
      - Some small layout changes.
      - Updated javascript and css files to the latest versions available.
      - Decreased the png file sizes using `oxipng`
      - Updated target='_blank' links to have rel='noreferrer' to prevent
        javascript window.opener modifications.
      235ff447
  19. Dec 14, 2020
    • BlackDex's avatar
      Fix Key Rotation during password change · de86aa67
      BlackDex authored
      When ticking the 'Also rotate my account's encryption key' box, the key
      rotated ciphers are posted after the change of password.
      
      During the password change the security stamp was reseted which made
      the posted key's return an invalid auth. This reset is needed to prevent other clients from still being able to read/write.
      
      This fixes this by adding a new database column which stores a stamp exception which includes the allowed route and the current security stamp before it gets reseted.
      When the security stamp check fails it will check if there is a stamp exception and tries to match the route and security stamp.
      
      Currently it only allows for one exception. But if needed we could expand it by using a Vec<UserStampException> and change the functions accordingly.
      
      fixes #1240
      de86aa67
    • Jeremy Lin's avatar
      Clean up datetime output and code · 455a2336
      Jeremy Lin authored
      * For clarity, add `UTC` suffix for datetimes in the `Diagnostics` admin tab.
      * Format datetimes in the local timezone in the `Users` admin tab.
      * Refactor some datetime code and add doc comments.
      455a2336
  20. Dec 10, 2020
  21. Dec 08, 2020
    • BlackDex's avatar
      Updated icon downloading · 48baf723
      BlackDex authored
      - Added more checks to prevent panics (Removed unwrap)
      - Try do download from base domain or add www when the provided domain
        fails
      - Added some more domain validation checks to prevent errors
      - Added the ICON_BLACKLIST_REGEX to a Lazy Static HashMap which
        speeds-up the checks!
      - Validate the Regex before starting/config change.
      - Some cleanups
      - Disabled some noisy debugging from 2 crates.
      48baf723
    • Jeremy Lin's avatar
      Validate cipher updates with revision date · a9e9a397
      Jeremy Lin authored
      Prevent clients from updating a cipher if the local copy is stale.
      Validation is only performed when the client provides its last known
      revision date; this date isn't provided when using older clients,
      or when the operation doesn't involve updating an existing cipher.
      
      Upstream PR: https://github.com/bitwarden/server/pull/994
      a9e9a397
  22. Dec 03, 2020
  23. Dec 02, 2020
    • BlackDex's avatar
      Adding Manager Role support · 7cf8809d
      BlackDex authored
      This has been requested a few times (#1136 & #246 & forum), and there already were two
      (1:1 duplicate) PR's (#1222 & #1223) which needed some changes and no
      followups or further comments unfortunally.
      
      This PR adds two auth headers.
      - ManagerHeaders
        Checks if the user-type is Manager or higher and if the manager is
      part of that collection or not.
      - ManagerHeadersLoose
        Check if the user-type is Manager or higher, but does not check if the
      user is part of the collection, needed for a few features like
      retreiving all the users of an org.
      
      I think this is the safest way to implement this instead of having to
      check this within every function which needs this manually.
      
      Also some extra checks if a manager has access to all collections or
      just a selection.
      
      fixes #1136
      7cf8809d
  24. Nov 30, 2020
  25. Nov 10, 2020
  26. Oct 23, 2020
  27. Sep 25, 2020
    • BlackDex's avatar
      Add /api/accounts/verify-password endpoint · c6456001
      BlackDex authored
      If for some reason the hashed password is cleared from memory within a
      bitwarden client it will try to verify the password at the server side.
      
      This endpoint was missing.
      
      Resolves #1156
      c6456001
  28. Sep 19, 2020
  29. Sep 14, 2020
Loading