- Jan 30, 2022
-
-
BlackDex authored
This is a rather large PR which updates the async branch to have all the database methods as an async fn. Some iter/map logic needed to be changed to a stream::iter().then(), but besides that most changes were just adding async/await where needed.
-
Daniel García authored
Update to rocket 0.5 and made code async, missing updating all db calls, that are currently blocking
-
Daniel García authored
-
- Jan 28, 2022
-
-
Daniel García authored
Increase length limit for email token generation
-
- Jan 24, 2022
-
-
Jeremy Lin authored
The current limit of 19 is an artifact of the implementation, which can be easily rewritten in terms of a more general string generation function. The new limit is 255 (max value of a `u8`); using a larger type would probably be overkill.
-
- Jan 23, 2022
-
-
Daniel García authored
Update web vault to 2.25.1 and rust base images to march rust-toolchain, the official rust images don't have nightly builds, so just use the latest
-
Daniel García authored
-
Daniel García authored
Merge branch 'fix/CVE-2022-21658' of https://github.com/dscottboggs/vaultwarden into dscottboggs-fix/CVE-2022-21658
-
D. Scott Boggs authored
-
Daniel García authored
-
Daniel García authored
-
Daniel García authored
Merge branch 'iamdoubz-feature-to-permissions-policy-patch' of https://github.com/iamdoubz/vaultwarden into iamdoubz-iamdoubz-feature-to-permissions-policy-patch
-
Daniel García authored
-
Daniel García authored
-
Daniel García authored
Merge branch 'fix-emergency-invite-register' of https://github.com/BlackDex/vaultwarden into BlackDex-fix-emergency-invite-register
-
Daniel García authored
Squashed commit of the following: commit 1bdf1c7954e0731c95703d10118f3874ab5155d3 Merge: 8ba6e61f 7257251 Author: Daniel García <dani-garcia@users.noreply.github.com> Date: Sun Jan 23 23:40:17 2022 +0100 Merge branch 'remove-bwrs' of https://github.com/RealOrangeOne/vaultwarden into RealOrangeOne-remove-bwrs commit 7257251ecf23af18deb894e8f2e5519a15360c76 Author: Jake Howard <git@theorangeone.net> Date: Thu Jan 6 17:48:18 2022 +0000 Use `or_else` to save potentially unnecessary function call commit 40ae81dd3c43a596375d5bfdcc00053e786328cc Author: Jake Howard <git@theorangeone.net> Date: Wed Jan 5 21:18:24 2022 +0000 Move $BWRS_VERSION fallback into build.rs commit 743ef74b307a662960f3ca1b9636f3608506516d Author: Jake Howard <git@theorangeone.net> Date: Sat Jan 1 23:08:27 2022 +0000 Revert "Add feature to enable use of `Option::or` in const context" This reverts commit fe8e043b8aaf77c083747bf11760f29b53df0bba. We want to run on stable soon, where these features are not supported commit a1f0da638c8b6ba32209318b105bde1efdd47082 Author: Jake Howard <git@theorangeone.net> Date: Sat Jan 1 13:04:47 2022 +0000 Rename web vault version file https://github.com/dani-garcia/bw_web_builds/pull/58 commit fe8e043b8aaf77c083747bf11760f29b53df0bba Author: Jake Howard <git@theorangeone.net> Date: Sat Jan 1 12:56:44 2022 +0000 Add feature to enable use of `Option::or` in const context commit 687435c8b2b995e90bf6f0ee619bc305e37bc183 Author: Jake Howard <git@theorangeone.net> Date: Sat Jan 1 12:27:28 2022 +0000 Continue to allow using `$BWRS_VERSION` commit 8e2f708e5037db8071251c582ebaf1a97d8e5923 Author: Jake Howard <git@theorangeone.net> Date: Fri Dec 31 11:41:34 2021 +0000 Remove references to "bwrs" The only remaining one is getting the version of the web vault, which requires coordinating with the web vault patching.
-
- Jan 22, 2022
-
-
Jeremy Lin authored
API key logins use a scope of `api`, not `api offline_access`. Since `offline_access` is not requested, no `refresh_token` is returned either.
-
Jeremy Lin authored
This is mainly useful for CLI-based login automation.
-
- Jan 12, 2022
-
-
iamdoubz authored
Convert old, soon to be defunct, Feature-Policy with its replacement Permissions-Policy
-
- Jan 09, 2022
-
-
Jeremy Lin authored
At least on Android, it seems the Bitwarden mobile client responds to HTTP 307, but not to HTTP 308 for some reason.
-
- Jan 07, 2022
-
-
BlackDex authored
If a new user gets invited it should check if the user is invited via emergency access, if so, allow that user to register.
-
- Jan 02, 2022
-
-
Daniel García authored
Fix issue with Bitwarden CLI.
-
Daniel García authored
Fixed issue #2154
-
Daniel García authored
Add config option to set the HTTP redirect code for external icons
-
- Dec 31, 2021
-
-
BlackDex authored
The CLI seems to send a String instead of an Integer for the maximum access count. It now accepts both types and converts it to an i32 in all cases. Fixes #2196
-
BlackDex authored
For emergency access invitations we need to check if invites are allowed, not if sign-ups are allowed.
-
Jeremy Lin authored
The default code is 307 (temporary) to make it easier to test different icon services, but once a service has been decided on, users should ideally switch to using permanent redirects for cacheability.
-
- Dec 30, 2021
-
-
Daniel García authored
Set `Expires` header when caching responses
-
- Dec 29, 2021
-
-
Jake Howard authored
-
Jake Howard authored
-
- Dec 28, 2021
-
-
Jake Howard authored
Co-authored-by:
Daniel García <dani-garcia@users.noreply.github.com>
-
Jake Howard authored
Browsers are rather smart, but also dumb. This uses the `Expires` header alongside `cache-control` to better prompt the browser to actually cache. Unfortunately, firefox still tries to "race" its own cache, in an attempt to respond to requests faster, so still ends up making a bunch of requests which could have been cached. Doesn't appear there's any way around this.
-
- Dec 27, 2021
-
-
Daniel García authored
-
https://github.com/BlackDex/vaultwardenDaniel García authored
Merge branch 'multi-db-dockers' of https://github.com/BlackDex/vaultwarden into BlackDex-multi-db-dockers
-
Daniel García authored
-
- Dec 26, 2021
-
-
BlackDex authored
- Using my own rust-musl build containers we now support all database types for both Debian and Alpine. - Added new Alpine containers for armv6 and arm64/aarch64 - The Debian builds can also be done wihout dpkg magic stuff, probably some fixes in Rust regarding linking (Or maybe OpenSSL or Diesel), in any case, it works now without hacking dpkg and apt. - Updated toolchain and crates
-
- Dec 25, 2021
-
-
Daniel García authored
-