Skip to content
Snippets Groups Projects
  1. Jul 08, 2024
    • Mathijs van Veluw's avatar
      Some fixes for emergency access (#4715) · d04b94b7
      Mathijs van Veluw authored
      - Add missing `Headers` parameter for some functions
         This allowed any request from allowing these endpoints by not validating the user correctly.
       - Changed the functions to retreive the emergency access record by
         using the user uuid which calls the endpoint, instead of validating afterwards.
         This is more secure and prevents the need of an if check.
      1.31.0
      d04b94b7
    • Mathijs van Veluw's avatar
      Update crates and web-vault (#4714) · 247d0706
      Mathijs van Veluw authored
      - Updated the crates
         Removed the patch for mimalloc
       - Updated the web-vault to v2024.5.1b
      
      The reason for not updating to v2024.6.x is that there are several items
      not working correctly or need some more research.
      247d0706
    • Daniel's avatar
      Switch registry cache compression algorithm to zstd (#4704) · 0e8b4107
      Daniel authored
      - faster builds than with gzip (the default)
      0e8b4107
  2. Jul 04, 2024
    • Stefan Melmuk's avatar
      add group support for Cipher::get_collections() (#4592) · fda77afc
      Stefan Melmuk authored
      * add group support for Cipher::get_collections()
      
      join group infos assigned to a collection to check
      whether user has been given access to all collections via any group
      or they have access to a specific collection via any group membership
      
      * fix Collection::is_writable_by_user()
      
      prevent side effects if groups are disabled
      
      * differentiate the /collection endpoints
      
      * return cipherDetails on post_collections_update()
      
      * add collections_v2 endpoint
      fda77afc
    • Daniel's avatar
      Remove duplicate registry step (#4703) · d9835f53
      Daniel authored
      d9835f53
    • Mathijs van Veluw's avatar
      Fix duplicate folder creations during import (#4702) · bd919641
      Mathijs van Veluw authored
      During import you are able to select an existing folder, or with
      Bitwarden exports it can contain existing folders already. In either
      case it didn't matter, we always created new folders.
      
      Bitwarden uses the same UUID of the selected or existing folders if they
      are already there.
      
      This PR fixes this by using the same behaviour.
      
      Fixes #4700
      bd919641
  3. Jul 03, 2024
    • Mathijs van Veluw's avatar
      Fix collections and native app issue (#4685) · d42b264a
      Mathijs van Veluw authored
      Collections were not visible in the organization view.
      This was because the `flexibleCollections` was set to `true`
      
      Found an issue with loading some old created Secure Notes which had `{}` or `{"type":null}` as there `data` value.
      This isn't allowed. When detected, replace it with `{"type":0}`
      
      Fixes #4682
      Fixes #4590
      d42b264a
  4. Jun 24, 2024
  5. Jun 23, 2024
    • Daniel García's avatar
      Change API and structs to camelCase (#4386) · a2bf8def
      Daniel García authored
      * Change API inputs/outputs and structs to camelCase
      
      * Fix fields and password history
      
      * Use convert_json_key_lcase_first
      
      * Make sends lowercase
      
      * Update admin and templates
      
      * Update org revoke
      
      * Fix sends expecting size to be a string on mobile
      
      * Convert two-factor providers to string
      a2bf8def
  6. Jun 20, 2024
  7. Jun 19, 2024
    • Mathijs van Veluw's avatar
      Update crates, web-vault and GHA (#4648) · 55fdee3b
      Mathijs van Veluw authored
      - Updated all crates including Diesel and the new mysqlclient-sys
      - Updated the MSRV to v1.78 as that is what Diesel mandates
      - Added the mimalloc crate as a patch for now to fix armv6 static builds
        This probably makes #4606 possible
      - Updated web-vault to v2024.5.1
      - Updated GitHub Actions
        Fixed an issue with the localhost images for extracting the musl binaries.
      55fdee3b
  8. Jun 16, 2024
  9. May 25, 2024
  10. May 19, 2024
  11. Apr 27, 2024
    • Daniel García's avatar
      0fe93ede
    • Stefan Melmuk's avatar
      fix emergency access invites (#4337) · e9aa5a54
      Stefan Melmuk authored
      * fix emergency access invites with no mail
      
      when mail is disabled instead of accepting emergency access for all
      invited users automatically, we only accept if the user already exists
      
      on registration of a new account any open emergency access invitations
      will be accepted, if mail is disabled
      
      also prevent invited emergency access contacts to register if emergency
      access is disabled (this is only relevant for when mail is enabled, if
      mail is disabled they should have an Invitation entry)
      
      * delete emergency access invitations
      
      if an invited user is deleted in the /admin panel their emergency
      access invitation will remain in the database which causes
      the to_json_grantee_details fn to panic
      
      * improve missing emergency access grantees
      
      instead of returning an empty emergency access contact the entry should
      not be added to the list. also the error handling can be improved a bit.
      e9aa5a54
    • Stefan Melmuk's avatar
      improve access to collections via groups (#4441) · 9dcc738f
      Stefan Melmuk authored
      * refactor get_org_collections_details
      
      * improve access to collection check
      
      * fix get_org_collection_detail too
      9dcc738f
    • Kristof Mattei's avatar
    • Mathijs van Veluw's avatar
      Add extra (unsupported) container build arch's (#4524) · ca9234ed
      Mathijs van Veluw authored
      There was a PR (#4370) to add i686/i386 support for Vaultwarden.
      That specific PR was not a viable way of adding this.
      
      This PR adds extra architectures for Debian based containers which we
      will not support by default. Those images will not be build and pushed
      to our container registries.
      
      Added the following architectures:
       - linux/386
       - linux/ppc64le
       - linux/s390x
      
      Again, there will be no major support for these architectures, but it
      will allow people who use these architectures to build a Debian based
      binary more easily
      ca9234ed
    • Daniel García's avatar
      Implement custom DNS resolver (#3988) · 27dc67fa
      Daniel García authored
      27dc67fa
  12. Apr 26, 2024
  13. Apr 06, 2024
  14. Mar 23, 2024
  15. Mar 19, 2024