Ike
ab5d4738d6
[PM-8107] Remove Duo v2 from server ( #4934 )
...
refactor(TwoFactorAuthentication): Remove references to old Duo SDK version 2 code and replace them with the Duo SDK version 4 supported library DuoUniversal code.
Increased unit test coverage in the Two Factor Authentication code space. We opted to use DI instead of Inheritance for the Duo and OrganizaitonDuo two factor tokens to increase testability, since creating a testing mock of the Duo.Client was non-trivial.
Reviewed-by: @JaredSnider-Bitwarden
2024-11-18 15:58:05 -08:00
Ike
c028c68d9c
[PM-6666] Two factor Validator refactor ( #4894 )
...
* initial device removal
* Unit Testing
* Finalized tests
* initial commit refactoring two factor
* initial tests
* Unit Tests
* initial device removal
* Unit Testing
* Finalized tests
* initial commit refactoring two factor
* initial tests
* Unit Tests
* Fixing some tests
* renaming and reorganizing
* refactored two factor flows
* fixed a possible issue with object mapping.
* Update TwoFactorAuthenticationValidator.cs
removed unused code
2024-10-24 10:41:25 -07:00
Ike
22dd957543
[PM-10742] Pull Device verification into testable service ( #4851 )
...
* initial device removal
* Unit Testing
* Added unit tests fixed validator null checks
* Finalized tests
* formatting
* fixed test
* lint
* addressing review notes
* comments
2024-10-10 17:26:17 -07:00
Ike
fa5d6712c5
[PM-6664] Base Request Validator Unit Tests and Resource Owner integration Tests ( #4582 )
...
* intial commit
* Some UnitTests for the VerifyAsync flows
* WIP org two factor
* removed useless tests
* added ResourceOwnerValidation integration tests
* fixing formatting
* addressing comments
* removed comment
2024-09-05 11:17:15 -07:00
Bernd Schoolmann
7d48102865
[PM-7742] Set hasManageResetPasswordPermission for owner and admin invitees ( #4528 )
...
* Set hasManageResetPasswordPermission for owner and admin invitees
* Make userdecryptionoptionsbuilder ignore orgusertype if orguser is null
2024-08-06 11:22:10 +02:00
Todd Martin
956efbdb39
[PM-2260] Remove TDE feature flag ( #3614 )
...
* Remove TDE feature flag.
* Removed references to feature service from decryption options builder.
* Removed redundant references.
* Removed test that is no longer valid, as it was testing the feature flag.
* Removed remainder of TDE feature check.
2024-01-10 12:33:19 -05:00
Andreas Coroiu
80740aa4ba
[PM-2032] Server endpoints to support authentication with a passkey ( #3361 )
...
* [PM-2032] feat: add assertion options tokenable
* [PM-2032] feat: add request and response models
* [PM-2032] feat: implement `assertion-options` identity endpoint
* [PM-2032] feat: implement authentication with passkey
* [PM-2032] chore: rename to `WebAuthnGrantValidator`
* [PM-2032] fix: add missing subsitute
* [PM-2032] feat: start adding builder
* [PM-2032] feat: add support for KeyConnector
* [PM-2032] feat: add first version of TDE
* [PM-2032] chore: refactor WithSso
* [PM-2023] feat: add support for TDE feature flag
* [PM-2023] feat: add support for approving devices
* [PM-2023] feat: add support for hasManageResetPasswordPermission
* [PM-2032] feat: add support for hasAdminApproval
* [PM-2032] chore: don't supply device if not necessary
* [PM-2032] chore: clean up imports
* [PM-2023] feat: extract interface
* [PM-2023] chore: add clarifying comment
* [PM-2023] feat: use new builder in production code
* [PM-2032] feat: add support for PRF
* [PM-2032] chore: clean-up todos
* [PM-2023] chore: remove token which is no longer used
* [PM-2032] chore: remove todo
* [PM-2032] feat: improve assertion error handling
* [PM-2032] fix: linting issues
* [PM-2032] fix: revert changes to `launchSettings.json`
* [PM-2023] chore: clean up assertion endpoint
* [PM-2032] feat: bypass 2FA
* [PM-2032] fix: rename prf option to singular
* [PM-2032] fix: lint
* [PM-2032] fix: typo
* [PM-2032] chore: improve builder tests
Co-authored-by: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
* [PM-2032] chore: clarify why we don't require 2FA
* [PM-2023] feat: move `identityProvider` constant to common class
* [PM-2032] fix: lint
* [PM-2023] fix: move `IdentityProvider` to core.Constants
* [PM-2032] fix: missing import
* [PM-2032] chore: refactor token timespan to use `TimeSpan`
* [PM-2032] chore: make `StartWebAuthnLoginAssertion` sync
* [PM-2032] chore: use `FromMinutes`
* [PM-2032] fix: change to 17 minutes to cover webauthn assertion
* [PM-2032] chore: do not use `async void`
* [PM-2032] fix: comment saying wrong amount of minutes
* [PM-2032] feat: put validator behind feature flag
* [PM-2032] fix: lint
---------
Co-authored-by: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
2023-11-20 15:55:31 +01:00
