Upstream/bitwarden-server
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2024-12-01 13:43:23 +01:00
Code Issues Projects Releases Wiki Activity
2,802 Commits 301 Branches 181 Tags 68 MiB
1ca6e917af
Commit Graph

2120 Commits

Author SHA1 Message Date
Kyle Spearrin
8deddfb466 add authenticatioon to fix DI errors 2020-09-05 23:38:47 -04:00
Chad Scharf
f27df01158
update portal landing page with tiles (#915) 2020-09-05 23:06:15 -04:00
Chad Scharf
c11af22010
version bump (#914) 
* version bump

* version bump
 2020-09-05 21:31:26 -04:00
Addison Beck
4b3abe6fb0
stopped manually encoding the SSO user_identifier (#913) 2020-09-04 14:16:49 -04:00
Kyle Spearrin
1c8744e4eb UseDeveloperExceptionPage only on dev 2020-09-04 12:32:18 -04:00
Chad Scharf
ed99b99bc1
Move SSO core to Core lib, new resource strings (#911) 
* Move SSO core to Core lib, new resource strings

* Missed resource strings for lookup
 2020-09-04 10:42:47 -04:00
Chad Scharf
43619ed933
Update favicon to new standard (#910) 2020-09-03 17:03:13 -04:00
Kyle Spearrin
ff4a025984
change response mode to form_post (#908) 2020-09-03 14:17:19 -04:00
Addison Beck
5842284915
added custom plan item to the static store (#907) 2020-09-02 15:52:45 -04:00
Chad Scharf
f15768db62
GlobalSettings SSO cache timeout setting in sec (#906) 
* GlobalSettings SSO cache timeout setting in sec

* Rename cache duration/lifetime property
 2020-09-02 14:51:53 -04:00
Chad Scharf
055fa4b86f
New resource strings for SSO and Redirect pages (#905) 2020-09-02 14:13:27 -04:00
Kyle Spearrin
8510a753a8
delete sso config when deleting org (#904) 
* delete ssouser on org and user delete

* delete sso config when deleting org
 2020-09-02 10:48:15 -04:00
Kyle Spearrin
47224913d4
delete ssouser on org and user delete (#902) 2020-09-01 16:05:37 -04:00
Kyle Spearrin
9faa9406a6
delete sso user when deleting org user (#901) 2020-09-01 15:07:47 -04:00
Kyle Spearrin
4439e6b25e use internal URL 2020-09-01 12:28:03 -04:00
Kyle Spearrin
c6aaa1276d AdjustIdentityServerConfig for authorization_endpoint 2020-09-01 12:13:08 -04:00
Kyle Spearrin
44e886ae44 debugging 2020-09-01 11:39:06 -04:00
Kyle Spearrin
ba84c59b5d custom DiscoveryResponseGenerator and helpers 2020-09-01 07:38:36 -04:00
Kyle Spearrin
3ad1672f8a revert Authority to InternalSso 2020-08-31 21:03:33 -04:00
Kyle Spearrin
1f086a1193 get rid of SetIdentityServerOrigin 2020-08-31 20:22:47 -04:00
Kyle Spearrin
613edab908 adjusting config 2020-08-31 18:25:27 -04:00
Kyle Spearrin
aa67de64c4 dont set SetIdentityServerOrigin for identity 2020-08-31 18:19:23 -04:00
Kyle Spearrin
ed9599b9fc fix SetIdentityServerOrigin 2020-08-31 16:19:34 -04:00
Kyle Spearrin
41908b7b68 SetIdentityServerOrigin 2020-08-31 16:06:24 -04:00
Kyle Spearrin
31e4db250b init OpenIdConnectConfiguration 2020-08-31 15:43:47 -04:00
Kyle Spearrin
9b02c2adb5 try explicitly setting AuthorizationEndpoint 2020-08-31 15:35:13 -04:00
Kyle Spearrin
b848e9e22c fix MetadataAddress 2020-08-28 21:28:47 -04:00
Kyle Spearrin
5a5b9163bf use internal sso for metadata address 2020-08-28 21:14:03 -04:00
Kyle Spearrin
f831e1f0f0 use sso external URL 2020-08-28 20:52:06 -04:00
Kyle Spearrin
39df8611e1 swap around sso service uris 2020-08-28 20:36:02 -04:00
Kyle Spearrin
7a72da5725 fix deprecated mailkit MailboxAddress ctor 2020-08-28 14:21:16 -04:00
Kyle Spearrin
9be30793b9 UsePathBase for identity server 2020-08-28 13:46:38 -04:00
Kyle Spearrin
38728143d8
Added static client store (#899) 2020-08-28 13:32:15 -04:00
Chad Scharf
db7d05b52f
Added PreValidate endpoint on Account controller (#896) 
* Added PreValidate endpoint on Account controller

* Fixed IHttpClientFactory implementation

* Core localization and org sproc fix

* Pass culture, fixed sso middleware bug
 2020-08-28 12:14:23 -04:00
Kyle Spearrin
303b9a7875
Allow org update api on self hosted for identifier only (#898) 2020-08-28 11:22:19 -04:00
Matt Smith
00a1e8e833
Add UseBusinessPortal to OrgUserOrgDetails. (#894) 2020-08-27 11:11:59 -05:00
Kyle Spearrin
614859a8bc add missing baseServiceUris 2020-08-26 15:09:51 -04:00
Addison Beck
59f8467f7c
Create sso user api (#886) 
* facilitate linking/unlinking existing users from an sso enabled org

* added user_identifier to identity methods for sso

* moved sso user delete method to account controller

* fixed a broken test

* Update AccountsController.cs

* facilitate linking/unlinking existing users from an sso enabled org

* added user_identifier to identity methods for sso

* moved sso user delete method to account controller

* fixed a broken test

* added a token to the existing user sso link flow

* added a token to the existing user sso link flow

* fixed a typo

* added an event log for unlink ssoUser records

* fixed a merge issue

* fixed a busted test

* fixed a busted test

* ran a formatter over everything & changed .vscode settings in .gitignore

* chagned a variable to use string interpolation

* removed a blank line

* Changed TokenPurpose enum to a static class of strings

* code review cleanups

* formatting fix

* Changed parameters & logging for delete sso user

* changed th method used to get organization user for deleting sso user records

Co-authored-by: Kyle Spearrin <kspearrin@users.noreply.github.com>
 2020-08-26 14:12:04 -04:00
Kyle Spearrin
7cc9ce7bd5
check bitpay invoice status of complete (#892) 2020-08-26 11:35:38 -04:00
Chad Scharf
1c04e30689
Requested configuration cleanup for sso (#891) 2020-08-26 08:45:10 -04:00
Kyle Spearrin
2cd6d4f61a
plan adjustments (#890) 2020-08-25 14:23:36 -04:00
Chad Scharf
2fb18d8cf2
Extracted logic to get Identity cert (#889) 2020-08-25 13:15:59 -04:00
Kyle Spearrin
66e67d2172
map plantype to old strings for license hash (#882) 2020-08-21 17:44:45 -04:00
Kyle Spearrin
e41aca81de
allows dev runs to load a common idserv cert (#881) 2020-08-21 11:58:22 -04:00
Kyle Spearrin
a8c20d1c32
pass down version properly to generate license (#880) 2020-08-20 10:12:27 -04:00
Contribucious
8383a0866f
Add Yandex to global equivalent domains list (#876) 
* [enum] Add Yandex to global equivalent domains list

Exhaustive list of Yandex domain names obtained by contacting their support.

* [Dictionary] Add Yandex to global equivalent domains list

Exhaustive list of Yandex domain names obtained by contacting their support.
 2020-08-19 18:09:39 -04:00
Chad Scharf
8884157427
Added get for sso config repo by revision date (#878) 2020-08-19 13:35:17 -04:00
Contribucious
80f57d22a7
Remove amazon.co.nz from Amazon equivalent domains (redirect) (#875) 
After further research, amazon.co.nz has never been more than a redirect (in order: to amazon.com, amazon.co.uk then back to amazon.com). See PR for more information.
 2020-08-18 18:42:10 -04:00
Kyle Spearrin
2872bda6fe
tool to generate licenses (#874) 
* tool to generate licenses

* code review feedback
 2020-08-18 17:00:21 -04:00
Addison Beck
c65c52d997
Plan updates cleanup (#872) 
* updated teams feature set for new plans

* removed whitespace

* alphabatized some properties
 2020-08-17 10:45:37 -04:00
Kyle Spearrin
d190c4bd0f
Update APIs to collect other set password info (#870) 2020-08-17 10:40:35 -04:00
Contribucious
af85e17486
[Equivalent domains] Fix for the special case "eBay India" (#871) 
See explanations in the PR.
 2020-08-17 09:46:17 -04:00
Contribucious
2c430190cb
Add all missing entries to Ebay equivalent domains (#869) 
(+ sort the Ebay list alphabetically)
 2020-08-14 09:54:05 -04:00
Chad Scharf
38f7fff2f9
Added new SAML2 enums for configuration (#868) 2020-08-13 20:11:23 -04:00
Contribucious
6aed80a67d
Add amazon.{com.br, sa} to Amazon equivalent domains (#864) 
(+ sort the Amazon list alphabetically)
 2020-08-13 17:38:32 -04:00
Kyle Spearrin
cd926ca8f6
allow user registration for sso (#865) 2020-08-13 17:30:10 -04:00
Kyle Spearrin
4d8090d75e
Fix 2fa dictionary on identity response (#863) 2020-08-13 16:04:50 -04:00
Kyle Spearrin
783b4804ec
SSO support (#862) 
* [SSO] Added change password API (#836)

* Created API for updating password with no current comparison

* Changed name of method and request // Added user has password error flow

* Updated user service method name // Updated string null/empty check

* Replaced hardcoded sso domain hints with config loader (#850)

* Replaced hardcoded sso domain hints with config loader

* use async/await for sso config loader

* Update AccountsController.cs

Co-authored-by: Vincent Salucci <26154748+vincentsalucci@users.noreply.github.com>
Co-authored-by: Matt Portune <mportune@bitwarden.com>
Co-authored-by: Matt Portune <59324545+mportune-bw@users.noreply.github.com>
 2020-08-12 17:03:09 -04:00
Kyle Spearrin
056b4b9bf4
add api support for updating org identifier (#861) 
* add api support for updating org identifier

* add identifier to response as well

* implement in EF repo
 2020-08-12 16:38:22 -04:00
Addison Beck
c8220fdfa6
Plan And Price Updates (#859) 
* Expanded the Plan model to make plan & product data a bit more dynamic 
* Created a Product enum to track versioned instances of the same plan
* Created and API call and Response model for getting plan & product data from the server
 2020-08-11 14:19:56 -04:00
Timo N
61b11e398b
Added netcup to global equivalent domains list (#600) 2020-08-11 09:06:57 -04:00
Chad Scharf
5878d1b0db
Ref event should be base64 encoded (#853) 2020-08-06 20:29:35 -04:00
Jeremy Lin
562082e9ca
Add a complete list of Eventbrite equivalent domains (#851) 
This list was extracted using:

$ curl -s https://www.eventbrite.com/ |
    tr '"' '\n' |
    grep -o 'www\.eventbrite\.[^/]*' |
    sed 's/www\.//' |
    sort -u
 2020-08-06 14:07:45 -04:00
Kyle Spearrin
004e3c58ee
added more client redirect uris for clis (#849) 2020-08-05 10:53:55 -04:00
Kyle Spearrin
44717b2d4c remove non-verified eventbrite equivalent domains 2020-08-04 08:02:44 -04:00
Chad Scharf
b5ac20ec9f
Correct connection string for res queue (#847) 2020-08-03 15:22:38 -04:00
David Lemayian
ca224c1782
update welcome email download urls (#844) 
* update welcome email download urls

Very cool service! Noticed the download urls in the welcome email didn't take me to the downloads. Hope this fixes it?

* Update Welcome.html.hbs

Co-authored-by: Kyle Spearrin <kspearrin@users.noreply.github.com>
 2020-08-01 16:18:40 -04:00
Kyle Spearrin
4df363aaa1
identityserver v4 cleanup (#843) 
* v4 cleanup

* idToken
 2020-07-31 09:45:36 -04:00
Kyle Spearrin
623cd36bd4
upgrade identity server 4 to v4 (#842) 
* upgrade identity server 4 to v4

* remove script ref
 2020-07-30 17:00:13 -04:00
Kyle Spearrin
f431b4ff67 version 1.36.1 bump 2020-07-29 10:35:12 -04:00
Kyle Spearrin
cf303f2f97
catch errors when trying to resolve DNS (#841) 2020-07-28 23:22:02 -04:00
Kyle Spearrin
aa1665065d
add missing RedirectUris (#840) 2020-07-28 22:49:13 -04:00
Kyle Spearrin
c53e8cbf9d
return if org user has sso binding (#839) 2020-07-28 21:11:45 -04:00
Kyle Spearrin
2c4752f4ac
Sso user table, model and repo stubbed out (#837) 
* Sso user table, model and repo stubbed out

* switch to nullable org id, bigint id

* update GetBySsoUserAsync

* cleanup migrator file

* fix EF user repo

* fix pg repo

* is `IS NULL` checks

* unique indexes

* update migration scripts

* add another unique index

* remove old script
 2020-07-28 10:03:09 -04:00
Kyle Spearrin
69e8860767
Assign usepolicies when upgrading (#838) 2020-07-28 09:28:11 -04:00
Kyle Spearrin
ca52da8698 bump version 2020-07-27 20:36:52 -04:00
Kyle Spearrin
5de236f294 update libs 2020-07-27 20:36:17 -04:00
Addison Beck
229478adae
Feature.web.534.allow multi select in org vault (#830) 
* Set up API methods for bulk admin delete
 2020-07-22 11:38:53 -05:00
Matt Portune
51fd87df0b
Added UseSso bool to Organization (#834) 
* Added UseSso bool to org

* Update fields in migration script

* bump version & check enabled flag on ssoConfig
 2020-07-22 09:38:39 -04:00
Kyle Spearrin
7bf559b4b6
Return continuation token (#833) 2020-07-21 20:19:53 -04:00
Chad Scharf
83e9468502
Transition reference id to data (#828) 
* Transition reference id to data

* field length and request model updates
 2020-07-20 15:19:46 -04:00
Kyle Spearrin
036b402e9f
update ip IsInternal() to account for missed ranges (#827) 
* update ip IsInternal() to account for missed ranges

* update with `::`
 2020-07-18 08:08:57 -04:00
François Van Ingelgom
aab6095073
Add support building from path that contains space (#815) 2020-07-17 08:28:31 -04:00
Kyle Spearrin
5892d52ed5 fix protocol 2020-07-16 08:03:57 -04:00
Kyle Spearrin
0d0c6c7167
sso integrations (#822) 
* stub out hybrid sso

* support for PKCE authorization_code clients

* sso service urls

* sso client key

* abstract request validator

* support for verifying password

* custom AuthorizationCodeStore that does not remove codes

* cleanup

* comment

* created master password

* ResetMasterPassword

* rename Sso client to OidcIdentity

* update env builder

* bitwarden sso project in docker-compose

* sso path in nginx config
 2020-07-16 08:01:39 -04:00
Chad Scharf
2742b414fd
reference event changes and cleanup (#823) 2020-07-15 12:38:45 -04:00
Vincent Salucci
a2b46daf59
Updated Kestrel application url to use IIS port (#820) 2020-07-14 09:36:38 -05:00
Matt Portune
92238eb0a9
Additional changes for enterprise portal sso config (#819) 
* Additional changes for enterprise portal sso config

* Requested changes

* rename enum to Saml2

* Limit to one SSO config per org
 2020-07-13 15:58:59 -04:00
Kyle Spearrin
8a46fcd301
Resolve host to check for private IP address (#812) 2020-07-07 19:47:12 -04:00
Chad Scharf
7af50172e0
Reference event service implementation (#811) 
* Reference event service implementation

* Fix IReferenceable implementation of Id

* add structure to event body
 2020-07-07 12:01:34 -04:00
Vincent Salucci
b4524fbcb6
Added BusinessPortal property for use on client side (#810) 2020-07-06 12:59:57 -05:00
Mart124
b6bea86216
Run jobs in local timezone (#808) 
* Run jobs in local timezone

* Run jobs in local timezone
 2020-07-03 22:48:40 -04:00
Chad Scharf
a37706eba1
Restore original collection method (#804) 2020-06-30 11:52:50 -04:00
Chad Scharf
d7b00f6c27
Subscription update to maintain auto charge (#803) 2020-06-29 20:29:19 -04:00
Kyle Spearrin
a64f4dd413 bump patch version 2020-06-29 10:17:09 -04:00
Kyle Spearrin
cc9d18f6d2
add missing [ViewPassword] true (#799) 2020-06-27 15:09:04 -04:00
Kyle Spearrin
6bc7a3cdc0
adjust cors origin checks (#800) 
* allow cors from bitwarden.com on cloud

* allow file:// cors for safari extension

* fix missing paren
 2020-06-27 15:08:50 -04:00
Matt Portune
0b1e49bc0a Remove Id from SsoConfig_Create sproc 2020-06-26 16:47:41 -04:00
Kyle Spearrin
b524029e5c bump dependency versions 2020-06-26 16:17:46 -04:00
Kyle Spearrin
1413eed32a bump version 2020-06-26 16:04:13 -04:00
Matt Portune
da9b81d552
Merge pull request #796 from bitwarden/sso-dal 
Additional SSO & Org Identifier work
 2020-06-26 10:47:17 -04:00
Matt Portune
bc5ea25d0b removed ssoConfig request/response models 2020-06-26 10:03:25 -04:00
Matt Portune
9f919bbea9 move Id assignment to after insert 2020-06-25 18:28:08 -04:00
Matt Portune
f46023f2f5 requested changes 2020-06-25 18:06:27 -04:00
Matt Portune
39a81af3e9 DAL & CRUD for SSO 2020-06-25 16:42:29 -04:00
Chad Scharf
47a6e607c6 Fixed validation error for Free org accounts 2020-06-25 15:58:08 -04:00
Chad Scharf
fca7b162bf Reference id storage and signup 2020-06-25 12:28:22 -04:00
Kyle Spearrin
f23a8edc45
Update stripe lib (#793) 2020-06-24 21:24:19 -04:00
Kyle Spearrin
8559e144c6 bump dependency minor/patch versions 2020-06-24 16:37:23 -04:00
Matt Portune
0f008435ba sproc tweak 2020-06-24 13:59:00 -04:00
Matt Portune
05891f2122 Requested updates 2020-06-24 12:24:36 -04:00
Matt Portune
09df3f64d3 Updates to SSO config DB setup 2020-06-23 23:54:27 -04:00
Kyle Spearrin
cf70a5e480
set cors policies to only allow web vault origin (#787) 
* set cors policy to only allow web vault

* vault cors policy service
 2020-06-23 18:47:53 -04:00
Matt Portune
6f53ef4847 formatting 2020-06-22 09:36:40 -04:00
Matt Portune
519226f824 formatting 2020-06-21 23:42:27 -04:00
Matt Portune
8e7cb082ad DB support for SSO config 2020-06-21 23:35:42 -04:00
Mike Hanson
398867a839 Parameterize AmazonSQSClient to allow testing 2020-06-18 10:16:23 -07:00
Chad Scharf
61b15c55d0
Merge pull request #782 from bitwarden/feature/tax-info-collection 
Combined tax updates with other operations
 2020-06-18 11:26:58 -04:00
Chad Scharf
0f28ac45f9 Consistency on TaxInfo use in service params 2020-06-18 10:41:55 -04:00
Kyle Spearrin
aeb6e4e7d4 formatting 2020-06-18 09:57:24 -04:00
Mike Hanson
dc42be710a
Add unit test coverage for AmazonSesMailDeliveryService (#783) 
* Parameterize AmazonSimpleEmailServiceClient to allow testing

* Add unit test coverage for AmazonSesMailDeliveryService
 2020-06-18 09:55:46 -04:00
Chad Scharf
1b027cab59 Remove erroneous whitespace 2020-06-17 20:02:38 -04:00
Chad Scharf
b7a500eb63 combined tax updates with other operations 2020-06-17 19:49:27 -04:00
Chad Scharf
f7e5f1f15e
Merge pull request #776 from bitwarden/feature/tax-info-collection 
Feature/tax info collection
 2020-06-17 10:49:54 -04:00
Hinton
7145e3ea88 On create default ViewPassword to true. 2020-06-15 18:54:32 +02:00
Chad Scharf
b2cb9a2f69 Billing addr line1 fix, pr feedback 2020-06-15 09:12:03 -04:00
Chad Scharf
1552ff7b29 Collect tax info, correct line1 2020-06-12 19:35:17 -04:00
Pedro Lamas
21834223fd
Adds extra Amazon equivalent domains (#775) 2020-06-12 10:25:08 -04:00
Chad Scharf
5b3f81f47e
Merge pull request #743 from Hinton/feature/hide-passwords 
Add support collection access, hide passwords
 2020-06-11 14:24:04 -04:00
Kyle Spearrin
f695b1e7fc
update gulp to v4 and remove old packages (#774) 
* update gulp to v4 and remove old packages

* desc

* update project name
 2020-06-11 14:23:23 -04:00
Code
d2625e47e1
Remove trailing comma and adjust formatting of some of the equivalent domain strings to match the rest (#773) 2020-06-09 16:53:48 -04:00
Kyle Spearrin
a7d7736806
Add i18nservice abstraction (#770) 2020-06-09 10:25:37 -04:00
Chad Scharf
d88838f19e API updates for tax info collection 2020-06-08 17:40:18 -04:00
Connor Gibson
cad7cf0200
Add office.com to Microsoft default equivalent domains. (#769) 2020-06-06 21:08:26 -04:00
Kyle Spearrin
4bd3e01a80
abstract context building to overrideable SetContextAsync (#766) 
* abstract context building to overrideable SetContextAsync

* update method calls
 2020-06-04 14:14:43 -04:00
André Paulo
e1a0d59fd1
Added Discord to Global Equivalent Domain (#752) 
* add Discord to GlobalEquivalentDomainsType

* added discord domains to global domains
 2020-05-28 19:48:51 -04:00
Matt Portune
0d156776cb
Merge pull request #737 from bitwarden/self-hosted-exp-email 
License expiration email for self-hosted org/premium accounts
 2020-05-27 09:07:47 -04:00
hinton
14a8224a99 Be explicit about AccessAll for ViewPassword 2020-05-23 11:06:41 +02:00
hinton
1c0095b122 Be explicit with AccessAll and fix bug in create/update cipher 2020-05-23 10:36:35 +02:00
Roman V
a421be731c
Add syslog suport for sending application logs to a Syslog server (#742) 
* Add syslog suport for sending application logs to a Syslog server

* Rename SyslogSettings.Certificate to SyslogSettings.CertificatePath
 2020-05-22 21:19:59 -04:00
hinton
f2348d2264 Resolve review comments 2020-05-22 22:16:01 +02:00
hinton
28fe86ecff Merge branch 'master' of https://github.com/bitwarden/server into feature/hide-passwords 
# Conflicts:
#	src/Sql/dbo/Stored Procedures/CollectionUser_UpdateUsers.sql
#	src/Sql/dbo/Stored Procedures/OrganizationUser_UpdateWithCollections.sql
 2020-05-22 21:42:29 +02:00
Kyle Spearrin
beb40eb682
Update swagger config to use proper URL scheme (#744) 2020-05-21 15:00:03 -04:00
Kyle Spearrin
343ef92a20
Sproc tweaks (#730) 
* do not follow local hosts or ip addresses

* remove cron from mssql

* migration script

* Use joins instead of temp tables

* update migration script with join changes
 2020-05-21 11:35:00 -04:00
hinton
36f15c67d0 Add support for new collection access, hide passwords 2020-05-21 15:38:57 +02:00
Matt Portune
545948220a additional formatting & inclusion of org name 2020-05-19 18:22:03 -04:00
Matt Portune
9bf3a467fa formatting 2020-05-19 12:37:45 -04:00
Kyle Spearrin
0cd90be83a bump version for release 2020-05-18 21:58:12 -04:00
Kyle Spearrin
c205bf72e6 update some libs 2020-05-18 21:57:14 -04:00
Matt Portune
2cf7f18858 License expiration email for self-hosted org/premium accounts 2020-05-18 16:06:34 -04:00