1
0
mirror of https://github.com/bitwarden/server.git synced 2024-11-30 13:33:24 +01:00
Commit Graph

49 Commits

Author SHA1 Message Date
Kyle Spearrin
0e84678150
[PS-2416 and PS-2417] dont set CSP config value by default (#2667)
* dont set CSP config value by default

* space
2023-02-03 14:50:33 -05:00
Justin Baur
7f5f010e1e
Run formatting (#2230) 2022-08-29 16:06:55 -04:00
Justin Baur
bae03feffe
Revert filescoped (#2227)
* Revert "Add git blame entry (#2226)"

This reverts commit 239286737d.

* Revert "Turn on file scoped namespaces (#2225)"

This reverts commit 34fb4cca2a.
2022-08-29 15:53:48 -04:00
Justin Baur
34fb4cca2a
Turn on file scoped namespaces (#2225) 2022-08-29 14:53:16 -04:00
Chad Scharf
19b8d8281a
[EC-261] SCIM (#2105)
* scim project stub

* some scim models and v2 controllers

* implement some v2 scim endpoints

* fix spacing

* api key auth

* EC-261 - SCIM Org API Key and connection type config

* EC-261 - Fix lint errors/formatting

* updates for okta implementation testing

* fix var ref

* updates from testing with Okta

* implement scim context via provider parsing

* support single and list of ids for add/remove groups

* log ops not handled

* touch up scim context

* group list filtering

* EC-261 - Additional SCIM provider types

* EC-265 - UseScim flag and license update

* EC-265 - SCIM provider type of default (0)

* EC-265 - Add Scim URL and update connection validation

* EC-265 - Model validation and cleanup for SCIM keys

* implement scim org connection

* EC-265 - Ensure ServiceUrl is not persisted to DB

* EC-265 - Exclude provider type from DB if not configured

* EC-261 - EF Migrations for SCIM

* add docker builds for scim

* EC-261 - Fix failing permissions tests

* EC-261 - Fix unit tests and pgsql migrations

* Formatting fixes from linter

* EC-265 - Remove service URL from scim config

* EC-265 - Fix unit tests, removed wayward validation

* EC-265 - Require self-hosted for billing sync org conn

* EC-265 - Fix formatting issues - whitespace

* EC-261 - PR feedback and cleanup

* scim constants rename

* no scim settings right now

* update project name

* delete package lock

* update appsettings configs for scim

* use default scim provider for context

Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com>
2022-07-14 15:58:48 -04:00
Justin Baur
231eb84e69
Turn On ImplicitUsings (#2079)
* Turn on ImplicitUsings

* Fix formatting

* Run linter
2022-06-29 19:46:41 -04:00
Joseph Flinn
3a22f91ff5
Enable key connector selfhost (#1707)
* initial commit

* Add code for Key Connector feature

* Add help URL to config

* Fix folders for key-connector service

* Fix paths for key-connector

* fixing the env file builder when disabling the key connector

* swapping a variable name

Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
2021-11-16 09:52:02 -08:00
Matt Gibson
6d18f44029
Add captcha option to Nginx config (#1509)
* Add captcha option to Nginx config

* Fix formatting
2021-08-13 08:52:26 -05:00
Joseph Flinn
97ba472606
Make nginx Content-Security-Policy configurable (#1048)
* Adding the nginx head Content-Security-Policy to the Configuration file

* fixing whitespace formatting

* adding a '+' that got removed
2020-12-18 07:58:35 -08:00
Chad Scharf
9800b752c0 Changed all C# control flow block statements to include space between keyword and open paren 2020-03-27 14:36:37 -04:00
Kyle Spearrin
6dc2e1b328 real ips config 2019-04-26 12:26:54 -04:00
Kyle Spearrin
b6f54324a5 quiet output for setup scripts 2019-03-12 10:26:14 -04:00
Kyle Spearrin
1a932de925 no longer need hibp in connect csp 2019-01-18 22:04:10 -05:00
Kyle Spearrin
9a48e6f29a add twofactorauth.org to CSP 2018-12-12 10:16:02 -05:00
Kyle Spearrin
32f686cba6 allow blobs in object-src CSP 2018-11-06 22:26:41 -05:00
Kyle Spearrin
d4c35a98b7 allow configurable ssl protocols and ciphersuites 2018-08-31 12:11:44 -04:00
Kyle Spearrin
310e6bcf61 convert setup to use config.yml 2018-08-30 11:35:44 -04:00
Kyle Spearrin
a275af6366 proxy_pass to /hub 2018-08-21 12:47:13 -04:00
Kyle Spearrin
43eaedeee4 proxy headers for websockets 2018-08-21 12:43:18 -04:00
Kyle Spearrin
7a5d3c3795 set connection header for signalr hub 2018-08-21 12:12:33 -04:00
Kyle Spearrin
fb92f67053 add websockets to CSP 2018-08-21 11:54:03 -04:00
Kyle Spearrin
ca3ecc0163 build and include notifications docker 2018-08-17 18:14:25 -04:00
Kyle Spearrin
20f45ca2de update ssl ciphers to mozilla recommendations 2018-08-14 08:42:01 -04:00
Simon
f08ff966b0 Hardening nginx, allow TLSv1.2 with the most secure cipher suites only (#340)
* Hardening nginx, allow TLSv1.2 with the most secure cipher suites only

* Ciphers added to allow more browsers to connect
2018-08-14 08:37:24 -04:00
Kyle Spearrin
6d22356caf allow gravatar in CSP 2018-07-30 23:56:09 -04:00
Kyle Spearrin
05b1c1cf9b move all security headers to web vault location 2018-07-20 14:13:24 -04:00
Kyle Spearrin
0070d23dab csp is only for web vault 2018-07-20 14:11:20 -04:00
Kyle Spearrin
8c208d4d34 missing semicolon 2018-07-19 17:01:57 -04:00
Kyle Spearrin
dea76e8e01 wrap csp in quotes 2018-07-19 16:49:01 -04:00
Kyle Spearrin
a66af41d2b csp header on nginx 2018-07-18 23:06:25 -04:00
Kyle Spearrin
6801da46e5 Comment capitalization 2018-03-29 15:41:27 -04:00
Kyle Spearrin
07fb676ded ssl mapped to 8443 2018-03-29 13:53:39 -04:00
Kyle Spearrin
05d00517ee move cert questions up 2018-03-29 13:43:52 -04:00
Kyle Spearrin
b8ed8853cd docker as non-root 2018-03-26 11:21:03 -04:00
Kyle Spearrin
15b1a426e4 build node assets and no trailing admin slash 2018-03-25 00:16:43 -04:00
Kyle Spearrin
56a0688bd5 proxy to admin 2018-03-24 08:50:41 -04:00
Kyle Spearrin
8a28ce7fb5 /admin with no / suffix 2018-03-24 08:43:42 -04:00
Kyle Spearrin
c4bd015e89 proxypass to /admin 2018-03-24 08:39:55 -04:00
Kyle Spearrin
73a4af3f17 port 5000 2018-03-23 23:03:09 -04:00
Kyle Spearrin
5c3eca264b run admin on port 5000 2018-03-23 22:46:09 -04:00
Kyle Spearrin
24b8619bd1 add docker build for admin 2018-03-23 21:11:17 -04:00
Kyle Spearrin
94ecdf7fd6 support non-ssl installations 2018-03-08 17:31:51 -05:00
Kyle Spearrin
3425e95bf6 revert prefixing service names with bitwarden- 2017-12-21 11:18:36 -05:00
Kyle Spearrin
3d05c9208f add bitwarden- prefix to docker service names 2017-12-11 11:49:10 -05:00
Kyle Spearrin
4b5dc82eba remove extra $ 2017-11-07 22:45:01 -05:00
Kyle Spearrin
c65e08af85 proper http->https redirect with custom ports 2017-11-07 22:35:36 -05:00
Kyle Spearrin
49bd3bcf35 build docker compose and allow custom ports 2017-11-06 17:28:02 -05:00
Kyle Spearrin
36e1ba66c7 cert builder 2017-10-24 08:45:48 -04:00
Kyle Spearrin
48e5355aa9 builders and update rebuilds 2017-10-23 22:45:59 -04:00