Jake Fink
88dd745070
[PM-1188] Server owner auth migration ( #2825 )
...
* [PM-1188] add sso project to auth
* [PM-1188] move sso api models to auth
* [PM-1188] fix sso api model namespace & imports
* [PM-1188] move core files to auth
* [PM-1188] fix core sso namespace & models
* [PM-1188] move sso repository files to auth
* [PM-1188] fix sso repo files namespace & imports
* [PM-1188] move sso sql files to auth folder
* [PM-1188] move sso test files to auth folders
* [PM-1188] fix sso tests namespace & imports
* [PM-1188] move auth api files to auth folder
* [PM-1188] fix auth api files namespace & imports
* [PM-1188] move auth core files to auth folder
* [PM-1188] fix auth core files namespace & imports
* [PM-1188] move auth email templates to auth folder
* [PM-1188] move auth email folder back into shared directory
* [PM-1188] fix auth email names
* [PM-1188] move auth core models to auth folder
* [PM-1188] fix auth model namespace & imports
* [PM-1188] add entire Identity project to auth codeowners
* [PM-1188] fix auth orm files namespace & imports
* [PM-1188] move auth orm files to auth folder
* [PM-1188] move auth sql files to auth folder
* [PM-1188] move auth tests to auth folder
* [PM-1188] fix auth test files namespace & imports
* [PM-1188] move emergency access api files to auth folder
* [PM-1188] fix emergencyaccess api files namespace & imports
* [PM-1188] move emergency access core files to auth folder
* [PM-1188] fix emergency access core files namespace & imports
* [PM-1188] move emergency access orm files to auth folder
* [PM-1188] fix emergency access orm files namespace & imports
* [PM-1188] move emergency access sql files to auth folder
* [PM-1188] move emergencyaccess test files to auth folder
* [PM-1188] fix emergency access test files namespace & imports
* [PM-1188] move captcha files to auth folder
* [PM-1188] fix captcha files namespace & imports
* [PM-1188] move auth admin files into auth folder
* [PM-1188] fix admin auth files namespace & imports
- configure mvc to look in auth folders for views
* [PM-1188] remove extra imports and formatting
* [PM-1188] fix ef auth model imports
* [PM-1188] fix DatabaseContextModelSnapshot paths
* [PM-1188] fix grant import in ef
* [PM-1188] update sqlproj
* [PM-1188] move missed sqlproj files
* [PM-1188] move auth ef models out of auth folder
* [PM-1188] fix auth ef models namespace
* [PM-1188] remove auth ef models unused imports
* [PM-1188] fix imports for auth ef models
* [PM-1188] fix more ef model imports
* [PM-1188] fix file encodings
2023-04-14 13:25:56 -04:00
Oscar Hinton
cf25d55090
[SM-378] Enable SM on a user basis ( #2590 )
...
* Add support for giving individual users access to secrets manager
2023-01-31 18:38:53 +01:00
Oscar Hinton
5cd571df64
[SM-380] Access checks for listing projects ( #2496 )
...
* Add project access checks for listing
2023-01-20 16:33:11 +01:00
Matt Bishop
352b42b535
Upgrade FIDO2 library usage out of beta ( #2579 )
2023-01-19 11:06:51 -05:00
Oscar Hinton
1f0fc43278
[SM-394] Secrets Manager ( #2164 )
...
Long lived feature branch for Secrets Manager
Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>
Co-authored-by: cd-bitwarden <106776772+cd-bitwarden@users.noreply.github.com>
Co-authored-by: CarleyDiaz-Bitwarden <103955722+CarleyDiaz-Bitwarden@users.noreply.github.com>
Co-authored-by: Thomas Avery <tavery@bitwarden.com>
Co-authored-by: Colton Hurst <colton@coltonhurst.com>
2023-01-13 15:02:53 +01:00
Oscar Hinton
c11a179332
[SM-220] Move identity specific files to identity ( #2279 )
2022-09-27 18:30:37 +02:00
Justin Baur
7f5f010e1e
Run formatting ( #2230 )
2022-08-29 16:06:55 -04:00
Justin Baur
bae03feffe
Revert filescoped ( #2227 )
...
* Revert "Add git blame entry (#2226 )"
This reverts commit 239286737d#2225 )"
This reverts commit 34fb4cca2a
2022-08-29 15:53:48 -04:00
Justin Baur
34fb4cca2a
Turn on file scoped namespaces ( #2225 )
2022-08-29 14:53:16 -04:00
Justin Baur
231eb84e69
Turn On ImplicitUsings ( #2079 )
...
* Turn on ImplicitUsings
* Fix formatting
* Run linter
2022-06-29 19:46:41 -04:00
Vincent Salucci
8b1a6b4ad3
[Bug] Skip WebAuthn 2fa event logs during login flow ( #1978 )
...
* [Bug] Supress WebAuthn 2fa event logs during login process
* Formatting
* Simplified method call with new paramter input
2022-04-28 16:42:47 -05:00
Oscar Hinton
2ed8be75dd
Fix organization duo 2fa not working due to switch to System.Text.Json ( #1846 )
2022-02-09 13:45:20 +01:00
Oscar Hinton
a9a5417350
Fix WebAuthn not working after move to System.Text.Json ( #1818 )
2022-01-24 18:13:43 +01:00
Oscar Hinton
ac8ca46f0f
Remove the u2f lib ( #1820 )
2022-01-24 12:14:04 +01:00
Justin Baur
5268f2781e
Start Migration from Newtonsoft.Json to System.Text.Json ( #1803 )
...
* Start switch to System.Text.Json
* Work on switching to System.Text.Json
* Main work on STJ refactor
* Fix build errors
* Run formatting
* Delete unused file
* Use legacy for two factor providers
* Run formatter
* Add TokenProviderTests
* Run formatting
* Fix merge issues
* Switch to use JsonSerializer
* Address PR feedback
* Fix formatting
* Ran formatter
* Switch to async
* Ensure Enums are serialized as strings
* Fix formatting
* Enqueue single items as arrays
* Remove CreateAsync method on AzureQueueService
2022-01-21 09:36:25 -05:00
Oscar Hinton
e4a10aae27
Split out repositories to Infrastructure.Dapper / EntityFramework ( #1759 )
2022-01-11 10:40:51 +01:00
Oscar Hinton
23b0a1f9df
Run dotnet format ( #1764 )
2021-12-16 15:35:09 +01:00
Oscar Hinton
10d9e6c687
Change UserVerificationRequirement to Discouraged ( #1250 )
2021-03-31 16:20:15 +02:00
Oscar Hinton
07f37d1f74
WebAuthn ( #903 )
2021-03-22 23:21:43 +01:00
Matt Gibson
5537470703
Use sas token for attachment downloads ( #1153 )
...
* Get limited life attachment download URL
This change limits url download to a 1min lifetime.
This requires moving to a new container to allow for non-public blob
access.
Clients will have to call GetAttachmentData api function to receive the download
URL. For backwards compatibility, attachment URLs are still present, but will not
work for attachments stored in non-public access blobs.
* Make GlobalSettings interface for testing
* Test LocalAttachmentStorageService equivalence
* Remove comment
* Add missing globalSettings using
* Simplify default attachment container
* Default to attachments containe for existing methods
A new upload method will be made for uploading to attachments-v2.
For compatibility for clients which don't use these new methods, we need
to still use the old container. The new container will be used only for
new uploads
* Remove Default MetaData fixture.
* Keep attachments container blob-level security for all instances
* Close unclosed FileStream
* Favor default value for noop services
2021-02-22 15:35:16 -06:00
Matt Gibson
edd4bc2623
Add disable send policy ( #1130 )
...
* Add Disable Send policy
* Test DisableSend policy
* PR Review
* Update tests for using CurrentContext
This required making an interface for CurrentContext and mocking out
the members used. The interface can be expanded as needed for tests.
I moved CurrentContext to a folder, which changes the namespace
and causes a lot of file touches, but most are just adding a reference
* Fix failing test
* Update exemption to include all exempt users
* Move all CurrentContext usages to ICurrentContext
* PR review. Match messaging with Web
2021-02-04 12:54:21 -06:00
Chad Scharf
9800b752c0
Changed all C# control flow block statements to include space between keyword and open paren
2020-03-27 14:36:37 -04:00
Kyle Spearrin
d5aa7b5624
allow configuring the validation urls for yubico otp servers
2020-03-03 08:32:50 -05:00
Kyle Spearrin
29580684a3
upgrade to aspnet core 3.1
2020-01-10 08:33:13 -05:00
Kyle Spearrin
8b80478a97
otp can be >= 32 <= 48
2019-04-24 17:47:26 -04:00
Kyle Spearrin
e7e0d17ac6
security stamp validation for passwordless login
2019-01-17 16:07:24 -05:00
Kyle Spearrin
8596ba2caa
formatting
2019-01-11 09:44:49 -05:00
Kyle Spearrin
951e8f562e
email token provider
2018-12-19 22:27:45 -05:00
Kyle Spearrin
ac7c7b5077
move some 2fa logic functions to userService
2018-12-19 10:47:53 -05:00
Kyle Spearrin
006cfffab3
new "Challenge" token for U2f
2018-10-10 17:51:38 -04:00
Kyle Spearrin
b5a4bad637
catch u2f exceptions
2018-10-10 15:21:54 -04:00
Kyle Spearrin
bfc74060b6
add support for multiple u2f keys
2018-10-08 14:38:11 -04:00
Kyle Spearrin
9b0bd1a632
only set compromised flag if counter is > 0
2018-10-02 08:39:31 -04:00
Kyle Spearrin
07855a3203
AddIdentityCore for passwordless identity service
2018-09-12 10:35:05 -04:00
Kyle Spearrin
2562d5a40d
reference OrganizationMembership instead
2018-08-31 17:05:27 -04:00
Kyle Spearrin
db3316dd60
token providers cant inject userservice
2018-08-28 22:21:13 -04:00
Kyle Spearrin
cf73b168ee
More CanAccessPremium checks
2018-08-28 17:40:08 -04:00
Kyle Spearrin
c41a1e0936
CanAccessPremium checks instead of User.Premium
2018-08-28 16:23:58 -04:00
Kyle Spearrin
941792bdd8
u2f db updates
2018-07-21 08:44:21 -04:00
Kyle Spearrin
dead022e83
admin base uri setting, applied to login emails
2018-04-16 20:35:53 -04:00
Kyle Spearrin
389512d51e
added org duo to 2fa flow
2018-04-03 14:31:33 -04:00
Kyle Spearrin
7f250a4e74
adminsettings to docker env setup
2018-03-28 10:45:30 -04:00
Kyle Spearrin
6e16581fe8
passwordless signin email
2018-03-21 21:19:03 -04:00
Kyle Spearrin
d35d8185ed
passwordless sign in for admin
2018-03-21 14:26:49 -04:00
Kyle Spearrin
3d9d193bda
passwordless signin for billing portal
2018-03-20 15:00:56 -04:00
Kyle Spearrin
857ad5b194
remove cookie auth from useidentity
2017-10-06 14:02:28 -04:00
Kyle Spearrin
b5836c524f
update yubico lib that is netcore compat
2017-08-10 09:49:50 -04:00
Kyle Spearrin
3880edfb79
add x-platform support with netcore 2.0
2017-07-31 16:58:27 -04:00
Kyle Spearrin
65a7d0001e
change duo username to email
2017-07-24 14:39:41 -04:00
Kyle Spearrin
5a4bfe4e61
update libs and cleanup
2017-07-14 09:06:35 -04:00
