Matt Bishop
96d0ae9cf7
Consolidated scanning ( #3832 )
...
* Consolidated security scanning
* Add quality scan
* Version bumps
* Add container scanning
* Check out repo for container scan
* Build need and dependent outputs
* Incremental SAST
* Sonar fixes
* Underscore
* Inherit secrets
* Qualify Docker image name outputs
* Try a login
* Remove build modifications as this doesn't work with a matrix
* Move container scanning closer to tbe Docker steps for better management
2024-02-23 13:47:23 -05:00
Shane Melton
6d089d3c26
[AC-2195] Fixes for FC V1 for Custom Users ( #3837 )
...
* [AC-2195] Ensure Custom users with EditAnyCollection can always access all ciphers
* [AC-2195] Ensure FC V1 logic is not used for non-migrated organizations
2024-02-23 10:01:14 -08:00
Oscar Hinton
bad9694f6c
[PM-6378] Add noreferrer to external admin urls ( #3827 )
2024-02-23 14:54:41 +01:00
Justin Baur
e22da3a53e
Replace async void with async Task ( #3835 )
2024-02-22 11:59:08 -05:00
Thomas Avery
1499d1e2c6
[SM-713] Add database support for secret access policies ( #3681 )
...
* mssql add column and migration
* Add secret access policies to EF models and config
* Clear new access policies on service account delete
* Add SM cleanup code on delete
* Fix EF org user bulk delete
* Run EF migrations
2024-02-22 10:06:39 -06:00
Todd Martin
374b59bcfb
[PM-5947] Add self-hosted override to allow Duo redirect flow ( #3818 )
2024-02-21 14:17:40 -05:00
Justin Baur
70fac808b0
Use FrozenDictionary in StaticClientStore ( #3833 )
...
* Add Benchmark
* Use FrozenDictionary
* Use TryGetValue
* Format
2024-02-21 10:29:59 -05:00
Thomas Rittson
0abd52b5be
[AC-1895] AC Team code ownership moves: Bitwarden Portal ( #3528 )
...
---------
Co-authored-by: Addison Beck <hello@addisonbeck.com>
2024-02-21 09:18:09 +10:00
renovate[bot]
3a6b2d85d3
[deps] DevOps: Update CommandDotNet to v7.0.3 ( #3824 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-20 15:59:55 -05:00
Justin Baur
a661ffdb3d
Improve Speed of EncryptedStringAttribute ( #3785 )
...
* Improve Speed of EncryptedStringAttribute
- Use Base64.IsValid
- Use SearchValues
* Fix Tests
* Remove SearchValues Change
* Format
2024-02-20 13:07:54 -05:00
Oscar Hinton
80a3979be1
Remove unused job hosted service from billing ( #3831 )
2024-02-20 18:50:04 +01:00
Matt Bishop
af56ab4159
Remove unnecessary identity column indication ( #3830 )
2024-02-20 11:42:52 -05:00
Oscar Hinton
9720d18a0a
Include all projects in coverage ( #3829 )
...
Not all of our server projects had associated test projects which caused them to be omitted from the code coverage. Added projects to ensure the coverage gets reported accurately.
2024-02-20 17:18:40 +01:00
Vincent Salucci
e23f37ea1f
[AC-2214] Defect - provider reseller org creation when fc signup flag enabled ( #3805 )
...
* fix: supply signup feature flag to provider reseller org creation, refs AC-2214
* feat: extend flexible collections coverage to enhancement bools, refs AC-2214
2024-02-20 09:53:50 -06:00
renovate[bot]
4e6360cc4f
[deps] DbOps: Update EntityFrameworkCore ( #3823 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-20 09:42:30 -05:00
renovate[bot]
d384107ef7
[deps] Tools: Update aws-sdk-net monorepo to v3.7.300.52 ( #3826 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-19 16:37:11 +01:00
renovate[bot]
a98af69e00
[deps] Tools: Update SendGrid to v9.29.2 ( #3811 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-19 11:24:47 +01:00
Alex Morask
b866353d2c
Split endpoints for FF 'AC-1607_present-user-offboarding-survey' ( #3814 )
2024-02-16 13:37:54 -05:00
Rui Tomé
d187487cb7
[AC-2077] Set a minimum number of seats for the tested Organization ( #3702 )
...
* [AC-2077] Set a minimum number of seats for the tested Organization
* [AC-2077] Added PlanType property to OrganizationCustomization
* [AC-2077] Set up the test secrets manager seats to be null in case the plan does not support it
2024-02-16 11:49:05 +00:00
renovate[bot]
268db7d45e
[deps] Tools: Update aws-sdk-net monorepo to v3.7.300.51 ( #3804 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-16 09:42:15 +01:00
Shane Melton
da0da772e9
[PM-6325] Include permission details for non FC organizations when creating/updating a collection ( #3810 )
2024-02-15 09:49:37 -08:00
Opeyemi
7f752fbd62
Remove individual linter file ( #3808 )
2024-02-15 11:15:37 -05:00
Oscar Hinton
8a7779d30c
Exclude dev directory from iac scans ( #3807 )
...
* Exclude dev directory from iac scans
2024-02-15 08:53:03 -05:00
Matt Bishop
179b7fb498
Exclude tests from Checkmarx ( #3797 )
...
* Exclude tests from Checkmarx
* Leading slash
* Simpler path
2024-02-15 08:01:40 -05:00
renovate[bot]
0b486b0585
[deps] Tools: Update SignalR to v8.0.2 ( #3803 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-15 11:14:30 +01:00
Jake Fink
d99d3b8380
[PM-6303] Add duo state to 2fa ( #3806 )
...
* add duo state to 2fa
* Id to UserId
2024-02-14 18:00:46 -05:00
rkac-bw
744d21ec5e
[PM-4767] Update Grant_Save procedure ( #3641 )
...
* modify grant_save sql script to migration and Auth SQL scripts to not use merge
* Update formatting for sql files
* Fix formatting for sql files
* Format using Prettier
* Rename 2024-01-03_00_FixGrantSave.sql to 2024-02-12_00_FixGrantSave.sql
---------
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
2024-02-14 09:48:58 -07:00
Rui Tomé
4830a352e8
[AC-2154] Log backup data in OrganizationEnableCollectionEnhancementsCommand as Json ( #3802 )
2024-02-14 14:42:16 +00:00
Thomas Rittson
06dcdd7d13
Fix Flexible Collections block in Public API ( #3800 )
...
Only throw if collection.Manage is true
2024-02-14 08:42:07 -06:00
Thomas Rittson
a07aa8330c
[AC-2206] Fix assigning Manage access to default collection ( #3799 )
...
* Fix assigning Manage access to default collection
The previous implementation did not work when creating an org as a
provider because the ownerId is null in OrganizationService.SignUp.
Added a null check and handled assigning access in ProviderService
instead.
* Tweaks
2024-02-14 08:41:51 -06:00
Alex Morask
97018e2501
Upgrade logging packages for .NET 8 ( #3798 )
2024-02-13 14:34:55 -05:00
cyprain-okeke
accff663c5
[PM 5864] Resolve root cause of double-charging customers with implementation of PM-3892 ( #3762 )
...
* Getting dollar threshold to work
* Added billing cycle anchor to invoice upcoming call
* Added comments for further work
* add featureflag
Signed-off-by: Cy Okeke <cokeke@bitwarden.com>
* resolve pr comments
Signed-off-by: Cy Okeke <cokeke@bitwarden.com>
* Resolve pr comment
Signed-off-by: Cy Okeke <cokeke@bitwarden.com>
---------
Signed-off-by: Cy Okeke <cokeke@bitwarden.com>
Co-authored-by: Conner Turnbull <cturnbull@bitwarden.com>
2024-02-13 20:28:14 +01:00
Thomas Rittson
0258f4949c
[AC-2184] Fix push sync notification on opt-in to Flexible Collections ( #3794 )
...
* Fix push sync notification on opt-in to Flexible Collections
* Fix tests
* Fix tests more
2024-02-13 12:15:07 -06:00
Matt Bishop
ae5d6071ca
Remove CLOC job ( #3796 )
2024-02-13 12:42:01 -05:00
Todd Martin
1a3146f776
[PM-5800] Remove feature flag checks for PasswordlessLogin ( #3713 )
...
* Removed feature flag checks for PasswordlessLogin
* Removed unused reference.
2024-02-13 11:15:24 -05:00
Thomas Rittson
789e266791
Delete unused .sql files from updating Collection permissions ( #3792 )
2024-02-13 13:19:15 +10:00
github-actions[bot]
ae4fcfc204
Move DbScripts_finalization to DbScripts ( #3675 )
...
Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
2024-02-12 14:00:09 -05:00
Vince Grassia
c0e5d19cb5
Fix while loop ( #3789 )
2024-02-12 18:21:00 +00:00
Vince Grassia
d2eaadb158
Version Bump workflow - Add in step for installing xmllint ( #3787 )
2024-02-12 07:35:13 -08:00
Bitwarden DevOps
5c1cecbd02
Bumped version to 2024.2.2 ( #3786 )
2024-02-12 14:51:57 +00:00
renovate[bot]
186a96af30
[deps] Tools: Update aws-sdk-net monorepo to v3.7.300.48 ( #3778 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 13:31:00 +01:00
Daniel García
fd3f05da47
[PM-6137] Fix invalid Swagger generation in knowndevice ( #3760 )
...
* Fix invalid swagger generation in knowndevice
* Format
2024-02-12 11:04:00 +01:00
Thomas Rittson
1d9fe79ef6
Give creating owner Manage permissions for default collection ( #3776 )
2024-02-12 08:50:41 +10:00
Kyle Spearrin
17118bc74f
[PM-6208] Move TOTP cache validation logic to providers ( #3779 )
...
* move totp cache validation logic to providers
* remove unused usings
* reduce TTL
2024-02-09 12:44:31 -08:00
Ike
a19ae0159f
[PM-5424] fix TDE provider user ( #3771 )
...
* Add Test Asserting Problem
* Fix Test
---------
Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
2024-02-09 12:08:22 -08:00
Rui Tomé
de294b8299
[AC-2154] Logging organization data before migrating for flexible collections ( #3761 )
...
* [AC-2154] Logging organization data before migrating for flexible collections
* [AC-2154] Refactored logging command to perform the data migration
* [AC-2154] Moved validation inside the command
* [AC-2154] PR feedback
* [AC-2154] Changed logging level to warning
* [AC-2154] Fixed unit test
* [AC-2154] Removed logging unnecessary data
* [AC-2154] Removed primary constructor
* [AC-2154] Added comments
2024-02-09 17:57:01 +00:00
Rui Tomé
a9b9231cfa
[AC-2114] Downgrade Custom roles to User if flexible collections are enabled and only active permissions are 'Edit/Delete assigned collections' ( #3770 )
...
* [AC-2114] Downgrade Custom roles to User if flexible collections are enabled and only active permissions are 'Edit/Delete assigned collections'
* [AC-2114] Undo changes to OrganizationsController
* [AC-2114] Updated public API MembersController responses to have downgraded Custom user types for flexible collections
2024-02-09 17:42:01 +00:00
Daniel James Smith
58b54692b2
Net8 follow-ups part2 ( #3751 )
...
* Bump Microsoft.AspNetCore.Mvc.Testing to 8.0.1
* Bump Microsoft.NET.Test.Sdk to 17.8.0
* Nuget bumps on Infrastructure.Integration to be equal to solution
* Use global setting
* Use global setting
---------
Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
2024-02-09 12:08:36 -05:00
renovate[bot]
615d6a1cd0
[deps] DbOps: Update dbup-sqlserver to v5.0.40 ( #3708 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-09 12:08:20 -05:00
Alex Morask
59fa6935b4
[AC-1608] Send offboarding survey response to Stripe on subscription cancellation ( #3734 )
...
* Added offboarding survey response to cancellation when FF is on.
* Removed service methods to prevent unnecessary upstream registrations
* Forgot to actually remove the injected command in the services
* Rui's feedback
* Add missing summary
* Missed [FromBody]
2024-02-09 11:58:37 -05:00
