Commit Graph

7320 Commits

Author SHA1 Message Date
Jimmy Vo
deff00b881 [PM-33043] Refactor PolicyService, CipherService, and TwoFactorAuthenticationValidator (#7214) 2026-03-26 12:10:21 -04:00
Jimmy Vo
34aba63b90 [PM-33041] Organization Ability: Refactor CipherResponseModel (#7202) 2026-03-26 11:35:41 -04:00
Ike
db1fff211e [PM-21926] Add salt to Admin Console DTOs (#7231)
feat: add MasterPasswordSalt to Admin Console DTOs

  - Add MasterPasswordSalt property to Admin Console DTOs
  - Set salt via GetMasterPasswordSalt method
  - Add unit tests for affected repositories
2026-03-26 10:45:34 -04:00
Brandon Treston
023cb4f512 [PM-28420] Remove feature flag (#7282)
* remove feature flag

* cleanup
2026-03-26 14:11:24 +00:00
Jared McCannon
c321080daf [PM-32067] - Add Provider Ability View (#7200)
* Added provider ability

* Correcting sproc

* fixed name
2026-03-26 08:59:21 -05:00
Rui Tomé
e09e63569c [PM-33086] Remove the feature flag RefactorOrgAcceptInit (#7287) 2026-03-26 12:36:07 +00:00
Nick Krantz
f588e30c10 add scope comment for SecurityTaskAuthorizationHandler (#7291) 2026-03-25 13:58:35 -07:00
Ike
ffebc0d792 [PM- 30370] [PM-28827] Add Salt to Auth and KM DTOs (#7239)
feat: add `MasterPasswordSalt` to unlock and authentication flow

- Add optional `MasterPasswordSalt`:
    - `MasterPasswordUnlockAndAuthenticationData`
    - `RegisterFinishRequestModel`
    - `UserDecryptionOptionsBuilder`
- Add test coverage for explicit checks where appropriate in the above model updates
2026-03-25 16:02:33 -04:00
Conner Turnbull
89f6e432b5 [PM-33896] Update Families organization on schedule transition (#7300) 2026-03-25 15:53:07 +00:00
Vincent Salucci
f1b17ad07f fix: add limit item deletion collection management settings, refs PM-34048 (#7296) 2026-03-25 09:21:38 -05:00
Vincent Salucci
3a9756a851 chore: remove create default collections ff ref, PM-22435 (#7298) 2026-03-25 09:12:59 -05:00
Todd Martin
0130c6092c chore(flags): [PM-22110] Remove pm-22110-disable-alternate-login-methods feature flag 2026-03-25 09:34:21 -04:00
Mick Letofsky
f8454bc13a Added RSA keypair pool + Caching to Seeder's RustSdk (#7288) 2026-03-25 13:49:27 +01:00
Thomas Rittson
cafe4ffce8 [PM-34049] Fix PoliciesController authorize attribute (#7303)
GetMasterPasswordPolicy incorrectly used the MemberRequirement
authz requirement. However, this endpoint needs to support users
who are in the invited state, and that only authorizes users who are
confirmed. Recreate previous logic inside a new attribute.
2026-03-25 19:27:38 +10:00
Matt Gibson
869ba57a2a [PM-34082] Seed passkeys (#7265)
* Seed passkeys

Generates passkey data from minimal inputs or relying party and username

* Allow totp specifying to user login cipher scene

* Fixup test

* Use default values in seed DTOs where possible

* Limit classes to one per file
2026-03-25 07:48:09 +01:00
Alex Morask
15e71aa93d [PM-33894] Schedule price increases (#7293) 2026-03-24 17:22:50 -05:00
renovate[bot]
95ab4fe4f9 [deps]: Update docker/build-push-action action to v7 (#7221)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-24 16:52:21 -05:00
Patrick-Pimentel-Bitwarden
70daa856a1 feat(redirect): [PM-30810] Https Redirection for Cloud Users (#6852)
* feat(redirect): [PM-26578] Https Redirection for Cloud Users - Added deeplink scheme to duo redirect uri.
2026-03-24 21:05:33 +00:00
Matt Gibson
4f37c93349 Arch/cipher scene (#7241)
* User Cipher scene

For now only supports one login cipher

* Fixup batch delete, which fails due to db collisions

* Create cipher scenes for each cipher type

* Remove unnecessary mutex locking

* Include notes in ssh key ciphers

* Add reprompt to ssh keys

* Add deleted and archived options to login cipher seeder

* Remove ArchivedDate for now

* Update util/Seeder/Factories/SshKeyCipherSeeder.cs

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

* Allow setting favorite in seeder

* Propagate favorites to created cipher

* Propagate delete date to cipher creation

fix favorites, which have to be all caps for detection on the client side

* conditionally set cipher as favorite

* More review comments

---------

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
2026-03-24 12:00:26 -07:00
Alex Morask
e7f6d6410e feat(billing): add SubscriptionSchedule operations to IStripeAdapter and feature flag (#7289) 2026-03-24 11:05:00 -05:00
Rui Tomé
7c05036c01 [PM-19143] Fix custom permissions not persisting via InviteOrganizationUsersCommand (#7285) 2026-03-24 14:12:44 +00:00
Daniel García
2429b4596f [PM-32783] Add electron-storage-cache flag (#7286) 2026-03-24 14:37:18 +01:00
Todd Martin
063ae435cb chore(flags): [PM-33972] Remove pm-26140-marketing-initiated-premium-flow feature flag 2026-03-24 08:19:40 -04:00
Thomas Rittson
524c5459d4 [PM-33819] Enforce use of authorize attributes (#7242)
Add tests to ensure we are using authorize attributes

Also clean up non-compliant and deprecated methods on PoliciesController.
2026-03-24 09:46:57 +10:00
Derek Nance
5dcb8ca712 Allow SMTP TLS CRL status retrieval failures (#7271) 2026-03-23 15:20:33 -05:00
Derek Nance
bf4266556a User-friendly cookie vendor error message (#7270) 2026-03-23 15:08:20 -05:00
Alex Morask
c84ac1403e [PM-33980] Only verify UseMyItems when claim exists (#7278)
* fix(licensing): skip UseMyItems comparison for pre-2026.3.0 license files

* docs(licensing): add backward-compatibility guidance to ability flag README
2026-03-23 13:52:28 -05:00
Mick Letofsky
8310ea1546 Fix 12 silent switch defaults in Seeder with fail-fast throws (#7277) 2026-03-23 18:44:36 +01:00
renovate[bot]
783fd5ad9e [deps] Auth: Update Duende.IdentityServer to 7.4.6 (#6323)
* [deps] Auth: Update Duende.IdentityServer to 7.4.6
* fix: address test changes required to complete the update
* feat: move Discovery Generateion to CoreHelpers.cs
* test: add SSO discovery document tests

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Ike Kottlowski <ikottlowski@bitwarden.com>
Co-authored-by: Ike <137194738+ike-kottlowski@users.noreply.github.com>
2026-03-23 10:00:06 -04:00
Daniel García
8a1aedc133 [PM-33895] Filter [BindNever] parameters from OpenAPI schema (#7257)
* [PM-33895] Filter [BindNever] parameters from OpenAPI schema

* Fmt
2026-03-23 14:11:50 +01:00
Jared McCannon
463ca89710 [PM-32066] - Add Org Ability View (#7194)
* Added sproc, view, repo methods, and tests
2026-03-23 08:09:22 -05:00
Vince Grassia
7f2bde3973 [BRE-1004] Add GHCR Support to Build/Publish workflows (#7263) 2026-03-23 09:03:05 -04:00
Github Actions
552a2c1375 Bumped version to 2026.3.2 2026-03-23 10:41:28 +00:00
Jared
514d8a1978 Remove deprecated feature flag for members component from Constants.cs (#7269) 2026-03-20 16:49:39 -04:00
Mick Letofsky
df3aadb09e Add collection, folder, and favorite assignments for fixture presets (#7267) 2026-03-20 21:04:21 +01:00
Jared McCannon
5f1cdd5080 [PM-33585] - Add null check for bump revision date (#7268)
* Adding where not null for user id to be used in the bump revision date call.

* Or alter
2026-03-20 12:25:13 -05:00
Patrick-Pimentel-Bitwarden
103de0bc3e fix(code-owners) Add Auth Test Projects to Codeowners - Add auth test projects to CODEOWNER (#7258) 2026-03-20 13:16:42 -04:00
Thomas Avery
005c74456c [PM-33435] Add new user key rotation endpoint with MP support (#7216)
* Add new user key rotation endpoint with MP support

* Increase test coverage

* Add note on request model
2026-03-20 11:06:27 -05:00
Thomas Avery
53907c2f14 [PM-33162] Refactor user key rotation (#7201)
* Refactor user key rotation to use base data composition

* Update tests
2026-03-20 10:31:25 -05:00
Alex Morask
212a0609c0 [PM-33415] [PM-33418] Fix add-on item proration and Families > Teams/Enterprise upgrade seat count (#7259)
* fix(billing): replace per-change IsStructural with changeset-level ChargeImmediately flag

* fix(billing): set seat quantity when upgrading from non-seat-based to seat-based plan
2026-03-20 09:29:45 -05:00
sven-bitwarden
081bbe66d0 [PM-30993] Better Error Message for Expired Invitation Tokens (#6971)
* Send better error message when token is expired

* Add comment indicating frontend usage

* Add testcase for Invalid Token scenario

* Update comment in test-case

* Fix merge issue

* Fix method name

* Consolidate token validation error calculation, apply to new area

* Move away from magic strings, fix tests

* Adjust class name

* Clean up old method name references

* Change errors to fields for singleton behavior

* Formatting
2026-03-20 08:35:39 -05:00
Conner Turnbull
9d60539c8e [PM-25501] Register NoopBusinessUnitConverter in OSS DI container (#7245) 2026-03-20 13:08:40 +00:00
cyprain-okeke
fae3e95492 [PM-32480] Add endpoint for Stripe billing portal session (#7227)
* Implement the portal session url

* Remove comment

* formatting issues have been resolved

* Allow deep linking url

* remove thr return url request

* Resolve review comments around comments

* Fix the failing test after removing _globalSettings

* Fix the failing unit test
2026-03-20 09:31:43 +01:00
Github Actions
5aae02863a Bumped version to 2026.3.1 2026-03-19 21:57:28 +00:00
Jimmy Vo
7371705530 [PM-33364] Fix the emergency access help URL. (#7262) 2026-03-19 17:55:11 -04:00
John Harrington
6fcf007672 [PM-33232] Update UX implemented in PM-33219 to resolve VULN-458 (#7204)
* expect AuthType in request and update tests

* handle older clients lacking AuthType in request gracefully

* update exception message to match behavior

* use presence of AuthType to branch to new logic, preserving old for null AuthType
2026-03-19 13:36:51 -07:00
Alex Dragovich
50e1847d4b [PM-32512] validate direct file upload in self-hosted env can only be done by owner of send (#7195) 2026-03-19 13:04:59 -07:00
Shane Melton
d501a88ead [PM-33900] Remove server-side view password validation from CipherService (#7260) 2026-03-19 12:45:46 -07:00
Ike
d977ba44e0 [PM-30370] Add salt to vault sync response (#7248)
* feat: Replace email salt with `user.GetMasterPasswordSalt()`

* test: update SyncControllerTest
2026-03-19 14:39:52 -04:00
Jordan Aasen
2187c2a2cb Revert "[PM-30751] - add secure SSRF protection for internal IPs (#7184)" (#7255)
This reverts commit 0cba609304.
2026-03-19 10:10:58 -07:00