bitwarden/server
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2026-04-12 00:31:55 -05:00
Code Issues Packages Projects Releases 211 Wiki Activity

Commit Graph

  • e586d0098d Adjust .NET dep ownership. platform/own-dotnet Todd Martin 2026-04-11 11:38:35 -04:00
  • 0a95de44ce Add test coverage for new code ac/pm-34595/provider-authorization-wiring-2 Thomas Rittson 2026-04-11 13:00:48 +10:00
  • 7e1c5aab78 Delete unused param Thomas Rittson 2026-04-11 11:15:00 +10:00
  • 9b014e5e98 Remove comment Thomas Rittson 2026-04-11 11:14:21 +10:00
  • 7216fd4fc5 Remove CurrentContext interfaces not used Thomas Rittson 2026-04-11 11:04:12 +10:00
  • 76d56e87ba DRY up with AC base controller class, remove comments Thomas Rittson 2026-04-11 10:49:06 +10:00
  • dcb1300261 PM-34130 - Fix migration sort from main merge auth/pm-34130/fix-device-auth-details-constructor-not-edd-compliant Jared Snider 2026-04-10 20:25:33 -04:00
  • 91ad4f25d5 Break inheritance with Billing controller classes Thomas Rittson 2026-04-11 09:29:12 +10:00
  • 59b3c060d9 [PM-34854] Add pm-34145-policies-in-accepted-state feature flag ac/pm-34854/feature-flag-policies-accepted-state Thomas Rittson 2026-04-11 09:23:09 +10:00
  • 1e631a771f Merge branch 'main' into auth/pm-34130/fix-device-auth-details-constructor-not-edd-compliant Jared Snider 2026-04-10 18:45:59 -04:00
  • 91a588a228 [deps] Tools: Pin dependencies renovate/pin-dependencies renovate[bot] 2026-04-10 22:28:44 +00:00
  • a07ebc1173 PM-34500 Add PM-34500-strict-cipher-decryption feature flag (#7387) main Nik Gilmore 2026-04-10 15:24:19 -07:00
  • 43136714c8 Update Provider controllers to use Authorize attributes Thomas Rittson 2026-04-07 12:59:16 +10:00
  • ff79dbf4c8 [PM-32069] Add DI for the event service ac/pm-32069/add-extended-provider-cache Jimmy Vo 2026-04-10 17:15:40 -04:00
  • 446db3d3ac Added whitespace to trigger Github cache-busting fix/security-sast-22710473-o5m3 Matt Andreko 2026-04-10 16:54:45 -04:00
  • 283897b168 fix(security): autofix Template Injection in GitHub Workflows Action aikido-autofix[bot] 2026-04-10 19:58:00 +00:00
  • 28a5089aca merge main Jimmy Vo 2026-04-10 15:47:30 -04:00
  • 76d5c4f598 [PM-32069] Add ExtendedProviderAbilityCacheService Jimmy Vo 2026-04-10 15:44:13 -04:00
  • c43c079376 Adjust email domain restriction logic, consolidate into a function tools/pm-31884/send-access-controls-policy Mike Amirault 2026-04-10 14:19:38 -04:00
  • 51455ecbf2 [PM-34866][PM-34865] Fix EnableAutomaticTaxAsync to update schedule phases (#7437) rc Conner Turnbull 2026-04-10 11:50:41 -04:00
  • 67d670d78c allow account recovery for revoked status users 2fa-recovery2 Kyle Spearrin 2026-04-10 14:06:35 -04:00
  • 4d942f35c5 fix(master-password): Master Password Service - Fixed master password service tests. auth/poc/master-password-service-example Patrick Pimentel 2026-04-10 14:00:18 -04:00
  • 6feb4cec53 fix(master-password): Master Password Service - Updated accounts controller to check password while changing. Patrick Pimentel 2026-04-10 13:22:01 -04:00
  • 8b2ea6614a Make Setup testable and add test for install make-setup-more-testable Justin Baur 2026-04-10 13:21:08 -04:00
  • ff8f800b6d Merge branch 'main' into billing/pm-24665/license-file-generation-should-fail-for-unpaid-subscription billing/pm-24665/license-file-generation-should-fail-for-unpaid-subscription cyprain-okeke 2026-04-10 18:13:39 +01:00
  • 40dca1a040 Remove the unpaid status and update the test Cy Okeke 2026-04-10 18:13:05 +01:00
  • 9ffa0921c7 fixed up events jmccannon/ac/pm-32068-org-ability-cache Jared McCannon 2026-04-10 12:03:00 -05:00
  • 38db9e6b6a Merge branch 'main' into jmccannon/ac/pm-32068-org-ability-cache Jared McCannon 2026-04-10 11:41:08 -05:00
  • d527c60d14 fix(master-password): Master Password Service - Updated update-temp-password to use it's own standalone request and added commment for other function. Patrick Pimentel 2026-04-10 12:31:52 -04:00
  • 364896f10d Merge branch 'main' into fix/seeder-postgres fix/seeder-postgres MtnBurrit0 2026-04-10 10:22:55 -06:00
  • 22398808fa Fix test clock awareness in schedule-aware cancellation (#7440) Conner Turnbull 2026-04-10 12:16:43 -04:00
  • e6d003bc64 Correct comment accuracy Micaiah Martin 2026-04-10 10:14:33 -06:00
  • 5613cf986e Fix CollectionUser and CollectionGroup table names across all DB providers Micaiah Martin 2026-04-10 10:09:04 -06:00
  • 129a214d38 Enhance CollectionUserAuthorizationHandler to support orphaned collections in authorization checks. Update CanManageCollectionsAsync method to include organization context, allowing Admin and Owner roles to manage orphaned collections. Add unit tests to validate authorization logic for various user roles and permissions regarding orphaned collections. ac/pm-12473/move-collectionuser-and-collectiongroup-logic-to-dedicated-handlers Rui Tome 2026-04-10 17:05:58 +01:00
  • b704f0539b Enhance CollectionGroupAuthorizationHandler to support orphaned collections in authorization checks. Update CanManageCollectionsAsync method to include organization role and permissions, allowing Admin and Owner roles to manage orphaned collections. Add unit tests to validate authorization logic for various user roles and permissions regarding orphaned collections. Rui Tome 2026-04-10 17:05:04 +01:00
  • b84dffd374 Refactor GroupsController authorization logic to improve collection access checks. Update methods to use ICollection for collections and ensure early return for empty collections, enhancing clarity and efficiency in authorization handling. Rui Tome 2026-04-10 17:04:14 +01:00
  • aad805a976 [PM-34866][PM-34865] Fix EnableAutomaticTaxAsync to update schedule phases (#7437) Conner Turnbull 2026-04-10 11:50:41 -04:00
  • 2bafe528bc More PR comment fixes Mike Amirault 2026-04-10 11:47:24 -04:00
  • ad884fa7dd fix tests PM-33501-Don-t-leave-orphaned-sends-in-storage John Harrington 2026-04-10 08:38:35 -07:00
  • 13933dd938 Merge branch 'main' into auth/pm-32626/standardize-unlock-authentication-validation auth/pm-32626/standardize-unlock-authentication-validation Ike 2026-04-10 11:34:00 -04:00
  • 81dae3ed9a Update OrganizationUserControllerPutTests and CollectionUserAuthorizationHandlerTests to throw BadRequestException for self-assignment attempts. Enhance unit tests to validate new exception handling and authorization logic for user and group operations. Rui Tome 2026-04-10 16:28:40 +01:00
  • 851919f211 Refactor CollectionsController to streamline user and group access authorization methods. Introduce separate methods for user and group access changes, enhancing clarity and maintainability of the authorization logic. Update authorization checks to align with new method structure. Rui Tome 2026-04-10 16:26:02 +01:00
  • bbc4635618 Throw BadRequestException in CollectionUserAuthorizationHandler when a user attempts to add themselves to a collection Rui Tome 2026-04-10 16:24:31 +01:00
  • 52ff4a7613 [PM-33301] Add Functionality for Upgrading Using PayPal (#7183) Stephon Brown 2026-04-10 11:22:02 -04:00
  • c207613ffd Merge branch 'main' into auth/pm-33417/enforce-single-use-webauthn-assertion auth/pm-33417/enforce-single-use-webauthn-assertion Ike 2026-04-10 11:20:25 -04:00
  • 3f355db026 Merge branch 'main' into auth/pm-32626/standardize-unlock-authentication-validation Ike 2026-04-10 11:08:40 -04:00
  • d4bd29547f fix: sync expected failure strings. Ike Kottlowski 2026-04-10 11:05:52 -04:00
  • 8f914a0998 chore: rename migration to avoid sequence collision with 2026-04-10_00 billing/PM-31780/exempt-from-billing-automation Alex Morask 2026-04-10 10:03:53 -05:00
  • 7302dd82d2 Merge branch 'main' into billing/PM-31780/exempt-from-billing-automation Alex Morask 2026-04-10 09:59:22 -05:00
  • ec027342b0 [PM-22450] Bump date on migration script file CollectionBumpRevisionDateOnAccessChange (#7436) Rui Tomé 2026-04-10 15:57:45 +01:00
  • 949f976471 Added extended cache implementation for org ability. Jared McCannon 2026-04-10 09:55:59 -05:00
  • 423913f630 style: apply file-scoped namespaces to EF migration files Alex Morask 2026-04-10 09:54:55 -05:00
  • 115a112d1c improve logging for orphan follow up on failed delete John Harrington 2026-04-10 07:53:37 -07:00
  • b9ad102bc3 Refactor OrganizationUsersController to incorporate feature flag checks for collection access authorization, enhancing the authorization logic for user and group operations. Introduce new methods for improved access management and update unit tests to validate behavior with the feature flag enabled. Rui Tome 2026-04-10 15:50:58 +01:00
  • 20484170b1 Enhance CollectionsController to utilize feature flags for user and group access authorization, refactoring authorization logic and adding new methods for improved access management. Update unit tests to cover new scenarios and ensure correct behavior with feature flag enabled. Rui Tome 2026-04-10 15:50:08 +01:00
  • 6d751e75a6 Implement feature flag checks in GroupsController for collection access authorization, refactoring authorization logic to support new operations and enhancing unit tests for various scenarios. Rui Tome 2026-04-10 15:48:26 +01:00
  • b121765f6d Merge branch 'main' into billing/PM-31780/exempt-from-billing-automation Alex Morask 2026-04-10 09:47:27 -05:00
  • 108d312e16 Add CollectionUserAuthorizationHandler and CollectionGroupAuthorizationHandler to the authorization handler registration Rui Tome 2026-04-10 15:47:19 +01:00
  • 18525843bb [PM-26043] Fix bug: can't add secrets manager to legacy plans (#7414) Kyle Denney 2026-04-10 09:46:30 -05:00
  • 67e3560dd8 Refactor test method names in CollectionGroupAuthorizationHandlerTests and CollectionUserAuthorizationHandlerTests for clarity and consistency, enhancing readability and understanding of test purposes. Rui Tome 2026-04-10 15:46:12 +01:00
  • 91e569b65a use file sends only for file deletion inputs John Harrington 2026-04-10 07:42:55 -07:00
  • 6f80b6dcd5 test(master-password): Master Password Service - Updated the change kdf and account recovery tests. Patrick Pimentel 2026-04-10 10:33:47 -04:00
  • 7eae686152 assign Azure.Storage.Blobs.Batch to Tools ownership John Harrington 2026-04-10 07:22:09 -07:00
  • 9a6baba248 Rename CollectionAccessExtensions to AccessSelectionExtensions Rui Tome 2026-04-10 15:12:39 +01:00
  • 3f5e18c2cf Add CollectionUserAuthorizationHandler and unit tests for user access authorization based on roles and feature flags Rui Tome 2026-04-10 14:44:12 +01:00
  • bf990b7675 Add CollectionGroupAuthorizationHandler and corresponding unit tests for authorization logic based on user roles and feature flags. Rui Tome 2026-04-10 14:42:47 +01:00
  • c177e803f0 feat(admin): add exempt from billing automation toggle for organizations Alex Morask 2026-04-10 08:22:37 -05:00
  • 3b4973c06f Add unit tests for DiffCollectionAccess method in CollectionAccessExtensions Rui Tome 2026-04-10 14:32:36 +01:00
  • ff758ea2b1 Implement feature flag checks in BulkCollectionAuthorizationHandler for user and group access modifications, and add corresponding unit tests to ensure correct behavior when the feature flag is enabled. Rui Tome 2026-04-10 14:30:08 +01:00
  • 0bb818bc97 [PM-34147] Add GetManyConfirmedAcceptedDetailsByUserAsync to IOrganizationUserRepository (#7399) Jimmy Vo 2026-04-10 09:28:28 -04:00
  • 8b56cc81e6 Add CollectionAccessExtensions for comparing collection access changes Rui Tome 2026-04-10 14:24:51 +01:00
  • 6ea5c8e402 Add CollectionUserAccessResource record for managing user access to collections Rui Tome 2026-04-10 14:23:47 +01:00
  • 3b3c4286ab Increase security state size km/add-mldsa65 Bernd Schoolmann 2026-04-10 21:45:06 +09:00
  • 3dd72f6118 [PM-22450] Bump Collection.RevisionDate on edits and access changes (#7380) Rui Tomé 2026-04-10 07:27:27 +01:00
  • 8174a438cb Undo changes to billing Bernd Schoolmann 2026-04-10 15:13:02 +09:00
  • 6f48978121 Add support for ml-dsa65 keypairs Bernd Schoolmann 2026-04-10 15:09:45 +09:00
  • 0b012c3d93 replace pat token with app token agalles/BRE-1670 Amy Galles 2026-04-09 21:30:49 -07:00
  • 2d2e2abc5d sign commits with bot token Amy Galles 2026-04-09 21:28:20 -07:00
  • 61140b7e04 chore: dotnet format Ike Kottlowski 2026-04-10 00:22:48 -04:00
  • 80906007eb replace pat token with built in github token Amy Galles 2026-04-09 21:20:57 -07:00
  • 63fc7f3913 chore: adding name space to email MFA test Ike Kottlowski 2026-04-10 00:18:29 -04:00
  • b6a94e273e test: fix tests to match new expectations that Auth and Unlock data need to have the same data. Ike Kottlowski 2026-04-10 00:18:09 -04:00
  • 9ebf430b3d feat: validate Auth and Unlock data in the password request model. As well as both being required as a validation step. Ike Kottlowski 2026-04-10 00:17:19 -04:00
  • 3456478332 chore: dotnet format Ike Kottlowski 2026-04-10 00:15:05 -04:00
  • 3b7e30ed2e test: add tests for cache implementation Ike Kottlowski 2026-04-10 00:05:27 -04:00
  • 3dcf006cc8 test: add tests for Webauthn Challenge cache Ike Kottlowski 2026-04-10 00:04:58 -04:00
  • 4ea95494a7 feat: implement cache in options and assertion flows Ike Kottlowski 2026-04-10 00:04:38 -04:00
  • f57ace2f7a feat: create cache for webauthn login Ike Kottlowski 2026-04-10 00:04:10 -04:00
  • df9cbace2f add queries and methods to get only file Sends John Harrington 2026-04-09 17:41:25 -07:00
  • cc669c898b Use fixture to share state between PushControllerTests speed-up-push-controller-tests Justin Baur 2026-04-09 19:05:57 -04:00
  • f9fda3d602 remove old RevokeManyByIdAsync in favor of RevokeManyAsync ac/pm-33866/revocation-reasons-ddl Sven 2026-04-09 17:53:51 -05:00
  • c19faae095 Fixup append vs add on list arch/qa-env-seeding-tweaks Matt Gibson 2026-04-09 13:54:52 -07:00
  • 5198770fef separate migration concerns, begin using new bulk sprocs Sven 2026-04-09 17:25:07 -05:00
  • 52fb3b6a99 2'nd pass, with tests, of revocation reason Sven 2026-04-09 16:38:50 -05:00
  • 5dbfa77395 Add new feature flag for Policy Drawers (pm-34804) in Constants.cs (#7429) Jared 2026-04-09 17:24:37 -04:00
  • 232300392e Merge branch 'main' into vault/pm-34213/create-attachment-event-log vault/pm-34213/create-attachment-event-log Shane Melton 2026-04-09 14:20:00 -07:00
  • a5ea095a50 Initial pass of revocation reason Sven 2026-04-09 15:57:50 -05:00
  • 414cbe8ec1 Added attributes for all groups controller methods. Fixed ProviderUsers get endpoint. udpated tests. jmccannon/ac/pm-34390-groups-vuln-fix Jared McCannon 2026-04-09 15:53:01 -05:00
  • 0acd87d903 [PM-34880] Allow configuration by setting regardless of env Matt Gibson 2026-04-09 13:52:56 -07:00
  • 2628904589 [PM-34886] allow play id tracking in any non-production build Matt Gibson 2026-04-09 13:49:55 -07:00