1
0
mirror of https://github.com/bitwarden/server.git synced 2025-07-03 17:12:49 -05:00
Commit Graph

365 Commits

Author SHA1 Message Date
25a9991908 Implement User-based API Keys (#981)
* added column ApiKey to dbo.User

* added dbo.User.ApiKey to User_Update

* added dbo.User.ApiKey to User_Create

* wrote migration script for implementing dbo.User.ApiKey

* Added ApiKey prop to the User table model

* Created AccountsController method for getting a user's API Key

* Created AccountsController method for rotating a user API key

* Added support to ApiClient for passed-through ClientSecrets when the request comes from the cli

* Added a new conditional to ClientStore to account for user API keys

* Wrote unit tests for new user API Key methods

* Added a refresh of dbo.UserView to new migration script for ApiKey

* Let client_credentials grants into the custom token logic

* Cleanup for ApiKey auth in the CLI feature

* Created user API key on registration

* Removed uneeded code for user API keys

* Changed a .Contains() to a .StartsWith() in ClientStore

* Changed index that an array is searched on

* Added more claims to the user apikey clients

* Moved some claim finding logic to a helper method
2020-11-10 15:15:29 -05:00
82dd364e65 Send APIs (#979)
* send work

* fix sql proj file

* update

* updates

* access id

* delete job

* fix delete job

* local send storage

* update sprocs for null checks
2020-11-02 15:55:49 -05:00
1c6c599b8d Created sso config service with save (#936) 2020-09-15 10:17:44 -04:00
44c3dc4786 fix base seats on teams 2019 2020-09-07 09:19:33 -04:00
a8277cc58b updated stripe plan id for family (#916)
* updated stripe plan id for family

* updated famiies 2020 plan plan id
2020-09-06 00:48:04 -04:00
5842284915 added custom plan item to the static store (#907) 2020-09-02 15:52:45 -04:00
4439e6b25e use internal URL 2020-09-01 12:28:03 -04:00
c6aaa1276d AdjustIdentityServerConfig for authorization_endpoint 2020-09-01 12:13:08 -04:00
ba84c59b5d custom DiscoveryResponseGenerator and helpers 2020-09-01 07:38:36 -04:00
db7d05b52f Added PreValidate endpoint on Account controller (#896)
* Added PreValidate endpoint on Account controller

* Fixed IHttpClientFactory implementation

* Core localization and org sproc fix

* Pass culture, fixed sso middleware bug
2020-08-28 12:14:23 -04:00
2cd6d4f61a plan adjustments (#890) 2020-08-25 14:23:36 -04:00
2fb18d8cf2 Extracted logic to get Identity cert (#889) 2020-08-25 13:15:59 -04:00
66e67d2172 map plantype to old strings for license hash (#882) 2020-08-21 17:44:45 -04:00
e41aca81de allows dev runs to load a common idserv cert (#881) 2020-08-21 11:58:22 -04:00
8383a0866f Add Yandex to global equivalent domains list (#876)
* [enum] Add Yandex to global equivalent domains list

Exhaustive list of Yandex domain names obtained by contacting their support.

* [Dictionary] Add Yandex to global equivalent domains list

Exhaustive list of Yandex domain names obtained by contacting their support.
2020-08-19 18:09:39 -04:00
80f57d22a7 Remove amazon.co.nz from Amazon equivalent domains (redirect) (#875)
After further research, amazon.co.nz has never been more than a redirect (in order: to amazon.com, amazon.co.uk then back to amazon.com). See PR for more information.
2020-08-18 18:42:10 -04:00
c65c52d997 Plan updates cleanup (#872)
* updated teams feature set for new plans

* removed whitespace

* alphabatized some properties
2020-08-17 10:45:37 -04:00
af85e17486 [Equivalent domains] Fix for the special case "eBay India" (#871)
See explanations in the PR.
2020-08-17 09:46:17 -04:00
2c430190cb Add all missing entries to Ebay equivalent domains (#869)
(+ sort the Ebay list alphabetically)
2020-08-14 09:54:05 -04:00
6aed80a67d Add amazon.{com.br, sa} to Amazon equivalent domains (#864)
(+ sort the Amazon list alphabetically)
2020-08-13 17:38:32 -04:00
c8220fdfa6 Plan And Price Updates (#859)
* Expanded the Plan model to make plan & product data a bit more dynamic 
* Created a Product enum to track versioned instances of the same plan
* Created and API call and Response model for getting plan & product data from the server
2020-08-11 14:19:56 -04:00
61b11e398b Added netcup to global equivalent domains list (#600) 2020-08-11 09:06:57 -04:00
562082e9ca Add a complete list of Eventbrite equivalent domains (#851)
This list was extracted using:

$ curl -s https://www.eventbrite.com/ |
    tr '"' '\n' |
    grep -o 'www\.eventbrite\.[^/]*' |
    sed 's/www\.//' |
    sort -u
2020-08-06 14:07:45 -04:00
44717b2d4c remove non-verified eventbrite equivalent domains 2020-08-04 08:02:44 -04:00
2c4752f4ac Sso user table, model and repo stubbed out (#837)
* Sso user table, model and repo stubbed out

* switch to nullable org id, bigint id

* update GetBySsoUserAsync

* cleanup migrator file

* fix EF user repo

* fix pg repo

* is `IS NULL` checks

* unique indexes

* update migration scripts

* add another unique index

* remove old script
2020-07-28 10:03:09 -04:00
0d0c6c7167 sso integrations (#822)
* stub out hybrid sso

* support for PKCE authorization_code clients

* sso service urls

* sso client key

* abstract request validator

* support for verifying password

* custom AuthorizationCodeStore that does not remove codes

* cleanup

* comment

* created master password

* ResetMasterPassword

* rename Sso client to OidcIdentity

* update env builder

* bitwarden sso project in docker-compose

* sso path in nginx config
2020-07-16 08:01:39 -04:00
92238eb0a9 Additional changes for enterprise portal sso config (#819)
* Additional changes for enterprise portal sso config

* Requested changes

* rename enum to Saml2

* Limit to one SSO config per org
2020-07-13 15:58:59 -04:00
7af50172e0 Reference event service implementation (#811)
* Reference event service implementation

* Fix IReferenceable implementation of Id

* add structure to event body
2020-07-07 12:01:34 -04:00
6bc7a3cdc0 adjust cors origin checks (#800)
* allow cors from bitwarden.com on cloud

* allow file:// cors for safari extension

* fix missing paren
2020-06-27 15:08:50 -04:00
cf70a5e480 set cors policies to only allow web vault origin (#787)
* set cors policy to only allow web vault

* vault cors policy service
2020-06-23 18:47:53 -04:00
21834223fd Adds extra Amazon equivalent domains (#775) 2020-06-12 10:25:08 -04:00
5b3f81f47e Merge pull request #743 from Hinton/feature/hide-passwords
Add support collection access, hide passwords
2020-06-11 14:24:04 -04:00
d2625e47e1 Remove trailing comma and adjust formatting of some of the equivalent domain strings to match the rest (#773) 2020-06-09 16:53:48 -04:00
cad7cf0200 Add office.com to Microsoft default equivalent domains. (#769) 2020-06-06 21:08:26 -04:00
4bd3e01a80 abstract context building to overrideable SetContextAsync (#766)
* abstract context building to overrideable SetContextAsync

* update method calls
2020-06-04 14:14:43 -04:00
e1a0d59fd1 Added Discord to Global Equivalent Domain (#752)
* add Discord to GlobalEquivalentDomainsType

* added discord domains to global domains
2020-05-28 19:48:51 -04:00
a421be731c Add syslog suport for sending application logs to a Syslog server (#742)
* Add syslog suport for sending application logs to a Syslog server

* Rename SyslogSettings.Certificate to SyslogSettings.CertificatePath
2020-05-22 21:19:59 -04:00
36f15c67d0 Add support for new collection access, hide passwords 2020-05-21 15:38:57 +02:00
10a6e12d09 generate signin token for enterprise portal (#728) 2020-05-12 15:36:33 -04:00
c177714799 Remove www. URL from alibaba (#701) 2020-04-16 10:38:39 -04:00
9800b752c0 Changed all C# control flow block statements to include space between keyword and open paren 2020-03-27 14:36:37 -04:00
1331cc90f7 check SettingHasValue instead of empty 2020-03-19 11:10:23 -04:00
b7b06d77df Use correct sentry integration package. Fixes #669 (#670) 2020-03-16 08:25:46 -04:00
518e94f60f upgrade more lgos. remove sendgrid 2020-03-05 10:33:44 -05:00
d2fcf8f572 Additional Equivalent Domains Fix #649 (#662)
* Additional Equivalent Domains Fix #649

* Remove infinitysrv.com as resolves to 127.0.0.1
2020-03-04 10:55:58 -05:00
ae893c72bd formatting 2020-02-28 09:15:47 -05:00
b6274ac728 Add Envato network to equivalent domain sets (#647)
* Add Envato network to equivalent domain sets

Envato is an Alexa top 500 website that asks you to use the same login on many different domains. The login forms are on those domains, not envato.com.

For my use case, account-level domain equivalence rules don’t work because I want to share this with a team, and multiple URLs per login is duplicative because we have multiple Envato logins.

tutsplus.com is another Envato domain that accepts Envato logins, but I believe it also accepts tutsplus.com-specific logins, making it not fully equivalent.

* Add Envato to GlobalEquivalentDomainsType
2020-02-01 15:31:40 -05:00
2c68e01e14 Add Docusign to equivalent domains (#642) 2020-01-23 22:10:23 -05:00
e8054df5b4 use policies property for orgs 2020-01-15 15:00:54 -05:00
dda3c3a123 Async GetEmbeddedCertificate 2020-01-13 15:35:50 -05:00