1
0
mirror of https://github.com/bitwarden/server.git synced 2025-06-30 07:36:14 -05:00
Commit Graph

4958 Commits

Author SHA1 Message Date
e350daeeee Use sas token for send downloads (#1157)
* Remove Url from SendFileModel

Url is now generated on the fly with limited lifetime.

New model houses the download url generated

* Create API endpoint for getting Send file download url

* Generate limited-life Azure download urls

* Lint fix
2021-02-24 13:03:16 -06:00
f8940e4be5 Checked Emergency Access access type on access initiation (#1160)
* also updated the View method

* removed old code

* naming refactor

* used the right type

* also checked PasswordAsync()

* also checked GetPolicies()
2021-02-23 17:12:52 -05:00
499c30a805 Fix error message if already accepted EA invite (#1159)
* Fix error message if already accepted EA invite

* Fix error message wording depending on EA status
2021-02-24 05:46:52 +10:00
cc964ccb9c Add https://2fa.directory to CSP (#1156)
* Add https://2fa.directory to CSP

* remove old domain for towfactorauth.org
2021-02-22 19:15:58 -05:00
5537470703 Use sas token for attachment downloads (#1153)
* Get limited life attachment download URL

This change limits url download to a 1min lifetime.
This requires moving to a new container to allow for non-public blob
access.

Clients will have to call GetAttachmentData api function to receive the download
URL. For backwards compatibility, attachment URLs are still present, but will not
work for attachments stored in non-public access blobs.

* Make GlobalSettings interface for testing

* Test LocalAttachmentStorageService equivalence

* Remove comment

* Add missing globalSettings using

* Simplify default attachment container

* Default to attachments containe for existing methods

A new upload method will be made for uploading to attachments-v2.
For compatibility for clients which don't use these new methods, we need
to still use the old container. The new container will be used only for
new uploads

* Remove Default MetaData fixture.

* Keep attachments container blob-level security for all instances

* Close unclosed FileStream

* Favor default value for noop services
2021-02-22 15:35:16 -06:00
78606d5f13 endpoint to display config settings (#1150) 2021-02-18 15:15:08 -05:00
1ca6e917af return fa-globe icon when not found (#1149) 2021-02-18 12:18:50 -05:00
cd2834cc15 Revert "remove premium checks for internal testing"
This reverts commit 26fb6fc3b7.
2021-02-17 13:16:01 -05:00
ad6abaccc8 Fix error message if user already accepted invite (#1140)
* Fix error message if already accepted invitation

* Improve error message wording

* Use consistent capitalization of organization
2021-02-17 09:28:49 +10:00
979eb4a842 Run Quartz in clustered mode (#1123) 2021-02-12 13:49:11 +01:00
61ee3f1e45 Let Manage Users permission see group membership (#1135) 2021-02-12 08:14:00 +10:00
f3bff938c4 Added ability to bulk-upload tax rates (#1139) 2021-02-11 16:39:27 -05:00
7065bba56f 支持更多的 nginx 配置 (#1136) 2021-02-11 16:11:36 -05:00
c3a99402f8 adjust date validation for send (#1137) 2021-02-11 14:39:21 -05:00
7c9ea83ad2 HTML encode sanitized inputs for email templates (#1138) 2021-02-11 14:39:13 -05:00
6cc317c4ba SSO - Added custom scopes and claim types for OIDC (#1133)
* SSO - Added custom scopes and claim types for OIDC

* Removed redundant field labels

* Added acr_values to OIDC config + request
2021-02-10 12:00:12 -05:00
9f42357705 Improved handling of grantor access to organizations after takeover (refactored) (#1134)
* Revert "Only return policy in TakeoverResponse if Owner"

This reverts commit b20e6f5e85.

* Revert "Return grantor policy info in TakeoverResponse"

This reverts commit 204217a5e0.

* Add endpoint to get grantor policies on takeover
2021-02-10 09:06:42 +10:00
d51b592cb5 Improved handling of grantor access to organizations after takeover (#1132)
* Remove grantor from orgs after takeover

* Return grantor policy info in TakeoverResponse

* Only return policy in TakeoverResponse if Owner
2021-02-09 06:33:03 +10:00
79cc6df0fd Delete sends belonging to user on user delete (#1116)
* Delete sends belonging to user on user delete

* Update User_DeleteById.sql

* Clean up bad autoformats

Co-authored-by: Addison Beck <abeck@bitwarden.com>

Co-authored-by: Kyle Spearrin <kspearrin@users.noreply.github.com>
Co-authored-by: Addison Beck <abeck@bitwarden.com>
2021-02-05 12:37:55 -06:00
edd4bc2623 Add disable send policy (#1130)
* Add Disable Send policy

* Test DisableSend policy

* PR Review

* Update tests for using CurrentContext

This required making an interface for CurrentContext and mocking out
the members used. The interface can be expanded as needed for tests.

I moved CurrentContext to a folder, which changes the namespace
and causes a lot of file touches, but most are just adding a reference

* Fix failing test

* Update exemption to include all exempt users

* Move all CurrentContext usages to ICurrentContext

* PR review. Match messaging with Web
2021-02-04 12:54:21 -06:00
19e7ce8519 self-hosted server release, v1.39.4 (#1125) 2021-02-02 12:23:27 -05:00
cf84453492 added a few global domains (#1129)
* added a few global domains

* fixed a domain
2021-02-02 11:15:33 -05:00
360be1245f Fix command name for renewcert (from renewcrt) (#1128)
Command name should match the help page and list commands output. Also fixed help site link.
2021-02-02 09:23:38 -05:00
6d8e37ebf6 Patch release version bump, 1.39.4 (#1124) 2021-02-01 18:43:32 -05:00
00853bc250 Import Invite Error (#1121)
* throw error if user is already invited on import

* added back the single InviteUser OrgService method
2021-01-30 17:56:37 -05:00
3ba832b440 Changed Emergency Access job frequency to hourly (#1120) 2021-01-29 23:32:00 +01:00
ee05b8af84 self-hosted version bump v1.39.3 (#1114) 2021-01-27 17:19:02 -05:00
2380bba577 version bump 1.39.3 (#1113) 2021-01-27 17:00:56 -05:00
e869b4df63 Add external amr to auth method claims accepted (#1112) 2021-01-27 10:53:27 -05:00
421fbffd42 self-hosted version bump v1.39.1, web v2.18.1 (#1111) 2021-01-26 12:08:17 -05:00
445ce33c47 check that SingleOrg policy is enabled before saying users cant create new orgs (#1110)
* check that SingleOrg policy is enabled before saying users cant create new orgs

* fixed org user kick check for SingleOrg

* code review cleanup
2021-01-25 11:19:33 -05:00
bc4eeff604 changed the address data used to pull sales tax for premium subscriptions (#1109)
* changed the address data used to pull sales tax for premium subscriptions

* nulled checked for extra safety

* fixes null check
2021-01-25 09:56:53 -05:00
b8a2158626 enabled send and added send sync notifications (#1106) 2021-01-22 16:16:40 -05:00
3555b15b91 [Email] Update welcome content (#1092)
* Initial commit of welcome email update

* Final revisions and updated hosted image urls

* added dynamic year // updated verbiage // fixed typo in text template

* Updated verbiage // changed mustache accessor // updated how year is generated
2021-01-21 14:57:13 -06:00
85edc03461 Add SAML 2.0 metadata export for dynamic SPs (#1094) 2021-01-21 15:54:46 -05:00
bc1a20101a Self hosted release - v1.39.0 (#1103) 2021-01-21 14:56:53 -05:00
970712e014 making the bash script command sections a bit easier to read (#1085) 2021-01-21 14:49:40 -05:00
2dc0fe3b31 Bwsh surpress warnings (#1084)
* surpessing the missing docker networks message in the bash script when the docker-compose project is already down

* surpressing the missing docker network warnings in the powershell script
2021-01-21 14:49:27 -05:00
5059e0a693 fixing the letsencrypt cert generation command in the powershell command (#1102) v1.39.0 2021-01-20 18:33:00 -05:00
48d14e8521 Handle name == null in Emergency Access (#1100) 2021-01-20 13:50:07 -05:00
001bbf2f2b null checked Stripe.Customer.Address for org seat and storage upgrades (#1099) 2021-01-20 12:40:45 -05:00
fe4c36c04a null checked all permissions checks in CurrentContext (#1097) 2021-01-19 23:28:38 -05:00
dd207aa840 disable send (#1096) 2021-01-19 16:46:59 -05:00
5778a903c6 Version bump, v1.39.0 (#1095) 2021-01-19 16:09:43 -05:00
61675342c3 added duofederal.com to allowed duo domains (#1091) 2021-01-15 16:59:51 -05:00
adbfd0e107 Fix premium check for emergency access (#1090) 2021-01-15 15:56:17 -05:00
9b80d97c19 fixed something shameful (#1088) 2021-01-14 18:05:17 -05:00
c9cab74476 Sales Tax for Premium signups (#1087)
* Started charging sales tax on Premium signups

* added a line break
2021-01-14 17:53:37 -05:00
9f938f5efd Permissions bugs (#1083)
* Null checked org invite collections

* Null checked permissions on org invite

* Gave a static seat count to org invite fixture

* Null checked the right way
2021-01-13 15:14:28 -05:00
96cc88aafc [Policy] Update Personal Ownership checkbox description (#1076)
* Initial commit of checkbox description update

* refactored property name
2021-01-12 11:37:33 -06:00