fc1d7c7059
[PM-3561] Clean the return url of any whitespace ( #3696 )
...
* clean the return url of any whitespace
* ReplaceWhiteSpace helper
* tests for ReplaceWhiteSpace helper
---------
Co-authored-by: Matt Bishop <mbishop@bitwarden.com >
2024-02-06 13:30:37 -05:00
42cec31d07
[AC-1287] AC Team code ownership moves: Policies (1/2) ( #3383 )
...
* note: IPolicyData and EntityFramework Policy.cs are moved without any
changes to namespace or content in order to preserve git history.
2023-11-22 16:07:37 -05:00
87fd4ad97d
[PM-3569] Upgrade to Duende.Identity ( #3185 )
...
* Upgrade to Duende.Identity
* Linting
* Get rid of last IdentityServer4 package
* Fix identity test since Duende returns additional configuration
* Use Configure
PostConfigure is ran after ASP.NET's PostConfigure
so ConfigurationManager was already configured and our HttpHandler wasn't
being respected.
* Regenerate lockfiles
* Move to 6.0.4 for patches
* fixes with testing
* Add additional grant type supported in 6.0.4 and beautify
* Lockfile refresh
* Reapply lockfiles
* Apply change to new WebAuthn logic
* When automated merging fails me
---------
Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com >
Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com >
2023-11-20 16:32:23 -05:00
e679d3127a
[AC-1585] Automatically verify managed members on an organization with a verified domain ( #3207 )
2023-08-30 07:23:45 +01:00
f9038472ce
Fix typos in comments ( #2876 )
2023-05-09 17:38:47 +02:00
88dd745070
[PM-1188] Server owner auth migration ( #2825 )
...
* [PM-1188] add sso project to auth
* [PM-1188] move sso api models to auth
* [PM-1188] fix sso api model namespace & imports
* [PM-1188] move core files to auth
* [PM-1188] fix core sso namespace & models
* [PM-1188] move sso repository files to auth
* [PM-1188] fix sso repo files namespace & imports
* [PM-1188] move sso sql files to auth folder
* [PM-1188] move sso test files to auth folders
* [PM-1188] fix sso tests namespace & imports
* [PM-1188] move auth api files to auth folder
* [PM-1188] fix auth api files namespace & imports
* [PM-1188] move auth core files to auth folder
* [PM-1188] fix auth core files namespace & imports
* [PM-1188] move auth email templates to auth folder
* [PM-1188] move auth email folder back into shared directory
* [PM-1188] fix auth email names
* [PM-1188] move auth core models to auth folder
* [PM-1188] fix auth model namespace & imports
* [PM-1188] add entire Identity project to auth codeowners
* [PM-1188] fix auth orm files namespace & imports
* [PM-1188] move auth orm files to auth folder
* [PM-1188] move auth sql files to auth folder
* [PM-1188] move auth tests to auth folder
* [PM-1188] fix auth test files namespace & imports
* [PM-1188] move emergency access api files to auth folder
* [PM-1188] fix emergencyaccess api files namespace & imports
* [PM-1188] move emergency access core files to auth folder
* [PM-1188] fix emergency access core files namespace & imports
* [PM-1188] move emergency access orm files to auth folder
* [PM-1188] fix emergency access orm files namespace & imports
* [PM-1188] move emergency access sql files to auth folder
* [PM-1188] move emergencyaccess test files to auth folder
* [PM-1188] fix emergency access test files namespace & imports
* [PM-1188] move captcha files to auth folder
* [PM-1188] fix captcha files namespace & imports
* [PM-1188] move auth admin files into auth folder
* [PM-1188] fix admin auth files namespace & imports
- configure mvc to look in auth folders for views
* [PM-1188] remove extra imports and formatting
* [PM-1188] fix ef auth model imports
* [PM-1188] fix DatabaseContextModelSnapshot paths
* [PM-1188] fix grant import in ef
* [PM-1188] update sqlproj
* [PM-1188] move missed sqlproj files
* [PM-1188] move auth ef models out of auth folder
* [PM-1188] fix auth ef models namespace
* [PM-1188] remove auth ef models unused imports
* [PM-1188] fix imports for auth ef models
* [PM-1188] fix more ef model imports
* [PM-1188] fix file encodings
2023-04-14 13:25:56 -04:00
4643f5960e
[EC-635] Extract organizationService.UpdateLicenseAsync to a command ( #2408 )
...
* move UpdateLicenseAsync from service to command
* create new SelfHostedOrganizationDetails view model and move license validation logic there
* move occupied seat count logic to database level
2023-02-24 07:54:19 +10:00
7c3637c8ba
[EC-387] Don't count revoked users towards occupied seat count ( #2256 )
...
Also autoscale seats when restoring user if required
2022-09-23 14:30:39 +10:00
7f5f010e1e
Run formatting ( #2230 )
2022-08-29 16:06:55 -04:00
bae03feffe
Revert filescoped ( #2227 )
...
* Revert "Add git blame entry (#2226 )"
This reverts commit 239286737d#2225 )"
This reverts commit 34fb4cca2a
2022-08-29 15:53:48 -04:00
34fb4cca2a
Turn on file scoped namespaces ( #2225 )
2022-08-29 14:53:16 -04:00
231eb84e69
Turn On ImplicitUsings ( #2079 )
...
* Turn on ImplicitUsings
* Fix formatting
* Run linter
2022-06-29 19:46:41 -04:00
14302efa2c
CSA-2 - Require user interaction for SSO redirect ( #1948 )
...
* CSA-2 - adding validation before redirecting for SSO login
* Updating server to use generated and signed JWT for SSO redirect
* Removing erroneous file
* Removing erroneous file
* Updating for PR feedback, adding domain_hint to Login and fixing invalid domain_hint name reference
* Some code styling changes from PR feedback
* Removing unnecessary JSON serialization
* Couple small changes from PR feedback
* Fixing linting errors
* Update formatting in AccountController.cs
* Remove unused dependency
* Add token lifetime to settings
* Use tokenable directly
* Return defined models
* Revert sso proj file changes
* Check expiration validity when validating org
* Show error message with expired token
* Formatting fixes
* Add SsoTokenLifetime to Sso settings
* Fix build errors
* Fix sql warnings
Co-authored-by: Carlos J. Muentes <cmuentes@bitwarden.com >
Co-authored-by: Chad Scharf <3904944+cscharf@users.noreply.github.com >
Co-authored-by: Matt Gibson <mgibson@bitwarden.com >
2022-06-01 12:23:52 -05:00
e4a10aae27
Split out repositories to Infrastructure.Dapper / EntityFramework ( #1759 )
2022-01-11 10:40:51 +01:00
a14f16b34f
Fix existing user checks ( #1780 )
2021-12-22 07:16:58 +10:00
ed7440cc14
Fix null error in SSO existing user flow ( #1773 )
2021-12-17 11:08:53 +10:00
23b0a1f9df
Run dotnet format ( #1764 )
2021-12-16 15:35:09 +01:00
63f6dd9a24
Move request/response models ( #1754 )
2021-12-14 16:05:07 +01:00
71229c2366
Streamline error message for removed user account with CME ( #1741 )
2021-12-02 18:38:27 +00:00
cfd6123974
[Key Connector] Add event logging for first SSO login ( #1724 )
...
* Add null checks to fix logging from SSO controller
* Add FirstSsoLogin event logging
2021-11-19 07:42:35 +10:00
fd37cb5a12
Add support for Key Connector OTP and account migration ( #1663 )
...
Co-authored-by: Thomas Rittson <trittson@bitwarden.com >
2021-11-09 16:37:32 +01:00
8f0115e62f
Check canScale when scaling for sso ( #1661 )
...
* Check canScale when scaling for sso
* PR review
Use AutoAddSeats to add seats in a consistent way.
This requires moving user check out of that method.
* User logic moved out of method
2021-10-25 10:19:37 -05:00
c5d5601464
Add support for crypto agent ( #1623 )
2021-10-25 15:09:14 +02:00
18006591fc
Add autoscale to SSO auto provision ( #1642 )
2021-10-19 07:00:44 -05:00
4b346ff7ea
Fix null error when provisioning new SSO user ( #1578 )
2021-09-10 09:25:08 -04:00
8f27f21ce0
Remove stale SsoUser objects from database ( #1560 )
...
* Add SsoUser_ReadByUserIdOrganizationId
* Automatically reset stale/duplicate Sso links
* Fix typo
* Check for stale Sso link in existing user flow
* Delete any stale user record before provisioning new user
* Check for existing db query before creating
* PR feedback updates
Co-authored-by: Chad Scharf <3904944+cscharf@users.noreply.github.com >
2021-09-03 10:54:41 -04:00
17db94190e
Test 1: add acr_values return validation value ( #1285 )
...
* Part 1: add acr_values return validation value
* Update acr return value validation from OIDC specs
* acr validation prompt clarification
2021-04-27 15:17:03 -04:00
6cc317c4ba
SSO - Added custom scopes and claim types for OIDC ( #1133 )
...
* SSO - Added custom scopes and claim types for OIDC
* Removed redundant field labels
* Added acr_values to OIDC config + request
2021-02-10 12:00:12 -05:00
99b95b5330
Fix safari sso header size ( #1065 )
...
* Safari SSO header size fix - in progress
* Cleanup of memoryCacheTicketStore
* Redis cache ticket store + registration
* Revert some unecessary changes
* temp - distributed cookie: idsrv.external
* Ticket data cached storage added
* OIDC working w/ substantially reduced cookie size
* Added distributed cache cookie manager
* Removed hybrid OIDC flow
* Enable self-hosted folks to use Redis for SSO
* Also allow self-hosted to use Redis cont...
2021-01-11 11:03:46 -05:00
09aea4ed38
[Bug] Improve SSO user provision flow ( #1022 )
...
* Initial commit of provisioning updates
* Updated strings
* removed extra BANG
* Separated orgUsers db lookup - prioritized existing user Id
* Updated create sso record method // Added sproc for org/email retrieval
2020-12-04 16:45:54 -06:00
f311f40d93
Added OrgIdentifer to SetPasswordAsync // Added jit user two factor provider ( #1009 )
2020-11-22 08:46:44 -06:00
2e6368d11a
Set user API key on account creation through SSO auto provision ( #1003 )
2020-11-18 10:20:59 -05:00
50cf16a3fb
[SSO] New user provision flow ( #945 )
...
* Initial commit of accept user during set password flow
* changed new org user from accepted to invited // moved another check to token accept function
* Revised some white space // Moved business logic to UserService
* Fixed UserServiceTest
* Removed some white-space
* Removed more white-space
* Final white-space issues
2020-10-13 15:00:33 -05:00
3b8cbe631f
Implemented new OIDC redirect behavior ( #954 )
2020-09-29 17:06:17 -04:00
a75077d703
Fixed resource and err msg for user provisioning ( #939 )
2020-09-16 15:02:18 -04:00
143e34766d
Handle nameID as email w/o email attribute ( #938 )
2020-09-15 12:50:25 -04:00
1880889325
added localization variables to sso account controller ( #930 )
...
* added localization variables to sso account controller
* Used the correct method for server side localization
2020-09-11 19:36:49 -04:00
4b3abe6fb0
stopped manually encoding the SSO user_identifier ( #913 )
2020-09-04 14:16:49 -04:00
84c85a90e8
Merge SSO and Portal projects
2020-09-04 13:56:08 -04:00
