1
0
mirror of https://github.com/bitwarden/server.git synced 2025-05-12 07:02:16 -05:00

5735 Commits

Author SHA1 Message Date
Thomas Rittson
6905844034
Merge branch 'main' into experiment/authorize-attribute 2025-04-02 13:07:10 +10:00
Thomas Rittson
99cb6954a9
fix tests for real 2025-04-02 13:05:28 +10:00
Thomas Rittson
047307b48a
fix tests 2025-04-02 12:43:40 +10:00
Thomas Rittson
a4df397c7e
Revert old changes 2025-04-02 12:33:43 +10:00
Thomas Rittson
a42f21159f
Use consistent exception type 2025-04-02 12:28:46 +10:00
Thomas Rittson
84447bfc05
xmldoc 2025-04-02 12:25:02 +10:00
Thomas Rittson
7aa1adfebc
Delete unused IProviderOrganizationContext 2025-04-02 12:18:05 +10:00
Thomas Rittson
a8b510c6a9
Fix tests 2025-04-02 12:17:20 +10:00
Thomas Rittson
038e6e63b6
Use httpContext features for providers 2025-04-02 12:15:19 +10:00
Thomas Rittson
48697c4900
Only parse guids on demand 2025-04-02 11:18:09 +10:00
Jimmy Vo
f90bcd44de
[PM-19575] Allow enabling Single Org policy when the organization has claimed domains. (#5565) 2025-04-01 10:28:57 -04:00
Vijay Oommen
fd781415c4
[PM-19222] Include UseRiskInsights in license file (#5528) 2025-04-01 16:19:42 +02:00
Todd Martin
1beb5dc5c0
Separate desktop and CLI for ClientType checks (#5441) 2025-04-01 10:06:30 -04:00
Thomas Rittson
bead69f788
Remove fixed list of claims, remove double parsing 2025-04-01 19:28:41 +10:00
Thomas Rittson
fa9a1b7bb2
Merge branch 'main' into experiment/authorize-attribute 2025-04-01 15:37:30 +10:00
Thomas Rittson
cff36e0462
Always instantiate Permissions object
To follow current logic
2025-04-01 15:36:42 +10:00
Thomas Rittson
d1fff74504
Make error checking more robust per Justin 2025-04-01 15:23:26 +10:00
Thomas Rittson
faa2ff8b1d
Use closures 2025-04-01 15:21:39 +10:00
Thomas Rittson
72ce1f147d
Parse claims upfront, define custom permissions 2025-04-01 12:11:23 +10:00
Thomas Rittson
ef30805d0e
WIP: parsing claims from context 2025-04-01 11:10:23 +10:00
Conner Turnbull
0ca1b319fd
Fix PayPal to Stripe credit truncation bug (#5561) 2025-03-31 15:20:31 -04:00
Nick Krantz
9c16127bd4
[PM-14406] Fix security task email sends (#5571)
* convert `AdminOwnerEmails` to List rather than IEnumerable

* check for JSON array in `formatAdminOwnerEmails`

* remove trailing comma for admin/owners

* Use display block on tables to enforce padding

* update padding around review at-risk passwords
2025-03-31 14:00:43 -05:00
Todd Martin
0579fb0e68
[PM-9115] Add feature flag for 2FA persistence (#5583)
* Add new feature flag.

* Clarified name.
2025-03-31 14:27:09 -04:00
renovate[bot]
e7abb07d19
[deps] Tools: Update LaunchDarkly.ServerSdk to 8.7.0 (#5581)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
2025-03-31 16:35:59 +00:00
renovate[bot]
a879e4722c
[deps] Tools: Update aws-sdk-net monorepo (#5580)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
2025-03-31 16:33:50 +00:00
Conner Turnbull
30ad7d3f73
[PM-18564] Added policy validation before creating or sending org sponsorship invite (#5459)
* Added policy validation before creating or sending org sponsorship invite

* dotnet format strikes again
2025-03-31 12:25:41 -04:00
Jared Snider
683ade9ffc
feat(EF WebAuthnCreds Repo): [Auth/PM-19629] EF WebAuthnCredentialRepository.cs - Rewrite query to avoid reading entire table into memory (#5567) 2025-03-31 09:49:14 -04:00
Jared McCannon
786b0edceb
[PM-18527] - Fix allowing restored user to own multiple free orgs (#5444)
* Moved RestoreUserAsync and RestoreUsersAsync to Command.

* Fixing the bug.

* Added test for bulk method.

* Fixing sonar cube warning.

* SonarQube warning fix.

* Excluding org users we already have.

* Fixed misspelling. Added integration test for method.

* test had the misspelling as well 🤦

* Split out interface. Added admin and confirmed constraints.

* fixed queries and added xml comments and tests.
2025-03-31 08:33:57 -05:00
Daniel García
887332b436
[PM-15127] Remove secrets requirement from build workflow (#5546)
* [PM-15127] Remove secrets requirement from build workflow

* Remove unneeded check, fix target workflow

* Remove IF
2025-03-31 15:19:55 +02:00
Rui Tomé
f60db791cc
[PM-19590] Add k6 load testing script for SyncController's /sync endpoint (#5508)
* Add k6 load testing script for sync endpoint

* Refactor sync response validation to use lowercase keys

* Remove access token validation from sync.js

* Update http_req_duration threshold in sync.js from 400ms to 1200ms
2025-03-31 12:25:36 +01:00
Thomas Rittson
3ec9e318b1
Merge branch 'experiment/authorize-attribute' of https://github.com/bitwarden/server into experiment/authorize-attribute 2025-03-31 18:03:27 +10:00
Thomas Rittson
7a8c5df37d
Remove duplicate attribute 2025-03-31 17:53:29 +10:00
Thomas Rittson
3d1ef62493
Remove use of yield
Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
2025-03-31 17:51:47 +10:00
Todd Martin
ad05e3f9e1
Complete feature flag grouping by team (#5574)
* Completed grouping of feature flags by team.

* Completed grouping feature flags by team.

* Linting

* Moved flag.

* Moved ssh-key-vault-item to KM.
2025-03-30 16:03:09 -04:00
Todd Martin
c154b6ad9b
Clean up remove-server-version-header feature flag (#5573)
* Removed feature flag.

* Linting.
2025-03-30 12:57:05 -04:00
Matt Bishop
6e81cee221
Introduce organization integration configuration details (#5568) 2025-03-28 09:20:35 -07:00
Rui Tomé
fb0567b45e
[PM-18523] Add SSO external ID visibility feature flag (#5559) 2025-03-27 14:49:38 +00:00
Thomas Rittson
54f4ba945e
[PM-17558] Remove ShortcutDuplicatePatchRequests feature flag (#5551)
* Delete old command and feature flag switch

* Rename vNext command

* Remove feature flag
2025-03-27 10:13:56 -04:00
Thomas Rittson
883a66ef5e
Add tests 2025-03-27 11:45:10 +10:00
Thomas Rittson
aa31e985c4
Fix comment 2025-03-27 10:33:15 +10:00
Thomas Rittson
d72ab1448e
Add comment 2025-03-27 10:30:32 +10:00
Thomas Rittson
3d83e4b5a7
Move to api project, create new context class 2025-03-27 10:20:19 +10:00
Thomas Rittson
b840e2e318
Merge branch 'main' into experiment/authorize-attribute 2025-03-27 09:54:54 +10:00
Nick Krantz
6178bb2db1
only create security tasks when a task doesn't exist for the submitted cipher (#5558) 2025-03-26 13:08:19 -05:00
Matt Bishop
d4b0058372
Organization integrations and configuration database schemas (#5553)
* Organization integrations and configuration database schemas

* Format EF files
2025-03-26 11:44:05 -04:00
Bernd Schoolmann
6f227c31e2
Sort km feature flags (#5557) 2025-03-26 15:10:35 +01:00
Rui Tomé
f04a3d638b
[PM-18235] Add PersonalOwnershipPolicyRequirement (#5439)
* Add PersonalOwnershipPolicyRequirement for managing personal ownership policy

* Add tests for PersonalOwnershipPolicyRequirement

* Register PersonalOwnershipPolicyRequirement in policy requirement factory

* Update ImportCiphersCommand to check PersonalOwnershipPolicyRequirement if the PolicyRequirements flag is enabled

Update unit tests

* Update CipherService to support PersonalOwnershipPolicyRequirement with feature flag

- Add support for checking personal ownership policy using PolicyRequirementQuery when feature flag is enabled
- Update CipherService constructor to inject new dependencies
- Add tests for personal vault restrictions with and without feature flag

* Clean up redundant "Arrange", "Act", and "Assert" comments in test methods

* Refactor PersonalOwnershipPolicyRequirementTests method names for clarity

- Improve test method names to better describe their purpose and behavior
- Rename methods to follow a more descriptive naming convention
- No functional changes to the test logic

* Remove commented code explaining policy check

* Refactor PersonalOwnership Policy Requirement implementation

- Add PersonalOwnershipPolicyRequirementFactory to replace static Create method
- Simplify policy requirement creation logic
- Update PolicyServiceCollectionExtensions to register new factory
- Update ImportCiphersCommand to use correct user ID parameter
- Remove redundant PersonalOwnershipPolicyRequirementTests

* Remove redundant PersonalOwnershipPolicyRequirementTests

* Remove unnecessary tests from PersonalOwnershipPolicyRequirementFactoryTests
2025-03-26 09:40:13 +00:00
Thomas Rittson
74f45a18ae
Fix logic and apply to controller 2025-03-26 15:14:58 +10:00
Thomas Rittson
3d564e7658
Add integration test 2025-03-26 14:08:29 +10:00
Thomas Rittson
fd8f36ad73
Cleanup and xmldocs 2025-03-26 13:33:44 +10:00