1
0
mirror of https://github.com/bitwarden/server.git synced 2025-07-02 16:42:50 -05:00
Commit Graph

5651 Commits

Author SHA1 Message Date
d118eb7a97 Merge branch 'main' into brant/PM-17562-Slack-Event-Posting 2025-03-28 10:07:54 -04:00
6d9c2956ce Progress on integrating new Repositories to existing code 2025-03-28 10:04:35 -04:00
fb0567b45e [PM-18523] Add SSO external ID visibility feature flag (#5559) 2025-03-27 14:49:38 +00:00
54f4ba945e [PM-17558] Remove ShortcutDuplicatePatchRequests feature flag (#5551)
* Delete old command and feature flag switch

* Rename vNext command

* Remove feature flag
2025-03-27 10:13:56 -04:00
9c658b4cab Merge branch 'main' into brant/PM-17562-Slack-Event-Posting 2025-03-26 15:27:26 -04:00
f25b308f57 Initial buildout of basic repositories 2025-03-26 15:26:02 -04:00
6178bb2db1 only create security tasks when a task doesn't exist for the submitted cipher (#5558) 2025-03-26 13:08:19 -05:00
6300a959e4 Merge branch 'main' into brant/add-dapper-repository-organization-integrations 2025-03-26 13:12:59 -04:00
8e40559169 Merge branch 'main' into brant/PM-17562-Slack-Event-Posting 2025-03-26 13:09:04 -04:00
d4b0058372 Organization integrations and configuration database schemas (#5553)
* Organization integrations and configuration database schemas

* Format EF files
2025-03-26 11:44:05 -04:00
6f227c31e2 Sort km feature flags (#5557) 2025-03-26 15:10:35 +01:00
5d831ceaf8 Merge branch 'org-integrations-db' into brant/PM-17562-Slack-Event-Posting 2025-03-26 09:38:40 -04:00
89a1032ac5 Merge branch 'main' into brant/PM-17562-Slack-Event-Posting 2025-03-26 09:38:19 -04:00
f04a3d638b [PM-18235] Add PersonalOwnershipPolicyRequirement (#5439)
* Add PersonalOwnershipPolicyRequirement for managing personal ownership policy

* Add tests for PersonalOwnershipPolicyRequirement

* Register PersonalOwnershipPolicyRequirement in policy requirement factory

* Update ImportCiphersCommand to check PersonalOwnershipPolicyRequirement if the PolicyRequirements flag is enabled

Update unit tests

* Update CipherService to support PersonalOwnershipPolicyRequirement with feature flag

- Add support for checking personal ownership policy using PolicyRequirementQuery when feature flag is enabled
- Update CipherService constructor to inject new dependencies
- Add tests for personal vault restrictions with and without feature flag

* Clean up redundant "Arrange", "Act", and "Assert" comments in test methods

* Refactor PersonalOwnershipPolicyRequirementTests method names for clarity

- Improve test method names to better describe their purpose and behavior
- Rename methods to follow a more descriptive naming convention
- No functional changes to the test logic

* Remove commented code explaining policy check

* Refactor PersonalOwnership Policy Requirement implementation

- Add PersonalOwnershipPolicyRequirementFactory to replace static Create method
- Simplify policy requirement creation logic
- Update PolicyServiceCollectionExtensions to register new factory
- Update ImportCiphersCommand to use correct user ID parameter
- Remove redundant PersonalOwnershipPolicyRequirementTests

* Remove redundant PersonalOwnershipPolicyRequirementTests

* Remove unnecessary tests from PersonalOwnershipPolicyRequirementFactoryTests
2025-03-26 09:40:13 +00:00
be773d2ecb Format EF files 2025-03-25 16:24:12 -07:00
fafa6a5d7a Organization integrations and configuration database schemas 2025-03-25 16:19:34 -07:00
d563f3f78a Fix logic in text handlebars template (#5542) 2025-03-25 10:16:06 -05:00
55980e8038 [PM-16603] Add userkey rotation v2 (#5204)
* Implement userkey rotation v2

* Update request models

* Cleanup

* Update tests

* Improve test

* Add tests

* Fix formatting

* Fix test

* Remove whitespace

* Fix namespace

* Enable nullable on models

* Fix build

* Add tests and enable nullable on masterpasswordunlockdatamodel

* Fix test

* Remove rollback

* Add tests

* Make masterpassword hint optional

* Update user query

* Add EF test

* Improve test

* Cleanup

* Set masterpassword hint

* Remove connection close

* Add tests for invalid kdf types

* Update test/Core.Test/KeyManagement/UserKey/RotateUserAccountKeysCommandTests.cs

Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>

* Fix formatting

* Update src/Api/KeyManagement/Models/Requests/RotateAccountKeysAndDataRequestModel.cs

Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>

* Update src/Api/Auth/Models/Request/Accounts/MasterPasswordUnlockDataModel.cs

Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>

* Update src/Api/Auth/Models/Request/Accounts/MasterPasswordUnlockDataModel.cs

Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>

* Update src/Api/KeyManagement/Models/Requests/AccountKeysRequestModel.cs

Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>

* Fix imports

* Fix tests

* Remove null check

* Add rollback

---------

Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>
2025-03-25 15:23:01 +01:00
229aecb55c Update SARIF upload to use proper branch (#5534) 2025-03-24 14:20:42 -04:00
f1a9545a00 Remove unneeded exclusions (#5478) 2025-03-24 13:48:20 -04:00
efd33c3301 chore: set correct version for upcoming scheduled release (#5550) 2025-03-24 13:33:51 -04:00
24b63f2dcd [PM-12493] Extract ConfirmUser methods from OrganizationService into commands (#5505)
* Add ConfirmOrganizationUserCommand and IConfirmOrganizationUserCommand interface for managing organization user confirmations

* Add unit tests for ConfirmOrganizationUserCommand to validate user confirmation scenarios

* Register ConfirmOrganizationUserCommand for dependency injection

* Refactor OrganizationUsersController to utilize IConfirmOrganizationUserCommand for user confirmation processes

* Remove ConfirmUserAsync and ConfirmUsersAsync methods from IOrganizationService and OrganizationService

* Rename test methods in ConfirmOrganizationUserCommandTests for clarity and consistency

* Update test method name in ConfirmOrganizationUserCommandTests for improved clarity
2025-03-24 17:05:46 +00:00
ffda25608c Moved Slack OAuth to take into account the Organization it's being stored for. Added methods to store the top level integration for Slack 2025-03-24 11:13:23 -04:00
d345937ecc Bumped version to 2025.3.6 2025-03-24 11:22:29 +00:00
1db37a14ab Bumped version to 2025.3.5 2025-03-24 10:56:04 +00:00
7eb8ad8fa3 Bumped version to 2025.3.4 2025-03-24 10:49:33 +00:00
c7c6528faa Ac/pm 18240 implement policy requirement for reset password policy (#5521)
* wip

* fix test

* fix test

* refactor

* fix factory method and tests

* cleanup

* refactor

* update copy

* cleanup
2025-03-21 10:07:55 -04:00
5d549402c7 Bumped version to 2025.3.3 2025-03-21 10:15:22 +00:00
948d8f707d [PM-18858] Security Task email bugs (#5536)
* make "Review at-risk passwords" bold

* add owner and admin email address to the bottom of the security notification email

* fix plurality of text email
2025-03-20 14:41:58 -05:00
2d02ad3f61 Bumped version to 2025.3.2 2025-03-20 17:30:55 +00:00
bb674b8990 Bumped version to 2025.3.1 2025-03-20 17:14:35 +00:00
f6cc140fde Switched from .Any to Count. Remove unreachable code. (#5519) 2025-03-20 09:12:39 -05:00
db3151160a fix(device-approval-persistence): [PM-9112] Device Approval Persistence - Added feature flag. (#5495) 2025-03-19 15:27:51 -04:00
3422f4cd50 [PM-18971] Special Characters in Org Names (#5514)
* sanitize organization name for email to avoid encoding

* fix spelling mistake in variable name
2025-03-19 13:55:30 -05:00
481df89cf0 [PM-19342] Onboarding Nudges Feature Flag (#5530) 2025-03-19 14:24:12 -04:00
21717ec71e [PM-17733] - [Privilege Escalation] - Unauthorised access allows limited access user to change password of Items (#5452)
* prevent view-only users from updating passwords

* revert change to licensing service

* add tests

* check if organizationId is there

* move logic to private method

* move logic to private method

* move logic into method

* revert change to licensing service

* throw exception when cipher key is created by hidden password users

* fix tests

* don't allow totp or passkeys changes from hidden password users

* add tests

* revert change to licensing service
2025-03-19 11:13:38 -07:00
61a621b04b Remove unneccessary methods from the IOrganizationIntegrationConfigurationRepository 2025-03-19 14:11:24 -04:00
fc827ed209 feat(set password) [PM-17647] Add set/change password feature flags
* Added flag values

* Added flag values

* Removed extra space

* Linting
2025-03-19 13:49:02 -04:00
890134eaa6 Merge branch 'main' into brant/PM-17562-Slack-Event-Posting 2025-03-19 10:25:13 -04:00
297046be5b Refactored SlackOAuthController to use SlackService as an injected dependency; added tests for SlackService 2025-03-19 10:23:49 -04:00
bb3ec6aca1 [PM-16888] Refactor OrganizationUser status update procedure to use a GuidIdArray parameter and remove JSON parsing logic (#5237)
* Refactor OrganizationUser status update procedure to use a GuidIdArray parameter and remove JSON parsing logic

* Fix OrganizationUser_SetStatusForUsersById procedure and bump script date

* Restore OrganizationUser_SetStatusForUsersById for possible server version rollback. Add new version with the name OrganizationUser_SetStatusForUsersByGuidIdArray

* Add migration script to add stored procedure OrganizationUser_SetStatusForUsersByGuidIdArray to update user status by GUID array
2025-03-19 11:01:06 +00:00
7f0dd6d1c3 Update FROM directive in Dockerfile (#5522) 2025-03-18 20:02:39 +00:00
508bf2c9f8 [deps] Vault: Update AngleSharp to 1.2.0 (#5220)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-18 14:26:29 -04:00
87cdb923a5 [PM-17901] Replaced hard-coded Bitwarden Vault URLs (#5458)
* Replaced hard-coded Bitwarden Vault URLs

* Jared's feedback
2025-03-18 11:44:36 -04:00
43d0f1052b [deps] Tools: Update MailKit to 4.11.0 (#5515)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-18 14:04:54 +01:00
d3f8a99fa6 [PM-18175] Remove flag check for 2FA recovery code login (#5513)
* Remove server-side flagging

* Linting

* Linting.
2025-03-17 16:20:51 -04:00
Ike
abfdf6f5cb Revert "[PM-18944] Update error response from invalid OTP" (#5504)
* Revert "[PM-18944] Update error response from invalid OTP (#5485)"

This reverts commit 1b90bfe2a1.
2025-03-17 12:37:34 -04:00
2227b3b867 Refactor SlackService to use a dedicated model to parse responses 2025-03-17 10:24:34 -04:00
fb7d24286d SlackService improvements, testing, integration configurations 2025-03-17 07:40:21 -04:00
27606e2d33 [PM-3553] Feature flag: Mobile SimpleLogin self host alias generation (#5392) 2025-03-14 13:22:22 -04:00