1
0
mirror of https://github.com/bitwarden/server.git synced 2025-07-06 18:42:49 -05:00
Commit Graph

37 Commits

Author SHA1 Message Date
974d23efdd Establish IFeatureService as scoped (#3679)
* Establish IFeatureService as scoped

* Lint

* Feedback around injection
2024-01-18 09:47:34 -05:00
7098534a41 [AC-1871] Register IFeatureService in Events project (#3492) 2023-11-30 16:42:52 -05:00
bdd5e0916e Platform/pm 2138/add nginx to known proxies (#3012)
* Add nginx to known proxies

* Only add nginx proxy if standard self host deployment

* Style changes

* Add forwarded headers config to events server

* Add known proxy forwarding to missing services

* Catch DNS errors in adding nginx proxy

* Update src/SharedWeb/Utilities/ServiceCollectionExtensions.cs

Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>

---------

Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
2023-06-14 10:33:26 -04:00
8ba806667c add custom dp services to more projects (#2653) 2023-01-31 11:20:05 -05:00
1f0fc43278 [SM-394] Secrets Manager (#2164)
Long lived feature branch for Secrets Manager

Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>
Co-authored-by: cd-bitwarden <106776772+cd-bitwarden@users.noreply.github.com>
Co-authored-by: CarleyDiaz-Bitwarden <103955722+CarleyDiaz-Bitwarden@users.noreply.github.com>
Co-authored-by: Thomas Avery <tavery@bitwarden.com>
Co-authored-by: Colton Hurst <colton@coltonhurst.com>
2023-01-13 15:02:53 +01:00
194dfe7e14 Bitwarden Unified Self-Host project (#2410) 2022-11-18 14:39:01 -05:00
7f5f010e1e Run formatting (#2230) 2022-08-29 16:06:55 -04:00
bae03feffe Revert filescoped (#2227)
* Revert "Add git blame entry (#2226)"

This reverts commit 239286737d.

* Revert "Turn on file scoped namespaces (#2225)"

This reverts commit 34fb4cca2a.
2022-08-29 15:53:48 -04:00
34fb4cca2a Turn on file scoped namespaces (#2225) 2022-08-29 14:53:16 -04:00
231eb84e69 Turn On ImplicitUsings (#2079)
* Turn on ImplicitUsings

* Fix formatting

* Run linter
2022-06-29 19:46:41 -04:00
4814cef245 Feature/self hosted development (#1921)
* Add self-host option to migration runner

* Add Self-host launch options

* Add self-hosted settings override

Let's a single secrets/env config file control both
cloud and self-hosted settings by allowing
overrides to cloud settings with self-hosted

* Allow dev-signed licenses on dev self-hosted

* Allow setting bitwarden cloud api url

Useful for testing api integration between installations and cloud

* Remove testing echoes

* Remove run config property groups

* Use `getopts` for options

* Pass in full environment
2022-03-21 17:13:00 -05:00
e4a10aae27 Split out repositories to Infrastructure.Dapper / EntityFramework (#1759) 2022-01-11 10:40:51 +01:00
327e784336 Added middleware for general security headers (#1700) 2021-11-09 11:37:14 -05:00
5537470703 Use sas token for attachment downloads (#1153)
* Get limited life attachment download URL

This change limits url download to a 1min lifetime.
This requires moving to a new container to allow for non-public blob
access.

Clients will have to call GetAttachmentData api function to receive the download
URL. For backwards compatibility, attachment URLs are still present, but will not
work for attachments stored in non-public access blobs.

* Make GlobalSettings interface for testing

* Test LocalAttachmentStorageService equivalence

* Remove comment

* Add missing globalSettings using

* Simplify default attachment container

* Default to attachments containe for existing methods

A new upload method will be made for uploading to attachments-v2.
For compatibility for clients which don't use these new methods, we need
to still use the old container. The new container will be used only for
new uploads

* Remove Default MetaData fixture.

* Keep attachments container blob-level security for all instances

* Close unclosed FileStream

* Favor default value for noop services
2021-02-22 15:35:16 -06:00
edd4bc2623 Add disable send policy (#1130)
* Add Disable Send policy

* Test DisableSend policy

* PR Review

* Update tests for using CurrentContext

This required making an interface for CurrentContext and mocking out
the members used. The interface can be expanded as needed for tests.

I moved CurrentContext to a folder, which changes the namespace
and causes a lot of file touches, but most are just adding a reference

* Fix failing test

* Update exemption to include all exempt users

* Move all CurrentContext usages to ICurrentContext

* PR review. Match messaging with Web
2021-02-04 12:54:21 -06:00
e869b4df63 Add external amr to auth method claims accepted (#1112) 2021-01-27 10:53:27 -05:00
6bc7a3cdc0 adjust cors origin checks (#800)
* allow cors from bitwarden.com on cloud

* allow file:// cors for safari extension

* fix missing paren
2020-06-27 15:08:50 -04:00
cf70a5e480 set cors policies to only allow web vault origin (#787)
* set cors policy to only allow web vault

* vault cors policy service
2020-06-23 18:47:53 -04:00
9800b752c0 Changed all C# control flow block statements to include space between keyword and open paren 2020-03-27 14:36:37 -04:00
29580684a3 upgrade to aspnet core 3.1 2020-01-10 08:33:13 -05:00
44956b3994 fixes to exception logging 2019-09-04 12:54:19 -04:00
aca274a49b add new properties to LogContext 2019-09-03 14:44:22 -04:00
53ba5fe324 all host origins allowed 2019-08-22 15:05:00 -04:00
19850631f6 allow cors origin wildcard 2019-08-22 12:00:10 -04:00
f6da38f931 allow web vault origin for cors requests 2019-07-25 15:05:03 -04:00
94188fa0b5 update to net core 2.2 2019-07-23 16:38:49 -04:00
242e509b9d set en-US as default current culture 2019-07-11 15:03:17 -04:00
6f0d64119a keep application cache in sync with service bus 2019-06-13 00:10:37 -04:00
c29ae6601f event collection api endpoint 2019-03-19 17:45:31 -04:00
ff01ce5ca7 internal identity authorization 2018-08-15 18:43:26 -04:00
6b4605e228 centralize AddIdentityAuthenticationServices 2018-08-15 09:26:19 -04:00
702d833cea Add sentry logging support. (#240) 2018-03-23 13:33:31 -04:00
f61acdd3b9 remove old token retrieval schemes 2018-01-03 14:11:56 -05:00
8a318f35b7 events has its own connection string 2017-12-27 22:39:14 -05:00
e9f254a860 correct cors policy for events 2017-12-04 21:44:57 -05:00
9cb1047f2b setup to receive & process event postings 2017-12-04 10:59:07 -05:00
755c73deba stub out events project 2017-12-04 10:12:11 -05:00