1
0
mirror of https://github.com/bitwarden/server.git synced 2025-07-01 16:12:49 -05:00
Commit Graph

4322 Commits

Author SHA1 Message Date
96ed67ac3f Merge branch 'master' into feature/flexible-collections 2023-10-31 07:55:38 +10:00
1af105a9e2 [BEEEP] Update development and QA dashboard URLs for payment gateways (#3291)
* Update development and QA dashboard URLs for payment gateways

* Refactor gateway URL creation to utility method

---------

Co-authored-by: cyprain-okeke <108260115+cyprain-okeke@users.noreply.github.com>
2023-10-30 14:15:33 -04:00
c62922842f [AC-1139] Created new CollectionOperationRequirement ReadAllWithAccess 2023-10-30 15:27:24 +00:00
bd3d66ab60 [AC-1139] Created new CollectionOperation ReadAccess and changed GetUsers_vNext to use it 2023-10-30 14:52:37 +00:00
4b293d7ac8 [AC-1139] Refactored BulkCollectionAuthorizationHandler.CheckCollectionPermissionsAsync 2023-10-30 14:35:10 +00:00
44c559c723 Support for passkey registration (#2885)
* support for fido2 auth

* stub out registration implementations

* stub out assertion steps and token issuance

* verify token

* webauthn tokenable

* remove duplicate expiration set

* revert sqlproj changes

* update sqlproj target framework

* update new validator signature

* [PM-2014] Passkey registration (#2915)

* [PM-2014] chore: rename `IWebAuthnRespository` to `IWebAuthnCredentialRepository`

* [PM-2014] fix: add missing service registration

* [PM-2014] feat: add user verification when fetching options

* [PM-2014] feat: create migration script for mssql

* [PM-2014] chore: append to todo comment

* [PM-2014] feat: add support for creation token

* [PM-2014] feat: implement credential saving

* [PM-2014] chore: add resident key TODO comment

* [PM-2014] feat: implement passkey listing

* [PM-2014] feat: implement deletion without user verification

* [PM-2014] feat: add user verification to delete

* [PM-2014] feat: implement passkey limit

* [PM-2014] chore: clean up todo comments

* [PM-2014] fix: add missing sql scripts

Missed staging them when commiting

* [PM-2014] feat: include options response model in swagger docs

* [PM-2014] chore: move properties after ctor

* [PM-2014] feat: use `Guid` directly as input paramter

* [PM-2014] feat: use nullable guid in token

* [PM-2014] chore: add new-line

* [PM-2014] feat: add support for feature flag

* [PM-2014] feat: start adding controller tests

* [PM-2014] feat: add user verification test

* [PM-2014] feat: add controller tests for token interaction

* [PM-2014] feat: add tokenable tests

* [PM-2014] chore: clean up commented premium check

* [PM-2014] feat: add user service test for credential limit

* [PM-2014] fix: run `dotnet format`

* [PM-2014] chore: remove trailing comma

* [PM-2014] chore: add `Async` suffix

* [PM-2014] chore: move delay to constant

* [PM-2014] chore: change `default` to `null`

* [PM-2014] chore: remove autogenerated weirdness

* [PM-2014] fix: lint

* Added check for PasswordlessLogin feature flag on new controller and methods. (#3284)

* Added check for PasswordlessLogin feature flag on new controller and methods.

* fix: build error from missing constructor argument

---------

Co-authored-by: Andreas Coroiu <andreas.coroiu@gmail.com>

* [PM-4171] Update DB to support PRF (#3321)

* [PM-4171] feat: update database to support PRF

* [PM-4171] feat: rename `DescriptorId` to `CredentialId`

* [PM-4171] feat: add PRF felds to domain object

* [PM-4171] feat: add `SupportsPrf` column

* [PM-4171] fix: add missing comma

* [PM-4171] fix: add comma

* [PM-3263] fix identity server tests for passkey registration (#3331)

* Added WebAuthnRepo to EF DI

* updated config to match current grant types

* Remove ExtensionGrantValidator (#3363)

* Linting

---------

Co-authored-by: Andreas Coroiu <acoroiu@bitwarden.com>
Co-authored-by: Andreas Coroiu <andreas.coroiu@gmail.com>
Co-authored-by: Todd Martin <106564991+trmartin4@users.noreply.github.com>
Co-authored-by: Ike <137194738+ike-kottlowski@users.noreply.github.com>
Co-authored-by: Todd Martin <tmartin@bitwarden.com>
2023-10-30 09:40:06 -04:00
219cd88095 [AC-1139] Renamed CollectionsController method to delete collection users from 'Delete' to 'DeleteUser' 2023-10-30 13:08:21 +00:00
4642b7360e [AC-1139] Created AuthorizationServiceExtensions to have an extension method for AuthorizeAsync where the resource is null 2023-10-30 12:59:34 +00:00
91de2d892e [AC-1139] Renamed new flexible collections controller methods to have 'vNext' in the name to indicate its a new version 2023-10-30 12:44:10 +00:00
1a56c359fa [AC-1139] Renamed FlexibleCollectionsIsEnabled properties to UseFlexibleCollections 2023-10-30 12:38:18 +00:00
330e41a6d9 [PM-4589] Fix 2023-09-11_01_2023-02-FutureMigration (#3373) 2023-10-30 11:33:06 +01:00
1053f49fb1 [SM-943] [BEEEP] Swap to SQLite in-memory for integration tests (#3292)
* Swap to sqlite in-memory for integration tests

* Fix integration tests

* Remove EF Core in-memory dependency
2023-10-27 11:13:52 -05:00
9c5f580035 Merge branch 'feature/flexible-collections' into flexible-collections/deprecate-custom-collection-perm
# Conflicts:
#	src/Api/AdminConsole/Controllers/OrganizationUsersController.cs
#	src/Core/Context/CurrentContext.cs
2023-10-27 15:06:13 +01:00
8c78fc27c2 Merge remote-tracking branch 'origin/master' into feature/flexible-collections 2023-10-27 13:23:55 +10:00
ad230fb6a5 [AC-1200] Admin Console code ownership - move OrganizationFeatures (#3369) 2023-10-26 16:47:44 -05:00
26dd8b0e47 [AC-1284] AC Team code ownership moves - Provider (#3359) 2023-10-26 13:38:29 -04:00
3b52536f6c [AC-1139] Marked obsolete Permissions EditAssignedCollections and DeleteAssignedCollections 2023-10-26 16:13:19 +01:00
5f3d35076a [AC-1139] Reverted changes on OrganizationService 2023-10-26 16:12:59 +01:00
c47ebedcfc [AC-1139] Added unit tests for OrganizationService InviteUser and SaveUser with EditAssignedCollections = true 2023-10-26 14:54:36 +01:00
021eaa444c [AC-1139] Added unit test to test setting users with EditAssignedCollections with Manage permission when saving a collection 2023-10-26 12:22:56 +01:00
9d8f6ac2c9 [AC-1139] Added unit tests for GroupAuthorizationHandler and OrganizationUserAuthorizationHandler 2023-10-26 11:24:35 +01:00
57d3abb994 [AC-1139] Fixed CollectionAuthorizationHandler unit tests 2023-10-25 21:05:54 +01:00
c8bcc32764 [PM-2855] Add Feature Flag to Enable Autofill Overlay (#3248) 2023-10-25 12:52:30 -05:00
18592e4f0a Merge branch 'feature/flexible-collections' into flexible-collections/deprecate-custom-collection-perm
# Conflicts:
#	src/Api/AdminConsole/Controllers/GroupsController.cs
#	src/Api/AdminConsole/Controllers/OrganizationUsersController.cs
#	src/Core/Services/Implementations/OrganizationService.cs
2023-10-25 16:29:21 +01:00
5c56b012c9 [AC-1139] Fixed Provider AuthorizationHandler logic for Groups and OrganizationUsers 2023-10-25 16:20:13 +01:00
e57469859c [AC-1139] Renamed existing CollectionAuthorizationHandler to BulkCollectionAuthorizationHandler for collections and created CollectionAuthorizationHandler for single item access. Fixed unit tests and created more 2023-10-25 16:19:25 +01:00
2701321659 [AC-1685] Add ViewAllCollections check to GetOrganizationCollectionsAsync method (#3323) 2023-10-24 11:30:08 -07:00
c11ba103a2 Merge branch 'master' into feature/flexible-collections 2023-10-24 11:14:36 -07:00
0fe97d7866 [AC-1648] [Flexible Collections] Bump migration scripts before feature branch merge (#3371)
* Bump dates on sql migration scripts

* Bump date on ef migrations
2023-10-24 11:13:49 -07:00
9007aa6556 Fix broken test (#3374) 2023-10-24 08:44:37 -04:00
20fe2bcc5b [AC-1139] Added an AuthorizationHandler for Collections and renamed existing to BulkCollectionAuthorizationHandler 2023-10-24 12:49:04 +01:00
f00dbf0052 [AC-1139] Added permission checks for GroupsController.Get if FC feature flag is enabled 2023-10-24 12:48:02 +01:00
3a5c35b556 [AC-1683] Fix DB migrations for new Manage permission (#3307)
* [AC-1683] Update migration script and introduce V2 procedures and types

* [AC-1683] Update repository calls to use new V2 procedures / types

* [AC-1684] Update bulk add collection migration script to use new V2 type

* [AC-1683] Undo Manage changes to more original procedures

* [AC-1683] Restore whitespace changes

* [AC-1683] Clarify comments regarding explicit column lists

* [AC-1683] Update migration script dates

* [AC-1683] Split the migration script for readability

* [AC-1683] Re-name SelectReadOnlyArray_V2 to CollectionAccessSelectionType
2023-10-23 18:46:14 -07:00
596e0df961 Fix: add missing namespace after merging in master 2023-10-24 11:42:04 +10:00
9d5c5bc444 Fix: add missing namespace after merging in master 2023-10-24 11:25:05 +10:00
d91eb23b46 Merge branch 'master' into feature/flexible-collections 2023-10-24 11:23:23 +10:00
ad27f3d87b [AC-1717] Update default values for LimitCollectionCreationDeletion (#3365)
* Change default value in organization create sproc to 1

* Drop old column name still present in some QA instances

* Set LimitCollectionCreationDeletion value in code based on feature flag
2023-10-24 10:46:32 +10:00
cb6c411b40 [AC-1748] Fixed logic to set manage = true for collections if user has EditAssignedCollection permission 2023-10-23 20:37:41 +01:00
c442bae2bc [AC-1693] Send InvoiceUpcoming Notification to Client Owners (#3319)
* Add Organization_ReadOwnerEmailAddresses SPROC

* Add IOrganizationRepository.GetOwnerEmailAddressesById

* Add SendInvoiceUpcoming overload for multiple emails

* Update InvoiceUpcoming handler to send multiple emails

* Cy's feedback

* Updates from testing

Hardened against missing entity IDs in Stripe events in the StripeEventService. Updated ValidateCloudRegion to not use a refresh/expansion for the customer because the invoice.upcoming event does not have an invoice.Id. Updated the StripeController's handling of invoice.upcoming to not use a refresh/expansion for the subscription because the invoice does not have an ID.

* Fix broken test
2023-10-23 13:46:29 -04:00
e64a7d5210 [AC-1139] Fixed formatting on OrganizationUsersController; renamed OrganizationUserOperations.Read to ReadAll 2023-10-23 17:23:02 +01:00
d7a19e0061 [AC-1139] Separated flexible collections logic from old logic in CollectionsController; Refactored CollectionAuthorizationHandler 2023-10-23 17:21:13 +01:00
18b43130e8 [PM-4252] Change attachment Size to be represented as a string (#3335) 2023-10-23 16:56:04 +02:00
19e2215376 Added percent off to discount, removed discount from user sub (#3326) 2023-10-23 15:02:02 +01:00
d7c544a116 [AC 1536] Breakdown The SubscriptionUpdate.cs into multiple files (#3356)
* Move sub-subscription classes to a separate files

* Refactor the sub-class to a separate files

* format whitespace

* remove directive that is unnecessary

* Remove the baseSeat class
2023-10-23 11:28:13 +01:00
cd376bee7f Merge remote-tracking branch 'origin/master' into feature/flexible-collections 2023-10-23 08:47:11 +10:00
52e723c57a Add joint codeownership for auth handlers (#3346) 2023-10-23 08:27:57 +10:00
403e63ca11 [AC-1139] Lining up collection access data with Manage = true if feature flag is off 2023-10-22 11:58:45 +01:00
76298829ed [AC-1139] Updated CollectionsController to use CollectionAuthorizationHandler in all endpoints if flag is enabled 2023-10-21 11:26:07 +01:00
dadf29f2c8 [AC-1139] Modified CollectionsController.Get to check access before getting collections 2023-10-20 15:17:39 +01:00
728cd1c0b5 [SM-949] Add endpoint to fetch events by service account (#3336)
* Add ability to fetch events by service account

* Extract GetDateRange into ApiHelpers util

* Add dapper implementation

* Add EF repo implementation

* Add authz handler case

* unit + integration tests for controller

* swap to read check

* Adding comments

* Fix integration tests from merge

* Enabled SM events controller for self-hosting
2023-10-19 16:57:14 -05:00