Jim Hays
f9038472ce
Fix typos in comments ( #2876 )
2023-05-09 17:38:47 +02:00
Jake Fink
88dd745070
[PM-1188] Server owner auth migration ( #2825 )
...
* [PM-1188] add sso project to auth
* [PM-1188] move sso api models to auth
* [PM-1188] fix sso api model namespace & imports
* [PM-1188] move core files to auth
* [PM-1188] fix core sso namespace & models
* [PM-1188] move sso repository files to auth
* [PM-1188] fix sso repo files namespace & imports
* [PM-1188] move sso sql files to auth folder
* [PM-1188] move sso test files to auth folders
* [PM-1188] fix sso tests namespace & imports
* [PM-1188] move auth api files to auth folder
* [PM-1188] fix auth api files namespace & imports
* [PM-1188] move auth core files to auth folder
* [PM-1188] fix auth core files namespace & imports
* [PM-1188] move auth email templates to auth folder
* [PM-1188] move auth email folder back into shared directory
* [PM-1188] fix auth email names
* [PM-1188] move auth core models to auth folder
* [PM-1188] fix auth model namespace & imports
* [PM-1188] add entire Identity project to auth codeowners
* [PM-1188] fix auth orm files namespace & imports
* [PM-1188] move auth orm files to auth folder
* [PM-1188] move auth sql files to auth folder
* [PM-1188] move auth tests to auth folder
* [PM-1188] fix auth test files namespace & imports
* [PM-1188] move emergency access api files to auth folder
* [PM-1188] fix emergencyaccess api files namespace & imports
* [PM-1188] move emergency access core files to auth folder
* [PM-1188] fix emergency access core files namespace & imports
* [PM-1188] move emergency access orm files to auth folder
* [PM-1188] fix emergency access orm files namespace & imports
* [PM-1188] move emergency access sql files to auth folder
* [PM-1188] move emergencyaccess test files to auth folder
* [PM-1188] fix emergency access test files namespace & imports
* [PM-1188] move captcha files to auth folder
* [PM-1188] fix captcha files namespace & imports
* [PM-1188] move auth admin files into auth folder
* [PM-1188] fix admin auth files namespace & imports
- configure mvc to look in auth folders for views
* [PM-1188] remove extra imports and formatting
* [PM-1188] fix ef auth model imports
* [PM-1188] fix DatabaseContextModelSnapshot paths
* [PM-1188] fix grant import in ef
* [PM-1188] update sqlproj
* [PM-1188] move missed sqlproj files
* [PM-1188] move auth ef models out of auth folder
* [PM-1188] fix auth ef models namespace
* [PM-1188] remove auth ef models unused imports
* [PM-1188] fix imports for auth ef models
* [PM-1188] fix more ef model imports
* [PM-1188] fix file encodings
2023-04-14 13:25:56 -04:00
Thomas Rittson
4643f5960e
[EC-635] Extract organizationService.UpdateLicenseAsync to a command ( #2408 )
...
* move UpdateLicenseAsync from service to command
* create new SelfHostedOrganizationDetails view model and move license validation logic there
* move occupied seat count logic to database level
2023-02-24 07:54:19 +10:00
Thomas Rittson
7c3637c8ba
[EC-387] Don't count revoked users towards occupied seat count ( #2256 )
...
Also autoscale seats when restoring user if required
2022-09-23 14:30:39 +10:00
Justin Baur
7f5f010e1e
Run formatting ( #2230 )
2022-08-29 16:06:55 -04:00
Justin Baur
bae03feffe
Revert filescoped ( #2227 )
...
* Revert "Add git blame entry (#2226 )"
This reverts commit 239286737d15cb84a893703ee5a8b33a2d67ad3d.
* Revert "Turn on file scoped namespaces (#2225 )"
This reverts commit 34fb4cca2aa78deb84d4cbc359992a7c6bba7ea5.
2022-08-29 15:53:48 -04:00
Justin Baur
34fb4cca2a
Turn on file scoped namespaces ( #2225 )
2022-08-29 14:53:16 -04:00
Justin Baur
231eb84e69
Turn On ImplicitUsings ( #2079 )
...
* Turn on ImplicitUsings
* Fix formatting
* Run linter
2022-06-29 19:46:41 -04:00
Carlos J. Muentes
14302efa2c
CSA-2 - Require user interaction for SSO redirect ( #1948 )
...
* CSA-2 - adding validation before redirecting for SSO login
* Updating server to use generated and signed JWT for SSO redirect
* Removing erroneous file
* Removing erroneous file
* Updating for PR feedback, adding domain_hint to Login and fixing invalid domain_hint name reference
* Some code styling changes from PR feedback
* Removing unnecessary JSON serialization
* Couple small changes from PR feedback
* Fixing linting errors
* Update formatting in AccountController.cs
* Remove unused dependency
* Add token lifetime to settings
* Use tokenable directly
* Return defined models
* Revert sso proj file changes
* Check expiration validity when validating org
* Show error message with expired token
* Formatting fixes
* Add SsoTokenLifetime to Sso settings
* Fix build errors
* Fix sql warnings
Co-authored-by: Carlos J. Muentes <cmuentes@bitwarden.com>
Co-authored-by: Chad Scharf <3904944+cscharf@users.noreply.github.com>
Co-authored-by: Matt Gibson <mgibson@bitwarden.com>
2022-06-01 12:23:52 -05:00
Oscar Hinton
e4a10aae27
Split out repositories to Infrastructure.Dapper / EntityFramework ( #1759 )
2022-01-11 10:40:51 +01:00
Thomas Rittson
a14f16b34f
Fix existing user checks ( #1780 )
2021-12-22 07:16:58 +10:00
Thomas Rittson
ed7440cc14
Fix null error in SSO existing user flow ( #1773 )
2021-12-17 11:08:53 +10:00
Oscar Hinton
23b0a1f9df
Run dotnet format ( #1764 )
2021-12-16 15:35:09 +01:00
Oscar Hinton
63f6dd9a24
Move request/response models ( #1754 )
2021-12-14 16:05:07 +01:00
Oscar Hinton
71229c2366
Streamline error message for removed user account with CME ( #1741 )
2021-12-02 18:38:27 +00:00
Thomas Rittson
cfd6123974
[Key Connector] Add event logging for first SSO login ( #1724 )
...
* Add null checks to fix logging from SSO controller
* Add FirstSsoLogin event logging
2021-11-19 07:42:35 +10:00
Oscar Hinton
fd37cb5a12
Add support for Key Connector OTP and account migration ( #1663 )
...
Co-authored-by: Thomas Rittson <trittson@bitwarden.com>
2021-11-09 16:37:32 +01:00
Matt Gibson
8f0115e62f
Check canScale when scaling for sso ( #1661 )
...
* Check canScale when scaling for sso
* PR review
Use AutoAddSeats to add seats in a consistent way.
This requires moving user check out of that method.
* User logic moved out of method
2021-10-25 10:19:37 -05:00
Oscar Hinton
c5d5601464
Add support for crypto agent ( #1623 )
2021-10-25 15:09:14 +02:00
Matt Gibson
18006591fc
Add autoscale to SSO auto provision ( #1642 )
2021-10-19 07:00:44 -05:00
Thomas Rittson
4b346ff7ea
Fix null error when provisioning new SSO user ( #1578 )
2021-09-10 09:25:08 -04:00
Thomas Rittson
8f27f21ce0
Remove stale SsoUser objects from database ( #1560 )
...
* Add SsoUser_ReadByUserIdOrganizationId
* Automatically reset stale/duplicate Sso links
* Fix typo
* Check for stale Sso link in existing user flow
* Delete any stale user record before provisioning new user
* Check for existing db query before creating
* PR feedback updates
Co-authored-by: Chad Scharf <3904944+cscharf@users.noreply.github.com>
2021-09-03 10:54:41 -04:00
Chad Scharf
17db94190e
Test 1: add acr_values return validation value ( #1285 )
...
* Part 1: add acr_values return validation value
* Update acr return value validation from OIDC specs
* acr validation prompt clarification
2021-04-27 15:17:03 -04:00
Chad Scharf
6cc317c4ba
SSO - Added custom scopes and claim types for OIDC ( #1133 )
...
* SSO - Added custom scopes and claim types for OIDC
* Removed redundant field labels
* Added acr_values to OIDC config + request
2021-02-10 12:00:12 -05:00
Chad Scharf
99b95b5330
Fix safari sso header size ( #1065 )
...
* Safari SSO header size fix - in progress
* Cleanup of memoryCacheTicketStore
* Redis cache ticket store + registration
* Revert some unecessary changes
* temp - distributed cookie: idsrv.external
* Ticket data cached storage added
* OIDC working w/ substantially reduced cookie size
* Added distributed cache cookie manager
* Removed hybrid OIDC flow
* Enable self-hosted folks to use Redis for SSO
* Also allow self-hosted to use Redis cont...
2021-01-11 11:03:46 -05:00
Vincent Salucci
09aea4ed38
[Bug] Improve SSO user provision flow ( #1022 )
...
* Initial commit of provisioning updates
* Updated strings
* removed extra BANG
* Separated orgUsers db lookup - prioritized existing user Id
* Updated create sso record method // Added sproc for org/email retrieval
2020-12-04 16:45:54 -06:00
Vincent Salucci
f311f40d93
Added OrgIdentifer to SetPasswordAsync // Added jit user two factor provider ( #1009 )
2020-11-22 08:46:44 -06:00
Addison Beck
2e6368d11a
Set user API key on account creation through SSO auto provision ( #1003 )
2020-11-18 10:20:59 -05:00
Vincent Salucci
50cf16a3fb
[SSO] New user provision flow ( #945 )
...
* Initial commit of accept user during set password flow
* changed new org user from accepted to invited // moved another check to token accept function
* Revised some white space // Moved business logic to UserService
* Fixed UserServiceTest
* Removed some white-space
* Removed more white-space
* Final white-space issues
2020-10-13 15:00:33 -05:00
Chad Scharf
3b8cbe631f
Implemented new OIDC redirect behavior ( #954 )
2020-09-29 17:06:17 -04:00
Chad Scharf
a75077d703
Fixed resource and err msg for user provisioning ( #939 )
2020-09-16 15:02:18 -04:00
Chad Scharf
143e34766d
Handle nameID as email w/o email attribute ( #938 )
2020-09-15 12:50:25 -04:00
Addison Beck
1880889325
added localization variables to sso account controller ( #930 )
...
* added localization variables to sso account controller
* Used the correct method for server side localization
2020-09-11 19:36:49 -04:00
Addison Beck
4b3abe6fb0
stopped manually encoding the SSO user_identifier ( #913 )
2020-09-04 14:16:49 -04:00
Kyle Spearrin
84c85a90e8
Merge SSO and Portal projects
2020-09-04 13:56:08 -04:00
