Commit graph

  • dd9afc0621 Sends email verification Timshel 2026-06-18 19:42:00 +02:00
  • 769f878c7d Support admin reset 2fa Timshel 2026-07-16 18:48:37 +02:00
  • cab3edeeb9 Make the Key Connector admin exemption configurable Luca Biemelt 2026-09-03 14:04:41 +02:00
  • 46283cf651 Block owners and admins from enrolling in the Key Connector Luca Biemelt 2026-07-22 10:41:49 +02:00
  • eeaa898c68 Serve the login JWKS via OIDC discovery Luca Biemelt 2026-07-12 17:00:44 +02:00
  • e28d22d3de Tighten the KEY_CONNECTOR_URL validation Luca Biemelt 2026-07-14 17:54:06 +02:00
  • 3779f20685 Add Playwright tests for the Key Connector flow Luca Biemelt 2026-07-14 13:28:00 +02:00
  • 66c7fad714 Advertise the Key Connector to new SSO users Luca Biemelt 2026-07-14 11:05:08 +02:00
  • f432a5802a Harden the Key Connector account endpoints Luca Biemelt 2026-07-14 10:40:46 +02:00
  • e96145d557 Add Key Connector support for SSO users Luca Biemelt 2026-07-11 15:49:36 +02:00
  • 20591f8e0d Fix organization import failing with missing field groups tom27052006 2026-09-06 21:53:31 +02:00
  • 01d73cd77d fix: Correct invalid comment syntax in .dockerignore niniconi 2026-05-29 16:48:27 +08:00
  • e9afcabb09 Remove SCSS Entry tom27052006 2026-09-06 00:19:00 +02:00
  • 6673705b4c Add new device verification tom27052006 2026-09-05 23:43:31 +02:00
  • 7c2cc4c43b fix(db): allow the index migration to be reverted on MariaDB BryanFRD 2026-09-05 23:24:35 +02:00
  • 01efa5559e
    Merge branch 'main' into fix/accepted-org-policy-sync Tom 2026-09-05 13:14:51 -05:00
  • e089e5d947 perf(db): add indexes on foreign key and lookup columns BryanFRD 2026-09-02 12:47:59 +02:00
  • ef38027a7f
    feat: allow overriding sso endpoint Nico Feulner 2026-09-04 14:25:57 +02:00
  • 764c3ac0a8
    Merge branch 'main' into main kittygaming99 2026-09-05 21:52:22 +10:00
  • c08713a0a1 Allow members with Manage collection to import into it under the ownership policy Christian Schulz 2026-08-05 21:44:12 +02:00
  • 0a485a103a User key id Timshel 2026-09-03 10:26:27 +02:00
  • 851aa37ba8
    Merge 4f22c32a78 into a6c3bd6d18 Tom 2026-09-04 12:12:22 +00:00
  • 4f22c32a78 Merge main into agent/admin-vault-timeout-export-policies tom27052006 2026-09-04 14:08:44 +02:00
  • ee2e938c78 Use the EventType enum for log_event tom27052006 2026-09-04 14:03:38 +02:00
  • f005e02b49 Merge main into agent/sso-default-organization tom27052006 2026-09-04 13:59:07 +02:00
  • 40f52d1357
    Merge d8f0b11e3f into a6c3bd6d18 Tom 2026-09-04 11:40:22 +00:00
  • 53ab467f94
    Merge f48a30a65b into a6c3bd6d18 Tom 2026-09-04 11:40:21 +00:00
  • 90f379b576
    Merge 8a808be247 into a6c3bd6d18 Sacha ATHIAS 2026-09-04 18:26:03 +07:00
  • d8f0b11e3f Reduce comments and redundant tests tom27052006 2026-09-04 13:18:31 +02:00
  • f48a30a65b Reduce comments and redundant tests tom27052006 2026-09-04 13:12:15 +02:00
  • 7a06b253da Reduce comments and redundant tests tom27052006 2026-09-04 13:09:04 +02:00
  • 95fcdb90e8 Reduce comments and redundant tests tom27052006 2026-09-04 13:05:21 +02:00
  • 8cea288a6b Reduce comments and redundant tests tom27052006 2026-09-04 13:02:01 +02:00
  • aa25c221e9 Document the SSO cookie vendor and fix clippy on Rust 1.98 nathanmoreton 2026-09-04 03:43:49 +00:00
  • 124bea3ede
    Merge branch 'main' into feat/sso-cookie-vendor Nathan Moreton 2026-09-03 22:27:07 -05:00
  • a6c3bd6d18
    Update rust docker version (#7689) Daniel García 2026-09-03 21:17:50 +02:00
  • 9c53f8dde5
    Update rust docker version Daniel García 2026-09-03 21:11:21 +02:00
  • 91c57d9e1e
    Merge 598d01b51e into 6729e83521 Timshel 2026-09-03 10:35:24 +00:00
  • 598d01b51e Fix 2fa webauthn Timshel 2026-09-03 11:39:06 +02:00
  • 7ab6d91a1f log_user_event take enum parameter not i32 Timshel 2026-08-26 09:31:14 +02:00
  • 4845b071bb TwoFactor.find_by_user_and_type take enum parameter not i32 Timshel 2026-08-26 09:26:31 +02:00
  • 829af9e4ff Fix 2FA Yubikeys Timshel 2026-08-25 16:45:41 +02:00
  • a29c22009e 2FA using userVerificationToken Timshel 2026-08-06 16:06:37 +02:00
  • 6729e83521
    Misc Updates (#7676) Mathijs van Veluw 2026-09-03 00:07:00 +02:00
  • 78ddc6caed fix(security): revoke 2FA remember tokens when credentials or 2FA change BryanFRD 2026-09-02 17:19:52 +02:00
  • 346fbe2efb fix(security): rate limit prelogin and auth request endpoints BryanFRD 2026-09-02 13:38:43 +02:00
  • 2589d69e9f perf(mail): send new device login notification in the background BryanFRD 2026-09-02 13:26:18 +02:00
  • 705c43b7fb
    Adjust email validation as suggested BlackDex 2026-09-02 09:03:00 +02:00
  • 4a77cca085 Add pm-32413-multi-client-password-management feature flag tom27052006 2026-09-01 18:57:32 +02:00
  • d43cb085f0
    Misc Updates BlackDex 2026-09-01 17:29:02 +02:00
  • 91f0546f40
    Merge branch 'main' into main kittygaming99 2026-09-01 11:39:11 +10:00
  • edbef269a2
    Merge branch 'main' into fix/two-factor-email-login-ip-logging The CRahn 2026-08-30 13:25:08 -05:00
  • 10662371ba Restrict every revoked membership under the auto confirm policy tom27052006 2026-08-30 19:30:58 +02:00
  • 11f4175df2
    Address review: move validate_ssh_key_data, simplify it and the tests xhon-pelushi 2026-08-30 13:15:37 -04:00
  • c9f5ed872f Apply the auto confirm policy to organization creation and revoked members tom27052006 2026-08-30 19:09:05 +02:00
  • 9e8780f52c
    Merge b3fbb69b05 into fdc156b247 KyattsuNoTsume 2026-08-30 17:49:25 +02:00
  • b3fbb69b05 clippy fixes Kyattsukuro 2026-06-22 15:51:01 +02:00
  • b9ceccddb6 revertet changing names of organisation attachment_count Kyattsukuro 2026-05-08 13:40:30 +02:00
  • e7f8392ddb use camel case for attachmentCount, use safer way to get user JSON Kyattsukuro 2026-04-05 13:55:56 +02:00
  • 6a5f48d4e2 in enrich_users_json, moved never active notice to template Kyattsukuro 2026-02-04 22:56:49 +01:00
  • ae52dd6300 removed get_sso_user Kyattsukuro 2026-02-04 22:46:25 +01:00
  • e32c9cf561 moved SsoUser from get_user_or_404 to get_sso_user Kyattsukuro 2026-02-03 15:04:18 +01:00
  • c9b2c2acd1 Resolves conflicts: src/static/templates/admin/users.hbs Kyattsukuro 2026-06-22 15:34:41 +02:00
  • 7bd681fd04 pass formatting checks Kyattsukuro 2025-11-29 19:40:36 +01:00
  • c894f0efbc return same json object for all user queries Kyattsukuro 2026-05-08 13:01:15 +02:00
  • 3e6dc9649e adds sso_identifier to /admin/users Kyattsukuro 2025-11-24 19:41:12 +01:00
  • 9196e38aec
    Merge 3f0e761582 into fdc156b247 Timshel 2026-08-29 17:40:46 +02:00
  • fdc156b247
    log_event take enum parameter not i32 (#7656) Timshel 2026-08-29 15:02:26 +00:00
  • 2073c03092
    Add SSO_SIGNUPS_ALLOWED (#7272) Timshel 2026-08-29 15:02:22 +00:00
  • 923f5d0b5e
    Fix migration for MariaDB 12.2.2 (#7265) Timshel 2026-08-29 15:02:01 +00:00
  • 83724b301e
    Ignore reset-password auto-enroll when mail is disabled (#7585) xhon-pelushi 2026-08-29 11:01:51 -04:00
  • 10e044f563
    chore: remove duplicate "the" in ciphers.rs comment (#7254) Matt Van Horn 2026-08-29 08:01:45 -07:00
  • 9085211662 Ignore reset-password auto-enroll when mail is disabled xhon-pelushi 2026-08-12 00:41:50 -04:00
  • a483a3b958 Reject SSH key ciphers with null or empty required fields xhon-pelushi 2026-08-12 00:39:18 -04:00
  • 4c9deb4837 Add accepted organization data to sync response Tom 2026-08-28 15:11:50 +00:00
  • d9789f1265
    Merge branch 'main' into feat/sso-cookie-vendor nathanmoreton 2026-08-27 13:40:42 -05:00
  • e4c388f16a Fix regression with domain_allowed in SSO onboarding Timshel 2026-05-30 10:06:52 +02:00
  • 9f37857e15 Add SSO_SIGNUPS_ALLOWED Timshel 2026-05-28 14:11:55 +02:00
  • 3f0e761582 Allow SSO role mapping to add admin cookie Timshel 2024-01-03 17:24:57 +01:00
  • 2798016c36 log_event take enum parameter not i32 Timshel 2026-08-26 09:42:01 +02:00
  • ea4af90a9e Log IP/username on two-factor email-login credential failures crahn 2026-08-25 14:22:19 -05:00
  • 39de7ddbbf Fix migration for MariaDB 12.2.2 Timshel 2026-05-27 18:33:07 +02:00
  • 8a808be247
    chore(org-rbac): harden bitmask model and tests Sacha ATHIAS 2026-08-25 16:56:14 +02:00
  • 9dee038f77
    feat(org-rbac): store custom permissions as bitflags Sacha ATHIAS 2026-08-25 16:16:59 +02:00
  • b7fe5f0f41 fix(deps): bump h2 to 0.4.16 to patch RUSTSEC-2026-0258 github-actions[bot] 2026-08-25 13:07:37 +00:00
  • 7e7908aa48
    Merge branch 'main' into feature/vaultwarden-user-custom-roles Sacha ATHIAS 2026-08-25 09:38:11 +02:00
  • f8eea92e4f
    Merge c9c81f3b02 into fa2566d14f Rune Darrud 2026-08-25 12:12:58 +07:00
  • 0f256c9348
    Merge bec8ce5331 into fa2566d14f rwjack 2026-08-24 22:37:27 +02:00
  • fa2566d14f
    Fix password change with newer web-vault (#7634) Mathijs van Veluw 2026-08-24 19:38:23 +02:00
  • 2724ca6ce4
    chore: run rustfmt and document permissions bool shape for clippy Sacha ATHIAS 2026-08-24 18:49:49 +02:00
  • 89cf5f1e90
    fix(auth): remove unused guard fields for strict CI lints Sacha ATHIAS 2026-08-24 18:43:31 +02:00
  • 39037817de
    feat(org): persist custom role permissions and add permission-aware org guards Sacha ATHIAS 2026-08-24 18:25:34 +02:00
  • 136a069dee
    feat(vaultwarden-user-custom-role): update migrations Sacha ATHIAS 2026-08-24 18:15:19 +02:00
  • 7664d014d3
    feat(vaultwarden-user-custom-role): update organization.rs Sacha ATHIAS 2026-08-24 18:14:59 +02:00
  • 8e965902c6 fix(api): reject SSH Key ciphers with missing or empty key members Yunare Maia 2026-08-24 14:40:50 +00:00
  • 09f3898565
    Fix password change with newer web-vault BlackDex 2026-08-24 15:36:54 +02:00
  • d31423c331
    Merge branch 'main' into main kittygaming99 2026-08-22 16:40:46 +10:00
  • a3a8d74738
    SSO: Verify that the userinfo subject matches the id_token subject Fredrik Ekre 2026-07-23 22:20:38 +02:00
  • ff7615ecd9
    SSO: Backfill verified_at when associating an existing account Fredrik Ekre 2026-07-24 00:51:44 +02:00
  • 46d71107f5
    add dummy revisionDate (#7608) 1.37.2 Stefan Melmuk 2026-08-20 22:03:56 +02:00