519 Commits

Autor	SHA1	Nachricht	Datum
Daniel García	c384f9c0ca	Set default log level to Info, we don't use debug anyway and it just fills the logs with other crates info.	2019-03-25 14:21:50 +01:00
BlackDex	6b686c18f7	Fixed long e-mail message extending 1000 lines. ... - Added quoted_printable crate to encode the e-mail messages. - Change the way the e-mail gets build to use custom part headers.	2019-03-25 09:48:19 +01:00
Nick Fox	7976d39d9d	Adjust whitespace	2019-03-20 23:29:29 -04:00
Nick Fox	5ee9676941	Break up long line to stop SMTP from breaking	2019-03-20 23:24:30 -04:00
Daniel García	4b40cda910	Added domain blacklist regex for icons service and improved valid domain check. ... Reorganized the icons code a bit.	2019-03-18 22:12:39 +01:00
Daniel García	4689ed7b30	Changed uppercase deserializer to avoid a clone.	2019-03-18 22:02:37 +01:00
Daniel García	61515160a7	Allow changing error codes and create an empty error. ... Return 404 instead of 400 when no accounts breached.	2019-03-14 00:17:36 +01:00
Daniel García	e93538cea9	Add option to use wrapped TLS in email, instead of STARTTLS upgrade	2019-03-10 14:45:42 +01:00
Daniel García	b4244b28b6	Update admin page scripts and fixed broken tooltip	2019-03-09 14:41:34 +01:00
Daniel García	43f9038325	Add option to force resync clients in admin panel	2019-03-07 21:08:33 +01:00
Daniel García	339044f8aa	Add warning about config panel values overriding env vars.	2019-03-07 20:22:02 +01:00
Daniel García	0718a090e1	Trim spaces from admin token during authentication and validate that the admin panel token is not empty	2019-03-07 20:21:50 +01:00
Daniel García	9e1f030a80	Explicitly close SMTP connection in case of error.	2019-03-07 20:21:10 +01:00
Daniel García	04922f6aa0	Some formatting and dependency updates	2019-03-03 16:11:55 +01:00
Daniel García	7d2bc9e162	Added option to force 2fa at logins and made some changes to two factor code. ... Added newlines to config options to keep them a reasonable length.	2019-03-03 16:09:15 +01:00
Daniel García	10756b0920	Update dependencies and fix some lints	2019-02-27 17:21:04 +01:00
Frank Petrilli	d156170971	Minor typo fix conect => connect	2019-02-24 16:08:38 -08:00
Дамјан Георгиевски	473f8b8e31	remove some unneeded mutability	2019-02-22 20:25:50 +01:00
Daniel García	5794969f5b	Merge pull request #406 from shauder/feature/disable-admin-token ... Allow the Admin token to be disabled in the advanced menu	2019-02-20 23:06:52 +01:00
Shane Faulkner	8b5b06c3d1	Allow the Admin token to be disabled in the advanced menu	2019-02-20 14:56:08 -06:00
Daniel García	b50c27b619	Print a warning when an env variable is being overriden by the config file, and reorganize the main file a bit. ... Modified the JWT key generation, now it should also show the output of OpenSSL in the logs.	2019-02-20 20:59:37 +01:00
Daniel García	5ee04e31e5	Updated dependencies, removed some unnecessary clones and fixed some lints	2019-02-20 17:54:18 +01:00
Daniel García	bf6ae91a6d	Remove margins on small devices	2019-02-18 20:43:34 +01:00
Daniel García	828e3a5795	Add extra padding when the toolbar collapses in small devices	2019-02-18 20:33:32 +01:00
Daniel García	7b5bcd45f8	Show read-only options in the config panel and the env variable names in the tooltips	2019-02-18 19:25:33 +01:00
Miroslav Prasil	0b903fc5f4	Extended the template file and refer to wiki	2019-02-18 14:57:21 +00:00
Miroslav Prasil	4df686f49e	Add an option to not enable WAL (should help in #399)	2019-02-18 10:48:48 +00:00
Daniel García	d7eeaaf249	Escape user data from admin panel when calling JS	2019-02-17 15:24:14 +01:00
TheMardy	84fb6aaddb	Set correct MIME type	2019-02-17 01:08:24 +01:00
Daniel García	a744b9437a	Implemented multiple U2f keys, key names, and compromised checks	2019-02-16 23:07:48 +01:00
Daniel García	6027b969f5	Delete old devices when deauthorizing user sessions	2019-02-16 23:06:26 +01:00
Daniel García	93805a5d7b	Fix Yubikeys deleted on error	2019-02-16 21:30:55 +01:00
TheMardy	8526055bb7	Added images to email templates	2019-02-16 03:48:23 +01:00
TheMardy	a79334ea4c	Added static email image routes	2019-02-16 03:44:30 +01:00
Daniel García	d3773a433a	Removed list of mounted routes at startup by default, with option to add it back. This would get annoying when starting the server frequently, because it printed ~130 lines of mostly useless info	2019-02-13 00:03:16 +01:00
Daniel García	0f0a87becf	Add version to initial message	2019-02-12 22:47:00 +01:00
BlackDex	3b27dbb0aa	Added config option for icon download timeout	2019-02-12 21:56:28 +01:00
Daniel García	9636f33fdb	Implement constant time equal check for admin, 2fa recover and 2fa remember tokens	2019-02-11 23:45:55 +01:00
Daniel García	79fdfd6524	Add missing url parameter	2019-02-10 21:40:20 +01:00
Daniel García	d086a99e5b	Implemented HTML emails with text alternative	2019-02-10 19:12:34 +01:00
TheMardy	22b0b95209	Added HTML templates (+14 squashed commit) ... Squashed commit: [ece2260] Plaintext send_org_invite [01d4884] Plaintext pw_hint_some [6ce5173] Plaintext pw_hint_none [881af3e] Plaintext invite_confirmed [ce78621] Plaintext invite_accepted [13a44a4] Rename send_org_invite.hbs to send_org_invite.html.hbs [b52bf2f] Rename pw_hint_some.hbs to pw_hint_some.html.hbs [e0d1aeb] Rename pw_hint_none.hbs to pw_hint_none.html.hbs [898dbcd] Rename invite_confirmed.hbs to invite_confirmed.html.hbs [107af31] Rename invite_accepted.hbs to invite_accepted.html.hbs [d26d662] Updated send_org_invite template [71f47af] Updated pw_hint_some template [c2ca3c2] Updated pw_hint_none template [50f8bfb] Updated invite_accepted template [17f96f8] Updated invite_confirmed template	2019-02-10 19:04:18 +01:00
Daniel García	28d1588e73	Show version in admin panel	2019-02-10 16:02:46 +01:00
Daniel García	f3b1a5ff3e	Error when admin panel is disabled	2019-02-10 15:26:19 +01:00
Daniel García	330e90a6ac	Hide secrets in config panel	2019-02-08 20:49:04 +01:00
Daniel García	820c8b0dce	Change use of deserialize_with for Option iterator	2019-02-08 19:12:08 +01:00
Daniel García	8b4a6f2a64	Fixed some clippy lints and changed update_uuid_revision to only use one db query	2019-02-08 18:45:07 +01:00
Daniel García	ef63342e20	Add reset user config button	2019-02-06 17:34:32 +01:00
Daniel García	89840790e7	Fix .env path traversal issue	2019-02-06 17:34:31 +01:00
Daniel García	a72809b225	Yubico and SMTP enable/disable master switches	2019-02-06 17:34:31 +01:00
Daniel García	9976e4736e	Add groups	2019-02-06 17:34:31 +01:00
Daniel García	dc92f07232	Added env variable to select config file. Initial work towards groups and added tooltips with descriptions and nicer names	2019-02-06 17:34:30 +01:00
Daniel García	3db815b969	Implemented config form and fixed config priority	2019-02-06 17:34:30 +01:00
Daniel García	ade293cf52	Save config	2019-02-06 17:34:29 +01:00
Daniel García	877408b808	Implement basic config loading and updating. No save to file yet.	2019-02-06 17:34:29 +01:00
Daniel García	86ed75bf7c	Config can now be serialized / deserialized	2019-02-06 17:34:29 +01:00
Daniel García	20d8d800f3	Updated dependencies	2019-02-06 17:34:29 +01:00
Miroslav Prasil	08ca47cadb	Update revision when adding or removing cipher from collection	2019-02-06 14:47:47 +00:00
Miroslav Prasil	5272b465cc	Update revision of affected users when deleting Collection	2019-02-06 13:39:32 +00:00
Miroslav Prasil	637f655b6f	Do not allocate uneccessary Vec	2019-02-05 14:16:07 +00:00
Miroslav Prasil	b3f7394c06	Do not update revision at the end, as we already did that	2019-02-05 14:09:59 +00:00
Miroslav Prasil	1a5ecd4d4a	cipher does not need to be mutable	2019-02-05 13:52:30 +00:00
Miroslav Prasil	bd65c4e312	Remove superfluous cipher.save() call	2019-02-05 13:49:30 +00:00
Miroslav Prasil	bce656c787	Retry updating revision - fixes #383	2019-02-05 11:52:11 +00:00
BlackDex	9026cc8d42	Fixed issue when the iconlist is smaller then 5 ... When the iconlist was smaller then 5 items, it would cause a panic. Solved by using .truncate() on the iconlist.	2019-02-04 17:27:40 +01:00
BlackDex	574b040142	Loop through the iconlist until an icon is found ... Loop for a maximum of 5 times through the iconlist or until a successful download of an icon.	2019-02-04 16:59:52 +01:00
BlackDex	c13f115473	Fixed issue #380 ... - Created a separate function for parsing the sizes attribute - Parsing sizes now with regex - Should work with any non-digit separator	2019-02-04 12:55:39 +01:00
BlackDex	bc461d9baa	Some small changes on the iter of the cookies	2019-01-31 17:58:03 +01:00
BlackDex	5016e30cf2	Added cookies to the icon download request. ... Some sites use XSRF Tokens, or other Tokens to verify a subseqense response. The cookies which are sent during the page request are now used when downloading the favicon. A site which uses this is mijn.ing.nl.	2019-01-31 15:49:58 +01:00
Daniel García	f42ac5f2c0	Update web vault error message	2019-01-29 21:45:25 +01:00
Daniel García	2a60414031	Reuse the client between requests, and use the client when downloading the icons themselves	2019-01-29 21:21:26 +01:00
BlackDex	feb74a5e86	Changed the way to fix the href ... - Using url from reqwest to fix href, this fixes: + "//domain.com/icon.png" + "relative/path/to/icon.png" + "/absolute/path/to/icon.png" - Removed fix_href function - Some variable changes	2019-01-29 18:08:23 +01:00
Daniel García	c0e350b734	Disable icon downloads, accept optional query after icon href, format and clippy fixes	2019-01-28 23:58:32 +01:00
Daniel García	bef1183c49	Only send one notification per vault import and purge, improve move ciphers functions	2019-01-28 00:39:14 +01:00
Daniel García	f935f5cf46	Remove local icon extractor	2019-01-27 16:42:30 +01:00
Daniel García	07388d327f	Merge pull request #370 from BlackDex/favicons ... Added better favicon downloader.	2019-01-27 16:37:47 +01:00
BlackDex	4de16b2d17	Removed unwrap and added ?	2019-01-27 16:25:02 +01:00
BlackDex	da068a43c1	Moved function call to get_icon_url to prevent error bubbeling	2019-01-27 16:03:18 +01:00
BlackDex	9657463717	Added better favicon downloader.	2019-01-27 15:39:19 +01:00
Daniel García	69036cc6a4	Add disabled user badge (no password) and deauthorize button to admin page.	2019-01-26 19:28:54 +01:00
Daniel García	700e084101	Add 2FA icon to admin panel	2019-01-25 18:50:57 +01:00
Daniel García	a1dc47b826	Change config to thread-safe system, needed for a future config panel. ... Improved some two factor methods.	2019-01-25 18:24:57 +01:00
Daniel García	86de0ca17b	Fix editing users from collections menu	2019-01-25 17:43:51 +01:00
Stephen White	fc0e239bdf	No point calling find_by_uuid now we don't use the result.	2019-01-25 14:25:15 +00:00
Stephen White	928ad6c1d8	Fix the list of users with access to a collection to display correctly. ... https://github.com/dani-garcia/bitwarden_rs/issues/364	2019-01-25 14:18:06 +00:00
Daniel García	ddd49596ba	Fix invite empty email	2019-01-22 17:26:17 +01:00
Daniel García	b8cabadd43	Fix admin page links	2019-01-21 23:41:27 +01:00
Daniel García	ce42b07a80	Update Diesel to 1.4 and other dependencies	2019-01-21 15:29:52 +01:00
Daniel García	bfd93e5b13	Show organizations in admin panel, implement reload templates option	2019-01-20 17:43:56 +01:00
Daniel García	a797459560	Implement HIBP check [WIP]. ... Add extra security attributes to admin cookie. Error handling.	2019-01-20 15:36:33 +01:00
Daniel García	6cbb683f99	Rename admin templates to match email	2019-01-19 22:59:32 +01:00
Daniel García	92bbb98d48	Created base template	2019-01-19 22:12:52 +01:00
Daniel García	834c847746	Implement admin JWT cookie, separate JWT issuers for each type of token and migrate admin page to handlebars template	2019-01-19 21:41:49 +01:00
Daniel García	97aa407fe4	Move email templates to subfolder	2019-01-19 17:40:18 +01:00
TBK	d8116a80df	Add Feature-Policy header	2019-01-17 21:08:31 +01:00
Daniel García	e0aec8d373	Use new i64::to_be_bytes and remove byteorder dep ... (https://doc.rust-lang.org/stable/std/primitive.i64.html#method.to_be_bytes)	2019-01-16 22:14:17 +01:00
Daniel García	1ce2587330	Correct update cipher order: first save cipher, then cipher-folder, then notify	2019-01-16 19:57:49 +01:00
Miroslav Prasil	71a10e0378	Fix sharing the item to organization.	2019-01-16 11:33:43 +00:00
Daniel García	9bf13b7872	Can't return inside multipart closure	2019-01-15 22:00:41 +01:00
Daniel García	d420992f8c	Update some function calls to use ?	2019-01-15 21:47:16 +01:00
Daniel García	c259a0e3e2	Save recovery code when using yubikey and stop repeating headers.user everywhere	2019-01-15 21:38:21 +01:00
Daniel García	432be274ba	Improve org mismatch check, consider different orgs	2019-01-15 17:31:03 +01:00
Daniel García	484bf5b703	Check that the client is not updating an outdated cipher, that should be part of an org now	2019-01-15 16:35:08 +01:00
Daniel García	4bf32af60e	Fix folder notifications, enable template strict mode and add missing option to env template	2019-01-15 15:28:47 +01:00
Daniel García	0e4a746eeb	Added SMTP_FROM_NAME	2019-01-15 15:28:47 +01:00
Daniel García	2fe919cc5e	Embed the default templates	2019-01-15 15:28:46 +01:00
Daniel García	bcd750695f	Default to $data_folder/templates and remove dev option (use TEMPLATES_FOLDER=src/static/templates instead)	2019-01-15 15:28:46 +01:00
Daniel García	19b6bb0fd6	Initial stab at templates	2019-01-15 15:28:46 +01:00
Daniel García	f571df7367	Revert yubikey feature, not needed anymore	2019-01-12 15:28:41 +01:00
Daniel García	de51bc782e	Updated dependencies, removing need for yubico fork	2019-01-12 15:23:46 +01:00
Daniel García	c5aef60bd7	Implement unofficial warning message	2019-01-11 14:20:42 +01:00
Daniel García	6f52104324	Fix casing error in Attachment, should fix 'Attachment doesn't exist' errors	2019-01-11 01:35:15 +01:00
Daniel García	1d7f704754	Send CipherUpdate when adding and deleting attachments	2019-01-11 01:12:54 +01:00
Daniel García	1d034749f7	Fix AArch64 build by disabling yubico	2019-01-10 23:54:01 +01:00
Daniel García	320266606e	Implement put collections	2019-01-08 20:27:28 +01:00
Daniel García	a0a08c4c5a	Include IP in invalid admin token error	2019-01-08 16:17:18 +01:00
Daniel García	4309df8334	Only create invitations when SMTP is disabled, and ignore invitations if we have a token. ... Disallow users from accepting invitation twice	2019-01-08 15:42:26 +01:00
Daniel García	f1161c65fb	Make sure an invitation is created when reinviting	2019-01-08 14:05:05 +01:00
Daniel García	50eeb4f651	Remove whitespace before processing tokens	2019-01-07 20:37:14 +01:00
Daniel García	21b85b78b1	Changed reinvite check and removed obsolete comment	2019-01-07 15:29:57 +01:00
Daniel García	673adde9f1	Make the admin retype the user name before deleting	2019-01-07 14:48:10 +01:00
Daniel García	c9063a06b4	Print unauthorized error message	2019-01-07 02:18:51 +01:00
Daniel García	5e37471488	Merge pull request #323 from njfox/invite_accepted_email ... Send email notifications when invitations are accepted/confirmed	2019-01-06 14:12:24 +01:00
Nick Fox	0a74e79cea	Refactor generate_invite_claims, make org_name and org_id optional	2019-01-05 23:03:49 -05:00
Nick Fox	7db66f73f0	Refactor invited_by_email check	2019-01-05 13:46:45 -05:00
Nick Fox	2f5bdc23f6	Fix formatting and add vault link to notification emails	2019-01-05 13:36:08 -05:00
Nick Fox	cec28a85ac	Update admin page to work with new invitation flow	2019-01-04 10:32:51 -05:00
Daniel García	5f49ecd7f3	Updated dependencies to use u2f crate directly, and some style changes	2019-01-04 00:25:38 +01:00
Nick Fox	736c0e62f2	Send emails to inviters/invitees when invites are accepted/confirmed	2019-01-02 22:20:39 -05:00
Nick Fox	43eb064351	Replace invite/reinvite email functions with generic send_email	2019-01-02 22:19:44 -05:00
Daniel García	30e768613b	Start using rustfmt and some style changes to make some lines shorter	2018-12-30 23:34:31 +01:00
Daniel García	adb8052689	Updated Error to implement Display and Debug, instead of using custom methods	2018-12-30 21:43:56 +01:00
Daniel García	1483829c94	Removed invalid todo	2018-12-30 21:43:56 +01:00
Daniel García	acb9d1b3c6	Remove config option for admin email, embdedded admin page, managed IO::Error, and added security and cache headers globally	2018-12-30 21:43:56 +01:00
Daniel García	301919d9d4	Modified navigation bar and corrected some comments	2018-12-30 21:43:55 +01:00
Daniel García	2bb0b15e04	Implemented better errors for JWT	2018-12-30 21:43:55 +01:00
Daniel García	250a2b340f	Use new Errors in latest changes	2018-12-30 21:43:55 +01:00
Daniel García	b2fc0499f6	Finish invite functionality, and remove virtual organization	2018-12-30 21:40:26 +01:00
Daniel García	6a99849a1e	Implemented proper error handling, now we can do user.save($conn)?; and it works. ... In the future, maybe we can do the same with the `find_by_id` methods that return an Option.	2018-12-30 21:31:12 +01:00
Daniel García	172f1770cf	Embed the icon in the binary, no need to download when it's not going to change	2018-12-30 21:31:12 +01:00
Daniel García	1b5134dfe2	Fixed delete user when 2FA is enabled, implemented delete user for admin panel, and the front-end part for invite user. Secured admin panel behind a configurable token.	2018-12-30 21:31:11 +01:00
Daniel García	5fecf09631	Initial version of admin panel, list users and reload user list works. No serious auth method yet, password is 'token123'	2018-12-30 21:31:11 +01:00
Daniel García	7d7d8afed9	Merge pull request #318 from njfox/reinvite_endpoint ... Add email reinvite endpoint	2018-12-30 21:22:26 +01:00
Nick Fox	f20c4705d9	Refactor invite claims and disallow reinvites to virtual_org	2018-12-30 00:19:01 -05:00
Nick Fox	3142d8d01f	Add more detail to invitation not found error	2018-12-29 23:28:19 -05:00
Nick Fox	84fa5a4ed6	Implement reinvite endpoint	2018-12-29 23:24:38 -05:00
Daniel García	004a3f891f	Merge pull request #315 from aksdb/master ... Restrict join on users_collections to current user (fixes #313)	2018-12-28 21:06:30 +01:00
Andreas Schneider	e7ea5097f4	Restrict join on users_collections to current user (fixes #313)	2018-12-28 15:25:51 +01:00
Miroslav Prasil	8451a70de6	Rewrite find_by_user_uuid to use one query	2018-12-27 18:56:01 +01:00
Nick Fox	ec715d78fb	Change log timestamp format so fail2ban can parse it	2018-12-26 11:54:31 -05:00
Nick Fox	b0ac640d8b	Use JWT to validate existing user invites	2018-12-23 15:15:44 -05:00