145 Commits

Autor	SHA1	Nachricht	Datum
BlackDex	f847c6e225	Updated the config options descriptions. ... Made some small changes to the description of the config options for SMTP. Some were a bit cryptic and missing some extra descriptions. Also made it more clear which type of secured smtp connection is going to used.	2020-09-19 17:09:58 +02:00
BlackDex	c877583979	Allow multiple SMTP Auth meganisms. ... - Allow all SMTP Auth meganisms supported by Lettre. - The config value order is leading and values can be separated by a comma ',' - Case doesn't matter, and invalid values are ignored. - Warning is printed when no valid value is found at all.	2020-09-12 21:47:24 +02:00
Daniel García	0365b7c6a4	Add support for multiple simultaneous database features by using macros. ... Diesel requires the following changes: - Separate connection and pool types per connection, the generate_connections! macro generates an enum with a variant per db type - Separate migrations and schemas, these were always imported as one type depending on db feature, now they are all imported under different module names - Separate model objects per connection, the db_object! macro generates one object for each connection with the diesel macros, a generic object, and methods to convert between the connection-specific and the generic ones - Separate connection queries, the db_run! macro allows writing only one that gets compiled for all databases or multiple ones	2020-08-24 20:11:17 +02:00
Jeremy Lin	c05dc50f53	Add more docs on the email_token_size setting	2020-08-22 17:35:55 -07:00
Jeremy Lin	570d6c8bf9	Add support for restricting org creation to certain users	2020-08-05 22:35:29 -07:00
Jeremy Lin	071a3b2a32	Log timestamps with milliseconds by default	2020-07-23 14:19:51 -07:00
Jeremy Lin	d348f12a0e	Add config option for log timestamp format	2020-07-22 21:50:49 -07:00
Daniel García	668d5c23dc	Removed try_trait and some formatting, particularly around imports	2020-07-14 18:34:22 +02:00
Daniel García	596c9b8691	Add option to set name during HELO in email settings	2020-07-05 01:59:15 +02:00
Armaan Tobaccowalla	624791e09a	Allow postgres:// DATABASE_URL	2020-07-04 16:13:27 -04:00
BlackDex	3c66deb5cc	Redesign of the admin interface. ... Main changes: - Splitted up settings and users into two separate pages. - Added verified shield when the e-mail address has been verified. - Added the amount of personal items in the database to the users overview. - Added Organizations and Diagnostics pages. - Shows if DNS resolving works. - Shows if there is a posible time drift. - Shows current versions of server and web-vault. - Optimized logo-gray.png using optipng Items which can be added later: - Amount of cipher items accessible for a user, not only his personal items. - Amount of users per Org - Version update check in the diagnostics overview. - Copy/Pasteable runtime config which has sensitive data changed or removed for support questions either on the forum or github issues. - Option to delete Orgs and all its passwords (when there are no members anymore). - Etc....	2020-05-28 10:46:25 +02:00
Jeremy Lin	a314933557	Allow email changes for existing accounts even when signups are disabled	2020-05-24 14:38:19 -07:00
theycallmesteve	632f4d5453	Whitespace fixes	2020-05-07 18:02:37 -04:00
Daniel García	9cca64003a	Remove unused dependency and simple feature, update dependencies and fix some clippy lints	2020-05-03 17:24:51 +02:00
Daniel García	0de52c6c99	Merge pull request #957 from jjlin/domain-whitelist ... Domain whitelist cleanup and fixes	2020-04-18 12:08:48 +02:00
Jeremy Lin	86685c1cd2	Ensure email domain comparison is case-insensitive	2020-04-11 14:51:36 -07:00
Jeremy Lin	0a68de6c24	Warn on empty ADMIN_TOKEN instead of bailing out ... The admin page will still be disabled. Fixes #849.	2020-04-09 20:55:08 -07:00
Jeremy Lin	c2a324e5da	Clean up domain whitelist logic ... * Make `SIGNUPS_DOMAINS_WHITELIST` override the `SIGNUPS_ALLOWED` setting. Otherwise, a common pitfall is to set `SIGNUPS_DOMAINS_WHITELIST` without realizing that `SIGNUPS_ALLOWED=false` must also be set. * Whitespace is now accepted in `SIGNUPS_DOMAINS_WHITELIST`. That is, `foo.com, bar.com` is now equivalent to `foo.com,bar.com`. * Add validation on `SIGNUPS_DOMAINS_WHITELIST`. For example, `foo.com,` is rejected as containing an empty token.	2020-04-09 01:42:27 -07:00
Daniel García	70f3ab8ec3	Migrate lazy_static to once_cell, less macro magic and slightly faster	2020-03-09 22:04:03 +01:00
BlackDex	5a974c7b94	Added SMTP test button in the admin gui ... - Added a test button for checking the e-mail settings. - Fixed a bug with the _post JavaScript function: A function was overwriten with a variable and errors were not handled correctly like a 500 for example.	2020-02-26 16:49:56 +01:00
Daniel García	cd8907542a	Make sure the provided domain contains the protocol and show a useful error when it doesn't	2020-02-23 14:55:27 +01:00
Jeremy Lin	29a0795219	Add backend support for alternate base dir (subdir/subpath) hosting ... To use this, include a path in the `DOMAIN` URL, e.g.: * `DOMAIN=https://example.com/custom-path` * `DOMAIN=https://example.com/multiple/levels/are/ok`	2020-02-18 21:27:00 -08:00
Daniel García	325039c316	Attachment size limits, per-user and per-organization	2020-02-17 22:56:26 +01:00
Daniel García	8867626de8	Add option to change invitation org name, fixes #825 ... Add option to allow additional iframe ancestors, fixes #843 Sort the rocket routes before printing them	2020-02-04 22:14:50 +01:00
Daniel García	480ba933fa	Don't error if admin token is empty but disabled	2020-01-30 22:10:50 +01:00
Miro Prasil	c4101162d6	SIGNUPS_ALLOWED with no whitelist [fixes #830] ... This reverts back to `SIGNUPS_ALLOWED` when there is no domain whitelist set. The functionality was broken in 64d6f72.	2020-01-29 11:32:42 +00:00
Daniel García	632d55265b	Merge pull request #824 from tomuta/fix_change_email ... Fix change email when no whitelist is configured	2020-01-28 20:52:16 +01:00
tomuta	e277f7d1c1	Fix change email when no whitelist is configured ... Fixes issue #792	2020-01-26 13:34:56 -07:00
Daniel García	ff7b4a3d38	Update handlebars to 3.0 which included performance improvements. ... Updated lettre to newer git revision, which should give better error messages now.	2020-01-26 15:29:14 +01:00
Daniel García	d212dfe735	Accept y/n, True/False, 1/0 as booleans in environment vars	2020-01-20 22:28:54 +01:00
Daniel García	88c56de97b	Config option for client IP header	2019-12-27 18:42:39 +01:00
Daniel García	a0ece3754b	Formatting	2019-12-27 18:37:14 +01:00
Daniel García	8d1b72b951	Collapsed log messages from 3 lines per request to 2 and hidden the ones valued as less informative. ... Use LOG_LEVEL debug or trace to recover them. Removed LOG_MOUNTS and bundled it with LOG_LEVEL debug and trace. Removed duplicate error messages Made websocket not proxied message more prominent, but only print it once.	2019-12-06 22:46:12 +01:00
Daniel García	1e224220a8	Updated deps and fixed some lints	2019-11-28 21:59:05 +01:00
tomuta	bd1e8be328	Implement change-email, email-verification, account-recovery, and welcome notifications	2019-11-24 22:28:49 -07:00
tomuta	64d6f72e6c	Add the ability to disable signups, but allow signups from a whitelist ... This feature can be enabled by setting SIGNUPS_ALLOWED=false and providing a comma-separated list of whitelisted domains in SIGNUPS_DOMAINS_WHITELIST. Fixes #727	2019-11-16 15:01:45 -07:00
BlackDex	3f6809bcdf	Fixed issue/request #705 ... Added a config option to disable time drifted totp codes. Default is false, since this is what the RFC recommends.	2019-11-07 17:11:29 +01:00
BlackDex	c52adef919	Added configurable smtp timeout. ... - Added config option for smtp timeout - Lowered default timeout to 15 seconds instead of default 60.	2019-11-06 21:39:33 +01:00
Daniel García	d29b6bee28	Remove unnecessary clones and other clippy fixes	2019-11-02 17:39:01 +01:00
vpl	3b7a5bd102	Move 2FA email config to after SMTP config	2019-10-16 07:11:16 +02:00
Daniel García	881c1978eb	Error when the URL scheme doesn't match the database type	2019-10-08 19:34:47 +02:00
Daniel García	662bc27523	Updated dependencies and fixed disable_admin_token description	2019-10-08 19:33:27 +02:00
BlackDex	9124d8a3fb	Updated icon blacklisting. ... - Blacklisting was not effective for redirects and rel href - Able to blacklist non global IP's like RFC1918, multicast etc...	2019-10-05 14:48:15 +02:00
Daniel García	e3404dd322	Use the local scripts instead of cloudflare, remove jquery and update config so disabling a master toggle doesn't remove the values	2019-08-31 17:47:52 +02:00
Daniel García	c07c9995ea	Merge pull request #555 from vverst/email-codes ... Add Email 2FA login	2019-08-27 21:07:41 +02:00
vpl	5d50b1ee3c	Merge remote-tracking branch 'upstream/master' into email-codes	2019-08-26 21:38:45 +02:00
vpl	591ae10144	Get token from single u64	2019-08-26 20:26:54 +02:00
ViViDboarder	2d2745195e	Allow explicitly defined smtp auth mechansim	2019-08-23 16:22:14 -07:00
Daniel García	d23d4f2c1d	Allow editing HIBP key in the admin panel	2019-08-20 23:53:00 +02:00
Daniel García	515b87755a	Update HIBP to v3, requires paid API key, fixes #583	2019-08-20 20:07:12 +02:00
vpl	ee7837d022	Add option to require new device emails	2019-08-19 22:14:00 +02:00
vpl	ad2225b6e5	Add configuration options for Email 2FA	2019-08-10 22:39:04 +02:00
vpl	0b60f20eb3	Add email message for twofactor email codes	2019-08-03 18:49:34 +02:00
vpl	bc6a53b847	Add new device email when user logs in	2019-07-22 08:26:24 +02:00
Cubity_First	6989fc7bdb	Corrected Spelling ... Changed it from Chache to Cache on Line 207	2019-06-18 15:45:19 +01:00
Daniel García	9add8e19eb	Update dependencies and remove travis unused feature	2019-06-02 00:28:20 +02:00
Nils Domrose	dc36f0cb6c	re-added sqlite check_db code, cleanup	2019-05-27 22:58:52 +02:00
Nils Domrose	ff759397f6	initial mysql support	2019-05-26 23:03:05 +02:00
Emil Madsen	ab95a69dc8	Rework migrations for MySQL	2019-05-20 21:12:41 +02:00
Emil Madsen	85c8a01f4a	Merge branch 'master' of github.com:Skeen/bitwarden_rs	2019-05-20 19:53:18 +02:00
Emil Madsen	42af7c6dab	MySQL database	2019-05-20 19:53:14 +02:00
Daniel García	8d9827c55f	Implement selection between global config and user settings for duo keys.	2019-04-11 18:40:03 +02:00
Daniel García	cad63f9761	Auto generate akey	2019-04-11 16:08:26 +02:00
Daniel García	bf446f44f9	Enable DATA_FOLDER to affect default CONFIG_FILE path	2019-04-11 15:41:13 +02:00
Daniel García	754087b990	Add global duo config and document options in .env template	2019-04-07 18:58:15 +02:00
Daniel García	c5832f2b30	With the latest fern, syslog can be a config option instead of a build flag	2019-03-29 20:27:20 +01:00
Daniel García	2475c36a75	Implement log_level config option	2019-03-25 14:23:14 +01:00
Daniel García	4b40cda910	Added domain blacklist regex for icons service and improved valid domain check. ... Reorganized the icons code a bit.	2019-03-18 22:12:39 +01:00
Daniel García	e93538cea9	Add option to use wrapped TLS in email, instead of STARTTLS upgrade	2019-03-10 14:45:42 +01:00
Daniel García	0718a090e1	Trim spaces from admin token during authentication and validate that the admin panel token is not empty	2019-03-07 20:21:50 +01:00
Daniel García	7d2bc9e162	Added option to force 2fa at logins and made some changes to two factor code. ... Added newlines to config options to keep them a reasonable length.	2019-03-03 16:09:15 +01:00
Daniel García	5794969f5b	Merge pull request #406 from shauder/feature/disable-admin-token ... Allow the Admin token to be disabled in the advanced menu	2019-02-20 23:06:52 +01:00
Shane Faulkner	8b5b06c3d1	Allow the Admin token to be disabled in the advanced menu	2019-02-20 14:56:08 -06:00
Daniel García	b50c27b619	Print a warning when an env variable is being overriden by the config file, and reorganize the main file a bit. ... Modified the JWT key generation, now it should also show the output of OpenSSL in the logs.	2019-02-20 20:59:37 +01:00
Daniel García	7b5bcd45f8	Show read-only options in the config panel and the env variable names in the tooltips	2019-02-18 19:25:33 +01:00
Miroslav Prasil	0b903fc5f4	Extended the template file and refer to wiki	2019-02-18 14:57:21 +00:00
Miroslav Prasil	4df686f49e	Add an option to not enable WAL (should help in #399)	2019-02-18 10:48:48 +00:00
Daniel García	d7eeaaf249	Escape user data from admin panel when calling JS	2019-02-17 15:24:14 +01:00
Daniel García	d3773a433a	Removed list of mounted routes at startup by default, with option to add it back. This would get annoying when starting the server frequently, because it printed ~130 lines of mostly useless info	2019-02-13 00:03:16 +01:00
BlackDex	3b27dbb0aa	Added config option for icon download timeout	2019-02-12 21:56:28 +01:00
Daniel García	d086a99e5b	Implemented HTML emails with text alternative	2019-02-10 19:12:34 +01:00
Daniel García	330e90a6ac	Hide secrets in config panel	2019-02-08 20:49:04 +01:00
Daniel García	8b4a6f2a64	Fixed some clippy lints and changed update_uuid_revision to only use one db query	2019-02-08 18:45:07 +01:00
Daniel García	ef63342e20	Add reset user config button	2019-02-06 17:34:32 +01:00
Daniel García	89840790e7	Fix .env path traversal issue	2019-02-06 17:34:31 +01:00
Daniel García	a72809b225	Yubico and SMTP enable/disable master switches	2019-02-06 17:34:31 +01:00
Daniel García	9976e4736e	Add groups	2019-02-06 17:34:31 +01:00
Daniel García	dc92f07232	Added env variable to select config file. Initial work towards groups and added tooltips with descriptions and nicer names	2019-02-06 17:34:30 +01:00
Daniel García	3db815b969	Implemented config form and fixed config priority	2019-02-06 17:34:30 +01:00
Daniel García	ade293cf52	Save config	2019-02-06 17:34:29 +01:00
Daniel García	877408b808	Implement basic config loading and updating. No save to file yet.	2019-02-06 17:34:29 +01:00
Daniel García	86ed75bf7c	Config can now be serialized / deserialized	2019-02-06 17:34:29 +01:00
Daniel García	c0e350b734	Disable icon downloads, accept optional query after icon href, format and clippy fixes	2019-01-28 23:58:32 +01:00
Daniel García	f935f5cf46	Remove local icon extractor	2019-01-27 16:42:30 +01:00
Daniel García	a1dc47b826	Change config to thread-safe system, needed for a future config panel. ... Improved some two factor methods.	2019-01-25 18:24:57 +01:00