513 Commits

Autor	SHA1	Nachricht	Datum
Daniel García	61515160a7	Allow changing error codes and create an empty error. ... Return 404 instead of 400 when no accounts breached.	2019-03-14 00:17:36 +01:00
Daniel García	e93538cea9	Add option to use wrapped TLS in email, instead of STARTTLS upgrade	2019-03-10 14:45:42 +01:00
Daniel García	b4244b28b6	Update admin page scripts and fixed broken tooltip	2019-03-09 14:41:34 +01:00
Daniel García	43f9038325	Add option to force resync clients in admin panel	2019-03-07 21:08:33 +01:00
Daniel García	339044f8aa	Add warning about config panel values overriding env vars.	2019-03-07 20:22:02 +01:00
Daniel García	0718a090e1	Trim spaces from admin token during authentication and validate that the admin panel token is not empty	2019-03-07 20:21:50 +01:00
Daniel García	9e1f030a80	Explicitly close SMTP connection in case of error.	2019-03-07 20:21:10 +01:00
Daniel García	04922f6aa0	Some formatting and dependency updates	2019-03-03 16:11:55 +01:00
Daniel García	7d2bc9e162	Added option to force 2fa at logins and made some changes to two factor code. ... Added newlines to config options to keep them a reasonable length.	2019-03-03 16:09:15 +01:00
Daniel García	10756b0920	Update dependencies and fix some lints	2019-02-27 17:21:04 +01:00
Frank Petrilli	d156170971	Minor typo fix conect => connect	2019-02-24 16:08:38 -08:00
Дамјан Георгиевски	473f8b8e31	remove some unneeded mutability	2019-02-22 20:25:50 +01:00
Daniel García	5794969f5b	Merge pull request #406 from shauder/feature/disable-admin-token ... Allow the Admin token to be disabled in the advanced menu	2019-02-20 23:06:52 +01:00
Shane Faulkner	8b5b06c3d1	Allow the Admin token to be disabled in the advanced menu	2019-02-20 14:56:08 -06:00
Daniel García	b50c27b619	Print a warning when an env variable is being overriden by the config file, and reorganize the main file a bit. ... Modified the JWT key generation, now it should also show the output of OpenSSL in the logs.	2019-02-20 20:59:37 +01:00
Daniel García	5ee04e31e5	Updated dependencies, removed some unnecessary clones and fixed some lints	2019-02-20 17:54:18 +01:00
Daniel García	bf6ae91a6d	Remove margins on small devices	2019-02-18 20:43:34 +01:00
Daniel García	828e3a5795	Add extra padding when the toolbar collapses in small devices	2019-02-18 20:33:32 +01:00
Daniel García	7b5bcd45f8	Show read-only options in the config panel and the env variable names in the tooltips	2019-02-18 19:25:33 +01:00
Miroslav Prasil	0b903fc5f4	Extended the template file and refer to wiki	2019-02-18 14:57:21 +00:00
Miroslav Prasil	4df686f49e	Add an option to not enable WAL (should help in #399)	2019-02-18 10:48:48 +00:00
Daniel García	d7eeaaf249	Escape user data from admin panel when calling JS	2019-02-17 15:24:14 +01:00
TheMardy	84fb6aaddb	Set correct MIME type	2019-02-17 01:08:24 +01:00
Daniel García	a744b9437a	Implemented multiple U2f keys, key names, and compromised checks	2019-02-16 23:07:48 +01:00
Daniel García	6027b969f5	Delete old devices when deauthorizing user sessions	2019-02-16 23:06:26 +01:00
Daniel García	93805a5d7b	Fix Yubikeys deleted on error	2019-02-16 21:30:55 +01:00
TheMardy	8526055bb7	Added images to email templates	2019-02-16 03:48:23 +01:00
TheMardy	a79334ea4c	Added static email image routes	2019-02-16 03:44:30 +01:00
Daniel García	d3773a433a	Removed list of mounted routes at startup by default, with option to add it back. This would get annoying when starting the server frequently, because it printed ~130 lines of mostly useless info	2019-02-13 00:03:16 +01:00
Daniel García	0f0a87becf	Add version to initial message	2019-02-12 22:47:00 +01:00
BlackDex	3b27dbb0aa	Added config option for icon download timeout	2019-02-12 21:56:28 +01:00
Daniel García	9636f33fdb	Implement constant time equal check for admin, 2fa recover and 2fa remember tokens	2019-02-11 23:45:55 +01:00
Daniel García	79fdfd6524	Add missing url parameter	2019-02-10 21:40:20 +01:00
Daniel García	d086a99e5b	Implemented HTML emails with text alternative	2019-02-10 19:12:34 +01:00
TheMardy	22b0b95209	Added HTML templates (+14 squashed commit) ... Squashed commit: [ece2260] Plaintext send_org_invite [01d4884] Plaintext pw_hint_some [6ce5173] Plaintext pw_hint_none [881af3e] Plaintext invite_confirmed [ce78621] Plaintext invite_accepted [13a44a4] Rename send_org_invite.hbs to send_org_invite.html.hbs [b52bf2f] Rename pw_hint_some.hbs to pw_hint_some.html.hbs [e0d1aeb] Rename pw_hint_none.hbs to pw_hint_none.html.hbs [898dbcd] Rename invite_confirmed.hbs to invite_confirmed.html.hbs [107af31] Rename invite_accepted.hbs to invite_accepted.html.hbs [d26d662] Updated send_org_invite template [71f47af] Updated pw_hint_some template [c2ca3c2] Updated pw_hint_none template [50f8bfb] Updated invite_accepted template [17f96f8] Updated invite_confirmed template	2019-02-10 19:04:18 +01:00
Daniel García	28d1588e73	Show version in admin panel	2019-02-10 16:02:46 +01:00
Daniel García	f3b1a5ff3e	Error when admin panel is disabled	2019-02-10 15:26:19 +01:00
Daniel García	330e90a6ac	Hide secrets in config panel	2019-02-08 20:49:04 +01:00
Daniel García	820c8b0dce	Change use of deserialize_with for Option iterator	2019-02-08 19:12:08 +01:00
Daniel García	8b4a6f2a64	Fixed some clippy lints and changed update_uuid_revision to only use one db query	2019-02-08 18:45:07 +01:00
Daniel García	ef63342e20	Add reset user config button	2019-02-06 17:34:32 +01:00
Daniel García	89840790e7	Fix .env path traversal issue	2019-02-06 17:34:31 +01:00
Daniel García	a72809b225	Yubico and SMTP enable/disable master switches	2019-02-06 17:34:31 +01:00
Daniel García	9976e4736e	Add groups	2019-02-06 17:34:31 +01:00
Daniel García	dc92f07232	Added env variable to select config file. Initial work towards groups and added tooltips with descriptions and nicer names	2019-02-06 17:34:30 +01:00
Daniel García	3db815b969	Implemented config form and fixed config priority	2019-02-06 17:34:30 +01:00
Daniel García	ade293cf52	Save config	2019-02-06 17:34:29 +01:00
Daniel García	877408b808	Implement basic config loading and updating. No save to file yet.	2019-02-06 17:34:29 +01:00
Daniel García	86ed75bf7c	Config can now be serialized / deserialized	2019-02-06 17:34:29 +01:00
Daniel García	20d8d800f3	Updated dependencies	2019-02-06 17:34:29 +01:00
Miroslav Prasil	08ca47cadb	Update revision when adding or removing cipher from collection	2019-02-06 14:47:47 +00:00
Miroslav Prasil	5272b465cc	Update revision of affected users when deleting Collection	2019-02-06 13:39:32 +00:00
Miroslav Prasil	637f655b6f	Do not allocate uneccessary Vec	2019-02-05 14:16:07 +00:00
Miroslav Prasil	b3f7394c06	Do not update revision at the end, as we already did that	2019-02-05 14:09:59 +00:00
Miroslav Prasil	1a5ecd4d4a	cipher does not need to be mutable	2019-02-05 13:52:30 +00:00
Miroslav Prasil	bd65c4e312	Remove superfluous cipher.save() call	2019-02-05 13:49:30 +00:00
Miroslav Prasil	bce656c787	Retry updating revision - fixes #383	2019-02-05 11:52:11 +00:00
BlackDex	9026cc8d42	Fixed issue when the iconlist is smaller then 5 ... When the iconlist was smaller then 5 items, it would cause a panic. Solved by using .truncate() on the iconlist.	2019-02-04 17:27:40 +01:00
BlackDex	574b040142	Loop through the iconlist until an icon is found ... Loop for a maximum of 5 times through the iconlist or until a successful download of an icon.	2019-02-04 16:59:52 +01:00
BlackDex	c13f115473	Fixed issue #380 ... - Created a separate function for parsing the sizes attribute - Parsing sizes now with regex - Should work with any non-digit separator	2019-02-04 12:55:39 +01:00
BlackDex	bc461d9baa	Some small changes on the iter of the cookies	2019-01-31 17:58:03 +01:00
BlackDex	5016e30cf2	Added cookies to the icon download request. ... Some sites use XSRF Tokens, or other Tokens to verify a subseqense response. The cookies which are sent during the page request are now used when downloading the favicon. A site which uses this is mijn.ing.nl.	2019-01-31 15:49:58 +01:00
Daniel García	f42ac5f2c0	Update web vault error message	2019-01-29 21:45:25 +01:00
Daniel García	2a60414031	Reuse the client between requests, and use the client when downloading the icons themselves	2019-01-29 21:21:26 +01:00
BlackDex	feb74a5e86	Changed the way to fix the href ... - Using url from reqwest to fix href, this fixes: + "//domain.com/icon.png" + "relative/path/to/icon.png" + "/absolute/path/to/icon.png" - Removed fix_href function - Some variable changes	2019-01-29 18:08:23 +01:00
Daniel García	c0e350b734	Disable icon downloads, accept optional query after icon href, format and clippy fixes	2019-01-28 23:58:32 +01:00
Daniel García	bef1183c49	Only send one notification per vault import and purge, improve move ciphers functions	2019-01-28 00:39:14 +01:00
Daniel García	f935f5cf46	Remove local icon extractor	2019-01-27 16:42:30 +01:00
Daniel García	07388d327f	Merge pull request #370 from BlackDex/favicons ... Added better favicon downloader.	2019-01-27 16:37:47 +01:00
BlackDex	4de16b2d17	Removed unwrap and added ?	2019-01-27 16:25:02 +01:00
BlackDex	da068a43c1	Moved function call to get_icon_url to prevent error bubbeling	2019-01-27 16:03:18 +01:00
BlackDex	9657463717	Added better favicon downloader.	2019-01-27 15:39:19 +01:00
Daniel García	69036cc6a4	Add disabled user badge (no password) and deauthorize button to admin page.	2019-01-26 19:28:54 +01:00
Daniel García	700e084101	Add 2FA icon to admin panel	2019-01-25 18:50:57 +01:00
Daniel García	a1dc47b826	Change config to thread-safe system, needed for a future config panel. ... Improved some two factor methods.	2019-01-25 18:24:57 +01:00
Daniel García	86de0ca17b	Fix editing users from collections menu	2019-01-25 17:43:51 +01:00
Stephen White	fc0e239bdf	No point calling find_by_uuid now we don't use the result.	2019-01-25 14:25:15 +00:00
Stephen White	928ad6c1d8	Fix the list of users with access to a collection to display correctly. ... https://github.com/dani-garcia/bitwarden_rs/issues/364	2019-01-25 14:18:06 +00:00
Daniel García	ddd49596ba	Fix invite empty email	2019-01-22 17:26:17 +01:00
Daniel García	b8cabadd43	Fix admin page links	2019-01-21 23:41:27 +01:00
Daniel García	ce42b07a80	Update Diesel to 1.4 and other dependencies	2019-01-21 15:29:52 +01:00
Daniel García	bfd93e5b13	Show organizations in admin panel, implement reload templates option	2019-01-20 17:43:56 +01:00
Daniel García	a797459560	Implement HIBP check [WIP]. ... Add extra security attributes to admin cookie. Error handling.	2019-01-20 15:36:33 +01:00
Daniel García	6cbb683f99	Rename admin templates to match email	2019-01-19 22:59:32 +01:00
Daniel García	92bbb98d48	Created base template	2019-01-19 22:12:52 +01:00
Daniel García	834c847746	Implement admin JWT cookie, separate JWT issuers for each type of token and migrate admin page to handlebars template	2019-01-19 21:41:49 +01:00
Daniel García	97aa407fe4	Move email templates to subfolder	2019-01-19 17:40:18 +01:00
TBK	d8116a80df	Add Feature-Policy header	2019-01-17 21:08:31 +01:00
Daniel García	e0aec8d373	Use new i64::to_be_bytes and remove byteorder dep ... (https://doc.rust-lang.org/stable/std/primitive.i64.html#method.to_be_bytes)	2019-01-16 22:14:17 +01:00
Daniel García	1ce2587330	Correct update cipher order: first save cipher, then cipher-folder, then notify	2019-01-16 19:57:49 +01:00
Miroslav Prasil	71a10e0378	Fix sharing the item to organization.	2019-01-16 11:33:43 +00:00
Daniel García	9bf13b7872	Can't return inside multipart closure	2019-01-15 22:00:41 +01:00
Daniel García	d420992f8c	Update some function calls to use ?	2019-01-15 21:47:16 +01:00
Daniel García	c259a0e3e2	Save recovery code when using yubikey and stop repeating headers.user everywhere	2019-01-15 21:38:21 +01:00
Daniel García	432be274ba	Improve org mismatch check, consider different orgs	2019-01-15 17:31:03 +01:00
Daniel García	484bf5b703	Check that the client is not updating an outdated cipher, that should be part of an org now	2019-01-15 16:35:08 +01:00
Daniel García	4bf32af60e	Fix folder notifications, enable template strict mode and add missing option to env template	2019-01-15 15:28:47 +01:00
Daniel García	0e4a746eeb	Added SMTP_FROM_NAME	2019-01-15 15:28:47 +01:00
Daniel García	2fe919cc5e	Embed the default templates	2019-01-15 15:28:46 +01:00
Daniel García	bcd750695f	Default to $data_folder/templates and remove dev option (use TEMPLATES_FOLDER=src/static/templates instead)	2019-01-15 15:28:46 +01:00
Daniel García	19b6bb0fd6	Initial stab at templates	2019-01-15 15:28:46 +01:00
Daniel García	f571df7367	Revert yubikey feature, not needed anymore	2019-01-12 15:28:41 +01:00
Daniel García	de51bc782e	Updated dependencies, removing need for yubico fork	2019-01-12 15:23:46 +01:00
Daniel García	c5aef60bd7	Implement unofficial warning message	2019-01-11 14:20:42 +01:00
Daniel García	6f52104324	Fix casing error in Attachment, should fix 'Attachment doesn't exist' errors	2019-01-11 01:35:15 +01:00
Daniel García	1d7f704754	Send CipherUpdate when adding and deleting attachments	2019-01-11 01:12:54 +01:00
Daniel García	1d034749f7	Fix AArch64 build by disabling yubico	2019-01-10 23:54:01 +01:00
Daniel García	320266606e	Implement put collections	2019-01-08 20:27:28 +01:00
Daniel García	a0a08c4c5a	Include IP in invalid admin token error	2019-01-08 16:17:18 +01:00
Daniel García	4309df8334	Only create invitations when SMTP is disabled, and ignore invitations if we have a token. ... Disallow users from accepting invitation twice	2019-01-08 15:42:26 +01:00
Daniel García	f1161c65fb	Make sure an invitation is created when reinviting	2019-01-08 14:05:05 +01:00
Daniel García	50eeb4f651	Remove whitespace before processing tokens	2019-01-07 20:37:14 +01:00
Daniel García	21b85b78b1	Changed reinvite check and removed obsolete comment	2019-01-07 15:29:57 +01:00
Daniel García	673adde9f1	Make the admin retype the user name before deleting	2019-01-07 14:48:10 +01:00
Daniel García	c9063a06b4	Print unauthorized error message	2019-01-07 02:18:51 +01:00
Daniel García	5e37471488	Merge pull request #323 from njfox/invite_accepted_email ... Send email notifications when invitations are accepted/confirmed	2019-01-06 14:12:24 +01:00
Nick Fox	0a74e79cea	Refactor generate_invite_claims, make org_name and org_id optional	2019-01-05 23:03:49 -05:00
Nick Fox	7db66f73f0	Refactor invited_by_email check	2019-01-05 13:46:45 -05:00
Nick Fox	2f5bdc23f6	Fix formatting and add vault link to notification emails	2019-01-05 13:36:08 -05:00
Nick Fox	cec28a85ac	Update admin page to work with new invitation flow	2019-01-04 10:32:51 -05:00
Daniel García	5f49ecd7f3	Updated dependencies to use u2f crate directly, and some style changes	2019-01-04 00:25:38 +01:00
Nick Fox	736c0e62f2	Send emails to inviters/invitees when invites are accepted/confirmed	2019-01-02 22:20:39 -05:00
Nick Fox	43eb064351	Replace invite/reinvite email functions with generic send_email	2019-01-02 22:19:44 -05:00
Daniel García	30e768613b	Start using rustfmt and some style changes to make some lines shorter	2018-12-30 23:34:31 +01:00
Daniel García	adb8052689	Updated Error to implement Display and Debug, instead of using custom methods	2018-12-30 21:43:56 +01:00
Daniel García	1483829c94	Removed invalid todo	2018-12-30 21:43:56 +01:00
Daniel García	acb9d1b3c6	Remove config option for admin email, embdedded admin page, managed IO::Error, and added security and cache headers globally	2018-12-30 21:43:56 +01:00
Daniel García	301919d9d4	Modified navigation bar and corrected some comments	2018-12-30 21:43:55 +01:00
Daniel García	2bb0b15e04	Implemented better errors for JWT	2018-12-30 21:43:55 +01:00
Daniel García	250a2b340f	Use new Errors in latest changes	2018-12-30 21:43:55 +01:00
Daniel García	b2fc0499f6	Finish invite functionality, and remove virtual organization	2018-12-30 21:40:26 +01:00
Daniel García	6a99849a1e	Implemented proper error handling, now we can do user.save($conn)?; and it works. ... In the future, maybe we can do the same with the `find_by_id` methods that return an Option.	2018-12-30 21:31:12 +01:00
Daniel García	172f1770cf	Embed the icon in the binary, no need to download when it's not going to change	2018-12-30 21:31:12 +01:00
Daniel García	1b5134dfe2	Fixed delete user when 2FA is enabled, implemented delete user for admin panel, and the front-end part for invite user. Secured admin panel behind a configurable token.	2018-12-30 21:31:11 +01:00
Daniel García	5fecf09631	Initial version of admin panel, list users and reload user list works. No serious auth method yet, password is 'token123'	2018-12-30 21:31:11 +01:00
Daniel García	7d7d8afed9	Merge pull request #318 from njfox/reinvite_endpoint ... Add email reinvite endpoint	2018-12-30 21:22:26 +01:00
Nick Fox	f20c4705d9	Refactor invite claims and disallow reinvites to virtual_org	2018-12-30 00:19:01 -05:00
Nick Fox	3142d8d01f	Add more detail to invitation not found error	2018-12-29 23:28:19 -05:00
Nick Fox	84fa5a4ed6	Implement reinvite endpoint	2018-12-29 23:24:38 -05:00
Daniel García	004a3f891f	Merge pull request #315 from aksdb/master ... Restrict join on users_collections to current user (fixes #313)	2018-12-28 21:06:30 +01:00
Andreas Schneider	e7ea5097f4	Restrict join on users_collections to current user (fixes #313)	2018-12-28 15:25:51 +01:00
Miroslav Prasil	8451a70de6	Rewrite find_by_user_uuid to use one query	2018-12-27 18:56:01 +01:00
Nick Fox	ec715d78fb	Change log timestamp format so fail2ban can parse it	2018-12-26 11:54:31 -05:00
Nick Fox	b0ac640d8b	Use JWT to validate existing user invites	2018-12-23 15:15:44 -05:00
Daniel García	2b24b17609	Merge pull request #295 from njfox/invite_emails ... Add Email Invite Functionality	2018-12-21 16:04:19 +01:00
Nick Fox	2cd736ab81	Validate JWT if a user registers with SMTP invites enabled	2018-12-20 22:16:41 -05:00
Nick Fox	99256b9b3a	Prefix unused params with underscore	2018-12-20 21:37:03 -05:00
Nick Fox	26bf7bc12f	Use upstream jslib invite/registration workflow	2018-12-18 23:16:03 -05:00
Daniel García	b3ec8f2611	Merge pull request #302 from tycho/icon-cache-ttl ... implement TTLs for icon cache	2018-12-18 23:34:16 +01:00
Steven Noonan	a55c048a62	icons: implement positive/negative cache TTLs ... Signed-off-by: Steven Noonan <steven@uplinklabs.net>	2018-12-18 13:33:32 -08:00