1
0
Fork 1
Spiegel von https://github.com/dani-garcia/vaultwarden.git synchronisiert 2025-02-01 10:17:01 +01:00
vaultwarden/src/api/core
Stefan Melmuk 2c36993792
enforce 2FA policy on removal of second factor and login (#3803)
* enforce 2fa policy on removal of second factor

users should be revoked when their second factors are removed.

we want to revoke users so they don't have to be invited again and
organization admins and owners are aware that they no longer have
access.

we make an exception for non-confirmed users to speed up the invitation
process as they would have to be restored before they can accept their
invitation or be confirmed.

if email is enabled, invited users have to add a second factor before
they can accept the invitation to an organization with 2fa policy.
and if it is not enabled that check is done when confirming the user.

* use &str instead of String in log_event()

* enforce the 2fa policy on login

if a user doesn't have a second factor check if they are in an
organization that has the 2fa policy enabled to revoke their access
2024-01-01 19:41:40 +01:00
..
two_factor enforce 2FA policy on removal of second factor and login (#3803) 2024-01-01 19:41:40 +01:00
accounts.rs Update crates (#4074) 2023-11-15 10:41:14 +01:00
ciphers.rs enforce 2FA policy on removal of second factor and login (#3803) 2024-01-01 19:41:40 +01:00
emergency_access.rs Several small fixes for open issues (#4143) 2023-12-09 01:21:14 +01:00
events.rs enforce 2FA policy on removal of second factor and login (#3803) 2024-01-01 19:41:40 +01:00
folders.rs feat: Push Notifications 2023-06-11 13:28:18 +02:00
mod.rs Allow customizing the featureStates (#4168) 2024-01-01 15:44:02 +01:00
organizations.rs enforce 2FA policy on removal of second factor and login (#3803) 2024-01-01 19:41:40 +01:00
public.rs Fix External ID not set during DC Sync 2023-10-21 13:54:48 +02:00
sends.rs Update Rust and Crates 2023-08-31 22:45:53 +02:00