1
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2025-07-16 09:11:12 +00:00
Commit graph

2933 commits

Author SHA1 Message Date
Timshel
5d5beb5fdc Merge remote-tracking branch 'dani/main' into sso-support 2025-04-16 17:58:09 +02:00
Timshel
0d16da440d
On member invite and edit access_all is not sent anymore (#5673)
* On member invite and edit access_all is not sent anymore

* Use MembershipType ordering for access_all check

Fixes #5711
2025-04-16 17:52:26 +02:00
Timshel
3696fbe601 Merge remote-tracking branch 'dani/main' into sso-support 2025-04-10 11:16:55 +02:00
Mathijs van Veluw
66cf179bca
Updates and general fixes (#5762)
Updated all the crates to the latest version.
We can unpin mimalloc, since the musl issues have been fixed
Also fix a RUSTSEC https://osv.dev/vulnerability/RUSTSEC-2025-0023 for tokio

Fixed some clippy lints reported by nightly.

Ensure lints and are also run on the macro crate.
This resulted in some lints being triggered, which I fixed.

Updated some GHA uses.

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-04-09 21:21:10 +02:00
Timshel
7a78423ec4 Fix playwright tests 2025-04-09 15:16:13 +02:00
Timshel
ebbb351be9 Merge remote-tracking branch 'dani/main' into sso-support 2025-04-09 15:08:08 +02:00
Mathijs van Veluw
025bb90f8f
Fix debian docker building (#5752)
In previous attempts to get mysqlclient-sys to build and work I added some extra build variables.
These are not needed if you configure pkg-config correctly.
The same goes for OpenSSL btw.

This PR configures the pkg-config in the right way and allows the crates to build using the right lib paths automatically.
Because of this change also the lib/include paths were not needed anymore for some architectures, except for i386.

Also updated crates again.

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-04-05 17:58:32 +02:00
Mathijs van Veluw
d5039d9c17
Add Docker Templates pre-commit check (#5749)
Added the same check as done via GitHub Actions to check template changes to the pre-commit checks.
This should catch these mistakes before they are commited and pushed.

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-04-04 19:02:19 +02:00
Daniel García
e7c796a660
Verify templates in CI (#5748)
* Verify templates in CI

* No need to install packages

* Remove unnecessary fetch depth
2025-04-04 18:14:19 +02:00
Daniel
bbbd2f6d15
Update Rust to 1.86.0 (#5744)
- also raise MSRV to 1.84.0

- fix `Dockerfile` template
- remove no longed needed `-vvv` argument for `cargo build`
2025-04-04 18:04:36 +02:00
Mathijs van Veluw
a2d7895586
Really fix building (#5745)
Signed-off-by: BlackDex <black.dex@gmail.com>
2025-04-04 16:53:09 +02:00
Mathijs van Veluw
8a0cb1137e
Fix mysqlclient-sys building (#5743)
Because of some issues with mysqlclient we need to use buildtime bindgen.
This also needed some extra environment variables to point the bindgen to the correct files and correct version.

Also update some other crates.

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-04-04 16:37:57 +02:00
Timshel
f960bf59bb
Fix invited user registration without SMTP (#5712) 2025-04-04 13:54:28 +02:00
Mathijs van Veluw
3a1f1bae00
Update deps and web-vault (#5742)
- Updated crates
  Pinned mimalloc, since it has issues with musl
- Updated web-vault to v2025.3.1
- Updated bootstrap

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-04-04 12:18:09 +02:00
Timshel
c8998d1a8f Rauthy configuration hints 2025-04-02 17:33:47 +02:00
Timshel
03ee1dbf59 Augment mobile refresh_token validity 2025-04-02 17:24:37 +02:00
Timshel
93753b4a67 Remove duplicate expiration check, add a log 2025-04-02 17:24:37 +02:00
Timshel
8105ed9e23 Add sso identifier in admin user panel 2025-04-02 16:20:52 +02:00
Timshel
2c8027b0d2 Merge remote-tracking branch 'dani/main' into sso-support 2025-03-24 17:50:26 +01:00
Timshel
909ce33a21 Skip broken tests 2025-03-24 17:45:02 +01:00
Timshel
ffff75add5 Fix playwright tests 2025-03-24 17:33:27 +01:00
Mathijs van Veluw
8dfe805954
Update Rust, Crates and other deps (#5709)
- Updated Rust to v1.85.1
- Updated crates and fixed breaking changes
- Updated datatables js
- Updated GitHub Actions

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-03-19 17:39:53 +01:00
Mathijs van Veluw
07b869b3ef
Some fixes for the new web-vault and updates (#5703)
- Added a new org policy
- Some new lint fixes
- Crate updates
  Switched to `pastey`, since `paste` is unmaintained.

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-03-17 23:02:02 +01:00
Timshel
c680cfe6c9 Merge remote-tracking branch 'dani/main' into sso-support 2025-03-17 17:54:26 +01:00
Daniel García
2a18665288
Implement new registration flow with email verification (#5215)
* Implement registration with required verified email

* Optional name, emergency access, and signups_allowed

* Implement org invite, remove unneeded invite accept

* fix invitation logic for new registration flow (#5691)

* fix invitation logic for new registration flow

* clarify email_2fa_enforce_on_verified_invite

---------

Co-authored-by: Stefan Melmuk <509385+stefan0xC@users.noreply.github.com>
2025-03-17 16:28:01 +01:00
Josh
71952a4ab5
Add AnonAddy/SimpleLogin self host feature flag (#5694)
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
2025-03-15 19:57:04 +01:00
Ben Sherman
994d157064
Add support for mutual-tls feature flag (#5698)
* Add support for mutual-tls feature flag

* Fix formatting

---------

Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
2025-03-15 19:46:42 +01:00
Timshel
1dae6093c9
Use subtle to replace deprecated ring::constant_time::verify_slices_are_equal (#5680) 2025-03-15 19:33:17 +01:00
Timshel
d2897e5cf1 Add Slack configuration hints 2025-03-12 15:38:33 +01:00
Timshel
6df71d95d4 Merge remote-tracking branch 'dani/main' into sso-support 2025-03-07 15:21:05 +01:00
Daniel
6edceb5f7a
Update Rust to 1.85.0 (#5634)
- also update the crates
2025-02-24 12:12:34 +01:00
Timshel
5ca0f4ffee Merge remote-tracking branch 'dani/main' into sso-support 2025-02-19 11:06:28 +01:00
Stefan Melmuk
359a4a088a
allow CLI to upload files with truncated filenames (#5618)
due to a bug in the CLI the filename in the form-data is not complete if
the encrypted filename happens to contain a /
2025-02-19 10:40:59 +01:00
Timshel
1feda56198 Merge remote-tracking branch 'dani/main' into sso-support 2025-02-17 16:24:09 +01:00
Mathijs van Veluw
3baffeee9a
Fix db issues with Option<> values and upd crates (#5594)
Some tables were lacking an option to convert Option<> to NULL.
This commit will fix that.

Also updated the crates to the latest version available.
2025-02-14 17:58:57 +01:00
Daniel
d5c353427d
Update crates & fix CVE-2025-25188 (#5576) 2025-02-12 10:21:12 +01:00
Timshel
5711080670 Pass the claim invited_by_email in case it was not in db 2025-02-11 22:37:59 +01:00
Timshel
edef0ca80d Improve tests 2025-02-11 19:47:05 +01:00
Timshel
7649ce8a3c Process org enrollment in accounts::post_set_password 2025-02-11 19:45:40 +01:00
Timshel
8d2d9f8d1a Revert "Remove unused UserOrganization.invited_by_email"
This reverts commit 548e19995e141314af98a10d170ea7371f02fab4.
2025-02-10 17:48:26 +01:00
Timshel
49dcceb622 Merge remote-tracking branch 'dani/main' into sso-support 2025-02-10 17:45:02 +01:00
Mathijs van Veluw
1f868b8d22
Show assigned collections on member edit (#5556)
Because we were using the `has_full_access()` function we did not returned assigned collections for an owner/admin even if the did not have the `access_all` flag set.
This commit will change that to use the `access_all` flag instead, and return assigned collections too.

While saving a member and having it assigned collections would still save those rights, and it was also visible in the collection management, it wasn't at the member it self.
So, it did work, but was not visible.

Fixes #5554
Fixes #5555

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-02-07 22:33:11 +01:00
Timshel
d6051b1cdb Upgrade openidconnect to 4.0.0 2025-02-05 19:24:16 +01:00
Timshel
e31b154fdf Unify master password policy resolution 2025-02-04 18:06:41 +01:00
Timshel
a0662bb0db Merge remote-tracking branch 'dani/main' into sso-support 2025-02-04 18:06:37 +01:00
Timshel
f3a88060e0 Release v1.33.1
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEPFu8Fz2BGGz/3nKpWMgKKqbHZeEFAmegu7wACgkQWMgKKqbH
 ZeGjHA/+OgVQoEGvbK+t9serPsqX+Xya2zcP30AW0QV4NRwicx5GtP7Culth5JwN
 Nmecohat8MQ8JT3vcZht9NS/ctsqQqwU+1pCGG4TpPZTd6xhdDTwEdG0FVI2O65G
 8m2xIuXD3wPg2Hiw/DgXFQ++itMU6gXhFWPzvKofnXmtpmH0FjTn8CUGozNLinhC
 WQTy056LsCviud2bVxvAyGR1NUfGagMR3ScEQ6xp3WgexzmFJhYvFntGBOSvCYJF
 PbTfz/9KvdVfTVuTPuLMiNA7jiZfriTaGg+Jr8LCb5VvnLn+T94jfVMAeIoveQTg
 JMOUo21N0qbvPXxfNBBr9RFH0e92ajjUGLXaNuArC71eQzjlWGyxMf3pRFzOmsSv
 4TG0hEcTjo/SCDLibYjUkYFmLHUIvKPWMmaelFhFt26dCrbrJIj2+JEccOQLfPMV
 uDatyImrw9jG1t113l/xSYcIYGr9gUaJ6S/bVuUgUgbTJApiB+Wxe5wyFSco+XfT
 bDOIFHy+YYCSScSo0szsfbL/w5Qvs/ydVDWCfnTa0IlFlSgLjLXziyssGR7K7P2j
 YPWQ4bS6ZY8eao3nrt+PhnJTJBm2aPZPEKUpgpnTmjSbCGe4Ege/cZot/3IzMcCw
 P5L9JqlMhdPQjVH/EU05vKnVxtHOfxZ4XgZCDL9HtqQT28Cm9eE=
 =1t7B
 -----END PGP SIGNATURE-----

Merge tag '1.33.1' into sso-support

Release v1.33.1
2025-02-04 17:35:25 +01:00
Mathijs van Veluw
8d1df08b81
Fix icon redirect not working on desktop (#5536)
* Fix icon redirect not working on desktop

We also need to exclude the header in case we do an external_icon call.

Fixes #5535

Signed-off-by: BlackDex <black.dex@gmail.com>

* Add informational comments to the icon_external function

Signed-off-by: BlackDex <black.dex@gmail.com>

* Fix spelling/grammar

Signed-off-by: BlackDex <black.dex@gmail.com>

---------

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-02-04 13:20:32 +01:00
Stefan Melmuk
3b6bccde97
add bulk-access endpoint for collections (#5542) 2025-02-04 09:42:02 +01:00
Daniel
d2b36642a6
Update crates & fix CVE-2025-24898 (#5538) 2025-02-04 01:01:06 +01:00
Mathijs van Veluw
a02fb0fd24
Update workflows and enhance security (#5537)
This commit updates the workflow files and also fixes some security issues which were reported by using zizmor https://github.com/woodruffw/zizmor

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-02-04 00:33:43 +01:00