467 Commits

Author	SHA1	Message	Date
Nick Fox	7976d39d9d	Adjust whitespace	2019-03-20 23:29:29 -04:00
Nick Fox	5ee9676941	Break up long line to stop SMTP from breaking	2019-03-20 23:24:30 -04:00
Daniel García	4b40cda910	Added domain blacklist regex for icons service and improved valid domain check. ... Reorganized the icons code a bit.	2019-03-18 22:12:39 +01:00
Daniel García	4689ed7b30	Changed uppercase deserializer to avoid a clone.	2019-03-18 22:02:37 +01:00
Daniel García	61515160a7	Allow changing error codes and create an empty error. ... Return 404 instead of 400 when no accounts breached.	2019-03-14 00:17:36 +01:00
Daniel García	e93538cea9	Add option to use wrapped TLS in email, instead of STARTTLS upgrade	2019-03-10 14:45:42 +01:00
Daniel García	b4244b28b6	Update admin page scripts and fixed broken tooltip	2019-03-09 14:41:34 +01:00
Daniel García	43f9038325	Add option to force resync clients in admin panel	2019-03-07 21:08:33 +01:00
Daniel García	339044f8aa	Add warning about config panel values overriding env vars.	2019-03-07 20:22:02 +01:00
Daniel García	0718a090e1	Trim spaces from admin token during authentication and validate that the admin panel token is not empty	2019-03-07 20:21:50 +01:00
Daniel García	9e1f030a80	Explicitly close SMTP connection in case of error.	2019-03-07 20:21:10 +01:00
Daniel García	04922f6aa0	Some formatting and dependency updates	2019-03-03 16:11:55 +01:00
Daniel García	7d2bc9e162	Added option to force 2fa at logins and made some changes to two factor code. ... Added newlines to config options to keep them a reasonable length.	2019-03-03 16:09:15 +01:00
Daniel García	10756b0920	Update dependencies and fix some lints	2019-02-27 17:21:04 +01:00
Frank Petrilli	d156170971	Minor typo fix conect => connect	2019-02-24 16:08:38 -08:00
Дамјан Георгиевски	473f8b8e31	remove some unneeded mutability	2019-02-22 20:25:50 +01:00
Daniel García	5794969f5b	Merge pull request #406 from shauder/feature/disable-admin-token ... Allow the Admin token to be disabled in the advanced menu	2019-02-20 23:06:52 +01:00
Shane Faulkner	8b5b06c3d1	Allow the Admin token to be disabled in the advanced menu	2019-02-20 14:56:08 -06:00
Daniel García	b50c27b619	Print a warning when an env variable is being overriden by the config file, and reorganize the main file a bit. ... Modified the JWT key generation, now it should also show the output of OpenSSL in the logs.	2019-02-20 20:59:37 +01:00
Daniel García	5ee04e31e5	Updated dependencies, removed some unnecessary clones and fixed some lints	2019-02-20 17:54:18 +01:00
Daniel García	bf6ae91a6d	Remove margins on small devices	2019-02-18 20:43:34 +01:00
Daniel García	828e3a5795	Add extra padding when the toolbar collapses in small devices	2019-02-18 20:33:32 +01:00
Daniel García	7b5bcd45f8	Show read-only options in the config panel and the env variable names in the tooltips	2019-02-18 19:25:33 +01:00
Miroslav Prasil	0b903fc5f4	Extended the template file and refer to wiki	2019-02-18 14:57:21 +00:00
Miroslav Prasil	4df686f49e	Add an option to not enable WAL (should help in #399)	2019-02-18 10:48:48 +00:00
Daniel García	d7eeaaf249	Escape user data from admin panel when calling JS	2019-02-17 15:24:14 +01:00
TheMardy	84fb6aaddb	Set correct MIME type	2019-02-17 01:08:24 +01:00
Daniel García	a744b9437a	Implemented multiple U2f keys, key names, and compromised checks	2019-02-16 23:07:48 +01:00
Daniel García	6027b969f5	Delete old devices when deauthorizing user sessions	2019-02-16 23:06:26 +01:00
Daniel García	93805a5d7b	Fix Yubikeys deleted on error	2019-02-16 21:30:55 +01:00
TheMardy	8526055bb7	Added images to email templates	2019-02-16 03:48:23 +01:00
TheMardy	a79334ea4c	Added static email image routes	2019-02-16 03:44:30 +01:00
Daniel García	d3773a433a	Removed list of mounted routes at startup by default, with option to add it back. This would get annoying when starting the server frequently, because it printed ~130 lines of mostly useless info	2019-02-13 00:03:16 +01:00
Daniel García	0f0a87becf	Add version to initial message	2019-02-12 22:47:00 +01:00
BlackDex	3b27dbb0aa	Added config option for icon download timeout	2019-02-12 21:56:28 +01:00
Daniel García	9636f33fdb	Implement constant time equal check for admin, 2fa recover and 2fa remember tokens	2019-02-11 23:45:55 +01:00
Daniel García	79fdfd6524	Add missing url parameter	2019-02-10 21:40:20 +01:00
Daniel García	d086a99e5b	Implemented HTML emails with text alternative	2019-02-10 19:12:34 +01:00
TheMardy	22b0b95209	Added HTML templates (+14 squashed commit) ... Squashed commit: [ece2260] Plaintext send_org_invite [01d4884] Plaintext pw_hint_some [6ce5173] Plaintext pw_hint_none [881af3e] Plaintext invite_confirmed [ce78621] Plaintext invite_accepted [13a44a4] Rename send_org_invite.hbs to send_org_invite.html.hbs [b52bf2f] Rename pw_hint_some.hbs to pw_hint_some.html.hbs [e0d1aeb] Rename pw_hint_none.hbs to pw_hint_none.html.hbs [898dbcd] Rename invite_confirmed.hbs to invite_confirmed.html.hbs [107af31] Rename invite_accepted.hbs to invite_accepted.html.hbs [d26d662] Updated send_org_invite template [71f47af] Updated pw_hint_some template [c2ca3c2] Updated pw_hint_none template [50f8bfb] Updated invite_accepted template [17f96f8] Updated invite_confirmed template	2019-02-10 19:04:18 +01:00
Daniel García	28d1588e73	Show version in admin panel	2019-02-10 16:02:46 +01:00
Daniel García	f3b1a5ff3e	Error when admin panel is disabled	2019-02-10 15:26:19 +01:00
Daniel García	330e90a6ac	Hide secrets in config panel	2019-02-08 20:49:04 +01:00
Daniel García	820c8b0dce	Change use of deserialize_with for Option iterator	2019-02-08 19:12:08 +01:00
Daniel García	8b4a6f2a64	Fixed some clippy lints and changed update_uuid_revision to only use one db query	2019-02-08 18:45:07 +01:00
Daniel García	ef63342e20	Add reset user config button	2019-02-06 17:34:32 +01:00
Daniel García	89840790e7	Fix .env path traversal issue	2019-02-06 17:34:31 +01:00
Daniel García	a72809b225	Yubico and SMTP enable/disable master switches	2019-02-06 17:34:31 +01:00
Daniel García	9976e4736e	Add groups	2019-02-06 17:34:31 +01:00
Daniel García	dc92f07232	Added env variable to select config file. Initial work towards groups and added tooltips with descriptions and nicer names	2019-02-06 17:34:30 +01:00
Daniel García	3db815b969	Implemented config form and fixed config priority	2019-02-06 17:34:30 +01:00
Daniel García	ade293cf52	Save config	2019-02-06 17:34:29 +01:00
Daniel García	877408b808	Implement basic config loading and updating. No save to file yet.	2019-02-06 17:34:29 +01:00
Daniel García	86ed75bf7c	Config can now be serialized / deserialized	2019-02-06 17:34:29 +01:00
Daniel García	20d8d800f3	Updated dependencies	2019-02-06 17:34:29 +01:00
Miroslav Prasil	08ca47cadb	Update revision when adding or removing cipher from collection	2019-02-06 14:47:47 +00:00
Miroslav Prasil	5272b465cc	Update revision of affected users when deleting Collection	2019-02-06 13:39:32 +00:00
Miroslav Prasil	637f655b6f	Do not allocate uneccessary Vec	2019-02-05 14:16:07 +00:00
Miroslav Prasil	b3f7394c06	Do not update revision at the end, as we already did that	2019-02-05 14:09:59 +00:00
Miroslav Prasil	1a5ecd4d4a	cipher does not need to be mutable	2019-02-05 13:52:30 +00:00
Miroslav Prasil	bd65c4e312	Remove superfluous cipher.save() call	2019-02-05 13:49:30 +00:00
Miroslav Prasil	bce656c787	Retry updating revision - fixes #383	2019-02-05 11:52:11 +00:00
BlackDex	9026cc8d42	Fixed issue when the iconlist is smaller then 5 ... When the iconlist was smaller then 5 items, it would cause a panic. Solved by using .truncate() on the iconlist.	2019-02-04 17:27:40 +01:00
BlackDex	574b040142	Loop through the iconlist until an icon is found ... Loop for a maximum of 5 times through the iconlist or until a successful download of an icon.	2019-02-04 16:59:52 +01:00
BlackDex	c13f115473	Fixed issue #380 ... - Created a separate function for parsing the sizes attribute - Parsing sizes now with regex - Should work with any non-digit separator	2019-02-04 12:55:39 +01:00
BlackDex	bc461d9baa	Some small changes on the iter of the cookies	2019-01-31 17:58:03 +01:00
BlackDex	5016e30cf2	Added cookies to the icon download request. ... Some sites use XSRF Tokens, or other Tokens to verify a subseqense response. The cookies which are sent during the page request are now used when downloading the favicon. A site which uses this is mijn.ing.nl.	2019-01-31 15:49:58 +01:00
Daniel García	f42ac5f2c0	Update web vault error message	2019-01-29 21:45:25 +01:00
Daniel García	2a60414031	Reuse the client between requests, and use the client when downloading the icons themselves	2019-01-29 21:21:26 +01:00
BlackDex	feb74a5e86	Changed the way to fix the href ... - Using url from reqwest to fix href, this fixes: + "//domain.com/icon.png" + "relative/path/to/icon.png" + "/absolute/path/to/icon.png" - Removed fix_href function - Some variable changes	2019-01-29 18:08:23 +01:00
Daniel García	c0e350b734	Disable icon downloads, accept optional query after icon href, format and clippy fixes	2019-01-28 23:58:32 +01:00
Daniel García	bef1183c49	Only send one notification per vault import and purge, improve move ciphers functions	2019-01-28 00:39:14 +01:00
Daniel García	f935f5cf46	Remove local icon extractor	2019-01-27 16:42:30 +01:00
Daniel García	07388d327f	Merge pull request #370 from BlackDex/favicons ... Added better favicon downloader.	2019-01-27 16:37:47 +01:00
BlackDex	4de16b2d17	Removed unwrap and added ?	2019-01-27 16:25:02 +01:00
BlackDex	da068a43c1	Moved function call to get_icon_url to prevent error bubbeling	2019-01-27 16:03:18 +01:00
BlackDex	9657463717	Added better favicon downloader.	2019-01-27 15:39:19 +01:00
Daniel García	69036cc6a4	Add disabled user badge (no password) and deauthorize button to admin page.	2019-01-26 19:28:54 +01:00
Daniel García	700e084101	Add 2FA icon to admin panel	2019-01-25 18:50:57 +01:00
Daniel García	a1dc47b826	Change config to thread-safe system, needed for a future config panel. ... Improved some two factor methods.	2019-01-25 18:24:57 +01:00
Daniel García	86de0ca17b	Fix editing users from collections menu	2019-01-25 17:43:51 +01:00
Stephen White	fc0e239bdf	No point calling find_by_uuid now we don't use the result.	2019-01-25 14:25:15 +00:00
Stephen White	928ad6c1d8	Fix the list of users with access to a collection to display correctly. ... https://github.com/dani-garcia/bitwarden_rs/issues/364	2019-01-25 14:18:06 +00:00
Daniel García	ddd49596ba	Fix invite empty email	2019-01-22 17:26:17 +01:00
Daniel García	b8cabadd43	Fix admin page links	2019-01-21 23:41:27 +01:00
Daniel García	ce42b07a80	Update Diesel to 1.4 and other dependencies	2019-01-21 15:29:52 +01:00
Daniel García	bfd93e5b13	Show organizations in admin panel, implement reload templates option	2019-01-20 17:43:56 +01:00
Daniel García	a797459560	Implement HIBP check [WIP]. ... Add extra security attributes to admin cookie. Error handling.	2019-01-20 15:36:33 +01:00
Daniel García	6cbb683f99	Rename admin templates to match email	2019-01-19 22:59:32 +01:00
Daniel García	92bbb98d48	Created base template	2019-01-19 22:12:52 +01:00
Daniel García	834c847746	Implement admin JWT cookie, separate JWT issuers for each type of token and migrate admin page to handlebars template	2019-01-19 21:41:49 +01:00
Daniel García	97aa407fe4	Move email templates to subfolder	2019-01-19 17:40:18 +01:00
TBK	d8116a80df	Add Feature-Policy header	2019-01-17 21:08:31 +01:00
Daniel García	e0aec8d373	Use new i64::to_be_bytes and remove byteorder dep ... (https://doc.rust-lang.org/stable/std/primitive.i64.html#method.to_be_bytes)	2019-01-16 22:14:17 +01:00
Daniel García	1ce2587330	Correct update cipher order: first save cipher, then cipher-folder, then notify	2019-01-16 19:57:49 +01:00
Miroslav Prasil	71a10e0378	Fix sharing the item to organization.	2019-01-16 11:33:43 +00:00
Daniel García	9bf13b7872	Can't return inside multipart closure	2019-01-15 22:00:41 +01:00
Daniel García	d420992f8c	Update some function calls to use ?	2019-01-15 21:47:16 +01:00
Daniel García	c259a0e3e2	Save recovery code when using yubikey and stop repeating headers.user everywhere	2019-01-15 21:38:21 +01:00
Daniel García	432be274ba	Improve org mismatch check, consider different orgs	2019-01-15 17:31:03 +01:00
Daniel García	484bf5b703	Check that the client is not updating an outdated cipher, that should be part of an org now	2019-01-15 16:35:08 +01:00