Micaiah Martin
faa8abb3dc
Updated SETUP.md to direct user with correct file name. ( #1719 )
4 years ago
Oscar Hinton
f866b25e43
Key Connector feature toggle ( #1716 )
4 years ago
Joseph Flinn
3a22f91ff5
Enable key connector selfhost ( #1707 )
...
* initial commit
* Add code for Key Connector feature
* Add help URL to config
* Fix folders for key-connector service
* Fix paths for key-connector
* fixing the env file builder when disabling the key connector
* swapping a variable name
Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
4 years ago
Thomas Rittson
cdb622d4aa
Add ApiUseKeyConnector flag to token response ( #1710 )
4 years ago
Vince Grassia
c660f8bf00
Fix Docker Notary ( #1717 )
4 years ago
Vince Grassia
27351762de
Upload Docker images to AWS ECR Nonprod Repositories ( #1713 )
4 years ago
Thomas Rittson
e3143271d7
[Key Connector] Prevent user from leaving org ( #1715 )
...
* Block user from leaving org using Key Connector
* Add tests
4 years ago
Thomas Rittson
c2975b003d
[Key Connector] Fix policy checks and other pre-reqs ( #1711 )
...
* Require SSO Policy to enable Key Connector
* Require that SSO is enabled to use Key Connector
* Fix error messages
"Key Connector" instead of "KeyConnector"
* Refactor dependent policy checks to handle expansion
* Block disabling Sso Policy if using Key Connector
* Update tests for policies required by Key Connector
* Fix tests
* Add test for Key Connector to require Sso Policy
* Add test: Sso config must be enabled to use Key Connector
4 years ago
Oscar Hinton
f1c41257b3
Allow disabling key connector if no user is enrolled ( #1712 )
4 years ago
Addison Beck
6b629feb03
[bug] Drop unused db column UsesCryptoAgent ( #1704 )
4 years ago
Kyle Spearrin
77f9f5fe72
remove dynamic names from admin confirm dialogs ( #1703 )
4 years ago
Kyle Spearrin
327e784336
Added middleware for general security headers ( #1700 )
4 years ago
Kyle Spearrin
f26a235964
set MaxResponseContentBufferSize to 5 MB ( #1702 )
4 years ago
Kyle Spearrin
2f0638ce8c
sanitize notification hub tag inputs ( #1697 )
4 years ago
Kyle Spearrin
fcc1a4e10c
add missing csrf token validation to admin ( #1696 )
4 years ago
Kyle Spearrin
9582e94232
add ::ffff: to internal ip check ( #1701 )
...
* add ::ffff: to internal ip check
* check StartsWith
4 years ago
Oscar Hinton
fd37cb5a12
Add support for Key Connector OTP and account migration ( #1663 )
...
Co-authored-by: Thomas Rittson <trittson@bitwarden.com>
4 years ago
Thomas Rittson
f6bc35b2d0
Fix typos in EF migrations ( #1693 )
...
* Fix typos in postgres migrations
* Fix extension of migration script
4 years ago
Kyle Spearrin
7cc7b84eaf
use fixed-time comparison of secrets ( #1698 )
4 years ago
Vince Grassia
c07794e907
Change Release workflow to allow releases from 'rc' and 'hotfix' branches ( #1690 )
4 years ago
Kyle Spearrin
5aa492e886
validate service url schema ( #1695 )
4 years ago
Oscar Hinton
1aa25f2712
Add checks for vault timeout policy ( #1694 )
4 years ago
Donald Nairn
7837a850eb
Fix minor typos in docs ( #1692 )
4 years ago
Kyle Spearrin
10c5a29c47
Prevent XSS possibility from SSO SAML Service URLs ( #1691 )
...
* validate sso service urls for HTML meta chars
* also check for double quotes
4 years ago
Joseph Flinn
68e20fe649
Updating the swashbuckle package in Api ( #1685 )
4 years ago
Thomas Rittson
0cb8da2fd8
Add Field.LinkedId ( #1617 )
4 years ago
Thomas Rittson
98c167b1c1
Improve local dev setup for SSO project ( #1664 )
...
* Add default SSO appsettings for development
* Add Sso project to setup_secrets.ps1 script
* Use hashmap instead of array
4 years ago
Thomas Rittson
e57bef6af4
Fix policy enforcement against invited users ( #1680 )
4 years ago
Chad Scharf
07b8e2a946
Self-Hosted Server Release v1.44.1 ( #1683 )
...
Self-Hosted Server Release v1.44.1 with Web v2.24.2
4 years ago
Joseph Flinn
630376400f
Dependency updates ( #1681 )
...
* fix: util/Nginx/Dockerfile to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277346
- https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277349
- https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277350
- https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569403
- https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569406
* fix: util/Nginx/Dockerfile-k8s to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277346
- https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277349
- https://snyk.io/vuln/SNYK-DEBIAN10-LIBXML2-1277350
- https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569403
- https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569406
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
4 years ago
Thomas Rittson
7473a96b27
Update PR template to remind about EF migrations ( #1679 )
...
* Update PR template to remind about EF migrations
* Update wording
4 years ago
Justin Baur
4c9d9b248c
Fix bug in TaxInfo ( #1682 )
...
* Fixed bug in TaxInfo
* Added a few more tests to TaxInfoTests
* Added tests for HasTaxId
4 years ago
SudoEvan
dcc11e3819
Added unit tests for StrictEmailAddressListAttribute in Bit.Core.Utilities ( #1652 )
...
* Added unit tests for StrictEmailAddressListAttribute in Bit.Core.Utilities
* Fixed list format; added a null test on StrictEmailAddressListAttribute in Utilities
4 years ago
Justin Baur
114f58aa8e
Fix tests ( #1675 )
...
* Fix SendServiceTests that arose from merge
* Fixed SendService tests to be inline with spec
* Reorder usings
4 years ago
Justin Baur
d854332643
Unit Tests for hot spots ( #1454 )
...
* Add TaxInfoTests
* Add UserTests
* Add SendServicTests
* Added IconFetchingServicesTests
* Add endline
4 years ago
Joseph Flinn
7d6f7436a8
Version Bump 1.44.1 ( #1674 )
4 years ago
Joseph Flinn
19ca3ee374
Enabling deploys to the QA environment from branches with slashes in the name ( #1673 )
4 years ago
Matt Gibson
cb815c2f14
Allow managers to create self-assigned collections ( #1672 )
4 years ago
Joseph Flinn
52d1bade06
Hotfix/release workflow ( #1671 )
...
* fixing release workflow app service deploys
* adding the release branch as a conditional to the docker-stub build
* Add in missing 'if' statement for 'release' branch in Docker Stub step
Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
4 years ago
Thomas Rittson
818b3b5d9d
Add PR template ( #1668 )
4 years ago
Joseph Flinn
8683cbfe33
fixing parameter mismatch ( #1670 )
4 years ago
Joseph Flinn
fa1989bfed
fixing the error in the release workflow ( #1669 )
4 years ago
Joseph Flinn
e2c8fa7002
Replacing the DCT setup. There was a sneaky line that was different which is making our build of the EventsProcessor image break ( #1667 )
4 years ago
Joseph Flinn
9a629a410c
Allow Docker access to new release branching strategy ( #1666 )
...
* allowing the new release branch to push its docker images
* Switching to our action to set up DCT
4 years ago
Joseph Flinn
f783770fcd
Version bump to 1.44.0 ( #1665 )
4 years ago
Matt Gibson
8f0115e62f
Check canScale when scaling for sso ( #1661 )
...
* Check canScale when scaling for sso
* PR review
Use AutoAddSeats to add seats in a consistent way.
This requires moving user check out of that method.
* User logic moved out of method
4 years ago
Oscar Hinton
c5d5601464
Add support for crypto agent ( #1623 )
4 years ago
Daniel James Smith
dea694193f
Add teams trial button to Edit Org Page ( #1662 )
...
* Add teams trial button to Edit Org Page
* Fix formatting
4 years ago
Joseph Flinn
f3d6a43025
Change protected release branch to `release` ( #1656 )
...
* Adding a contraint around the new release branch strategy
* Adding a constraint on what CI code can be used to release the release branch
* updating the self host docker image building and releasing
* removing master branch release ci code execution
* updating some verbiage
4 years ago
Vince Grassia
7da15af92f
Add New Relic monitoring package to Notifications project ( #1643 )
4 years ago