server

Commit Graph

Author	SHA1	Message	Date
Todd Martin	f4956349b6	chore(flags): Remove pm-19394-send-access-control feature flag * Remove feature flag. * Fixed import statements. * Fixed constructor.	3 weeks ago
Ike	df09fb6916	[PM-32424] Send Access Enumeration protection (#7166 ) feat: add enumeration protection to email protected sends - Implement enumeration protection for email-based protected sends - Update SendAccess validator with new protection logic - Change OTP generation failure logging from warning to error level - Remove unused constants and update validator tests	3 weeks ago
Patrick-Pimentel-Bitwarden	3dbd17f61d	feat(auth-validator): [Auth/PM-22975] Client Version Validator (#6588 ) * feat(auth-validator): [PM-22975] Client Version Validator - Implementation. * test(auth-validator): [PM-22975] Client Version Validator - Added tests.	1 month ago
Alex Dragovich	6d43cc43e3	[PM-31684] Remove email hashing for send access (#6945 ) * [PM-31684] Remove email hashing for send access * [PM-31684] switching the order of migration files * [PM-31684] adding more migrations * [PM-31684] Removing anon access emails field and reusing emails field * [PM-31684] cleanup before adding migrations back * [PM-31684] restore original snapshots * [PM-31684] restore original postgres snapshots * [PM-31684] adding migrations * [PM-31684] removing encryption attributes from emails request model * [PM-31684] adding missing stored proc alters * [PM-31684] Improved formatting for stored proc defs * [PM-31684] adding necessary comment back * [PM-31684] adding case-insensitive check on the server for send auth	2 months ago
Ike	5afdfa6fd1	[PM-30563] Change error response on Send Access token request (#6911 ) * feat: remove invalid email response and instead return email and OTP required to protect against enumeration attacks. * fix: fixing tests and dotnet format	2 months ago
Alex Dragovich	0544ec41d5	[PM-31394] use email address hash for send access email verification (#6921 ) * [PM-31394] use email address hash for send access email verification * [PM-31394] fixing identity server tests for send access * [PM-31394] fixing more identity server tests for send access	2 months ago
Ike	3b54fea309	[PM-22696] send enumeration protection (#6352 ) * feat: add static enumeration helper class * test: add enumeration helper class unit tests * feat: implement NeverAuthenticateValidator * test: unit and integration tests SendNeverAuthenticateValidator * test: use static class for common integration test setup for Send Access unit and integration tests * test: update tests to use static helper	6 months ago
Ike	96fe09af89	[PM-25415] move files into better place for code ownership (#6275 ) * chore: move files into better place for code ownership * fix: import correct namespace	7 months ago
Ike	d2d3e0f11b	[PM-22678] Send email otp authentication method (#6255 ) feat(auth): email OTP validation, and generalize authentication interface - Generalized send authentication method interface - Made validate method async - Added email mail support for Handlebars - Modified email templates to match future implementation fix(auth): update constants, naming conventions, and error handling - Renamed constants for clarity - Updated claims naming convention - Fixed error message generation - Added customResponse for Rust consumption test(auth): add and fix tests for validators and email - Added tests for SendEmailOtpRequestValidator - Updated tests for SendAccessGrantValidator chore: apply dotnet formatting	7 months ago
Ike	3097e7f223	[PM- 22675] Send password auth method (#6228 ) * feat: add Passwordvalidation * fix: update strings to constants * fix: add customResponse for rust consumption * test: add tests for SendPasswordValidator. fix: update tests for SendAccessGrantValidator * feat: update send access constants.	7 months ago
Ike	43d753dcb1	[PM-20592] [PM-22737] [PM-22738] Send grant validator (#6151 ) feat: create `SendGrantValidator` and initial `SendPasswordValidator` for Send access grants feat: add feature flag to toggle Send grant validation logic feat: add Send client to Identity and update `ApiClient` to generic `Client` feat: register Send services in DI pipeline feat: add claims management support to `ProfileService` feat: distinguish between invalid grant and invalid request in `SendAccessGrantValidator` fix: update parsing of `send_id` from request fix: add early return when feature flag is disabled fix: rename and organize Send access scope and grant type fix: dotnet format test: add unit and integration tests for `SendGrantValidator` test: update OpenID configuration and API resource claims doc: move documentation to interfaces and update inline comments chore: add TODO for future support of `CustomGrantTypes`	8 months ago
Jared Snider	531af410f9	pm-24210 (#6142 )	8 months ago
bitwarden-charlie	67f745ebc4	chore/SRE-583 Deprecate usage of Auth-Email Header (#5709 ) * chore/SRE-583 Deprecate usage of Auth-Email Header * SRE-583 cleanup function and references * SRE-583 cleanup tests --------- Co-authored-by: sneakernuts <671942+sneakernuts@users.noreply.github.com>	11 months ago
Ike	1399b1417e	PM-6675 - Remove old registration endpoint (#5585 ) * feat : remove old registration endpoint * fix: update integration test user registration to match current registration; We need to keep the IRegistrationCommand.RegisterUser method to JIT user. * fix: updating accounts/profile tests to match current implementations	12 months ago
Ike	867fa848dd	[PM-8220] New Device Verification (#5084 ) * feat(BaseRequestValidator): Add global setting for new device verification. Refactor BaseRequestValidator enabling better self-documenting code and better single responsibility principle for validators. Updated DeviceValidator to handle new device verification, behind a feature flag. Moved IDeviceValidator interface to separate file. Updated CustomRequestValidator to act as the conduit by which *Validators communicate authentication context between themselves and the RequestValidators. Adding new test for DeviceValidator class. Updated tests for BaseRequestValidator as some functionality was moved to the DeviceValidator class.	1 year ago
Ike	c028c68d9c	[PM-6666] Two factor Validator refactor (#4894 ) * initial device removal * Unit Testing * Finalized tests * initial commit refactoring two factor * initial tests * Unit Tests * initial device removal * Unit Testing * Finalized tests * initial commit refactoring two factor * initial tests * Unit Tests * Fixing some tests * renaming and reorganizing * refactored two factor flows * fixed a possible issue with object mapping. * Update TwoFactorAuthenticationValidator.cs removed unused code	1 year ago
Ike	22dd957543	[PM-10742] Pull Device verification into testable service (#4851 ) * initial device removal * Unit Testing * Added unit tests fixed validator null checks * Finalized tests * formatting * fixed test * lint * addressing review notes * comments	1 year ago
Ike	fa5d6712c5	[PM-6664] Base Request Validator Unit Tests and Resource Owner integration Tests (#4582 ) * intial commit * Some UnitTests for the VerifyAsync flows * WIP org two factor * removed useless tests * added ResourceOwnerValidation integration tests * fixing formatting * addressing comments * removed comment	2 years ago

18 Commits (renovate/microsoft.data.sqlclient-7.x)