| Age | Commit message (Collapse) | Author |
|---|
|
Upstream Changelog:
- Added support for organization policies
- Added support for cloning ciphers
- Update web vault to version 2.13
- Allow the SMTP login mechanism to be provided without quotes or initial uppercase
- Updated dependencies
- Make panics loggable
- Fix errors when importing into an org or accepting invites
|
|
- Add notice to the top of bitwarden_rs.env and update patchfile
- Make package section of PKGBUILD more consistent
Upstream Changelog:
- Added support for running on subpath, simply add the subpath to the DOMAIN variable: DOMAIN=https://example.com/custom-path
- Attachment size limits, per-user and per-organization, set USER_ATTACHMENT_LIMIT or ORG_ATTACHMENT_LIMIT to a value in kilobytes to apply it.
- Updated U2F library which might solve some U2F certificate errors.
- Added SMTP test button in the admin page.
- Now accepting y/n, True/False, 1/0 as config options that are booleans.
- Fixed error Unique constraint violation when using Two Factor and Postgres.
- Fixed error with can_signup_user that didn't allow to change the email address.
- Don't error if admin token is empty but disabled
- Now email domains are converted to punycode before sending
- Enable icons to be cached in the clients
- Added option to change invitation org name
- Enabled the sending of invitations from the admin panel, even when disabled
- Dependency updates
|
|
- apply changes to the systemd config from Siosm
- revert cargo test patches
- make restart reminder on update smaller
- remove unneccessary daemon-reloading (is triggered by pacman anyway)
Upstream Changelog:
- New collapsed log messaging, filtering the useless stuff like static file accesses and removing duplicate error messages. To get a more complete logging, use a LOG_LEVEL value of debug or trace.
- Fix crash when cipher page points to huge file
- Addded config option to change client IP header, IP_HEADER, by default it's X-Client-IP for backwards compat reasons.
- Printed current server time when failing TOTP, for easy debugging
- Protected websockets server against panics
- Add a logout button on the admin page
- Add endpoint to delete specific U2F key
- Updated dependencies
|
|
Upstream Changelog:
- Implemented email verification, to disable users until the email is verified you can use `SIGNUPS_VERIFY=true`, default is false. There are also options to change the options for verification mail resending, check the `.env.template` file.
- Also implemented welcome email, change email confirmation and account deletion confirmation.
- Modified icon parsing to accept favicons using DataURLs
- Updated dependencies
|
|
- revert armv7h workaround
- fit PKGBUILD to the archlinux rust packaging guidelines (https://wiki.archlinux.org/index.php/Rust_package_guidelines) by introducing check() and --locked
Upstream Changelog:
- Improved error message when HIBP key is not set, include a link to the page.
- Added check for both the previous and next timeslots in TOTP, which is more forgiving of time mismatches (1.5 minutes now vs 30 seconds before), can be disabled setting `AUTHENTICATOR_DISABLE_TIME_DRIFT=true`.
- Made the domain icon blacklist be cached, improving performance.
- Recovery codes are now generated when adding email and Duo 2FA.
- Removed MySQL libraries from SQLite images.
- Added configurable SMTP timeout, and reduced the default to 15 seconds.
- Updated images to be able to be built with Podman.
- Added option to allow signups from specific domains only (`SIGNUPS_DOMAINS_WHITELIST=domain.com,example.org`).
- Updated web vault to fix twofactorauth.org integration.
- Updated dependencies
|
|
Upstream Changelog:
- Added initial PostgresSQL support (enabled in the AUR package bitwarden_rs-postgresql)
- Added new icon blacklisting option, to block all non global IPs (ICON_BLACKLIST_NON_GLOBAL_IPS)
- Admin page scripts are loaded locally instead of using a CDN
- Added CORS support
- Added email 2FA
- other Docker image related changes (omitted)
|
|
|
|
|
|
Upstream Changelog:
- Added MySQL support
- Added backup option in the admin panel for the SQLite backend, remember to transfer those copies to separate drives!
- Updated HaveIBeenPwned API to V3, which requires a paid API key: https://www.troyhunt.com/authentication-and-the-have-i-been-pwned-api/
- Added option in admin panel to remove users two factor authentication, in case of loss or bug
- Allowed explicitly defining the SMTP authentication mechanism
- Added notification email when a user logs in on a new device
- Updated web vault to 2.11.0
- Added proxy support for the icon fetching service
- Other bug fixes
|
|
Upstream Changelog
- Fixed broken U2F in Chrome 74+
- Added images to email
- Updated dependencies
|
|
Upstream Changelog
- Duo is now available as a 2FA option, both configurable globally and per-user
- To enable it globally, check the .env template, and then leave the fields empty when enabling it per-user.
- Updated web vault to 2.10.0
- Added option to control the log level: LOG_LEVEL
- Valid values from more to less noisy are "trace", "debug", "info", "warn", "error" and "off"
- Now there is no need to compile the application a different way to enable syslog support, simply set USE_SYSLOG to true.
- Now DATA_FOLDER affects CONFIG_FILE when set through the environment
- Improved endpoints for Admin API
- Other fixes
|
|
Upstream Changelog
- Secrets are now hidden by default in the admin panel.
- Now the version is shown in the top right corner of the admin page.
- Read only settings are also shown in the admin panel, but not editable.
- Added option to admin panel to force resync users, useful after restoring an old backup.
- Implemented multiple U2F support, with custom names and compromised checks.
- Emails now also include an HTML version next to the plaintext version. It's up to the email clients which one to show now.
- Updated vault to 2.9.0
- Implemented constant time comparison for admin password and two factor remember and recover tokens.
- Added more config options:
- Icon download timeout
- Hide routes mount points, enabled by default
- Disable WAL (not recommended, only for network filesystems that have problems with WAL enabled)
- Disable Admin token (unsafe, only use when behind another authentication scheme).
- Use wrapped TLS for email, when STARTTLS doesn't work.
- Icon downloader domain blacklist, to block anything that might be sensitive, lik other servers in the local network.
- Updated dependencies and fixed minor bugs
|
|
Upstream Changelog:
- Added configuration menu, accessible from the admin panel. This saves the user settings to a JSON file, by default in data/config.json, but configurable with the CONFIG_FILE environment variable.
- Added templating support for emails, can be added to $DATA_FOLDER/templates/email, or $TEMPLATES_FOLDER/email, if configured. Check here for examples.
- Added reload templates option, useful during development. Set RELOAD_TEMPLATES to true to enable.
- The templates use the Handlebars format.
- Improved icon downloader, now we don't use the upstream server anymore.
- Added option to disable icon download, set DISABLE_ICON_DOWNLOAD to true.
- Note that icons already in the cache will still be served. With this, if ICON_CACHE_TTL is set to 0, the cached icons will not expire.
- Admin panel improvements:
- Organization, 2FA status and disabled user badges
- Deauthorize user sessions button
- Now using templates
- Added Feature-Policy header.
- Created recovery code when registering a YubiKey
- Now the .env file is only read from the current directory.
- Other fixes and dependency updates
|
|
temporarily fix SSL Error (https://github.com/dani-garcia/bitwarden_rs/issues/337), revert aarch64 workaround
Upstream Changelog:
- Enabled Yubikey support on AArch64
- Fixed error when editing cipher with attachment
- Fixed error incorrectly hiding cipher when deleting attachment
- Added unofficial server warning
|
|
(https://github.com/dani-garcia/bitwarden_rs/issues/262)
|
|
Upstream Changelog:
- Implemented new admin panel, available at /admin
- To use it, you need to set the ADMIN_TOKEN variable to authenticate
- Note: The old admin_email functionality has been removed
- Added email invite functionality
- Web vault updated to v2.8.0
- Fixed AArch64 build, disables Yubikey support
- Implemented TTLs for the icon cache
- Improved error handling
- Bug fixes
|
|
Upstream Changelog:
- Revamped logging
- Logging to file is now supported, set LOG_FILE=/path/to/log
- Logging to syslog is now supported, for this you need to compile the project with cargo build --features=enable_syslog
- Important: If you are using fail2ban or similar, you may need to update the filters to the new style.
- You can also disable it, by setting EXTENDED_LOGGING=false, but this disables logging to file or syslog
- Updated web vault to 2.7.1
- Implemented key rotation and individual attachment keys
- Added yubico support
- Updated rocket web server to 0.4
- Fixed some logout issues
- Fixed some crashed in mobile apps when using 2FA
|
|
Upstream Changelog:
- Disabled websockets by default, can be enabled by setting WEBSOCKET_ENABLED=true. Note that websockets require some additional setup. More info about that in the README.
- Upgraded sync method to not send equivalent domains when not necessary.
- Bug fixes and documentation changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|