Daniel García and GitHub
3d843a6a51
Merge pull request #460 from janost/organization-vault-purge
...
Fixed purging organization vault
2019-04-14 22:30:51 +02:00
Daniel García
fdcc32beda
Validate Duo credentials when custom
2019-04-14 22:05:05 +02:00
Daniel García
bf20355c5e
Merge branch 'duo'
2019-04-14 22:02:55 +02:00
Daniel García
0136c793b4
Implement better user status API, in the future we'll probably want a way to disable users.
...
We should migrate from the empty password hash to a separate column then.
2019-04-13 00:01:52 +02:00
Daniel García
2e12114350
Always create the user when inviting from admin panel
2019-04-12 23:44:49 +02:00
Daniel García and GitHub
f25ab42ebb
Merge pull request #455 from ViViDboarder/get_users
...
Add new endpoint for retrieving all users
2019-04-11 20:42:44 +02:00
Daniel García
8d9827c55f
Implement selection between global config and user settings for duo keys.
2019-04-11 18:40:03 +02:00
Daniel García
cad63f9761
Auto generate akey
2019-04-11 16:08:26 +02:00
Daniel García
bf446f44f9
Enable DATA_FOLDER to affect default CONFIG_FILE path
2019-04-11 15:41:13 +02:00
Daniel García
621f607297
Update dependencies and fix some warnings
2019-04-11 15:40:19 +02:00
Daniel García
d89bd707a8
Update vault release to show duo button
2019-04-07 18:58:32 +02:00
Daniel García
754087b990
Add global duo config and document options in .env template
2019-04-07 18:58:15 +02:00
Daniel García
cfbeb56371
Implement user duo, initial version
...
TODO:
- At the moment each user needs to configure a DUO application and input the API keys, we need to check if multiple users can register with the same keys correctly and if so we could implement a global setting.
- Sometimes the Duo frame doesn't load correctly, but canceling, reloading the page and logging in again seems to fix it for me.
2019-04-05 22:09:53 +02:00
Daniel García
3bb46ce496
Make the syslog crate non-optional when available
2019-04-02 22:35:22 +02:00
Daniel García
c5832f2b30
With the latest fern, syslog can be a config option instead of a build flag
2019-03-29 20:27:20 +01:00
Daniel García
d9406b0095
Update to web vault 2.10.0
2019-03-25 23:49:12 +01:00
Daniel García
2475c36a75
Implement log_level config option
2019-03-25 14:23:14 +01:00
Daniel García
c384f9c0ca
Set default log level to Info, we don't use debug anyway and it just fills the logs with other crates info.
2019-03-25 14:21:50 +01:00
Daniel García and GitHub
afbfebf659
Merge pull request #440 from BlackDex/mail-encoding
...
Fixed long e-mail message extending 1000 lines.
2019-03-25 13:09:51 +01:00
Daniel García
349cb33fbd
Updated dependencies
2019-03-23 19:48:22 +01:00
Daniel García and GitHub
d7542b6818
Merge pull request #437 from njfox/fix-smtp-error
...
Split up long line to stop SMTP from breaking
2019-03-21 14:22:57 +01:00
Daniel García
4b40cda910
Added domain blacklist regex for icons service and improved valid domain check.
...
Reorganized the icons code a bit.
2019-03-18 22:12:39 +01:00
Daniel García
4689ed7b30
Changed uppercase deserializer to avoid a clone.
2019-03-18 22:02:37 +01:00
Daniel García
084bc2aee3
Use final release of lettre and update dependencies
2019-03-17 14:43:22 +01:00
Daniel García
6d7e15b2fd
Use web vault 2.9.0 release
2019-03-14 13:29:03 +01:00
Daniel García
61515160a7
Allow changing error codes and create an empty error.
...
Return 404 instead of 400 when no accounts breached.
2019-03-14 00:17:36 +01:00
Daniel García
a25bfdd16d
Remove unused features from multipart (integration with other servers)
2019-03-13 15:57:00 +01:00
Daniel García
e93538cea9
Add option to use wrapped TLS in email, instead of STARTTLS upgrade
2019-03-10 14:45:42 +01:00
Daniel García
b4244b28b6
Update admin page scripts and fixed broken tooltip
2019-03-09 14:41:34 +01:00
Daniel García
43f9038325
Add option to force resync clients in admin panel
2019-03-07 21:08:33 +01:00
Daniel García
27872f476e
Update dependencies
2019-03-07 20:22:08 +01:00
Daniel García
339044f8aa
Add warning about config panel values overriding env vars.
2019-03-07 20:22:02 +01:00
Daniel García
0718a090e1
Trim spaces from admin token during authentication and validate that the admin panel token is not empty
2019-03-07 20:21:50 +01:00
Daniel García
9e1f030a80
Explicitly close SMTP connection in case of error.
2019-03-07 20:21:10 +01:00
Daniel García
04922f6aa0
Some formatting and dependency updates
2019-03-03 16:11:55 +01:00
Daniel García
7d2bc9e162
Added option to force 2fa at logins and made some changes to two factor code.
...
Added newlines to config options to keep them a reasonable length.
2019-03-03 16:09:15 +01:00
Daniel García
c6c00729e3
Update vault to new version. No need to wait for a release when even the official web vault is already using it
2019-02-27 17:28:04 +01:00
Daniel García
10756b0920
Update dependencies and fix some lints
2019-02-27 17:21:04 +01:00
Daniel García and GitHub
1eb1502a07
Merge pull request #416 from mprasil/armv6
...
Armv6
2019-02-25 18:26:53 +01:00
Daniel García and GitHub
2646db78a4
Merge pull request #414 from FrankPetrilli/patch-1
...
Minor typo fix conect => connect
2019-02-25 14:21:28 +01:00
Daniel García and GitHub
d9bfe847db
Merge pull request #410 from gdamjan/remove-uneeded-mutability
...
remove some unneeded mutability
2019-02-22 22:52:53 +01:00
Daniel García
aeb4b4c8a5
Remove verbose, otherwise the logs get filled with useless info
2019-02-22 16:16:07 +01:00
Daniel García
980a3e45db
Set up CI with Azure Pipelines
2019-02-22 15:51:30 +01:00
Daniel García and GitHub
5794969f5b
Merge pull request #406 from shauder/feature/disable-admin-token
...
Allow the Admin token to be disabled in the advanced menu
2019-02-20 23:06:52 +01:00
Daniel García
b50c27b619
Print a warning when an env variable is being overriden by the config file, and reorganize the main file a bit.
...
Modified the JWT key generation, now it should also show the output of OpenSSL in the logs.
2019-02-20 20:59:37 +01:00
Daniel García
5ee04e31e5
Updated dependencies, removed some unnecessary clones and fixed some lints
2019-02-20 17:54:18 +01:00
Daniel García
bf6ae91a6d
Remove margins on small devices
2019-02-18 20:43:34 +01:00
Daniel García
828e3a5795
Add extra padding when the toolbar collapses in small devices
2019-02-18 20:33:32 +01:00
Daniel García
7b5bcd45f8
Show read-only options in the config panel and the env variable names in the tooltips
2019-02-18 19:25:33 +01:00
Daniel García and GitHub
72de16fb86
Merge pull request #404 from mprasil/disable_wal
...
Add an option to not enable WAL (should help in #399 )
2019-02-18 16:10:16 +01:00
Daniel García
d7eeaaf249
Escape user data from admin panel when calling JS
2019-02-17 15:24:14 +01:00
Daniel García
a744b9437a
Implemented multiple U2f keys, key names, and compromised checks
2019-02-16 23:07:48 +01:00
Daniel García
6027b969f5
Delete old devices when deauthorizing user sessions
2019-02-16 23:06:26 +01:00
Daniel García
93805a5d7b
Fix Yubikeys deleted on error
2019-02-16 21:30:55 +01:00
Daniel García and GitHub
71da961ecd
Merge pull request #402 from mprasil/version_in_docker
...
Include git repo in build so we get version
2019-02-16 12:20:25 +01:00
Daniel García
274ea9a4f2
Use the latest fast_chemail crate directly, with the fix
2019-02-15 14:39:30 +01:00
Daniel García
8743d18aca
Update travis image and remove now-ignored sudo tag
2019-02-13 18:50:45 +01:00
Daniel García
d3773a433a
Removed list of mounted routes at startup by default, with option to add it back. This would get annoying when starting the server frequently, because it printed ~130 lines of mostly useless info
2019-02-13 00:03:16 +01:00
Daniel García
0f0a87becf
Add version to initial message
2019-02-12 22:47:00 +01:00
Daniel García and GitHub
4b57bb8eeb
Merge pull request #394 from BlackDex/icon-timeout
...
Added config option for icon download timeout
2019-02-12 22:00:12 +01:00
Daniel García
ff2fbd322e
Update deps and fix email check
2019-02-12 15:01:02 +01:00
Daniel García
9636f33fdb
Implement constant time equal check for admin, 2fa recover and 2fa remember tokens
2019-02-11 23:45:55 +01:00
Daniel García and GitHub
bbe2a1b264
Merge pull request #391 from TheMardy/master
...
Updated Email Templates
2019-02-10 22:03:20 +01:00
Daniel García
79fdfd6524
Add missing url parameter
2019-02-10 21:40:20 +01:00
Daniel García
d086a99e5b
Implemented HTML emails with text alternative
2019-02-10 19:12:34 +01:00
Daniel García
28d1588e73
Show version in admin panel
2019-02-10 16:02:46 +01:00
Daniel García
f3b1a5ff3e
Error when admin panel is disabled
2019-02-10 15:26:19 +01:00
Daniel García
330e90a6ac
Hide secrets in config panel
2019-02-08 20:49:04 +01:00
Daniel García
8fac72db53
Mention relation between DOMAIN and mail settings in .env template
2019-02-08 19:21:48 +01:00
Daniel García
820c8b0dce
Change use of deserialize_with for Option iterator
2019-02-08 19:12:08 +01:00
Daniel García
8b4a6f2a64
Fixed some clippy lints and changed update_uuid_revision to only use one db query
2019-02-08 18:45:07 +01:00
Daniel García
ef63342e20
Add reset user config button
2019-02-06 17:34:32 +01:00
Daniel García
89840790e7
Fix .env path traversal issue
2019-02-06 17:34:31 +01:00
Daniel García
a72809b225
Yubico and SMTP enable/disable master switches
2019-02-06 17:34:31 +01:00
Daniel García
9976e4736e
Add groups
2019-02-06 17:34:31 +01:00
Daniel García
dc92f07232
Added env variable to select config file. Initial work towards groups and added tooltips with descriptions and nicer names
2019-02-06 17:34:30 +01:00
Daniel García
3db815b969
Implemented config form and fixed config priority
2019-02-06 17:34:30 +01:00
Daniel García
ade293cf52
Save config
2019-02-06 17:34:29 +01:00
Daniel García
877408b808
Implement basic config loading and updating. No save to file yet.
2019-02-06 17:34:29 +01:00
Daniel García
86ed75bf7c
Config can now be serialized / deserialized
2019-02-06 17:34:29 +01:00
Daniel García
20d8d800f3
Updated dependencies
2019-02-06 17:34:29 +01:00
Daniel García and GitHub
7ce06b3808
Merge pull request #387 from mprasil/collections_edit_revision
...
Update revision when adding or removing cipher from collection
2019-02-06 17:33:03 +01:00
Daniel García and GitHub
0bd3a26051
Merge pull request #386 from mprasil/revision_collection_delete
...
Update revision of affected users when deleting Collection
2019-02-06 14:53:16 +01:00
Daniel García and GitHub
b75f38033b
Merge pull request #385 from mprasil/update_revision_retry
...
Retry updating revision - fixes #383
2019-02-05 15:31:07 +01:00
Daniel García and GitHub
06522c9ac0
Merge pull request #382 from BlackDex/iter-iconlist
...
Loop through the iconlist until an icon is found
2019-02-04 18:54:15 +01:00
Daniel García and GitHub
48113b7bd9
Merge pull request #381 from BlackDex/issue-380
...
Fixed issue #380
2019-02-04 13:56:11 +01:00
Daniel García and GitHub
1e20f9f1d8
Merge pull request #377 from BlackDex/icon-cookies
...
Added cookies to the icon download request.
2019-01-31 18:16:30 +01:00
Daniel García
f42ac5f2c0
Update web vault error message
2019-01-29 21:45:25 +01:00
Daniel García
2a60414031
Reuse the client between requests, and use the client when downloading the icons themselves
2019-01-29 21:21:26 +01:00
Daniel García and GitHub
9a2a304860
Merge pull request #372 from BlackDex/better-href-fix
...
Changed the way to fix the href
2019-01-29 19:30:53 +01:00
Daniel García
c0e350b734
Disable icon downloads, accept optional query after icon href, format and clippy fixes
2019-01-28 23:58:32 +01:00
Daniel García
bef1183c49
Only send one notification per vault import and purge, improve move ciphers functions
2019-01-28 00:39:14 +01:00
Daniel García
f935f5cf46
Remove local icon extractor
2019-01-27 16:42:30 +01:00
Daniel García and GitHub
07388d327f
Merge pull request #370 from BlackDex/favicons
...
Added better favicon downloader.
2019-01-27 16:37:47 +01:00
Daniel García
69036cc6a4
Add disabled user badge (no password) and deauthorize button to admin page.
2019-01-26 19:28:54 +01:00
Daniel García
700e084101
Add 2FA icon to admin panel
2019-01-25 18:50:57 +01:00
Daniel García
a1dc47b826
Change config to thread-safe system, needed for a future config panel.
...
Improved some two factor methods.
2019-01-25 18:24:57 +01:00
Daniel García
86de0ca17b
Fix editing users from collections menu
2019-01-25 17:43:51 +01:00
Daniel García and GitHub
80414f8452
Merge pull request #365 from CoreFiling/master
...
Fix the list of users with access to a collection to display correctly.
2019-01-25 16:52:27 +01:00
Daniel García
9d027b96d8
Update web-vault to fix U2F NotTrustedAnchor error
2019-01-24 18:43:22 +01:00