mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2025-09-09 10:25:56 +03:00
cff6c2b3af
* Add SSO functionality using OpenID Connect Co-authored-by: Pablo Ovelleiro Corral <mail@pablo.tools> Co-authored-by: Stuart Heap <sheap13@gmail.com> Co-authored-by: Alex Moore <skiepp@my-dockerfarm.cloud> Co-authored-by: Brian Munro <brian.alexander.munro@gmail.com> Co-authored-by: Jacques B. <timshel@github.com> * Improvements and error handling * Stop rolling device token * Add playwright tests * Activate PKCE by default * Ensure result order when searching for sso_user * add SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION * Toggle SSO button in scss * Base64 encode state before sending it to providers * Prevent disabled User from SSO login * Review fixes * Remove unused UserOrganization.invited_by_email * Split SsoUser::find_by_identifier_or_email * api::Accounts::verify_password add the policy even if it's ignored * Disable signups if SSO_ONLY is activated * Add verifiedDate to organizations::get_org_domain_sso_details * Review fixes * Remove OrganizationId guard from get_master_password_policy * Add wrapper type OIDCCode OIDCState OIDCIdentifier * Membership::confirm_user_invitations fix and tests * Allow set-password only if account is unitialized * Review fixes * Prevent accepting another user invitation * Log password change event on SSO account creation * Unify master password policy resolution * Upgrade openidconnect to 4.0.0 * Revert "Remove unused UserOrganization.invited_by_email" This reverts commit 548e19995e141314af98a10d170ea7371f02fab4. * Process org enrollment in accounts::post_set_password * Improve tests * Pass the claim invited_by_email in case it was not in db * Add Slack configuration hints * Fix playwright tests * Skip broken tests * Add sso identifier in admin user panel * Remove duplicate expiration check, add a log * Augment mobile refresh_token validity * Rauthy configuration hints * Fix playwright tests * Playwright upgrade and conf improvement * Playwright tests improvements * 2FA email and device creation change * Fix and improve Playwright tests * Minor improvements * Fix enforceOnLogin org policies * Run playwright sso tests against correct db * PKCE should now work with Zitadel * Playwright upgrade maildev to use MailBuffer.expect * Upgrades playwright tests deps * Check email_verified in id_token and user_info * Add sso verified endpoint for v2025.6.0 * Fix playwright tests * Create a separate sso_client * Upgrade openidconnect to 4.0.1 * Server settings for login fields toggle * Use only css for login fields * Fix playwright test * Review fix * More review fix * Perform same checks when setting kdf --------- Co-authored-by: Felix Eckhofer <felix@eckhofer.com> Co-authored-by: Pablo Ovelleiro Corral <mail@pablo.tools> Co-authored-by: Stuart Heap <sheap13@gmail.com> Co-authored-by: Alex Moore <skiepp@my-dockerfarm.cloud> Co-authored-by: Brian Munro <brian.alexander.munro@gmail.com> Co-authored-by: Jacques B. <timshel@github.com> Co-authored-by: Timshel <timshel@480s>
94 lines
2.2 KiB
Bash
94 lines
2.2 KiB
Bash
##################################################################
|
|
### Shared Playwright conf test file Vaultwarden and Databases ###
|
|
##################################################################
|
|
|
|
ENV=test
|
|
DC_ENV_FILE=test.env
|
|
COMPOSE_IGNORE_ORPHANS=True
|
|
DOCKER_BUILDKIT=1
|
|
|
|
#####################
|
|
# Playwright Config #
|
|
#####################
|
|
PW_KEEP_SERVICE_RUNNNING=${PW_KEEP_SERVICE_RUNNNING:-false}
|
|
PW_SMTP_FROM=vaultwarden@playwright.test
|
|
|
|
#####################
|
|
# Maildev Config #
|
|
#####################
|
|
MAILDEV_HTTP_PORT=1081
|
|
MAILDEV_SMTP_PORT=1026
|
|
MAILDEV_HOST=127.0.0.1
|
|
|
|
################
|
|
# Users Config #
|
|
################
|
|
TEST_USER=test
|
|
TEST_USER_PASSWORD=Master Password
|
|
TEST_USER_MAIL=${TEST_USER}@example.com
|
|
|
|
TEST_USER2=test2
|
|
TEST_USER2_PASSWORD=Master Password
|
|
TEST_USER2_MAIL=${TEST_USER2}@example.com
|
|
|
|
TEST_USER3=test3
|
|
TEST_USER3_PASSWORD=Master Password
|
|
TEST_USER3_MAIL=${TEST_USER3}@example.com
|
|
|
|
###################
|
|
# Keycloak Config #
|
|
###################
|
|
KEYCLOAK_ADMIN=admin
|
|
KEYCLOAK_ADMIN_PASSWORD=${KEYCLOAK_ADMIN}
|
|
KC_HTTP_HOST=127.0.0.1
|
|
KC_HTTP_PORT=8081
|
|
|
|
# Script parameters (use Keycloak and VaultWarden config too)
|
|
TEST_REALM=test
|
|
DUMMY_REALM=dummy
|
|
DUMMY_AUTHORITY=http://${KC_HTTP_HOST}:${KC_HTTP_PORT}/realms/${DUMMY_REALM}
|
|
|
|
######################
|
|
# Vaultwarden Config #
|
|
######################
|
|
ROCKET_PORT=8003
|
|
DOMAIN=http://127.0.0.1:${ROCKET_PORT}
|
|
LOG_LEVEL=info,oidcwarden::sso=debug
|
|
LOGIN_RATELIMIT_MAX_BURST=100
|
|
|
|
SMTP_SECURITY=off
|
|
SMTP_PORT=${MAILDEV_SMTP_PORT}
|
|
SMTP_FROM_NAME=Vaultwarden
|
|
SMTP_TIMEOUT=5
|
|
|
|
SSO_CLIENT_ID=warden
|
|
SSO_CLIENT_SECRET=warden
|
|
SSO_AUTHORITY=http://${KC_HTTP_HOST}:${KC_HTTP_PORT}/realms/${TEST_REALM}
|
|
SSO_DEBUG_TOKENS=true
|
|
|
|
###########################
|
|
# Docker MariaDb container#
|
|
###########################
|
|
MARIADB_PORT=3307
|
|
MARIADB_ROOT_PASSWORD=warden
|
|
MARIADB_USER=warden
|
|
MARIADB_PASSWORD=warden
|
|
MARIADB_DATABASE=warden
|
|
|
|
###########################
|
|
# Docker Mysql container#
|
|
###########################
|
|
MYSQL_PORT=3309
|
|
MYSQL_ROOT_PASSWORD=warden
|
|
MYSQL_USER=warden
|
|
MYSQL_PASSWORD=warden
|
|
MYSQL_DATABASE=warden
|
|
|
|
############################
|
|
# Docker Postgres container#
|
|
############################
|
|
POSTGRES_PORT=5433
|
|
POSTGRES_USER=warden
|
|
POSTGRES_PASSWORD=warden
|
|
POSTGRES_DB=warden
|