Tree: 0ce0795fa9

cached-config-operations

main

revert-7033-patch-1

test_dylint

threat_model

v2-1-blob-ciphers-key-ids

v2-2-registration

v2-3-key-rotation

v2-registration

0.10.0

0.11.0

0.12.0

0.13.0

0.9.0

1.0.0

1.1.0

1.10.0

1.11.0

1.12.0

1.13.0

1.13.1

1.14

1.14.1

1.14.2

1.15.0

1.15.1

1.16.0

1.16.1

1.16.2

1.16.3

1.17.0

1.18.0

1.19.0

1.2.0

1.20.0

1.21.0

1.22.0

1.22.1

1.22.2

1.23.0

1.23.1

1.24.0

1.25.0

1.25.1

1.25.2

1.26.0

1.27.0

1.28.0

1.28.1

1.29.0

1.29.1

1.29.2

1.3.0

1.30.0

1.30.1

1.30.2

1.30.3

1.30.4

1.30.5

1.31.0

1.32.0

1.32.1

1.32.2

1.32.3

1.32.4

1.32.5

1.32.6

1.32.7

1.33.0

1.33.1

1.33.2

1.34.0

1.34.1

1.34.2

1.34.3

1.35.0

1.35.1

1.35.2

1.35.3

1.35.4

1.35.5

1.35.6

1.35.7

1.35.8

1.36.0

1.37.0

1.37.1

1.37.2

1.37.3

1.37.4

1.37.5

1.4.0

1.5.0

1.6.0

1.6.1

1.7.0

1.8.0

1.9.0

1.9.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '0ce0795fa9'

${ noResults }

Commit Graph

3 Commits (0ce0795fa9c4887897e238fbefd51b2429839e71)

Author	SHA1	Message	Date
Luca Biemelt	0ce0795fa9	Block owners and admins from enrolling in the Key Connector They administer the key connector itself and are expected to keep a master password, so refuse set-key-connector-key and convert-to-key-connector for anyone with an owner or admin membership, including pending invites.	4 months ago
Luca Biemelt	e5f1303353	Harden the Key Connector account endpoints set-key-connector-key now refuses to touch an already initialized account (same check as set-password) and convert-to-key-connector refuses accounts that have no keys yet. Logins of key connector users fail with a clear error when KEY_CONNECTOR_ENABLED was turned off again, instead of returning a response without any usable decryption option. KEY_CONNECTOR_URL is also validated as a URL on startup.	4 months ago
Luca Biemelt	85b4e8aa6d	Add Key Connector support for SSO users Adds the server-side endpoints the clients expect for Key Connector (set-key-connector-key, convert-to-key-connector, confirmation-details), a uses_key_connector flag on users plus migrations, and new KEY_CONNECTOR_* config options gated behind SSO_ENABLED. SSO logins now carry amr=external and the login response advertises the connector URL so the clients pick it up. The protocol was worked out from the GPL client code only, without looking at Bitwarden's key-connector repo.	4 months ago