BlackDex
9466f02696
Recoded TOTP time drift validation
6 years ago
BlackDex
ebf40099f2
Updated authenticator TOTP
- Added security check for previouse used codes
- Allow TOTP codes with 1 step back and forward when there is a time
drift. This means in total 3 codes could be valid. But only newer codes
then the previouse used codes are excepted after that.
6 years ago
BlackDex
edc482c8ea
Changed HIBP Error message.
- Moved the manual link to the check to the top.
- Clearified that hibp is a payed service.
- Changed error logo to hibp logo.
6 years ago
BlackDex
6e5c03cc78
Some modification when no HIBP API Key is set
- Added an URL with the useraccount for manual check.
- Added support for HTTP(S)_PROXY for hibp.
6 years ago
Daniel García
df8114f8be
Updated client kdf iterations to 100000 and fixed some lints
6 years ago
Daniel García
e3404dd322
Use the local scripts instead of cloudflare, remove jquery and update config so disabling a master toggle doesn't remove the values
6 years ago
Daniel García
bfc517ee80
Remove unused warning
6 years ago
Daniel García
4a7d2a1e28
Rename static files endpoint
6 years ago
vpl
c99df1c310
Compare token using crypto::ct_eq
6 years ago
vpl
591ae10144
Get token from single u64
6 years ago
Daniel García
026f9da035
Allow removing users two factors
6 years ago
Daniel García
515b87755a
Update HIBP to v3, requires paid API key, fixes #583
6 years ago
vpl
ad2225b6e5
Add configuration options for Email 2FA
6 years ago
vpl
5609103a97
Use ring to generate email token
6 years ago
vpl
6d460b44b0
Use saved token for email 2fa codes
6 years ago
vpl
efd8d9f528
Remove some unused imports, unneeded mut variables
6 years ago
vpl
29aedd388e
Add email code logic and move two_factor into separate modules
6 years ago
Daniel García
05a1137828
Move backend checks to build.rs to fail fast, and updated dependencies
6 years ago
Emil Madsen
e22e290f67
Fix key and type variable names for mysql
6 years ago
Daniel García
874f5c34bd
Formatting
6 years ago
Daniel García
253faaf023
Use users duo host when required, instead of always using the global one
6 years ago
janost
03fdf36bf9
Fixed purging organization vault
6 years ago
Daniel García
fdcc32beda
Validate Duo credentials when custom
6 years ago
Daniel García
8d9827c55f
Implement selection between global config and user settings for duo keys.
6 years ago
Daniel García
cad63f9761
Auto generate akey
6 years ago
Daniel García
621f607297
Update dependencies and fix some warnings
6 years ago
Daniel García
754087b990
Add global duo config and document options in .env template
6 years ago
Daniel García
cfbeb56371
Implement user duo, initial version
TODO:
- At the moment each user needs to configure a DUO application and input the API keys, we need to check if multiple users can register with the same keys correctly and if so we could implement a global setting.
- Sometimes the Duo frame doesn't load correctly, but canceling, reloading the page and logging in again seems to fix it for me.
6 years ago
Daniel García
61515160a7
Allow changing error codes and create an empty error.
Return 404 instead of 400 when no accounts breached.
6 years ago
Daniel García
04922f6aa0
Some formatting and dependency updates
6 years ago
Daniel García
7d2bc9e162
Added option to force 2fa at logins and made some changes to two factor code.
Added newlines to config options to keep them a reasonable length.
6 years ago
Daniel García
10756b0920
Update dependencies and fix some lints
6 years ago
Дамјан Георгиевски
473f8b8e31
remove some unneeded mutability
6 years ago
Daniel García
5ee04e31e5
Updated dependencies, removed some unnecessary clones and fixed some lints
6 years ago
Daniel García
a744b9437a
Implemented multiple U2f keys, key names, and compromised checks
6 years ago
Daniel García
6027b969f5
Delete old devices when deauthorizing user sessions
6 years ago
Daniel García
93805a5d7b
Fix Yubikeys deleted on error
6 years ago
Daniel García
820c8b0dce
Change use of deserialize_with for Option iterator
6 years ago
Daniel García
8b4a6f2a64
Fixed some clippy lints and changed update_uuid_revision to only use one db query
6 years ago
Daniel García
86ed75bf7c
Config can now be serialized / deserialized
6 years ago
Daniel García
20d8d800f3
Updated dependencies
6 years ago
Miroslav Prasil
637f655b6f
Do not allocate uneccessary Vec
6 years ago
Miroslav Prasil
b3f7394c06
Do not update revision at the end, as we already did that
6 years ago
Miroslav Prasil
1a5ecd4d4a
cipher does not need to be mutable
6 years ago
Miroslav Prasil
bd65c4e312
Remove superfluous cipher.save() call
6 years ago
Daniel García
bef1183c49
Only send one notification per vault import and purge, improve move ciphers functions
6 years ago
Daniel García
a1dc47b826
Change config to thread-safe system, needed for a future config panel.
Improved some two factor methods.
6 years ago
Daniel García
86de0ca17b
Fix editing users from collections menu
6 years ago
Stephen White
928ad6c1d8
Fix the list of users with access to a collection to display correctly.
https://github.com/dani-garcia/bitwarden_rs/issues/364
6 years ago
Daniel García
a797459560
Implement HIBP check [WIP].
Add extra security attributes to admin cookie.
Error handling.
6 years ago