Commit Graph

  • 283467f90e Add GET /public/events Bitwarden-compatible Public API endpoint svrforum 2026-06-09 10:56:16 +0900
  • 1c91b8a8c9 Make get_continuation_token reusable across modules svrforum 2026-06-09 10:56:16 +0900
  • 989fa9ac0d Add Event::to_json_public for Public API event model svrforum 2026-06-09 10:40:21 +0900
  • f750116afa
    Merge branch 'main' into pr/3x8_cargo-deny Denis Pisarev 2026-06-08 14:24:12 +0200
  • 3c584be7d0
    Fix invalid SSH key sync for Bitwarden 2026.5 MengYX 2026-06-06 12:28:27 +0800
  • d6a3d539ed
    Update Rust, Crates and GHA (#7307) Mathijs van Veluw 2026-06-05 21:52:52 +0200
  • 660a02db4a
    Update Rust, Crates and GHA BlackDex 2026-06-05 17:39:16 +0200
  • b999841de0
    Ignore RUSTSEC-2026-0098, -0099, -0104 in deny.toml TriplEight 2026-06-04 15:23:01 +0200
  • 727fead3a0 playwright: pin webauthn-grant 2FA-usability gate Zaid Marji 2026-06-02 19:13:27 +0300
  • e94b8556c8 playwright: disabled-account passkey login coverage Zaid Marji 2026-06-01 23:38:46 +0300
  • fcef37bfc7 webauthn: concurrent-modification handling + login error helpers Zaid Marji 2026-06-02 18:18:46 +0300
  • 6be69056d1 2FA: harden enforce_2fa_policy for unauthenticated callers Zaid Marji 2026-05-31 13:24:50 +0300
  • 019a1adf98 webauthn: passkey-management module + login hardening + Result-typed 2FA lookups Zaid Marji 2026-06-02 19:09:41 +0300
  • b5678daf8e webauthn: harden passkey management flows Zaid Marji 2026-06-02 17:43:24 +0300
  • 247a8905d8 Fix correctness, test reliability, and observability issues Zaid Marji 2026-06-02 19:08:20 +0300
  • 58bbc2d533 playwright: passkey UI flow tests + SSO_ONLY denial coverage Zaid Marji 2026-05-29 11:59:58 +0300
  • 6522923cdb playwright: account lifecycle test + host-iteration config Zaid Marji 2026-05-28 07:34:36 +0300
  • 2d59e7e631 playwright: implement fido2 + auto-pick 2FA provider in submitTwoFactor Zaid Marji 2026-05-28 07:34:11 +0300
  • 524194bbf4 config: advertise pm-2035-passkey-unlock feature flag Zaid Marji 2026-05-28 07:19:37 +0300
  • 3f96c26322 two_factor/webauthn: gate every entry point with is_webauthn_2fa_supported Zaid Marji 2026-05-27 15:04:05 +0300
  • a75273d40f playwright: cover PRF login-passkey enrolment via Chromium virtual authenticator Zaid Marji 2026-05-27 06:17:23 +0300
  • 6f2751ee79 Align UserDecryption response shapes with upstream Bitwarden Zaid Marji 2026-06-02 18:15:15 +0300
  • c489186e4f Add playwright tests for passkey login Zaid Marji 2026-05-24 06:04:07 +0300
  • a7dd529f1f
    Merge branch 'main' into pr/3x8_cargo-deny Denis Pisarev 2026-06-04 14:55:56 +0200
  • 95d2a73671 Fix local attachment download endpoint Puneet Dixit 2026-06-04 14:53:21 +0530
  • 89a9ef9afa Prevent duplicate passkey credential registration Zaid Marji 2026-05-23 12:51:55 +0300
  • ced3520def Harden passkey login flow Zaid Marji 2026-05-24 14:09:04 +0300
  • f728963aaa Tighten passkey credential persistence and enrollment Zaid Marji 2026-05-24 14:16:42 +0300
  • 3ab20f1f41 Centralize SSO_ONLY enforcement (deny-by-default) Zaid Marji 2026-06-02 17:43:12 +0300
  • 5760ade325 Fix and harden the passkey login implementation Zaid Marji 2026-06-02 17:43:12 +0300
  • 912c31324c
    set user_created bool for each separate invitation stefan0xC 2026-06-02 06:11:55 +0200
  • 21eafd0dde
    don't auto-enable signups via allowed domains list stefan0xC 2026-06-02 05:57:28 +0200
  • a1d83ea29f Use insert_into when possible Timshel 2025-11-04 23:38:03 +0100
  • 2706e9be3a Org membership delete remove Invitation Timshel 2026-06-01 12:06:55 +0200
  • 17eb54e0c5 Fix regression with domain_allowed in SSO onboarding Timshel 2026-05-30 10:06:52 +0200
  • 896952a5ad fix: CVE-2026-27803 security vulnerability orbisai0security 2026-05-30 04:49:24 +0000
  • ff85ddff73 fix: the build tool tools/global_domains in global_domains.py orbisai0security 2026-05-30 03:11:26 +0000
  • 45ea185f48 fix: V-001 security vulnerability orbisai0security 2026-05-30 03:10:18 +0000
  • c09ee802c0
    fix: Correct invalid comment syntax in .dockerignore niniconi 2026-05-29 16:48:27 +0800
  • 9b60e7681f Add SSO_SIGNUPS_ALLOWED Timshel 2026-05-28 14:11:55 +0200
  • 1cdf0b7b86 Feat add webauthn login Sammy ETUR 2026-02-12 04:31:09 +0100
  • 88ab51443a playwright: centralize 2FA challenge handling Zaid Marji 2026-05-27 11:14:30 +0300
  • ad582b460a playwright: centralize web-vault selectors into shared setup helpers Zaid Marji 2026-05-27 10:03:29 +0300
  • 0c009d679d playwright: fix invitation-accepted toast text + SSO existing-account redirect Zaid Marji 2026-05-26 07:22:37 +0300
  • 9186ec245b playwright: fix stale org-nav selectors against bundled web vault Zaid Marji 2026-05-26 03:46:59 +0300
  • a3fb02776d gitignore: catch stray playwright artifacts at the repo root Zaid Marji 2026-05-24 10:42:41 +0300
  • f30847d15e playwright: serve the test Vaultwarden over HTTPS Zaid Marji 2026-05-24 10:24:07 +0300
  • c02ced432d playwright: fix TOTP setup flow against bundled web vault Zaid Marji 2026-05-24 10:23:45 +0300
  • c0589bbd74 playwright: fix stale Master password selectors against bundled web vault Zaid Marji 2026-05-24 10:22:49 +0300
  • bb9449bf35
    chore: remove duplicate "the" in ciphers.rs comment Matt Van Horn 2026-05-26 00:56:35 -0700
  • 3f8e0a5bbc
    Merge 1497b6a5d8 into d626ea81ab Timshel 2026-05-21 17:08:24 +0000
  • 1497b6a5d8 Allow SSO role mapping to add admin cookie Timshel 2024-01-03 17:24:57 +0100
  • a9893d60a3
    http_client: don't panic on invalid block regex; use RwLock Pham Quang Nghi 2026-05-20 18:26:45 +0700
  • 66d761e42e
    Merge bd12af6e86 into d626ea81ab Chase Douglas 2026-05-19 22:11:53 +0000
  • bd12af6e86 aws: add Lambda deployment assets Chase Douglas 2026-05-05 13:49:40 -0700
  • b5904297ea db: add Aurora DSQL backend Chase Douglas 2026-05-05 13:49:32 -0700
  • 77a50b0b4d
    Merge e7f2442a59 into d626ea81ab Chase Douglas 2026-05-19 17:40:31 +0000
  • e7f2442a59 mail: add AWS SES transport Chase Douglas 2026-05-05 13:49:24 -0700
  • d626ea81ab
    Serve Apple app site association file (#7191) user71424q 2026-05-17 19:46:10 +0000
  • be5bff1247
    Merge 34feefa9f8 into 1ba2c6a26c Daniel 2026-05-17 20:48:22 +0200
  • 1ba2c6a26c
    Switch to Edition 2024, more clippy lints, and less macro calls (#7200) Mathijs van Veluw 2026-05-17 19:38:49 +0200
  • 95c413d58d
    Remove "db_run!" macro calls where possible BlackDex 2026-05-08 18:12:00 +0200
  • b3861e8765
    Reorder and merge imports BlackDex 2026-05-08 17:16:47 +0200
  • 83317d90b7
    Update to Rust 2024 Edition Mathijs van Veluw 2026-05-02 18:56:15 +0200
  • bec8ce5331 revert cors rwjack 2026-03-30 13:46:58 +0200
  • c760e63a9b add trusted device verification: https://github.com/dani-garcia/vaultwarden/discussions/6655 rwjack 2026-03-30 00:52:07 +0200
  • c7d6abe849
    Merge branch 'main' into jueti-patch-1 Jason Yang 2026-05-17 15:03:32 +0800
  • f38ff95934
    Merge pull request #3 from jueti/main Jason Yang 2026-05-17 14:59:14 +0800
  • 22f5e0496c
    Updates and fixes (#7235) Mathijs van Veluw 2026-05-17 00:43:58 +0200
  • 48fe504b31
    Update datatables BlackDex 2026-05-16 15:30:34 +0200
  • e6a704b63f
    Fix restoring revoked user BlackDex 2026-05-16 15:24:44 +0200
  • 7095dc2116
    Update crates and gha BlackDex 2026-05-16 15:08:56 +0200
  • 70f9dfbe8b
    Switch to `xx-cargo` (#6640) Daniel 2026-05-16 22:19:01 +0300
  • 54895ad4be
    Reject unrecognised DATABASE_URL instead of silent SQLite fallback (#7061) mfw78 2026-05-16 19:18:53 +0000
  • a057c7deae
    sso_auth improvements (#7197) Timshel 2026-05-16 19:18:46 +0000
  • 2f85b62d2f
    fix email 2fa for bw cli (#7225) Stefan Melmuk 2026-05-16 21:18:39 +0200
  • 44e6a211c1
    Merge branch 'main' into feat/sso-cookie-vendor nathanmoreton 2026-05-16 12:26:25 -0500
  • b68fb30eca
    Use 'scheme' instead of 'prefix' in DATABASE_URL messages mfw78 2026-04-10 08:30:11 +0000
  • e159210323
    Use err!() instead of panic!() for unrecognised DATABASE_URL mfw78 2026-04-08 09:20:55 +0000
  • 32907bdaf5
    Panic on unrecognised DATABASE_URL instead of silent SQLite fallback mfw78 2026-04-07 11:05:08 +0000
  • 1eddcd6563 sso_auth improvements Timshel 2026-05-05 18:25:17 +0200
  • e48fa532c1
    Merge e054287886 into 9bc14e6e77 Lukas Pieper 2026-05-16 05:54:52 -0500
  • 9bc14e6e77
    Fix SSO Cookie path (#7187) Mathijs van Veluw 2026-05-15 20:31:58 +0200
  • cdf711bb30
    OpenDAL S3 parameter support (#6127) Chase Douglas 2026-05-15 11:30:31 -0700
  • e7acb42273
    fix email 2fa for bw cli stefan0xC 2026-05-15 01:53:05 +0200
  • 67429c55c3 storage: add OpenDAL S3 URI options Chase Douglas 2026-05-05 13:49:00 -0700
  • 8ab5f43450 deps: upgrade the reqwest stack to 0.13 Chase Douglas 2026-05-14 13:50:23 -0700
  • 8d3e4ba67c
    Merge branch 'main' into icon-service-fallback Shocker 2026-05-14 13:33:23 -0400
  • 47683cd273
    Update docker cli example to match docker compose example Mathieu SOUM 2026-05-12 13:07:46 +0200
  • def93ae78f Add redundant_else clippy lint Taylor Tumlin 2026-05-08 15:26:15 -0400
  • 6b3d834f5d
    Merge branch 'main' into feat/sso-cookie-vendor nathanmoreton 2026-05-08 14:08:42 -0500
  • 399742be5e Serve Apple app site association file user71424q 2026-05-05 12:59:12 +0000
  • e0e0d9c33c
    Fix SSO Cookie path BlackDex 2026-05-05 08:50:11 +0200
  • 18a1b00aa7 add optional encryption to rsa_key.pem Andreas Piesk 2026-05-03 21:32:22 +0200
  • 842cbde464
    Merge 009565735c into f21a3adae2 Hex 2026-05-03 14:17:14 -0400
  • dd4759f717
    Merge commit '07aa377a' into feat/sso_login_graphical_fix Iacopo Sbalchiero 2026-05-02 19:38:59 +0200
  • 96b81f7287
    fix: hide email field on login page when SSO_ONLY is enabled Iacopo Sbalchiero 2026-05-01 15:57:19 +0200
  • f21a3adae2
    Update hickory (#7175) 1.36.0 Mathijs van Veluw 2026-05-02 18:56:15 +0200
  • b8986f82fc
    Update hickory BlackDex 2026-05-02 18:34:56 +0200
  • a2d60c352b Fix fmt and clippy on Rust 1.95 nathanmoreton 2026-05-01 14:36:13 -0500