hacktoberfestdockervaultwardenrustrocketbitwarden-rsbitwarden

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tree: acbf49018f

cached-config-operations

main

revert-7033-patch-1

test_dylint

v2-1-blob-ciphers-key-ids

v2-2-registration

v2-3-key-rotation

v2-4-sdk-live-tests

v2-registration

0.10.0

0.11.0

0.12.0

0.13.0

0.9.0

1.0.0

1.1.0

1.10.0

1.11.0

1.12.0

1.13.0

1.13.1

1.14

1.14.1

1.14.2

1.15.0

1.15.1

1.16.0

1.16.1

1.16.2

1.16.3

1.17.0

1.18.0

1.19.0

1.2.0

1.20.0

1.21.0

1.22.0

1.22.1

1.22.2

1.23.0

1.23.1

1.24.0

1.25.0

1.25.1

1.25.2

1.26.0

1.27.0

1.28.0

1.28.1

1.29.0

1.29.1

1.29.2

1.3.0

1.30.0

1.30.1

1.30.2

1.30.3

1.30.4

1.30.5

1.31.0

1.32.0

1.32.1

1.32.2

1.32.3

1.32.4

1.32.5

1.32.6

1.32.7

1.33.0

1.33.1

1.33.2

1.34.0

1.34.1

1.34.2

1.34.3

1.35.0

1.35.1

1.35.2

1.35.3

1.35.4

1.35.5

1.35.6

1.35.7

1.35.8

1.36.0

1.37.0

1.37.1

1.37.2

1.37.3

1.37.4

1.4.0

1.5.0

1.6.0

1.6.1

1.7.0

1.8.0

1.9.0

1.9.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'acbf49018f'

${ noResults }

vaultwarden/src/db/models

History

Timshel acbf49018f [web-v2026.7.1] 2FA userVerificationToken for Authenticator, Email and Duo (#7563) * 2FA using userVerificationToken * Fix 2FA Yubikeys * TwoFactor.find_by_user_and_type take enum parameter not i32 * log_user_event take enum parameter not i32 * Fix 2fa webauthn * Prevent 2FA claims reuse * 2fa webauthn return keys when deleting * 2fa reset twofactor_remember * Reject 2FA verification tokens issued for another provider The Email and Duo claims only have optional fields, so a userVerificationToken minted for another provider deserialized into them and was accepted. Each provider's claims now reject unknown fields, with a test that every token only parses as its own provider. Also fix the email 2FA login in the Playwright user setup, which used an undefined `mailBuffer`. --------- Co-authored-by: Timshel <timshel@users.noreply.github.com> Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>		12 hours ago
..
archive.rs	Use insert_into when possible (#6437)	4 weeks ago
attachment.rs	Align API behaviour with upstream and return errors on malformed input (#7810)	2 days ago
auth_request.rs	Align API behaviour with upstream and return errors on malformed input (#7810)	2 days ago
cipher.rs	Send API cleanup: remove legacy endpoints and align access with upstream (#7806)	4 days ago
collection.rs	Require confirmed membership for user access checks, not for admin views (#7763)	2 weeks ago
device.rs	Use insert_into when possible (#6437)	4 weeks ago
emergency_access.rs	Use insert_into when possible (#6437)	4 weeks ago
event.rs	Support the vault banner policy (#7748)	3 weeks ago
favorite.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	5 months ago
folder.rs	Use insert_into when possible (#6437)	4 weeks ago
group.rs	Remove legacy API endpoints and compatibility code dropped upstream (#7809)	3 days ago
mod.rs	User key id (#7693)	3 weeks ago
org_policy.rs	Add accepted organization data to sync response (#7666)	3 weeks ago
organization.rs	Align API behaviour with upstream and return errors on malformed input (#7810)	2 days ago
send.rs	Send API cleanup: remove legacy endpoints and align access with upstream (#7806)	4 days ago
sso_auth.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	5 months ago
two_factor.rs	[web-v2026.7.1] 2FA userVerificationToken for Authenticator, Email and Duo (#7563)	12 hours ago
two_factor_duo_context.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	5 months ago
two_factor_incomplete.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	5 months ago
user.rs	[Web 2026.9.0] Support new Emergency Access password payload (#7746)	15 hours ago