81 commits

Author	SHA1	Message	Date
Daniel García	0de52c6c99	Merge pull request #957 from jjlin/domain-whitelist ... Domain whitelist cleanup and fixes	2020-04-18 12:08:48 +02:00
Jeremy Lin	86685c1cd2	Ensure email domain comparison is case-insensitive	2020-04-11 14:51:36 -07:00
Jeremy Lin	0a68de6c24	Warn on empty ADMIN_TOKEN instead of bailing out ... The admin page will still be disabled. Fixes #849.	2020-04-09 20:55:08 -07:00
Jeremy Lin	c2a324e5da	Clean up domain whitelist logic ... * Make `SIGNUPS_DOMAINS_WHITELIST` override the `SIGNUPS_ALLOWED` setting. Otherwise, a common pitfall is to set `SIGNUPS_DOMAINS_WHITELIST` without realizing that `SIGNUPS_ALLOWED=false` must also be set. * Whitespace is now accepted in `SIGNUPS_DOMAINS_WHITELIST`. That is, `foo.com, bar.com` is now equivalent to `foo.com,bar.com`. * Add validation on `SIGNUPS_DOMAINS_WHITELIST`. For example, `foo.com,` is rejected as containing an empty token.	2020-04-09 01:42:27 -07:00
Daniel García	70f3ab8ec3	Migrate lazy_static to once_cell, less macro magic and slightly faster	2020-03-09 22:04:03 +01:00
BlackDex	5a974c7b94	Added SMTP test button in the admin gui ... - Added a test button for checking the e-mail settings. - Fixed a bug with the _post JavaScript function: A function was overwriten with a variable and errors were not handled correctly like a 500 for example.	2020-02-26 16:49:56 +01:00
Daniel García	cd8907542a	Make sure the provided domain contains the protocol and show a useful error when it doesn't	2020-02-23 14:55:27 +01:00
Jeremy Lin	29a0795219	Add backend support for alternate base dir (subdir/subpath) hosting ... To use this, include a path in the `DOMAIN` URL, e.g.: * `DOMAIN=https://example.com/custom-path` * `DOMAIN=https://example.com/multiple/levels/are/ok`	2020-02-18 21:27:00 -08:00
Daniel García	325039c316	Attachment size limits, per-user and per-organization	2020-02-17 22:56:26 +01:00
Daniel García	8867626de8	Add option to change invitation org name, fixes #825 ... Add option to allow additional iframe ancestors, fixes #843 Sort the rocket routes before printing them	2020-02-04 22:14:50 +01:00
Daniel García	480ba933fa	Don't error if admin token is empty but disabled	2020-01-30 22:10:50 +01:00
Miro Prasil	c4101162d6	SIGNUPS_ALLOWED with no whitelist [fixes #830] ... This reverts back to `SIGNUPS_ALLOWED` when there is no domain whitelist set. The functionality was broken in 64d6f72.	2020-01-29 11:32:42 +00:00
Daniel García	632d55265b	Merge pull request #824 from tomuta/fix_change_email ... Fix change email when no whitelist is configured	2020-01-28 20:52:16 +01:00
tomuta	e277f7d1c1	Fix change email when no whitelist is configured ... Fixes issue #792	2020-01-26 13:34:56 -07:00
Daniel García	ff7b4a3d38	Update handlebars to 3.0 which included performance improvements. ... Updated lettre to newer git revision, which should give better error messages now.	2020-01-26 15:29:14 +01:00
Daniel García	d212dfe735	Accept y/n, True/False, 1/0 as booleans in environment vars	2020-01-20 22:28:54 +01:00
Daniel García	88c56de97b	Config option for client IP header	2019-12-27 18:42:39 +01:00
Daniel García	a0ece3754b	Formatting	2019-12-27 18:37:14 +01:00
Daniel García	8d1b72b951	Collapsed log messages from 3 lines per request to 2 and hidden the ones valued as less informative. ... Use LOG_LEVEL debug or trace to recover them. Removed LOG_MOUNTS and bundled it with LOG_LEVEL debug and trace. Removed duplicate error messages Made websocket not proxied message more prominent, but only print it once.	2019-12-06 22:46:12 +01:00
Daniel García	1e224220a8	Updated deps and fixed some lints	2019-11-28 21:59:05 +01:00
tomuta	bd1e8be328	Implement change-email, email-verification, account-recovery, and welcome notifications	2019-11-24 22:28:49 -07:00
tomuta	64d6f72e6c	Add the ability to disable signups, but allow signups from a whitelist ... This feature can be enabled by setting SIGNUPS_ALLOWED=false and providing a comma-separated list of whitelisted domains in SIGNUPS_DOMAINS_WHITELIST. Fixes #727	2019-11-16 15:01:45 -07:00
BlackDex	3f6809bcdf	Fixed issue/request #705 ... Added a config option to disable time drifted totp codes. Default is false, since this is what the RFC recommends.	2019-11-07 17:11:29 +01:00
BlackDex	c52adef919	Added configurable smtp timeout. ... - Added config option for smtp timeout - Lowered default timeout to 15 seconds instead of default 60.	2019-11-06 21:39:33 +01:00
Daniel García	d29b6bee28	Remove unnecessary clones and other clippy fixes	2019-11-02 17:39:01 +01:00
vpl	3b7a5bd102	Move 2FA email config to after SMTP config	2019-10-16 07:11:16 +02:00
Daniel García	881c1978eb	Error when the URL scheme doesn't match the database type	2019-10-08 19:34:47 +02:00
Daniel García	662bc27523	Updated dependencies and fixed disable_admin_token description	2019-10-08 19:33:27 +02:00
BlackDex	9124d8a3fb	Updated icon blacklisting. ... - Blacklisting was not effective for redirects and rel href - Able to blacklist non global IP's like RFC1918, multicast etc...	2019-10-05 14:48:15 +02:00
Daniel García	e3404dd322	Use the local scripts instead of cloudflare, remove jquery and update config so disabling a master toggle doesn't remove the values	2019-08-31 17:47:52 +02:00
Daniel García	c07c9995ea	Merge pull request #555 from vverst/email-codes ... Add Email 2FA login	2019-08-27 21:07:41 +02:00
vpl	5d50b1ee3c	Merge remote-tracking branch 'upstream/master' into email-codes	2019-08-26 21:38:45 +02:00
vpl	591ae10144	Get token from single u64	2019-08-26 20:26:54 +02:00
ViViDboarder	2d2745195e	Allow explicitly defined smtp auth mechansim	2019-08-23 16:22:14 -07:00
Daniel García	d23d4f2c1d	Allow editing HIBP key in the admin panel	2019-08-20 23:53:00 +02:00
Daniel García	515b87755a	Update HIBP to v3, requires paid API key, fixes #583	2019-08-20 20:07:12 +02:00
vpl	ee7837d022	Add option to require new device emails	2019-08-19 22:14:00 +02:00
vpl	ad2225b6e5	Add configuration options for Email 2FA	2019-08-10 22:39:04 +02:00
vpl	0b60f20eb3	Add email message for twofactor email codes	2019-08-03 18:49:34 +02:00
vpl	bc6a53b847	Add new device email when user logs in	2019-07-22 08:26:24 +02:00
Cubity_First	6989fc7bdb	Corrected Spelling ... Changed it from Chache to Cache on Line 207	2019-06-18 15:45:19 +01:00
Daniel García	9add8e19eb	Update dependencies and remove travis unused feature	2019-06-02 00:28:20 +02:00
Nils Domrose	dc36f0cb6c	re-added sqlite check_db code, cleanup	2019-05-27 22:58:52 +02:00
Nils Domrose	ff759397f6	initial mysql support	2019-05-26 23:03:05 +02:00
Emil Madsen	ab95a69dc8	Rework migrations for MySQL	2019-05-20 21:12:41 +02:00
Emil Madsen	85c8a01f4a	Merge branch 'master' of github.com:Skeen/bitwarden_rs	2019-05-20 19:53:18 +02:00
Emil Madsen	42af7c6dab	MySQL database	2019-05-20 19:53:14 +02:00
Daniel García	8d9827c55f	Implement selection between global config and user settings for duo keys.	2019-04-11 18:40:03 +02:00
Daniel García	cad63f9761	Auto generate akey	2019-04-11 16:08:26 +02:00
Daniel García	bf446f44f9	Enable DATA_FOLDER to affect default CONFIG_FILE path	2019-04-11 15:41:13 +02:00