Commit Graph

561 Commits

Author SHA1 Message Date
Matt Gibson 090ad790f5
Specify Organization indexed on search service (#356)
* Specify Organization indexed on search service

a null indexedEntityId specifies it is the users entire vault.
otherwise, organizations specify their id to signify the index is a subset.

user's vault will re-index if the indexed entity does not match the
users id or null. at the moment, user's vault does not set userId
because indexing occurs in the setter for decryptedCipherCache,
which cannot be asynchronous

* Linter fix
2021-04-22 14:53:45 -05:00
Oscar Hinton aca098645a
Bump dependencies (#350)
* Bump dependencies
2021-04-22 21:17:14 +02:00
Oscar Hinton 3c872e56f2
Revert "Password reprompt (#343)" (#353)
This reverts commit 372e139810.
2021-04-21 20:49:18 +02:00
Matt Gibson 1f62b22285
CLI specifies bitwarden api for send download (#348)
This is needed for CLI to download Send files from non-configured
Bitwarden Servers. Web does not have this issue because it can assume
api from its own url.
2021-04-20 19:17:31 -05:00
Matt Gibson 3a1087456f
Rename CipherString and CipherArrayBuffer to Enc (#352) 2021-04-20 19:16:19 -05:00
Matt Gibson a5ccca05da
Fix mistake and clarify api method name (#347) 2021-04-20 14:59:51 -05:00
Oscar Hinton 372e139810
Password reprompt (#343)
Add support for password reprompt on cipher items
2021-04-15 16:14:33 +02:00
Thomas Rittson 66eec2b022
Use sync instead of token to manage emailVerified (#344) 2021-04-15 07:00:49 +10:00
Matt Gibson 0a0cdaa7fd
Fix cipher upload (#346)
* Upload correct data array

* Require BufferArray Encryption for upload to server

The CipherArrayBuffer tiny type is only created by CryptoService
and required by all upload methods

* Add test for attachment upload encryption
2021-04-14 10:47:10 -05:00
Matt Gibson 62cc43fb46
Move renew endpoint to fix overlapping endpoint issue (#335) 2021-04-12 09:45:06 -05:00
Kyle Spearrin 97715585a6 fix build problem with signalr upgrade 2021-04-09 11:54:16 -04:00
Steven 728e40fbfa
Optimize isSearchable for Chinese. (#330)
* Optimize isSearchable for Chinese.

* Fix lint.

* Fix lint.
2021-04-07 10:51:34 -04:00
Matt Gibson bc7bd5bd3f
Pass ciphers to index and indexed ciphers to search service (#318) 2021-04-02 16:32:30 -05:00
Vincent Salucci f4f00b1eb2
[Reset Password] Enrollment API, event type, and models update (#315) 2021-03-31 11:05:09 -05:00
Matt Gibson 5c734747a9
Fix post attachment file path (#316) 2021-03-30 18:43:10 -05:00
Matt Gibson 5c961ce847
Await file upload service (#314)
* Await file upload service

* Await file deletion on exception for file upload
2021-03-29 08:18:07 -05:00
Matt Gibson afac694e9a
Attachment azure upload blobs (#312)
* Add direct attachment download and upload API endpoints

* Use direct download method

Enable download of emergency access attachments through EmergencyAccessId

* Match new Server model items

* New Server model for creating attachments.

Provides a url to upload data to, the type of upload, and the Cipher Response expected by the previous call

* Use direct upload url and scheme

* Report Failed single shot azure uploads

* Add cipher attachment upload to file upload service

* Deprecate legacy api methods

* Handle old servers missing new upload api methods

* Improve Send error handling

* Fallback attachment downloads on new endpoint not found

Limit upload size to the new 500MB

* Improve error handling

* lint fixes
2021-03-26 16:57:07 -05:00
Thomas Rittson 0735569479
Hide email address in Sends (#310)
* Let organizations disable anonymous Sends only

* Add HideEmail to send models and service

* Delete unnecessary model

* Enforce new Send policy, fix naming conventions

* Fix linting

* Fully disable editing anonymous Sends per policy

* Revert disableSendPolicy, add sendOptionsPolicy

* Rework UI for enforcing disableHideEmail

* Fix linting and cleanup after refactor
2021-03-26 08:27:43 +10:00
Matt Gibson cfc7687815
Upload to Azure strorage blobs (#296)
* Implemen AzureStorageService

handes uploading files to azure blob

* Correct one-shot size

* Add azureStorage.service abstraction

* Rename azure upload method

* Prefer abstractions in DI

* Abstract file upload to a single service handling uploads

* Fallback to legacy upload method

* Linter fix

* Limit legacy upload to 404 error
2021-03-25 10:20:38 -05:00
Oscar Hinton f20af0cd7c
WebAuthn (#163) 2021-03-15 16:16:51 +01:00
Vladislav Voronin 5d32ba68ec
Add disable badge counter (#281)
* jslib code for 287 issue

added bunch of state-save for new option

* remove excessive code

* revert accidental revert
2021-03-10 15:36:33 -05:00
Matt Gibson 8541027d40
Handle text response errors (#301)
* Parse text error response to json Message field

* Do not output object.toString, prefer object serialization
2021-03-09 10:58:17 -06:00
Matt Gibson 36089fd68f
Write backup before deleting lowdb database (#291)
* Write backup before deleting lowdb database

* Const for unchanged variables
2021-03-02 11:25:45 -06:00
Matt Gibson 3942868cf4
Include File size in SendRequest (#289) 2021-03-02 09:46:46 -06:00
Matt Gibson 1324416784
Direct download for send (#288)
* Allow for responding with time-limited download URL

* Re-verify access on download link request
2021-03-01 15:03:04 -06:00
Thomas Rittson 00122ab166
Start cipher numbering at 1 in error messages (#283) 2021-02-26 05:53:45 +10:00
Thomas Rittson 42348e2fdc
Improve import error messages (#280)
* Parse and format server import errors

* Fix linting issues

* Fix handling of non-validation errors
2021-02-23 13:56:42 +10:00
Oscar Hinton b0ae1bfa4c
Add support for extending VaultTimeoutService (#275) 2021-02-18 19:08:20 +01:00
Matt Gibson fc1275aeb2
Do not lock until after the file is created (#274)
Proper-lockfile throws if the file it's locking does not exist.
Lock around adapter creation rather than file creation.
2021-02-16 22:29:57 -06:00
Matt Gibson 7941664a59
Lock lowdb storage file to avoid dirty data collisions (#273)
* Lock lowdb storage file to avoid dirty data collisions

* Retry lock acquire rather than immediately fail

* Add proper-lockfile types to dev dependencies

* remove proper-lockfile from jslib.

This package is incompatible with Browser implementations.

* await lock on create
2021-02-15 10:16:12 -06:00
Thomas Rittson d376927e5e
Improved handling of grantor access to organizations after takeover (refactored) (#267)
* Revert "Add policy property to TakeoverResponse"

This reverts commit 31da5081e6833cf8a9d5bb869c14600f25ca3f39.

* Add getEmergencyGrantorPolicies to api service
2021-02-10 09:06:18 +10:00
Kyle Spearrin a4ac842cec
support for copying send link to clipboard on save (#265) 2021-02-08 15:55:32 -05:00
Matt Gibson 58f40b0085
Fix glob processing in npm. Ban single param parens (#257) 2021-02-04 09:49:23 -06:00
Oscar Hinton 11249e3444
Remove a safari hack (#224) 2021-02-03 18:02:02 +01:00
Matt Gibson 09c444ddd4
Add send to cli (#253)
* Upgrade commander to 7.0.0

* Add url to Api call

This is needed to allow access to sends that are available from a
different Bitwarden server than configured for the CLI

* Allow upload of send files from CLI

* Allow send search by accessId

* Utils methods used in Send CLI implementation

* Revert adding string type to encrypted file data

* linter fixes

* Add Buffer to ArrayBuffer used in CLI send implementation
2021-01-29 15:08:52 -06:00
Chad Scharf 06239aea2d
update package https-proxy-agent (#246)
* update package http-proxy-agent

* Update syntax appropriately

* Explicitly add utils package to fix broken tests

* Revert "Explicitly add utils package to fix broken tests"

This reverts commit 2cf03fdcbae89e55124c7e36201238520434f8cc.

* Import util in spec to make sure it gets bundled

* Revert "Import util in spec to make sure it gets bundled"

This reverts commit 79264cdab0ef37af855d64a6dc3ef574575309d2.

* Add alias to ensure util module resolves in tests

Co-authored-by: Thomas Rittson <trittson@bitwarden.com>
2021-01-27 20:08:56 -05:00
Addison Beck 9ddec9baf8
Lunr search bug (#251)
* changed hrtime library

* changed import style
2021-01-25 15:03:28 -05:00
Matt Gibson e1f1d7e702
Enable search for sends (#249) 2021-01-22 19:54:22 -06:00
Addison Beck 68bd93e45b
added Send sync notification support (#250) 2021-01-22 16:52:08 -05:00
Oscar Hinton 8d161d9245
Improve system.service biometrics condition (#244) 2021-01-11 19:12:40 +01:00
Matt Gibson cea09a22e5
Update revision date upon cipher restore (#243)
* Update revision date upon cipher restore

* Receive and use returned datetimes from restore
2021-01-08 08:53:41 -06:00
Kyle Spearrin afa01f67f4
send removePasswordWithServer and model updates (#242) 2020-12-30 16:23:52 -05:00
Matt Gibson 1420082348
Do not export trashed items (#241)
* Do not export trashed items

* Test Item exporting

Does not test organization export. Export's use of apiService is not
very testable. We will either need a testApiService or to refactor
apiService to make mocking easier.

* Linter fixes
2020-12-30 15:08:02 -06:00
Oscar Hinton 573eea66ee
Add support for Emergency Access (#204)
* Add support for Emergency Access

* Resolve review comments
2020-12-22 10:53:48 -05:00
Oscar Hinton f9042408f4
Prevent reloading browser extension when using biometric (#230) 2020-12-16 16:07:15 -05:00
Matt Gibson 2c414ce27a
Use log service for console messages (#221)
* Use logService for console messages

* Implement a base ConsoleLog service

Use this class as a default for other services that would like to output
to console. This service is overriden in CLI and Desktop to use CLI's
consoleLogService and electronLogService, respectively.

* Use browser-process-hrtime for timing

* test LogService implementations

* Ignore default import of hrtime

* Clean up imports. Require ConsoleLog injection

Co-authored-by: Matt Gibson <mdgibson@Matts-MBP.lan>
2020-12-11 10:44:57 -06:00
Matt Gibson 72bf18f369
Fix 1password importer (#222)
* Change cipher type based on csv type header

* Test identity and credit card import

* Do not use node 'fs' module

Karma is being used for automated tests so node modules are not available

* WIP: mac and windows 1password importer split

Need to improve windows field identification to limit secret data
exposure and improve user experience

* Hide fields with likely secret values

Co-authored-by: Matt Gibson <mdgibson@Matts-MBP.lan>
2020-12-08 11:29:57 -06:00
Kyle Spearrin dcbd09e736
encrypted import for bitwarden json (#220) 2020-12-04 21:05:11 -05:00
Matt Gibson 2b8c2c2b3e
Revert "Use logService for console messages (#214)" (#219)
This reverts commit 0fed528b6f.
2020-12-04 13:58:32 -06:00
Matt Gibson 0fed528b6f
Use logService for console messages (#214)
* Use logService for console messages

* linter autofixes

* Use full import path

* Implement a base ConsoleLog service

Use this class as a default for other services that would like to output
to console. This service is overriden in CLI and Desktop to use CLI's
consoleLogService and electronLogService, respectively.

* linter fixes

Co-authored-by: Matt Gibson <mdgibson@Matts-MBP.lan>
2020-12-04 12:38:26 -06:00