1
0
mirror of https://github.com/bitwarden/server synced 2025-12-24 20:23:21 +00:00
Commit Graph

37 Commits

Author SHA1 Message Date
Graham Walker
7cfdb4ddfc PM-23358 removing phishing blocker code (#6668) 2025-12-15 12:12:07 -06:00
Justin Baur
fdfec0ac4d Remove deprecated logging methods (#6516) 2025-11-21 14:39:26 -05:00
Alex Morask
62a0936c2e [PM-25183] Update the BitPay purchasing procedure (#6396)
* Revise BitPay controller

* Run dotnet format

* Kyle's feedback

* Run dotnet format

* Temporary logging

* Whoops

* Undo temporary logging
2025-10-28 09:31:59 -05:00
Conner Turnbull
cf7a59c077 [Innovation Sprint] Phishing Detection (#5516)
* Initial stubbing out of the phishing service

* Add the phishing domain controller

* Add changes for the phishing domain get

* Add distributed cache to the phishing domain

Signed-off-by: Cy Okeke <cokeke@bitwarden.com>

* Rename the variable name

Signed-off-by: Cy Okeke <cokeke@bitwarden.com>

* Removed IPhishingDomainService

* Feature/phishing detection cronjob (#5512)

* Added caching to EF implementation. Added error handling and logging

* Refactored update method to use sqlbulkcopy instead of performing a round trip for each new insert

* Initial implementation for quartz job to get list of phishing domains

* Updated phishing domain settings to be its own interface

* Add phishing domain detection with checksum-based updates

* Updated auth for phishing domain endpoints to either require api, or licensing claims to support both web and browser clients, and selfhost api clients

* [Innovation Sprint] Updated Phishing domains to rely on blob storage (#5517)

* Updated phishing detection data layer to rely on azure blob storage instead of sql server

* dotnet format

* Took rider refactors

* Ensuring phishing.testcategory.com exists to test against

* Added redis to dev's docker-compose

* Removed redis from cloud profile

* Remove the Authorize attribute

* error whitespace fix whitespace formatting

* error WHITESPACE: Fix whitespace formatting

* Wrapped phishing detection feature behind feature flag (#5532)

* Increased timeout for fetching source list a bunch

* Removed PhishingDomains policy

---------

Signed-off-by: Cy Okeke <cokeke@bitwarden.com>
Co-authored-by: Cy Okeke <cokeke@bitwarden.com>
2025-04-30 11:03:59 -04:00
Graham Walker
daf2696a81 PM-16085 - Increase import limitations (#5275)
* PM-16261 move ImportCiphersAsync to the tools team and create services using CQRS design pattern

* PM-16261 fix renaming methods and add unit tests for succes and bad request exception

* PM-16261 clean up old code from test

* make import limits configurable via appsettings

* PM-16085 fix issue with appSettings converting to globalSettings for new cipher import limits
2025-02-05 16:36:18 -06:00
Matt Bishop
d46527899e Remove DocumentDB settings placeholders (#3943) 2024-03-29 13:28:16 -04:00
Alexey Zilber
776e454b79 Changing CF-Connecting-IP -> X-Connecting-IP. Also renaming CloudFlareConnectingIp. (#3236) 2023-08-29 21:25:47 +08:00
Shane Melton
2bf8438ff7 [EC-502] Rate Limiting Improvements (#2231)
* [EC-502] Add custom Redis IP rate limit processing strategy

* [EC-502] Formatting

* [EC-502] Add documentation and app setting config options

* [EC-502] Formatting

* [EC-502] Fix appsettings.json keys

* [EC-502] Replace magic string for cache key

* [EC-502] Add tests for custom processing strategy

* [EC-502] Formatting

* [EC-502] Use base class for custom processing strategy

* [EC-502] Fix failing test
2022-08-31 14:17:29 -07:00
Thomas Rittson
90a2a55438 Fix Stripe object lock timeouts (#1735)
* Fix Stripe object lock timeouts

* Move stripe config into globalSetting.stripe
* add MaxNetworkRetries config option with smart defaults

* Rename stripeApiKey to apiKey
2021-11-29 10:01:51 +10:00
Matt Gibson
30ea8b728d Split dev env settings to development settings file (#1424)
* Move dev urls to appsettings.Development.json

* Move bitwarden license dev urls
2021-07-01 11:11:02 -05:00
Matt Gibson
0cf0748086 Move localhost services settings to development settings file (#1423) 2021-07-01 09:04:30 -05:00
Kyle Spearrin
82dd364e65 Send APIs (#979)
* send work

* fix sql proj file

* update

* updates

* access id

* delete job

* fix delete job

* local send storage

* update sprocs for null checks
2020-11-02 15:55:49 -05:00
Kyle Spearrin
614859a8bc add missing baseServiceUris 2020-08-26 15:09:51 -04:00
Kyle Spearrin
0d0c6c7167 sso integrations (#822)
* stub out hybrid sso

* support for PKCE authorization_code clients

* sso service urls

* sso client key

* abstract request validator

* support for verifying password

* custom AuthorizationCodeStore that does not remove codes

* cleanup

* comment

* created master password

* ResetMasterPassword

* rename Sso client to OidcIdentity

* update env builder

* bitwarden sso project in docker-compose

* sso path in nginx config
2020-07-16 08:01:39 -04:00
Kyle Spearrin
499ca656a4 bitpay is now called token 2020-03-05 20:23:52 -05:00
Kyle Spearrin
d91d67c78c no reply bitwarden emails 2020-02-07 16:42:55 -05:00
Kyle Spearrin
e4c58b1d5c relax rate limiting on invites 2019-09-24 08:18:14 -04:00
Kyle Spearrin
48fd3062b6 rate limits on prelogin 2019-07-23 17:26:44 -04:00
Kyle Spearrin
6f0d64119a keep application cache in sync with service bus 2019-06-13 00:10:37 -04:00
Kyle Spearrin
7e920b955c amazon ses mail delivery service 2019-03-13 16:19:00 -04:00
Kyle Spearrin
4e99ae0dd6 send notification IPNs on bitpay invoice 2019-02-22 08:08:48 -05:00
Kyle Spearrin
fdaa9504d5 bitpay invoice api 2019-02-21 22:43:37 -05:00
Kyle Spearrin
18884d564d 3 org invites per minute 2019-01-20 22:21:19 -05:00
Kyle Spearrin
f78f2710be rate limiting org invite emails further 2019-01-20 22:13:43 -05:00
Kyle Spearrin
7f9d979346 hibp breach api proxy 2019-01-17 01:03:11 -05:00
Kyle Spearrin
18131ba1e3 remove jsreport pdfs. use stripe invoice pages. 2018-09-13 16:03:04 -04:00
Kyle Spearrin
fb1cae9fb1 higher rate limits for get requests 2018-08-21 09:49:28 -04:00
Kyle Spearrin
1ffa712b75 more notification hub renames 2018-08-16 13:50:41 -04:00
Kyle Spearrin
28e6783a00 hub api notifications 2018-08-16 12:05:01 -04:00
Kyle Spearrin
0524630c33 update web vault urls 2018-07-12 17:33:17 -04:00
Kyle Spearrin
dead022e83 admin base uri setting, applied to login emails 2018-04-16 20:35:53 -04:00
Kyle Spearrin
4ce69dac2b internal api & vault urls. apply to version check 2018-03-29 08:45:04 -04:00
David Roth
702d833cea Add sentry logging support. (#240) 2018-03-23 13:33:31 -04:00
Kyle Spearrin
555e478ec3 Uppercase Bitwarden 2018-02-27 14:16:19 -05:00
Kyle Spearrin
8a318f35b7 events has its own connection string 2017-12-27 22:39:14 -05:00
Kyle Spearrin
461be7a14f api settings for our address 2017-10-25 10:59:30 -04:00
Kyle Spearrin
8b07244c95 move to standard appsettings.json 2017-10-18 23:32:27 -04:00