bitwarden/server
1
0
Fork 0
mirror of https://github.com/bitwarden/server synced 2025-12-24 20:23:21 +00:00
Code Issues Releases Wiki Activity
5,348 Commits 480 Branches 222 Tags
9a06ab7ca3b2155a2f356ccd96c83c5eab47e9ec
Commit Graph

18 Commits

Author SHA1 Message Date
Thomas Avery
acc4808509 [SM-1256] Add BulkSecretAuthorizationHandler (#4099) 
* Add AccessToSecretsAsync to the repository

* Add BulkSecretAuthorizationHandler

* Update controller to use the new authz handler

* Add integration test coverage
 2024-07-09 10:06:33 -05:00
Thomas Avery
01d67dce48 [SM-654] Individual secret permissions (#4160) 
* Add new data and request models

* Update authz handlers

* Update secret commands to handle access policy updates

* Update secret repository to handle access policy updates

* Update secrets controller to handle access policy updates

* Add tests

* Add integration tests for secret create
 2024-06-20 12:45:28 -05:00
Thomas Avery
36705790ad [SM-1293] Add endpoint to fetch secret's access policies (#4146) 
* Add authz handling for secret access policy reads

* Add the ability to fetch secret access polices from the repository

* refactor response models

* Add new endpoint
 2024-06-07 12:08:38 -05:00
Thomas Avery
cd3a45c8c6 [SM-1030] Cleanup old access policy management code (#4015) 
* Remove access selector code

* Cleanup integration tests
 2024-05-06 14:56:58 -05:00
Thomas Avery
7f8cea58d0 [SM-923] Add project service accounts access policies management endpoints (#3993) 
* Add new models

* Update repositories

* Add new authz handler

* Add new query

* Add new command

* Add authz, command, and query to DI

* Add new endpoint to controller

* Add query unit tests

* Add api unit tests

* Add api integration tests
 2024-05-02 11:06:20 -05:00
Thomas Avery
ebd88393c8 [SM-910] Add service account granted policies management endpoints (#3736) 
* Add the ability to get multi projects access

* Add access policy helper + tests

* Add new data/request models

* Add access policy operations to repo

* Add authz handler for new operations

* Add new controller endpoints

* add updating service account revision
 2024-05-01 11:47:11 -05:00
Thomas Avery
f9232bcbb0 [SM-909] Add service-account people access policy management endpoints (#3324) 
* refactoring replace logic

* model for policies + authz handler + unit tests

* update AP repository

* add new endpoints to controller

* update unit tests and integration tests

---------

Co-authored-by: cd-bitwarden <106776772+cd-bitwarden@users.noreply.github.com>
 2023-12-07 15:35:16 -06:00
Thomas Avery
0ca65e3f9d [SM-919] Add project people access policy management endpoints (#3285) 
* Expose access policy discriminators

* Add people policy model and auth handler

* Add unit tests for authz handler

* Add people policies support in repo

* Add new endpoints and request/response models

* Update tests
 2023-11-08 11:42:40 -05:00
Thomas Avery
728cd1c0b5 [SM-949] Add endpoint to fetch events by service account (#3336) 
* Add ability to fetch events by service account

* Extract GetDateRange into ApiHelpers util

* Add dapper implementation

* Add EF repo implementation

* Add authz handler case

* unit + integration tests for controller

* swap to read check

* Adding comments

* Fix integration tests from merge

* Enabled SM events controller for self-hosting
 2023-10-19 16:57:14 -05:00
Thomas Avery
640cb68d51 [SM-863] Add endpoint for fetching multiple secrets by IDs (#3134) 
* Add support CanReadSecret authorization

* Extract base response model for secret

* Add support for SA bulk fetching event logging

* secret repository bug fix

* Add endpoint and request for bulk fetching secrets

* Swap to original reference event

* Add unit tests

* Add integration tests

* Add unit tests for authz handler

* update authz handler tests

---------
 2023-08-28 10:16:50 -05:00
Thomas Avery
1d9aeb37aa [SM-707] Refactor authorization for Access Policy Commands (#2905) 
* Extract authorization from access policy commands

* Use auto mapper to ignore unwanted properties

---------
 2023-07-13 11:46:01 -05:00
Thomas Avery
d6a45d4802 [SM-789] Extract authorization from service account delete command (#2999) 
* Extract authorization from SA delete command

* swap to IEnumerable

---------

Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
 2023-07-12 15:32:40 -05:00
Thomas Avery
b629c31de9 [SM-787] Extract authorization from project delete command (#2987) 
* Extract authorization from project delete command

* Support service account write access

---------

Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
 2023-07-11 15:15:18 -05:00
Thomas Avery
d020c49c0e [SM-788] Extract authorization from secret delete command (#3003) 
* Extract authorization from secret delete command
 2023-06-27 13:12:34 -05:00
Thomas Avery
3449d28c83 [SM-705] Extract Authorization from Access Token Commands (#2928) 
* refactor authorization for access token commands

* Unit tests for authorization handler
 2023-06-13 15:30:44 -05:00
Thomas Avery
05f11a8ee1 [SM-706] Extract Authorization From Create/Update Secret Commands (#2896) 
* Extract authorization from commands

* Swap to request model validation.

* Swap to pattern detection
 2023-06-08 16:40:35 -05:00
Thomas Avery
d1155ee376 [SM-704] Extract Authorization For ServiceAccounts (#2869) 
* Move to access query for project commands

* Swap to hasAccess method per action

* Swap to authorization handler pattern

* Move ProjectOperationRequirement to Core

* Add default throw + tests

* Extract authorization out of commands

* Unit tests for authorization handler

* Formatting

* Swap to reflection for testing switch

* Swap to check read & reflections in test

* fix wording on exception

* Refactor GetAccessClient into its own query

* Use accessClientQuery in project handler
 2023-05-31 13:49:58 -05:00
Thomas Avery
5474d3da18 [SM-702] Extract access policy checks from create/update project commands (#2842) 
* Move to access query for project commands

* Swap to hasAccess method per action

* Swap to authorization handler pattern

* Move ProjectOperationRequirement to Core

* Add default throw + tests

* Swap to reflection for testing switch
 2023-05-03 09:40:24 -05:00