1
0
mirror of https://github.com/bitwarden/server synced 2026-02-12 14:33:49 +00:00
Commit Graph

6741 Commits

Author SHA1 Message Date
Patrick-Pimentel-Bitwarden
d7431f438b Merge branch 'main' into auth/pm-30810/http-redirect-cloud 2026-02-10 14:23:16 -05:00
Patrick Pimentel
36a5a4b2ab fix(redirect): [PM-30810] Https Redirection for Cloud Users - Fixed nullish issue. 2026-02-10 14:18:19 -05:00
Matt Gibson
902be7dfb8 Require password when seeding a new user (#6978) 2026-02-10 19:01:50 +00:00
Alex Morask
81e3044b91 [PM-31140] Consolidate unpaid subscription handling (#6918)
* Consolidate unpaid subscription handling

* Move enable/disable operations to SubscriberService

* Revert "Move enable/disable operations to SubscriberService"

This reverts commit fe0bc1516b.
2026-02-10 11:24:00 -06:00
Alex Morask
e2c0861050 [PM-31359] Show new price to premium users who have yet to be migrated (#6963)
* test: add tests for legacy pricing pivot in GetBitwardenSubscriptionQuery

* feat(billing): preview next charge at new price for users on legacy Premium pricing

* chore: apply dotnet format
2026-02-10 11:23:16 -06:00
Mick Letofsky
37770b20ae Ensure that the maria db password is properly set (#6975) 2026-02-10 17:48:14 +01:00
renovate[bot]
065d971dc4 [deps] Billing: Update swashbuckle-aspnetcore monorepo to v10 (major) (#6729)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Derek Nance <dnance@bitwarden.com>
2026-02-10 11:11:44 -05:00
Nick Krantz
cda8527c7d add feature flag (#6968) 2026-02-10 16:00:09 +00:00
Mike Amirault
ea9299fc48 [PM-30596] Update several email templates to use dynamic year in copyright (#6944)
* [PM-30596] Update several email templates to use dynamic year

* Fix formatting of two email templates
2026-02-10 10:35:15 -05:00
John Harrington
bc94934808 [PM-31787] Users can access the sends after the limit was reached (#6958)
* fix file type send increment behavior

* fix text send access increment behavior

* fix & update tests

* cleanup unused service

* fix broken test constructor expecting unused service
2026-02-10 07:57:43 -07:00
Alex Dragovich
e5cf9dff2e [PM-31497] use remove auth logic for remove password (#6929)
* [PM-31497] use remove auth logic for remove password

* [PM-31497] removing non-existent field
2026-02-09 17:38:29 -08:00
Alex Dragovich
6d43cc43e3 [PM-31684] Remove email hashing for send access (#6945)
* [PM-31684] Remove email hashing for send access

* [PM-31684] switching the order of migration files

* [PM-31684] adding more migrations

* [PM-31684] Removing anon access emails field  and reusing emails field

* [PM-31684] cleanup before adding migrations back

* [PM-31684] restore original snapshots

* [PM-31684] restore original postgres snapshots

* [PM-31684] adding migrations

* [PM-31684] removing encryption attributes from emails request model

* [PM-31684] adding missing stored proc alters

* [PM-31684] Improved formatting for stored proc defs

* [PM-31684] adding necessary comment back

* [PM-31684] adding case-insensitive check on the server for send auth
2026-02-09 12:58:57 -08:00
Conner Turnbull
40c64a51d5 Remove stale 'use-pricing-service' feature flag references from IPricingClient docs (#6961) 2026-02-09 15:10:44 -05:00
Jared
7c216366a7 [PM-31153] email updates for domain claim pt 2 (#6965)
* [PM-31361] Enhance domain claimed email notifications

* Updated the email template to include the claimed domain name and user email.
* Modified the `ClaimedUserDomainClaimedEmails` model to include the domain name.
* Adjusted the `SendClaimedDomainUserEmailAsync` method to pass the domain name to the email message.
* Added a new test for rendering the domain claimed email to ensure proper content delivery.

* Update email templates for domain claimed notifications

* Adjusted styles and formatting in the DomainClaimedByOrganization email template for improved readability.
* Modified the TitleContactUs layout to ensure proper rendering of titles.
* Updated the HandlebarsMailService to include HTML line breaks in the email title for better presentation.

* Update TitleContactUs email template to center-align title text for improved presentation

* Refine TitleContactUs email template by removing unnecessary text-align property for improved consistency in styling

* Fix PR comments

* Update test/Core.Test/Platform/Mail/DomainClaimedEmailRenderTest.cs

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

* Update test/Core.Test/Platform/Mail/DomainClaimedEmailRenderTest.cs

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

* Update test/Core.Test/Platform/Mail/DomainClaimedEmailRenderTest.cs

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

* Remove unnecessary comments

---------

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
2026-02-09 14:38:50 -05:00
Jason Ng
2413ce10ab [PM-31745] Allow user to perm delete unassigned items (#6956)
* update DeleteAdmin to grab items that are unassigned and ciphersControllerTests
2026-02-09 10:46:30 -05:00
EDIflyer
fb76e3f867 [PM-5625] Update vault out of sync error message in CipherService.cs (#3652)
* Update vault out of sync error message in CipherService.cs

Co-authored-by: Jason Ng <jcory.ng@gmail.com>
2026-02-09 10:38:10 -05:00
sven-bitwarden
70c01bcfb2 [PM-25106] Refactor Misleading Stored Procedure/Repository Language (#6890)
* Begin migration to appropriately named sprocs

* Update method and parameter names

* Remove incorrect change

* Changes EF to match collection type comparison

* Adds integration test verifying excluded collections

* Changes EF to match collection type comparison

* Fix whitespacing

* Fix dedented if
2026-02-09 09:25:10 -06:00
Github Actions
6548737320 Bumped version to 2026.2.0 2026-02-09 11:35:09 +00:00
Jared McCannon
246959f421 Fixed bug where revoked users were being left out of policy requirement call. Moved out of loop and doing after users have been restored. This is more performant. (#6960)
Fixed bug where revoked users were being left out of policy requirement call. Moved out of loop and doing after users have been restored. This is more performant.
2026-02-06 15:35:06 -06:00
Patrick Pimentel
0d44be620f comment(redirect): [PM-30810] Https Redirection for Cloud Users - Removed stale comment 2026-02-06 13:05:20 -05:00
cyprain-okeke
67ba9bcca5 [PM 30100][Server] Subscription Discount Database Infrastructure (#6936)
* Implement the detail Subscription Discount Database Infrastructure

* Change string to string list

* fix lint error

* Create all missing database object definition files

* Regenerate EF migrations with Designer files

The previous migrations were missing .Designer.cs files. This commit:
- Removes the incomplete migration files
- Regenerates all three provider migrations (MySQL, Postgres, SQLite) with proper Designer files
- Updates DatabaseContextModelSnapshot.cs for each provider

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* fix failing database

* Resolve the lint  warnings

* Resolve the database failure

* Fix the build Lint

* resolve the dbops reviews

* Add the default value

---------

Co-authored-by: Claude <noreply@anthropic.com>
2026-02-06 18:24:26 +01:00
Patrick Pimentel
bd36e9ca40 fix(redirect): [PM-30810] Https Redirection for Cloud Users - Looking at payload body and removed header override solution. 2026-02-06 10:53:52 -05:00
Matt Bishop
e3008ccb68 Tighten up repo a bit for AI (#6957) 2026-02-06 10:19:30 -05:00
Maciej Zieniuk
01590529eb [PM-31785] Protect Key Connector and Master Key wrapped user key and server side hash (#6953)
* protect keyConnectorWrappedUserKey

* protect master key wrapped user key and server side hash
2026-02-05 21:33:59 +00:00
Jared Snider
f244927149 Auth/PM-14967 - Clean up email verification feature flag (#6955) 2026-02-05 16:02:00 -05:00
sven-bitwarden
3e21d12202 Ensure org user belongs to org they're being invited to (#6937) 2026-02-05 14:44:59 -06:00
Patrick-Pimentel-Bitwarden
ef37f3d3dd feat(emergency-access): [PM-31636] Emergency Access Takeover Salt (#6939)
* feat(emergency-access): [PM-31636] Emergency Access Takeover Salt - Added salt to response of emergency access takeover response.

* test(emergency-access): [PM-31636] Emergency Access Takeover Salt - Added tests.
2026-02-05 10:19:57 -05:00
Patrick Pimentel
d128c5d523 fix(redirect): [PM-30810] Https Redirection for Cloud Users - Added new urls for mobile to be allowed through for sso redirection. 2026-02-04 16:48:14 -05:00
Brandon Treston
fedb315f7a add feature flag (#6951) 2026-02-04 16:09:24 -05:00
Mick Letofsky
4eb9c4cf3c Enhance seeder with additional cipher types and architectural refactorings (#6935) 2026-02-04 19:27:09 +01:00
Derek Nance
26b62bc766 [PM-27260] SSO cookie vending (#6903) 2026-02-04 16:31:42 +01:00
Patrick-Pimentel-Bitwarden
c52f2e0d09 feat(register): [PM-27084] Account Register Uses New Data Types - Repush (#6855)
* feat(register): [PM-27084] Account Register Uses New Data Types - Changes.

* test(register): [PM-27084] Account Register Uses New Data Types - Added tests.

* fix(register): [PM-27084] Account Register Uses New Data Types - Added constant for feature flag.
2026-02-04 10:03:55 -05:00
Ike
5afdfa6fd1 [PM-30563] Change error response on Send Access token request (#6911)
* feat: remove invalid email response and instead return email and OTP required to protect against enumeration attacks.

* fix: fixing tests and dotnet format
2026-02-04 09:42:32 -05:00
Derek Nance
52955d1860 [PM-29144] Add server communication config to /api/config (#6892) 2026-02-04 08:15:27 -06:00
Alex Morask
4667af6cf9 [PM-30444] Handle missing Braintree customer in GetPaymentMethodQuery (#6899)
* Handle missing Braintree customer in GetPaymentMethodQuery

* Allow addition of PayPal payment method when bad Braintree customer ID is linked

* Run dotnet format
2026-02-04 07:48:06 -06:00
Ike
68e67e1853 [PM-26376] Emergency Access Delete Command (#6857)
* feat: Add initial DeleteEmergencyContactCommand

* chore: remove nullable enable and add comments

* test: add tests for new delete command

* test: update tests to test IMailer was called.

* feat: add delete by GranteeId and allow for multiple grantors to be contacted.

* feat: add DeleteMany stored procedure for EmergencyAccess

* test: add database tests for new SP

* feat: commands use DeleteManyById for emergencyAccessDeletes

* claude: send one email per grantor instead of a bulk email to all grantors. Modified tests to validate.

* feat: change revision dates for confirmed grantees; 

* feat: add AccountRevisionDate bump for grantee users in the confirmed status

* test: update integration test to validate only confirmed users are updated as well as proper deletion of emergency access
2026-02-03 16:43:44 -05:00
Jackson Engstrom
82e1a6bd71 [PM-31622] Adds feature flag pm-30521-autofill-button-view-login-screen 2026-02-03 13:34:15 -08:00
Patrick Pimentel
6e5d259cd9 fix(redirect): [PM-30810] Https Redirection for Cloud Users - Fixed to let the mobie client govern the scheme for redirection. 2026-02-03 15:48:21 -05:00
Jacob Olness
b7923f5498 [PM-31212] Change hardcoded 5 key WebAuthn limit for login to check if premium (#6894)
* removed hardcoded limit so login would look at more than first 5 keys registered

* Update src/Core/Auth/Identity/TokenProviders/WebAuthnTokenProvider.cs

Co-authored-by: Dave <3836813+enmande@users.noreply.github.com>

* Update src/Core/Auth/Identity/TokenProviders/WebAuthnTokenProvider.cs

Co-authored-by: Dave <3836813+enmande@users.noreply.github.com>

* Update src/Core/Auth/Identity/TokenProviders/WebAuthnTokenProvider.cs

Co-authored-by: Dave <3836813+enmande@users.noreply.github.com>

* Update src/Core/Auth/Identity/TokenProviders/WebAuthnTokenProvider.cs

Co-authored-by: Dave <3836813+enmande@users.noreply.github.com>

* removed orphaned for loop in favor of more robust and efficient foreach loop

---------

Co-authored-by: Dave <3836813+enmande@users.noreply.github.com>
2026-02-03 11:12:18 -05:00
Kyle Denney
4f4ccac2de [PM-29599] create proration preview endpoint (#6858)
* [PM-29599] create proration preview endpoint

* forgot to inject user and fixing stripe errors

* updated proration preview and upgrade to be consistent

also using the correct proration behavior and making the upgrade flow start a trial

* missed using the billing address

* changes to proration behavior

and returning more properties from the proration endpoint

* missed in refactor

* pr feedback
2026-02-03 10:08:14 -06:00
Rui Tomé
cee89dbe83 [PM-27179] Fix Admin portal user view to only show individual item count (#6888) 2026-02-03 11:15:56 +00:00
Patrick Pimentel
c289f972b1 fix(redirect): [PM-30810] Https Redirection for Cloud Users - Removed local check so the mobile client can govern the scheme used. 2026-02-02 16:55:54 -05:00
John Harrington
d3aed59fcb [PM-30247] Previously archived items are not archived after import (#6824)
* support importing archived ciphers
* preserve archived ciphers across org imports
2026-02-02 14:39:01 -07:00
Stephon Brown
0e72257ea1 [PM-31360] Remove Reversion Related Code (#6922)
* fix(billing): remove stripe constants

* fix(billing): remove redundant metadate

* tests(billing): remove obsolete metadata checks
2026-02-02 13:44:15 -05:00
Todd Martin
a27eda7df6 chore(flags): [PM-30613] Remove unused mjml-based-email-templates feature flag
* Removed old method.

* Removed IFeatureService.

* Fixed test.

* Renamed the v2 endpoint.

* Removed old Handlebars templates.

* Renamed v2 templates to remove v2 suffix.
2026-02-02 11:36:39 -05:00
Justin Baur
d4de03a762 Introduce the Server SDK to the rest of our services (#6915) 2026-02-02 10:27:25 -05:00
renovate[bot]
1c640fb103 [deps]: Update anchore/scan-action action to v7.3.0 (#6930)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-02 10:09:14 +01:00
Nik Gilmore
51aa419585 [PM-31280] Specify UTC dates for Archive, Unarchive, Restore, and RestoreByIds (#6919) 2026-01-30 09:57:10 -08:00
Mick Letofsky
5941e830d2 Refactor to correctly implement statics and remove hardcoded organization keys (#6924) 2026-01-30 16:03:56 +01:00
Mick Letofsky
bfc645e1c1 Add cipher seeding with Rust SDK encryption to enable cryptographically correct test data generation (#6896) 2026-01-30 13:53:24 +01:00