23a45913e0
feat: update favicon and logo images for improved branding
2026-03-02 00:10:44 +08:00
ace9f4f5ac
feat: enhance security headers and update content security policy in response and HTML files
2026-03-02 00:10:44 +08:00
c0683016c3
feat: enhance deployment process and update dependencies
...
- Updated the deployment script to build the web application before deploying.
- Upgraded Wrangler dependency from 4.61.1 to 4.69.0.
feat: add import item limit and request body size limit
- Introduced a new limit for the maximum total items allowed in a single import (5000).
- Set a hard body size limit for JSON API endpoints (25 MB).
feat: validate KDF parameters during registration and password change
- Added validation for KDF parameters to ensure compliance with Bitwarden's minimum requirements.
- Enhanced error handling for invalid KDF parameters during user registration and password change.
feat: clean up R2 files on user deletion
- Implemented cleanup of R2 files associated with user attachments and sends before deleting user metadata.
feat: verify folder ownership when creating or updating ciphers
- Added checks to ensure that users cannot reference folders owned by other users when creating or updating ciphers.
fix: handle corrupted cipher data gracefully
- Improved error handling when retrieving ciphers from the database to avoid crashes due to corrupted data.
feat: increment send access count atomically
- Added a method to atomically increment the access count for sends and return whether the update was successful.
fix: enforce request body size limits
- Implemented checks to reject oversized request bodies for non-file upload paths.
fix: update error handling for database initialization
- Enhanced error logging for database initialization failures while providing a generic message to clients.
feat: enhance security with Content Security Policy
- Added a Content Security Policy to the web application to improve security against XSS attacks.
fix: remove plaintext TOTP secret from localStorage
- Updated the TOTP enabling process to remove the plaintext secret from localStorage after it is stored on the server.
fix: ensure only PBKDF2 hash is sent for public send access
- Modified the public send access payload to ensure only the PBKDF2 hash is sent, never the plaintext password.
2026-03-02 00:10:44 +08:00
e9ace523e6
feat: enhance password security with server-side hashing and constant-time comparisons
2026-03-02 00:10:44 +08:00
4390251c1e
feat: unify API rate limiting and enhance request budgets
2026-03-02 00:10:44 +08:00
aef0c2f688
docs: update capability descriptions in README files for clarity
2026-03-02 00:10:44 +08:00
594ca0c7ea
feat: add TOTP recovery code field to users table
2026-03-02 00:10:44 +08:00
26447cd9b4
docs: update README files for clarity on deployment steps and features
2026-03-02 00:10:44 +08:00
f5a2523f91
feat: add JWT secret safety checks and warning page for insecure configurations
2026-03-02 00:10:44 +08:00
bbf4094943
fix: remove unnecessary zoom property from html in styles.css
2026-03-02 00:10:44 +08:00
9f14bca99a
feat(i18n): add internationalization support with English and Chinese translations
2026-03-02 00:10:44 +08:00
8641df3cff
feat: add recovery code functionality and device management
2026-03-02 00:10:44 +08:00
8852127743
feat: update README files to reflect full user management and support for text and file sends
2026-03-02 00:10:44 +08:00
053ce887f9
fix: update README to clarify NodeWarden as a third-party Bitwarden server
2026-03-02 00:10:44 +08:00
2fbe29a0d9
feat: add NodeWarden logo to README files for improved branding
2026-03-02 00:10:44 +08:00
15b87025ad
feat: enhance send functionality with improved key handling and decryption, update UI components for better user experience
2026-03-02 00:10:44 +08:00
0e823e80a6
feat: enhance SendsPage with notes display and update VaultPage for improved filtering and history tracking
2026-03-02 00:10:44 +08:00
bb50617b16
feat: add PublicSendPage and SendsPage components for managing sends
2026-03-02 00:10:44 +08:00
be3b68956b
feat: add favicon and logo assets, update App component to use logo
2026-03-02 00:10:44 +08:00
0f132f4f43
feat: add SSH key utilities and improve field decryption
2026-03-02 00:10:44 +08:00
32c695c81f
feat: enhance VaultPage and App layout with new UI components and styles
2026-03-02 00:10:44 +08:00
651eb69bd6
feat: enhance authentication and settings UI
2026-03-02 00:10:44 +08:00
0cf8028087
feat: add cryptographic utilities and types for secure data handling
2026-03-02 00:10:44 +08:00
3494471cad
feat: add toast notifications and dialog components for improved user interaction
2026-03-02 00:10:44 +08:00
59566f88e3
feat: implement vault locking mechanism with auto-lock settings and unlock functionality
2026-03-02 00:10:44 +08:00
172f6626c0
feat: add QR code generation support and rate limiting for known device probes
2026-03-02 00:10:44 +08:00
829008db7f
Add vault-utils.js with utility functions for field type parsing, selection counting, cipher type mapping, URI handling, and extracting first cipher URI
2026-03-02 00:10:44 +08:00
363aec1652
Add runtime configuration loader and styles for web application
2026-03-02 00:10:44 +08:00
b8c4bcef0c
Enhance styles for app layout and components
2026-03-02 00:10:44 +08:00
d0c8516021
Add global styles for web client interface
2026-03-02 00:10:44 +08:00
1f4933c5d5
Implement code changes to enhance functionality and improve performance
2026-03-02 00:10:44 +08:00
4a37d742eb
feat: 更新网页客户端样式和布局，提升用户体验
2026-03-02 00:10:44 +08:00
6bbc7554c1
Refactor code structure for improved readability and maintainability
2026-03-02 00:10:44 +08:00
d80821edeb
feat: enhance registration and password management UI with additional state handling
2026-03-02 00:10:44 +08:00
6e95d7a235
feat: implement admin user management and invite system
2026-03-02 00:10:44 +08:00
f9b084d09d
feat: remove setup disabling functionality and related UI elements
2026-02-25 01:30:08 +08:00
4f82cf9d43
feat: add overlap grace period for refresh tokens to handle concurrent requests
2026-02-25 00:22:31 +08:00
bc0fd65b6b
feat: add compatibility for custom fields handling in cipher creation and update
2026-02-25 00:10:11 +08:00
08114762bc
feat: add compatibility for fido2Credentials counter and implement no-op device token update handler
2026-02-23 23:29:00 +08:00
1dfa96611a
feat: add CLI deployment instructions
2026-02-23 20:01:55 +08:00
36715645c6
feat: add compatibility mode for deleting ciphers to support Bitwarden clients
2026-02-23 19:35:06 +08:00
3873d347aa
enhance README with badges and project links
2026-02-23 16:56:00 +08:00
874d31e86b
fix: ensure attachment size is formatted as string for compatibility with Bitwarden clients
2026-02-23 14:07:11 +08:00
cd7b5a361c
feat: add TOTP code generation and display functionality with UI enhancements
2026-02-21 15:13:21 +08:00
9eddb91237
feat: enhance two-factor authentication handling and improve error responses
2026-02-21 14:13:22 +08:00
b2e8d3e00b
feat: enhance registration page with TOTP support and UI improvements
2026-02-20 20:28:08 +08:00
a83e0d259e
fix: increase max login attempts and improve two-factor token error response
2026-02-20 18:53:10 +08:00
b6f2882cdf
chore: update version to 1.1.0 and improve two-factor provider validation
2026-02-20 18:39:18 +08:00
aaf5078c8a
feat: add token revocation endpoint and enhance ciphers import request structure
2026-02-20 18:16:07 +08:00
76d766d5d6
feat: extend CiphersImportRequest with additional fields for enhanced import functionality
2026-02-20 16:54:42 +08:00
shuaiplus