shuaiplus
56b301f2d1
fix: align fill assist compatibility
2026-07-06 02:09:28 +08:00
shuaiplus
f0e523376c
fix: add admin auth request compatibility
2026-07-06 01:35:26 +08:00
shuaiplus
8b2f98b847
fix: add Bitwarden device registration endpoints
2026-07-06 01:35:19 +08:00
shuaiplus
cde4555add
fix: return unsupported for email and kdf flows
2026-07-06 01:35:12 +08:00
shuaiplus
1bad32fd90
fix: keep remembered 2fa token on bad password
2026-07-06 01:07:26 +08:00
shuaiplus
e376a840c2
fix: add device verification settings endpoints
2026-07-06 00:59:34 +08:00
shuaiplus
9de0d3bd87
fix: clarify extended cipher type icons
2026-07-06 00:56:57 +08:00
shuaiplus
109593da90
feat: support Bitwarden extended cipher types
2026-07-06 00:44:17 +08:00
shuaiplus
01ff627ac6
fix(i18n): localize audit logs and new validation messages
2026-07-05 23:45:26 +08:00
shuaiplus
d028b194e7
fix(admin): record audit clears and passkey 2fa status
2026-07-05 23:45:18 +08:00
shuaiplus
c53d71fc28
feat(settings): move device management into settings
2026-07-05 23:44:54 +08:00
shuaiplus
6e722205b1
fix(totp): validate qr image uploads
2026-07-05 23:44:44 +08:00
shuaiplus
cf14704d99
fix(import): validate payloads and zip entries
2026-07-05 23:44:36 +08:00
shuaiplus
0cef6a04e9
fix(backup): verify remote deletes and validate archives
2026-07-05 23:44:25 +08:00
shuaiplus
8c481a1564
fix(send): refresh routes and gate file access
2026-07-05 23:44:07 +08:00
shuaiplus
d9a36fefe6
fix(security): harden auth and request limits
2026-07-05 23:43:49 +08:00
shuaiplus
12af18e3a3
feat: update device management link handling in navigation
2026-07-05 15:41:27 +08:00
shuaiplus
d8cc88d9c0
feat: add UUID normalization functions and enhance WebAuthn response handling
2026-07-05 15:37:02 +08:00
shuaiplus
94b5f3e975
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-07-05 15:17:00 +08:00
shuaiplus
062c966e14
feat: update styles for two-step providers and responsive layout adjustments
2026-07-05 15:16:56 +08:00
shuaiplus
e73ae3d5ea
feat: enhance two-factor authentication handling and UI improvements
2026-07-05 15:05:53 +08:00
shuaiplus
c019c93726
feat: add passkey-based two-factor authentication
2026-07-05 14:51:11 +08:00
shuaiplus
f63b745d05
feat: Add YubiKey OTP support and management features
...
- Implemented YubiKey OTP settings management in useAccountSecurityActions hook.
- Added API functions for retrieving, saving, and bootstrapping YubiKey OTP credentials.
- Enhanced authentication flow to support multiple two-factor providers, including YubiKey.
- Updated localization files to include new YubiKey-related strings in English, Spanish, Russian, and Chinese.
- Introduced new styles for YubiKey management UI components.
- Created utility functions for YubiKey OTP validation and credential handling.
2026-07-04 02:49:46 +08:00
shuaiplus
c7eb6c663d
feat(i18n): add new localization strings for settings and two-step login across multiple languages
...
style: adjust grid layout for app main and add responsive styles for settings category
style: enhance management styles with new settings category layout and tabs
style: improve responsive design for settings modules and submodules
2026-07-03 19:19:24 +08:00
shuaiplus
6284c632de
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-07-02 17:23:47 +08:00
shuaiplus
60dd298dee
fix(security): harden jwt config and password rotation
2026-07-02 17:20:51 +08:00
shuaiplus
439683d350
fix(identity): add security stamp and invalidate user cache on token handling
2026-07-02 16:57:24 +08:00
shuaiplus
1545881eae
fix(auth): hash stored api keys
2026-07-02 16:27:20 +08:00
shuaiplus
680e287c8d
fix(ci): validate global domains sync ref
2026-07-02 16:11:19 +08:00
shuaiplus
baf569983d
fix(security): scope storage reads by user
2026-07-02 16:03:49 +08:00
shuaiplus
ce3674669e
feat: update version to 1.7.2 in package.json, package-lock.json, and app-version.ts
2026-07-01 13:36:59 +08:00
shuaiplus
aa7b87e041
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-07-01 13:28:26 +08:00
shuaiplus
e4215b4025
feat: add fill-assist handlers and update device response type
2026-07-01 13:28:22 +08:00
shuaiplus
5dd9dff045
ci: update actions/checkout and other actions to specific versions
2026-06-30 13:49:33 +08:00
shuaiplus
709a8c1768
Merge pull request #279 from dependabot/github_actions/github-actions-db669df06a
2026-06-30 13:44:53 +08:00
shuaiplus
e2c3516ce9
Merge pull request #284 from dependabot/npm_and_yarn/lucide-preact-1.22.0
2026-06-30 13:43:17 +08:00
shuaiplus
55b5c57f9e
Merge pull request #283 from dependabot/npm_and_yarn/typescript-6.0.3
2026-06-30 13:43:07 +08:00
shuaiplus
b6fb62603b
Merge pull request #282 from dependabot/npm_and_yarn/types/node-26.0.1
2026-06-30 13:42:57 +08:00
shuaiplus
35071c2719
ci: limit risky dependabot updates
2026-06-30 13:36:00 +08:00
shuaiplus
a6f1c6dea2
Merge branch 'beta'
2026-06-30 13:25:22 +08:00
shuaiplus
49c872a8ec
ci: fix sync workflow shell lint
2026-06-30 13:18:02 +08:00
shuaiplus
78af1f9bdd
ci: skip scorecard outside main
2026-06-30 13:14:23 +08:00
shuaiplus
32b3d2ade1
chore: override ws vulnerability
2026-06-30 13:11:07 +08:00
shuaiplus
64f26e76f6
chore: add security automation workflows
2026-06-30 13:05:04 +08:00
shuaiplus
0d1bb196e2
feat: add functionality to delete invalid invites and update related components
2026-06-29 12:12:13 +08:00
shuaiplus
e31f82c0d6
feat: update project wiki link and remove obsolete security scripts and workflows
2026-06-29 11:57:53 +08:00
shuaiplus
f82dcc3c17
feat: rename revokeInvite to deleteInvite and update related functionality
2026-06-29 11:47:05 +08:00
shuaiplus
4378e1b430
feat: add pendingAuthRequestsRefreshing state to improve loading feedback in auth request components
2026-06-29 11:29:35 +08:00
shuaiplus
5eeaf4e32e
feat: enhance Bitwarden CSV parsing with custom field handling and metadata restoration
2026-06-29 11:10:41 +08:00
shuaiplus
82f968e51f
feat: add validFolderIds support for cipher responses and update folder handling in storage
2026-06-28 19:43:27 +08:00
shuaiplus
a5ad16ac27
feat: add device selection and removal functionality in SecurityDevicesPage
2026-06-28 15:31:29 +08:00
shuaiplus
6a1a8357bf
feat: refactor PRF extension handling in credential options
2026-06-28 14:13:06 +08:00
shuaiplus
31cfd19b6b
feat: add support for excluding PRF extensions in credential options
2026-06-28 14:02:51 +08:00
shuaiplus
4cd9ad00d2
Add backup-related error messages and improve UI styles
...
- Updated English, Spanish, Russian, Simplified Chinese, and Traditional Chinese locale files to include new error messages related to backup and restore processes.
- Added prefix and suffix strings for the "cached empty" message to enhance clarity in user prompts.
- Enhanced the management CSS with new styles for the backup browser refresh prompt to improve layout and user experience.
2026-06-27 12:38:41 +08:00
shuaiplus
31dcc76ee2
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-06-26 20:58:22 +08:00
shuaiplus
1bfb9a647d
feat: refine app-shell styles for improved layout and dark mode consistency
2026-06-26 19:12:20 +08:00
shuaiplus
e9272ec29a
feat: enhance backup import functionality with locking mechanism and checksum support
2026-06-26 18:45:23 +08:00
shuaiplus
8942e5bd49
feat: add support for PRF extension request based on browser compatibility
2026-06-26 11:58:49 +08:00
shuaiplus
d722815999
feat: add fullscreen layout support with toggle and localization updates
2026-06-26 11:26:02 +08:00
shuaiplus
ff85698edb
feat: add Tigris backup provider support with recommendations and localization updates
2026-06-25 21:11:57 +08:00
shuaiplus
c3dc53bac1
feat: add Cloudflare R2 support with detailed backup recommendations and localization updates
2026-06-25 19:45:09 +08:00
shuaiplus
1acc31eda0
feat: add Backblaze B2 support with recommendations and styling updates
2026-06-25 18:42:34 +08:00
shuaiplus and Claude
c694f1bfce
refactor: consolidate security devices UI and remove pending auth requests from settings
...
- Merge device management and authorized devices sections into a single card in SecurityDevicesPage
- Remove PendingAuthRequestsPanel from SettingsPage and its related props
- Clean up unused auth request prop drilling in AppMainRoutes
Co-Authored-By: Claude <noreply@anthropic.com >
2026-06-25 01:49:17 +08:00
shuaiplus
bf51309fbb
fix: update version to v1.7.1
2026-06-24 01:55:09 +08:00
shuaiplus and Shuai
23b23f39b9
fix: require reauthentication for auth request approval
2026-06-24 01:44:50 +08:00
shuaiplus and Shuai
0daad46591
chore: add package overrides for undici, @babel/core, and esbuild
2026-06-24 01:44:50 +08:00
shuaiplus and Shuai
a2a8f1c7b6
fix:Harden authentication and sensitive file handling
2026-06-24 01:44:50 +08:00
shuaiplus and Shuai
850fe0f044
fix: two-phase invite consumption to prevent registration race condition
2026-06-24 01:44:50 +08:00
shuaiplus and Shuai
7279668955
fix: address security issue
2026-06-24 01:44:50 +08:00
shuaiplus
5048cc0720
chore: bump version to 1.7.0
2026-06-23 01:36:38 +08:00
shuaiplus
907126d152
fix: refine login success toast handling
2026-06-22 23:15:11 +08:00
shuaiplus
c1f57957c0
Remove vault toolbar switch animation
2026-06-22 22:39:48 +08:00
shuaiplus
cd2ec8240b
Show mobile sort button label
2026-06-22 22:32:58 +08:00
shuaiplus
16bde22604
Unify mobile topbar controls
2026-06-22 22:30:29 +08:00
shuaiplus
4900de0444
Refresh auth requests from realtime notifications
2026-06-22 22:09:54 +08:00
shuaiplus
79ed7c9f85
Add Bitwarden push relay support
2026-06-22 22:09:38 +08:00
shuaiplus
9a21504f40
Fix realtime sync notifications
2026-06-22 16:46:55 +08:00
shuaiplus
045b23fc47
Align web vault updates with resource sync
2026-06-21 18:16:44 +08:00
shuaiplus
42b765b113
Use resource sync notifications in the web client
2026-06-21 16:14:20 +08:00
shuaiplus
f9fe53285f
Preserve stored cipher permission flags in responses
2026-06-21 15:46:37 +08:00
shuaiplus
46ba8b9950
Emit cipher update notifications for attachment changes
2026-06-21 15:42:09 +08:00
shuaiplus
f096681a2b
Align public send access notifications with Bitwarden
2026-06-21 15:38:51 +08:00
shuaiplus
fe0c66c561
Add official Bitwarden resource sync notifications
2026-06-21 15:14:42 +08:00
shuaiplus
add921b3b3
Improve Bitwarden compatibility across account, sync, attachment, and send flows
2026-06-21 15:02:41 +08:00
shuaiplus
f1b716fb31
chore: update .gitignore file
2026-06-20 00:01:36 +08:00
shuaiplus
8f2704fd41
feat: update toast close button with SVG icon and improve styling
2026-06-16 21:48:48 +08:00
shuaiplus
7e0406f751
feat: enhance mobile vault filter UI and improve styling for better usability
2026-06-16 21:17:43 +08:00
shuaiplus
d5c2ab2b0f
refactor: remove unused TOTP styling for cleaner code
2026-06-16 19:26:21 +08:00
shuaiplus
9e0908f43c
feat: enhance TOTP formatting and improve responsive styles for TOTP codes display
2026-06-16 19:17:05 +08:00
shuaiplus
7b3be2c819
feat: add duplicate detection modes and UI enhancements for managing duplicates
2026-06-15 20:48:57 +08:00
shuaiplus
a8183166ac
fix: add S3 addressing style option
...
Add a configurable S3 addressing style for remote backups while keeping path-style as the default for existing configurations. Use virtual-hosted-style to support providers such as Tencent COS buckets that reject path-style requests.
2026-06-15 16:53:28 +08:00
shuaiplus
f6169b7610
fix: add support for trusted two-factor device tokens in backup import and export
2026-06-13 17:45:01 +08:00
shuaiplus
493f901ec1
fix: refine typography styles for improved readability and consistency
2026-06-13 17:20:25 +08:00
shuaiplus
b4dfb0409b
fix: improve network status handling and probe logic
2026-06-13 17:05:30 +08:00
shuaiplus and Shuai
a06cb0ed71
fix: serialize Bitwarden CSV login URIs
2026-06-13 16:38:25 +08:00
shuaiplus
b1b25fe678
feat: update version to 1.6.1 in package.json and app-version.ts
2026-06-12 16:47:45 +08:00
shuaiplus
7cf2ab7c88
feat: add formatDateTime function for improved date handling in SettingsPage
2026-06-12 16:41:58 +08:00
shuaiplus
1918735520
feat: refine two-factor authentication response handling to align with Bitwarden Identity
2026-06-12 16:31:43 +08:00
shuaiplus and Claude Sonnet 4.6
c652cc1533
feat: implement device login approval system
...
Add a complete device authentication approval flow that allows users to approve login requests from new devices on their already-authenticated devices.
Core features:
- Create authentication requests when logging in from new devices
- Display pending requests with device info, IP address, and fingerprint phrases
- Approve or deny requests from web interface with real-time notifications
- Support multiple auth request types (authenticate & unlock, unlock only)
- Automatic expiration and cleanup of stale requests
Backend changes:
- Add auth_requests table with proper indexes for efficient queries
- Implement full CRUD API for authentication requests
- Add notification hub integration for real-time updates
- Add device fingerprint phrase generation for security verification
Frontend changes:
- Add AuthRequestApprovalDialog component for approving/denying requests
- Add PendingAuthRequestsPanel component to display and manage pending requests
- Integrate panels into Security and Settings pages
- Add fingerprint wordlist for generating human-readable verification phrases
- Update i18n translations for all supported languages
Security considerations:
- Access code verification to prevent unauthorized access
- Device fingerprint validation for additional security layer
- IP address and country tracking for audit purposes
- Automatic expiration of old requests (15 minutes)
- Only most recent request per device can be approved
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-12 13:12:11 +08:00
shuaiplus
e9aef72df7
feat: add loading skeleton components and styles for improved UI experience
2026-06-11 21:00:16 +08:00