shuaiplus
8a5b210a1d
Improve Bitwarden-compatible TOTP handling
2026-07-07 01:27:55 +08:00
shuaiplus
ebc8e8e340
Replace remove button with trash icon positioned inside password field
2026-07-07 00:35:16 +08:00
shuaiplus
a870142b7b
Show password indicator and masked password field for encrypted sends
...
- Add password and authType fields to Send type
- Show lock icon in send list for password-protected sends
- Display masked dots in password field when editing a send that has a password set
- Add Remove button to clear existing password
2026-07-07 00:31:56 +08:00
shuaiplus
a366acbac0
Revert redirect guard in backup uploader
2026-07-06 23:54:17 +08:00
shuaiplus
57c5ef9da6
Remove WEBSITE_ICONS_ENABLED and always enable website icons
2026-07-06 22:56:36 +08:00
shuaiplus
f532d3ace3
Preserve WebAuthn credential purpose in backups
2026-07-06 22:25:02 +08:00
shuaiplus
cc4a830be8
Harden backup and download token flows
2026-07-06 19:06:24 +08:00
shuaiplus
c6438747e3
Harden 2FA disable and website icon privacy
2026-07-06 18:45:54 +08:00
shuaiplus
5c8f01be59
Harden backup blob and remote endpoint handling
2026-07-06 18:17:55 +08:00
shuaiplus
7ac6ae50bb
Harden auth requests and backup endpoints
2026-07-06 18:04:23 +08:00
shuaiplus
ace00e8e74
Harden WebAuthn extension origins
2026-07-06 17:43:57 +08:00
shuaiplus
51428461a8
fix: cap multipart backup and upload requests
2026-07-06 15:38:59 +08:00
shuaiplus
23c53bd1af
fix: validate anonymous notification hub requests
2026-07-06 15:38:52 +08:00
shuaiplus
ae168bea31
fix rate limit reset bypasses
2026-07-06 14:24:01 +08:00
shuaiplus
00e0ec0892
fix(backup): redact destination secrets in settings
2026-07-06 13:50:49 +08:00
shuaiplus
2df43ccdb0
fix(auth): revoke current access token session
2026-07-06 13:49:06 +08:00
shuaiplus
fd46dffc34
fix: align push relay installation requests
2026-07-06 02:09:35 +08:00
shuaiplus
56b301f2d1
fix: align fill assist compatibility
2026-07-06 02:09:28 +08:00
shuaiplus
f0e523376c
fix: add admin auth request compatibility
2026-07-06 01:35:26 +08:00
shuaiplus
8b2f98b847
fix: add Bitwarden device registration endpoints
2026-07-06 01:35:19 +08:00
shuaiplus
cde4555add
fix: return unsupported for email and kdf flows
2026-07-06 01:35:12 +08:00
shuaiplus
1bad32fd90
fix: keep remembered 2fa token on bad password
2026-07-06 01:07:26 +08:00
shuaiplus
e376a840c2
fix: add device verification settings endpoints
2026-07-06 00:59:34 +08:00
shuaiplus
9de0d3bd87
fix: clarify extended cipher type icons
2026-07-06 00:56:57 +08:00
shuaiplus
109593da90
feat: support Bitwarden extended cipher types
2026-07-06 00:44:17 +08:00
shuaiplus
01ff627ac6
fix(i18n): localize audit logs and new validation messages
2026-07-05 23:45:26 +08:00
shuaiplus
d028b194e7
fix(admin): record audit clears and passkey 2fa status
2026-07-05 23:45:18 +08:00
shuaiplus
c53d71fc28
feat(settings): move device management into settings
2026-07-05 23:44:54 +08:00
shuaiplus
6e722205b1
fix(totp): validate qr image uploads
2026-07-05 23:44:44 +08:00
shuaiplus
cf14704d99
fix(import): validate payloads and zip entries
2026-07-05 23:44:36 +08:00
shuaiplus
0cef6a04e9
fix(backup): verify remote deletes and validate archives
2026-07-05 23:44:25 +08:00
shuaiplus
8c481a1564
fix(send): refresh routes and gate file access
2026-07-05 23:44:07 +08:00
shuaiplus
d9a36fefe6
fix(security): harden auth and request limits
2026-07-05 23:43:49 +08:00
shuaiplus
12af18e3a3
feat: update device management link handling in navigation
2026-07-05 15:41:27 +08:00
shuaiplus
d8cc88d9c0
feat: add UUID normalization functions and enhance WebAuthn response handling
2026-07-05 15:37:02 +08:00
shuaiplus
94b5f3e975
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-07-05 15:17:00 +08:00
shuaiplus
062c966e14
feat: update styles for two-step providers and responsive layout adjustments
2026-07-05 15:16:56 +08:00
shuaiplus
e73ae3d5ea
feat: enhance two-factor authentication handling and UI improvements
2026-07-05 15:05:53 +08:00
shuaiplus
c019c93726
feat: add passkey-based two-factor authentication
2026-07-05 14:51:11 +08:00
shuaiplus
f63b745d05
feat: Add YubiKey OTP support and management features
...
- Implemented YubiKey OTP settings management in useAccountSecurityActions hook.
- Added API functions for retrieving, saving, and bootstrapping YubiKey OTP credentials.
- Enhanced authentication flow to support multiple two-factor providers, including YubiKey.
- Updated localization files to include new YubiKey-related strings in English, Spanish, Russian, and Chinese.
- Introduced new styles for YubiKey management UI components.
- Created utility functions for YubiKey OTP validation and credential handling.
2026-07-04 02:49:46 +08:00
shuaiplus
c7eb6c663d
feat(i18n): add new localization strings for settings and two-step login across multiple languages
...
style: adjust grid layout for app main and add responsive styles for settings category
style: enhance management styles with new settings category layout and tabs
style: improve responsive design for settings modules and submodules
2026-07-03 19:19:24 +08:00
rootphantomer and Shuai
1ec6ed44a1
fix: reject plaintext FIDO2, SSH keys, and password history on import
...
Validate encrypted-string fields in validateCipherEncryptedFieldsForCompatibility
before they reach storage:
- FIDO2 credentials (12 fields: 8 required + 4 optional)
- SSH key (privateKey, publicKey, keyFingerprint/fingerprint)
- Password history (password per entry)
This closes a defense gap where plaintext in these positions was silently
accepted on import and later discarded at response time.
2026-07-02 17:36:06 +08:00
shuaiplus
6284c632de
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-07-02 17:23:47 +08:00
shuaiplus
60dd298dee
fix(security): harden jwt config and password rotation
2026-07-02 17:20:51 +08:00
shuaiplus
439683d350
fix(identity): add security stamp and invalidate user cache on token handling
2026-07-02 16:57:24 +08:00
shuaiplus
1545881eae
fix(auth): hash stored api keys
2026-07-02 16:27:20 +08:00
shuaiplus
680e287c8d
fix(ci): validate global domains sync ref
2026-07-02 16:11:19 +08:00
shuaiplus
baf569983d
fix(security): scope storage reads by user
2026-07-02 16:03:49 +08:00
Matt Van Horn and Shuai
73bbe8b268
perf: throttle jsQR camera fallback to a few decodes per second
2026-07-01 17:07:30 +08:00
Matt Van Horn and Shuai
d024798548
fix: composite transparent QR uploads over white before jsQR decode
2026-07-01 17:07:30 +08:00
shuaiplus
rootphantomerandShuai
Matt Van HornandShuai