Buriburizaemon/nodewarden
1
0
Fork 0
mirror of https://github.com/shuaiplus/nodewarden.git synced 2026-08-05 06:50:10 +00:00
Code Issues Packages Projects Releases Wiki Activity
145 Commits 5 Branches 25 Tags
d48e6b6ce5281bc3137b0585a86b5055c4721369
Commit Graph
145 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
shuaiplusandShuai 1ab8e1baa7 feat: remove deprecated Bitwarden subprojects from the repository 2026-03-02 00:10:44 +08:00
shuaiplusandShuai d3d4755505 feat: update routing regex patterns for improved API path matching 2026-03-02 00:10:44 +08:00
shuaiplusandShuai a0b9f970c1 feat: update favicon and logo images for improved branding 2026-03-02 00:10:44 +08:00
shuaiplusandShuai f20a71e8a8 feat: enhance security headers and update content security policy in response and HTML files 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 7d5681665f feat: enhance deployment process and update dependencies 
- Updated the deployment script to build the web application before deploying.
- Upgraded Wrangler dependency from 4.61.1 to 4.69.0.

feat: add import item limit and request body size limit

- Introduced a new limit for the maximum total items allowed in a single import (5000).
- Set a hard body size limit for JSON API endpoints (25 MB).

feat: validate KDF parameters during registration and password change

- Added validation for KDF parameters to ensure compliance with Bitwarden's minimum requirements.
- Enhanced error handling for invalid KDF parameters during user registration and password change.

feat: clean up R2 files on user deletion

- Implemented cleanup of R2 files associated with user attachments and sends before deleting user metadata.

feat: verify folder ownership when creating or updating ciphers

- Added checks to ensure that users cannot reference folders owned by other users when creating or updating ciphers.

fix: handle corrupted cipher data gracefully

- Improved error handling when retrieving ciphers from the database to avoid crashes due to corrupted data.

feat: increment send access count atomically

- Added a method to atomically increment the access count for sends and return whether the update was successful.

fix: enforce request body size limits

- Implemented checks to reject oversized request bodies for non-file upload paths.

fix: update error handling for database initialization

- Enhanced error logging for database initialization failures while providing a generic message to clients.

feat: enhance security with Content Security Policy

- Added a Content Security Policy to the web application to improve security against XSS attacks.

fix: remove plaintext TOTP secret from localStorage

- Updated the TOTP enabling process to remove the plaintext secret from localStorage after it is stored on the server.

fix: ensure only PBKDF2 hash is sent for public send access

- Modified the public send access payload to ensure only the PBKDF2 hash is sent, never the plaintext password.
 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 1a94f8dd44 feat: enhance password security with server-side hashing and constant-time comparisons 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 66f995d981 feat: unify API rate limiting and enhance request budgets 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 234e3a5e96 docs: update capability descriptions in README files for clarity 2026-03-02 00:10:44 +08:00
shuaiplusandShuai d3b515fd99 feat: add TOTP recovery code field to users table 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 68f66cf4e6 docs: update README files for clarity on deployment steps and features 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 9061ab52b6 feat: add JWT secret safety checks and warning page for insecure configurations 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 1d170baaaf fix: remove unnecessary zoom property from html in styles.css 2026-03-02 00:10:44 +08:00
shuaiplusandShuai bacf27b936 feat(i18n): add internationalization support with English and Chinese translations 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 1810e0aa7a feat: add recovery code functionality and device management 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 3a650740a1 feat: update README files to reflect full user management and support for text and file sends 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 9b490016aa fix: update README to clarify NodeWarden as a third-party Bitwarden server 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 0db5f957c8 feat: add NodeWarden logo to README files for improved branding 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 8481e2756e feat: enhance send functionality with improved key handling and decryption, update UI components for better user experience 2026-03-02 00:10:44 +08:00
shuaiplusandShuai b7dfd1b3ad feat: enhance SendsPage with notes display and update VaultPage for improved filtering and history tracking 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 9c1c5e2c26 feat: add PublicSendPage and SendsPage components for managing sends 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 15e0a29bb1 feat: add favicon and logo assets, update App component to use logo 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 205ccdad8b feat: add SSH key utilities and improve field decryption 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 389872d491 feat: enhance VaultPage and App layout with new UI components and styles 2026-03-02 00:10:44 +08:00
shuaiplusandShuai d7c41edad4 feat: enhance authentication and settings UI 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 5509492563 feat: add cryptographic utilities and types for secure data handling 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 7c7d32de30 feat: add toast notifications and dialog components for improved user interaction 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 4831a0915c feat: implement vault locking mechanism with auto-lock settings and unlock functionality 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 930f4f86cc feat: add QR code generation support and rate limiting for known device probes 2026-03-02 00:10:44 +08:00
shuaiplusandShuai ceb4bef9e4 Add vault-utils.js with utility functions for field type parsing, selection counting, cipher type mapping, URI handling, and extracting first cipher URI 2026-03-02 00:10:44 +08:00
shuaiplusandShuai c4c25efc50 Add runtime configuration loader and styles for web application 2026-03-02 00:10:44 +08:00
shuaiplusandShuai bda0cba1c6 Enhance styles for app layout and components 2026-03-02 00:10:44 +08:00
shuaiplusandShuai b10ce83ca0 Add global styles for web client interface 2026-03-02 00:10:44 +08:00
shuaiplusandShuai ee784d18db Implement code changes to enhance functionality and improve performance 2026-03-02 00:10:44 +08:00
shuaiplusandShuai ec9be40d6c feat: 更新网页客户端样式和布局，提升用户体验 2026-03-02 00:10:44 +08:00
shuaiplusandShuai b21b031120 Refactor code structure for improved readability and maintainability 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 90da97c945 feat: enhance registration and password management UI with additional state handling 2026-03-02 00:10:44 +08:00
shuaiplusandShuai 39fbdc7e0e feat: implement admin user management and invite system 2026-03-02 00:10:44 +08:00
shuaiplus 9359ce2a2c feat: remove setup disabling functionality and related UI elements 2026-02-25 01:30:08 +08:00
shuaiplus 026aea03dc feat: add overlap grace period for refresh tokens to handle concurrent requests 2026-02-25 00:22:31 +08:00
shuaiplus 6621738b02 feat: add compatibility for custom fields handling in cipher creation and update 2026-02-25 00:10:11 +08:00
shuaiplus 431cc0d5d7 feat: add compatibility for fido2Credentials counter and implement no-op device token update handler 2026-02-23 23:29:00 +08:00
shuaiplus 2226bdd9ef feat: add CLI deployment instructions 2026-02-23 20:01:55 +08:00
shuaiplus f7a5966104 feat: add compatibility mode for deleting ciphers to support Bitwarden clients 2026-02-23 19:35:06 +08:00
shuaiplus 747cad35f5 enhance README with badges and project links 2026-02-23 16:56:00 +08:00
shuaiplus c44436a5fd fix: ensure attachment size is formatted as string for compatibility with Bitwarden clients 2026-02-23 14:07:11 +08:00
shuaiplus a3f074f38a feat: add TOTP code generation and display functionality with UI enhancements 2026-02-21 15:13:21 +08:00
shuaiplus 8106364650 feat: enhance two-factor authentication handling and improve error responses 2026-02-21 14:13:22 +08:00
shuaiplus 2934ebd36d feat: enhance registration page with TOTP support and UI improvements 2026-02-20 20:28:08 +08:00
shuaiplus 177d34ba54 fix: increase max login attempts and improve two-factor token error response 2026-02-20 18:53:10 +08:00
shuaiplus 622a4ec506 chore: update version to 1.1.0 and improve two-factor provider validation 2026-02-20 18:39:18 +08:00