Code

refactored access management#207

Code

Merged

overheadhunter merged 93 commits intodevelopcryptomator/hub:developfrom feature/refactored-access-grantcryptomator/hub:feature/refactored-access-grantCopy head branch name to clipboardAug 22, 2023

+2,714-1,170

Commits

Commits on Apr 27, 2023

• prepare table for new intermediary "user keys"

  overheadhunter

  committed
  58f4260

Commits on Apr 28, 2023

• generate user key + device key on first login

  overheadhunter

  committed
  ec32f4b

• grant access by encrypting vault key for user

  overheadhunter

  committed
  1f5e7f3

Commits on May 3, 2023

• prepare /api/devices for repeated PUT and GET

  overheadhunter

  committed
  9bb8a23

Commits on May 5, 2023

• updated paths to obtain JWEs

  Show description for 497592f
  overheadhunter

  committed
  497592f

• made Device.userKeyJwe nullable

  Show description for 0949aa1
  overheadhunter

  committed
  0949aa1

• re-added legacy API /api/vaults/{vaultId}/keys/{deviceId} for a smooth upgrade experience

  overheadhunter

  committed
  2a3c106

• diversified test case

  overheadhunter

  committed
  28afe35

Commits on May 8, 2023

• moved service

  overheadhunter

  committed
  074a173

• prepare more test data for testing with other platforms

  overheadhunter

  committed
  40f4b33

Commits on May 9, 2023

• keep device public key base64url-encoded for compatibility with existing data

  overheadhunter

  committed
  c6d3811

• Allow use of validation annotations for nullable fields.

  Show description for a67f212
  overheadhunter

  committed
  a67f212

Commits on May 15, 2023

• adjust unlock success screen for new authentication model

  overheadhunter

  committed
  2198602

Commits on May 16, 2023

• encrypt user key for a device

  overheadhunter

  committed
  86e790d

Commits on May 25, 2023

• store recovery code for later display

  overheadhunter

  committed
  45b0968

Commits on May 26, 2023

• added SetupUserKey component

  tobihagemann

  committed
  4578b3a

• added "enter recovery code" flow in SetupUserKey

  Show description for 274ffa6
  tobihagemann

  committed
  274ffa6

• deduplicated code

  tobihagemann

  committed
  ed57bde

Commits on May 29, 2023

• fix recovering user key from setup code

  overheadhunter

  committed
  2f1afc6

• always roll a new key pair when creating/recovering a user key

  overheadhunter

  committed
  efc4cdf

Commits on May 30, 2023

• added current device badge, hidden remove button

  tobihagemann

  committed
  2ed6624

• added device name input to SetupUserKey

  tobihagemann

  committed
  4c21c86

• updated current device badge

  tobihagemann

  committed
  740fd10

• added last seen column to DeviceList

  tobihagemann

  committed
  4766afe

• added type and last_seen_time to device entity

  tobihagemann

  committed
  cfd280c

Commits on May 31, 2023

• show Personal Hub Secret (in device list??)

  overheadhunter

  committed
  11f818f

• added missing 200 response code to /api/vaults/{vaultId}/users-requiring-access-grant (#201)

  chenkins

  authored
  29e45bc

• fixed Hibernate error: Schema-validation: wrong column type encountered

  Show description for 9b35286
  overheadhunter

  committed
  9b35286

• use single PUT /api/users/me API for all create/update requests

  overheadhunter

  committed
  5df9236

• alternative CSP headers for using Quarkus Dev UI

  Show description for f590182
  overheadhunter

  committed
  f590182

• make requests idempotent:

  Show description for 5eedc46
  overheadhunter

  committed
  5eedc46

• updated wording and layout in SetupUserKey

  tobihagemann

  committed
  c480ea4

• further refinements

  tobihagemann

  committed
  0846927

• store "owner" role during vault creation

  overheadhunter

  committed
  c4c1e99

• immediately encrypt vault keys for owner during vault creation

  overheadhunter

  committed
  2f7f9bc

• Merge commit '0846927f628b5b789424f1998acfb3ce63370dcd' into feature/refactored-access-grant

  overheadhunter

  committed
  e549937

Commits on Jun 1, 2023

• added UserProfile and ManageRecoveryCode components

  tobihagemann

  committed
  f9199e4

• renamed and revised GET /api/vaults/accessible

  overheadhunter

  committed
  601ddd9

• rotate setup code

  overheadhunter

  committed
  b261d48

• cleanup: removed barely used GET /api/users/me?withAccessibleVaults=true

  overheadhunter

  committed
  3afe8de

• fixed tests

  overheadhunter

  committed
  2ab6495

• fix code smells

  overheadhunter

  committed
  9f15d3f

• Merge commit 'a2822b65f79616ca0f08481aad0bb7cdd3700857' into feature/refactored-access-grant

  Show description for ee58ae2
  overheadhunter

  committed
  ee58ae2

• added confirmation dialog for regenerating recovery code

  tobihagemann

  committed
  1f833d8

Commits on Jun 2, 2023

• added vault owner handling in VaultList (badge, filter)

  tobihagemann

  committed
  06d9d8c

• New, fluent API for JWE building+parsing, added PBES2-HS512+A256KW

  overheadhunter

  committed
  0c5008c

• simplified database model, store User's Setup Code in single JWE field

  overheadhunter

  committed
  6e2112a

• increase PBKDF2 iteration count

  overheadhunter

  committed
  115aae3

Commits on Jun 6, 2023

• added confirmation dialog for resetting user account

  tobihagemann

  committed
  3b5003d

• added manage account button/link in user profile

  tobihagemann

  committed
  b6cdc62

• removed user settings and moved them to user profile

  tobihagemann

  committed
  f6534e3

Commits on Jun 16, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for 05d0d9a
  overheadhunter

  committed
  05d0d9a

• Merge branch 'develop' into feature/refactored-access-grant

  overheadhunter

  committed
  7973b93

• migrate ::set-output

  Show description for 9fc2b17
  overheadhunter

  committed
  9fc2b17

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for e935311
  overheadhunter

  committed
  e935311

• try building with node 20

  overheadhunter

  committed
  c32c832

• fix migrations after merging V8

  overheadhunter

  committed
  f5a335d

• allow device registration from older Cryptomator desktop clients

  overheadhunter

  committed
  54156b3

Commits on Jun 19, 2023

• Fix 204 without description.

  Show description for eb63a93
  chenkins

  authored
  eb63a93

• Merge pull request #204 from chenkins/feature/refactored-access-grant-204-without-description

  Show description for a621a0c
  tobihagemann

  authored
  a621a0c

Commits on Jul 6, 2023

• skip "setup" in unlock success screen

  overheadhunter

  committed
  85e8a2f

• generate setup code test data for java unit tests

  overheadhunter

  committed
  822d8b1

• data model + API cleanup

  overheadhunter

  committed
  491739a

• use base64 encoding for new devices

  Show description for 02f0419
  overheadhunter

  committed
  02f0419

• API cleanup:

  Show description for 700c3a6
  overheadhunter

  committed
  700c3a6

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for dabc2c3
  overheadhunter

  committed
  dabc2c3

• Remove "validate device" from frontend

  overheadhunter

  committed
  93778ee

Commits on Jul 8, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for 615f9ba
  overheadhunter

  committed
  615f9ba

• use low PBKDF2 iteration count in unit tests

  Show description for 5e0c281
  overheadhunter

  committed
  5e0c281

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for f41b17b
  overheadhunter

  committed
  f41b17b

Commits on Jul 10, 2023

• Revert changes to effective_vault_access view done in 2eb435d: Archiving a vault should not affect membership.

  Show description for 3c3f32e
  overheadhunter

  committed
  3c3f32e

• cleanup

  overheadhunter

  committed
  dd29e3e

Commits on Jul 12, 2023

• renamed "recovery code" → "setup code" in code

  overheadhunter

  committed
  29bcb78

• added missing translations (tbd)

  overheadhunter

  committed
  f4d0c0d

• cleanup

  Show description for 51d6742
  overheadhunter

  committed
  51d6742

• fix NPE in "Grant Permissions" dialog

  overheadhunter

  committed
  a5b26fb

Commits on Jul 13, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for 57ce308
  overheadhunter

  committed
  57ce308

• added inline comment

  Show description for bf4a625
  overheadhunter

  committed
  bf4a625

• fixed org.flywaydb.core.api.FlywayException: Found more than one migration with version 11 after merging from develop

  overheadhunter

  committed
  a81ec97

Commits on Jul 19, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for cdd0937
  overheadhunter

  committed
  cdd0937

• add AuditEventVaultMemberAdd.role

  Show description for 0bcbc3a
  overheadhunter

  committed
  0bcbc3a

Commits on Jul 25, 2023

• delete legacy device during re-registration to "new" device table

  overheadhunter

  committed
  8795fab

Commits on Jul 27, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for 2baf0d1
  overheadhunter

  committed
  2baf0d1

• Merge branch 'develop' into feature/refactored-access-grant

  overheadhunter

  committed
  0f88fe8

• fix compile error

  overheadhunter

  committed
  21264cf

• adjusted flyway migration version

  overheadhunter

  committed
  bcf5dcc

• log unlock attempts

  overheadhunter

  committed
  e9411b4

Commits on Jul 28, 2023

• minor improvement displaying role

  Show description for 0bad652
  tobihagemann

  committed
  0bad652

Commits on Aug 2, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  overheadhunter

  committed
  19faa14

Commits on Aug 3, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for 52052ca
  overheadhunter

  committed
  52052ca

Commits on Aug 4, 2023

• renamed personal hub secret to setup code

  tobihagemann

  committed
  963d1d8

Commits on Aug 15, 2023

• Merge branch 'develop' into feature/refactored-access-grant

  Show description for e55caa1
  tobihagemann

  committed
  e55caa1

Commits on Aug 17, 2023

• Fix unlock, query fails due to Hibernate bug

  Show description for 1baf734
  SailReal

  committed
  1baf734