bitwarden-clients

Commit Graph

Author	SHA1	Message	Date
John Harrington	8399815ea7	[PM-32237] Add back functionality to email OTP auth flow (#19024 ) * add back functionality to OTP auth flow * respond to review comments * hoist email value to parent component --------- Co-authored-by: Alex Dragovich <46065570+itsadrago@users.noreply.github.com>	2 months ago
Mike Amirault	04aad44322	[PM-31774] Remove toggle visibility callout on hidden text sends (#18924 )	2 months ago
Jordan Aasen	46a2af38a0	[PM-31974] - Vault Welcome dialog (#18960 ) * premium upgrade prompt and onboarding dialog * finalize onboard vault dialog * vault welcome dialog no ext * finish welcome dialog prompt * revert changes to unified upgrade prompt service * rename component * rename feature flag * add welcome dialog service * fix tests * fix footer position in welcome dialog * present dialog in order * fix tests * fix padding	2 months ago
Brandon Treston	c8ba23e28d	[PM-26378] Auto confirm events (#19025 ) * add notification handler for auto confirm * add missing state check * fix test * isolate angular specific code from shared lib code * clean up * use autoconfirm method * add event logging for auto confirm * update copy	2 months ago
✨ Audrey ✨	e66a1f37b5	Extract urlOriginsMatch utility and refactor senderIsInternal (#19076 ) Adds urlOriginsMatch to @bitwarden/platform, which compares two URLs by scheme, host, and port. Uses `protocol + "//" + host` rather than `URL.origin` because non-special schemes (e.g. chrome-extension://) return the opaque string "null" from .origin, making equality comparison unreliable. URLs without a host (file:, data:) are explicitly rejected to prevent hostless schemes from comparing equal. Refactors senderIsInternal to delegate to urlOriginsMatch and to derive the extension URL via BrowserApi.getRuntimeURL("") rather than inline chrome/browser API detection. Adds full test coverage for senderIsInternal. The previous string-based comparison used startsWith after stripping trailing slashes, which was safe in senderIsInternal where inputs are tightly constrained. As a general utility accepting arbitrary URLs, startsWith can produce false positives (e.g. "https://example.com" matching "https://example.com.evil.com"). Structural host comparison is the correct contract for unrestricted input.	2 months ago
Jackson Engstrom	d1250cf5a4	[PM-26704] Vault List Item Ordering for Extension (#18853 ) * shows all/filtered ciphers in allItems instead of the ones that haven't been bubbled up into autofill or favorites * removes remainingCiphers$ remnants * updates loading$ observable logic * updates loading$ test	2 months ago
Meteoni-San	c90b4ded33	Revert "Inform user if Desktop client already running (#17846 )" as per user feedback (#18897 ) This reverts commit `a199744e24`. Co-authored-by: neuronull <9162534+neuronull@users.noreply.github.com>	2 months ago
John Harrington	f8b5e15a44	[PM-31731] [Defect] No error is returned when entering an invalid email + an invalid verification code (#18913 ) * share i18n key for both invalid email and invalid otp submission * claude review	2 months ago
John Harrington	263ec94124	[PM-32161] Remove all emails when email list field is cleared and send is saved (#18959 ) * add new validation criteria to prevent authType.Email with an empty emails field * simplify validation logic	2 months ago
Jason Ng	bca2ebaca9	[PM-30122] allow no folders inside browser folder settings (#19041 )	2 months ago
Stephon Brown	ab59590019	[PM-29823] Add Tests for Updates (#19040 ) * refactor: Remove direct self-hosted org creation from OrganizationPlansComponent * tests: Add comprehensive test suite for OrganizationPlansComponent	2 months ago
Isaac Ivins	5444869456	PM-31733: Sends Drawer Persisting On Side Nav Change (#18762 ) * using activeDrawerRef with onDestroy * improved refs type checking - removed cdr	2 months ago
Todd Martin	c086df14e7	chore(ownership): Move account-fingerprint to KM ownership	2 months ago
Mike Amirault	f7f06267ee	[PM-31347] Add missing messages resulting in empty toast on invalid export master password (#19037 )	2 months ago
John Harrington	bc6b1c3b83	[PM-32242] Error message is incorrectly formatted for password protected Send (#18991 ) * re-work error display to match design specs * fix password auth in attemptV1Access * fix locales file (formatting)	2 months ago
Alex	1ef8f257b0	[PM-31803] Fix Password Manager reports not displaying items with limited collection access (#18956 ) When "Owners and admins can manage all collections and items" is OFF, Password Manager reports incorrectly filter out items from collections where the user has "Can view", "Can view except passwords", or "Can edit except passwords" access. The root cause is that all five PM report components filter ciphers using `(!this.organization && !edit) \|\| !viewPassword`. Since PM reports run without an organization context (this.organization is undefined), this condition excludes any item where edit=false or viewPassword=false. These permission checks are unnecessary for PM reports because: 1. Personal vault items always have edit=true and viewPassword=true, so the checks never applied to them. 2. Organization items should appear in reports regardless of permission level — the user has collection access, and edit restrictions should only affect the item dialog, not report visibility. 3. Admin Console reports (which work correctly) skip this filtering because this.organization is always set, making the condition always false. This also explains why "Can edit except passwords" items only appeared in the Unsecured Websites report — it was the only report that didn't check !viewPassword. Removed the edit/viewPassword filter conditions from all five PM report components: - exposed-passwords-report - weak-passwords-report - reused-passwords-report - inactive-two-factor-report - unsecured-websites-report	2 months ago
Isaiah Inuwa	dda862a8c6	Revert "Bumped client version(s)" (#19062 ) This reverts commit `51731c1526`. The desktop version was bumped erroneously, skipping 2026.2.0.	2 months ago
bitwarden-devops-bot	51731c1526	Bumped client version(s)	2 months ago
Isaiah Inuwa	cf5e194639	[BRE-1621] Fix Appx Release (#19043 ) * Revert to electron-builder appx manifest template * Remove comments * Remove unnecessary namespaces * Re-include Tamil translation files * Reinstate bitwarden protocol handler * Set minimum version to Windows 10 2016 Anniversary Update * Fix spacing	2 months ago
Alex	03340aee71	[PM-31163] stabilize table column widths with fixed layout (#18708 ) * stabilize table column widths with fixed layout (PM-31163) Add layout="fixed" and explicit width classes to report tables to prevent column widths from shifting during virtual scroll. Files changed: - weak-passwords-report.component.html - reused-passwords-report.component.html - exposed-passwords-report.component.html - inactive-two-factor-report.component.html - unsecured-websites-report.component.html * use auto width for name column to fix width calculation (PM-31163) Remove tw-w-1/2 from name column headers. With layout="fixed", the explicit percentages didn't sum to 100%, causing inconsistent column widths. Before: \| 48px \| 50% \| 25% \| 25% \| = 48px + 100% (overflow) After: \| 48px \| auto \| 25% \| 25% \| = columns sum correctly Name column now uses auto to fill remaining space. * render headers in Admin Console to fix column widths (PM-31163) Admin Console reports had a very wide icon column because no headers were rendered. Without headers, table-layout: fixed uses data row content to determine column widths, causing inconsistent sizing. Root cause: Three reports had their entire <ng-container header> block inside @if (!isAdminConsoleActive), so when isAdminConsoleActive=true (Admin Console), no headers were rendered at all. Before (broken): @if (!isAdminConsoleActive) { <ng-container header> <!-- Entire header skipped in Admin Console --> <th>Icon</th> <th>Name</th> <th>Owner</th> </ng-container> } After (fixed): <ng-container header> <!-- Always render headers --> <th>Icon</th> <th>Name</th> @if (!isAdminConsoleActive) { <th>Owner</th> <!-- Only Owner is conditional --> } </ng-container> This matches the pattern already used by weak-passwords-report and exposed-passwords-report, which were working correctly. Files changed: - unsecured-websites-report.component.html - reused-passwords-report.component.html - inactive-two-factor-report.component.html Result: - Admin Console now renders headers with correct column widths - Icon column is 48px (tw-w-12) as expected - Owner column properly hidden in Admin Console view * truncate long item names to prevent column overflow - you can hover cursor for tooltip to see full name	2 months ago
Alex	ec33ea4f3c	[PM-27782] Update Access Intelligence loading state text (#18808 ) * [PM-27782] Update Access Intelligence loading state text Simplify the loading progress messages shown during Access Intelligence report generation to be more user-friendly and concise. Changes: - Add new i18n keys with simplified text - Update ProgressStepConfig to use new keys Progress message updates: - "Fetching member data..." → "Reviewing member data..." - "Analyzing password health..." → "Analyzing passwords..." - "Calculating risk scores..." → "Calculating risks..." - "Generating report data..." → "Generating reports..." - "Saving report..." → "Compiling insights..." - "Compiling insights..." → "Done!" * delete old messages * remove all "this might take a few minutes"	2 months ago
Jordan Aasen	ff775c7bbc	fix click on "Fill" text (#19047 )	2 months ago
Jordan Aasen	24c3b8fb2b	fix autofill on click behavior (#19046 )	2 months ago
John Harrington	9f18a68707	remove unwanted text and place wanted in bit-hint (#18989 )	2 months ago
bitwarden-devops-bot	e760b1c923	Bumped client version(s)	2 months ago
Brandon Treston	8a670f1731	fix circular dependency (#19023 )	2 months ago
rr-bw	4a651fbfb3	refactor(input-password-flows) [Auth/PM-27086] Use new KM Data Types in InputPasswordComponent flows - TDE & Permission User (#18400 ) Updates the SetInitialPasswordService TDE + Permission user flow to use the new KM data types: - `MasterPasswordAuthenticationData` - `MasterPasswordUnlockData` This allows us to move away from the deprecated `makeMasterKey()` method (which takes email as salt) as we seek to eventually separate the email from the salt. The new `setInitialPasswordTdeUserWithPermission()` method essentially takes the existing deprecated `setInitialPassword()` method and: - Removes logic that is specific to a `JIT_PROVISIONED_MP_ORG_USER` case. This way the method only handles `TDE_ORG_USER_RESET_PASSWORD_PERMISSION_REQUIRES_MP` cases. - Updates the logic to use `MasterPasswordAuthenticationData` and `MasterPasswordUnlockData` Behind feature flag: `pm-27086-update-authentication-apis-for-input-password`	2 months ago
Nik Gilmore	e8df377ba1	[PM-30735] Fix bug causing ciphers not to load under certain circumstances. (#18895 )	2 months ago
Mike Amirault	c0e9678c06	[PM-31770] Fix Send expires text formatting (#18926 ) * [PM-31770] Fix Send expires text formatting * Address PR review comments	2 months ago
John Harrington	5623568a2f	[PM-31620] Browser - Incorrect "Copy link" message when Send is shared with specific people (#18982 ) * add existing Send creation messages to browser * remove unused method and associated tests	2 months ago
John Harrington	c415beb653	add password specific header (#18988 )	2 months ago
Bernd Schoolmann	460b9ccb67	Fix high CPU usage on flatpak (#19006 )	2 months ago
bw-ghapp[bot]	22a6fb1e6d	Autosync the updated translations (#19009 ) Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	2 months ago
bw-ghapp[bot]	eb4b5721a6	Autosync the updated translations (#19007 ) Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	2 months ago
bw-ghapp[bot]	8620a2d7e4	Autosync the updated translations (#19008 ) Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	2 months ago
John Harrington	f5b1be7e62	add dynamic EV headers (#18949 )	2 months ago
Jordan Aasen	323f30c8e9	[PM-29892] - fix bulk share in vault (#18601 ) * fix bulk share in vault * clean up types. * remove unnecessary optional chain * add back defensive programming. update restore * fix searchableCollectionNodes * add back optional chains	2 months ago
Brandon Treston	2912bf05e1	[PM-26901] Add notification handler for auto confirm (#18886 ) * add notification handler for auto confirm * add missing state check * fix test * isolate angular specific code from shared lib code * clean up * use autoconfirm method * fix test	2 months ago
Jason Ng	10a20a43a3	[PM-31738] update archive toasts (#18923 ) * update archive toast for all clients and trash archive restore toast, update archive cipher utilities spec	2 months ago
cyprain-okeke	f46511b3e8	[PM-30908]Correct Premium subscription status handling (#18475 ) * Implement the required changes * Fix the family plan creation for expired sub * Resolve the pr comments * resolve the resubscribe issue * Removed redirectOnCompletion: true from the resubscribe * Display the Change payment method dialog on the subscription page * adjust the page reload time * revert payment method open in subscription page * Enable cancel premium see the subscription page * Revert the removal of hasPremiumPersonally * remove extra space * Add can view subscription * Use the canViewSubscription * Resolve the tab default to premium * use the subscription Instead of hasPremium * Revert the changes on user-subscription * Use the flag to redirect to subscription page * revert the canViewSubscription change * resolve the route issue with premium * Change the path to * Revert the previous iteration changes * Fix the build error	2 months ago
John Harrington	ab0739b693	rename flag to emails (#18955 )	2 months ago
Isaiah Inuwa	ab702e3a1a	Don't sync invalid password ciphers to autofill (#18783 )	2 months ago
Isaiah Inuwa	fa40de92b1	Remove unneeded workaround to get credential ID from request (#18784 )	2 months ago
Jared	b567fea7e7	[PM-29506] Rid of old feature flag for members feature flag (#18884 ) * [PM-31750] Refactor members routing and user confirmation logic * Simplified user confirmation process by removing feature flag checks. * Updated routing to directly use the new members component without feature flagging. * Removed deprecated members component references from routing modules. * Cleaned up feature flag enum by removing unused entries. * trigger claude * [PM-31750] Refactor members component and remove deprecated files * Renamed vNextMembersComponent to MembersComponent for consistency. * Removed deprecated_members.component.ts and associated HTML files. * Updated routing and references to use the new MembersComponent. * Cleaned up related tests to reflect the component name change. * Refactor import statements in security-tasks.service.ts for improved readability * Update apps/web/src/app/admin-console/organizations/manage/user-confirm.component.ts Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com> * Remove BaseMembersComponent and related imports from the admin console, streamlining member management functionality. * Remove unused ConfigService import from UserConfirmComponent to clean up code. * Implement feature flag logic for user restoration in MemberDialogComponent, allowing conditional restoration based on DefaultUserCollectionRestore flag. --------- Co-authored-by: Thomas Rittson <trittson@bitwarden.com> Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>	2 months ago
Brandon Treston	011f250684	[PM-32075] Fix self host bug due to type mismatch (#18919 ) * fix self host bug with data model * fix type issues * fix types, make successful required	2 months ago
Daniel James Smith	69264c8841	[PM-32212] Migrate platform font icons to bit-icon (#18970 ) * Changes on browser * Changes on desktop * Changes on web * Fix chromatic story --------- Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>	2 months ago
bw-ghapp[bot]	412d1b541d	Autosync the updated translations (#18963 ) Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	2 months ago
bw-ghapp[bot]	7c6512c78f	Autosync the updated translations (#18962 ) Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	2 months ago
bw-ghapp[bot]	c9a125b338	Autosync the updated translations (#18961 ) Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	2 months ago
Brad	8d3cbd3da6	[PM-31801] Fix: Allow admins/owners to edit all ciphers in reports when Org setting is enabled#18856 This PR fixes an issue where admins couldn't edit ciphers in organization reports when the "Allow Admin Access to All Collection Items" setting was enabled. The fix adds a check for organization.allowAdminAccessToAllCollectionItems in the canManage() method across all organization report components. When this setting is enabled, admins/owners can now properly edit all ciphers regardless of collection membership.	2 months ago

1 2 3 4 5 ...

6452 Commits (8399815ea7bfe00a251a0091ee8a504c5a1bf784)