Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Working passkeys storage #4025

Conversation

GeekCornerGH
Copy link
Contributor

Revert changes in #3593 and make them work with Browser plugin 2023.10.1

@Justus-D
Copy link

Justus-D commented Nov 3, 2023

I can confirm, that the current stable version of Vaultwarden (1.29.2) seems to be working with passkeys when modifying the response of /api/config to include "fido2-vault-credentials": true. I was able to store passkeys with the current version of the browser extension (2023.10.1). So, yes, the PR will enable the ability to store passkeys.

@GeekCornerGH
Copy link
Contributor Author

Also removes the old implementation

@tessus
Copy link
Contributor

tessus commented Nov 3, 2023

Interesting. I am wondering how they are stored in the db. Maybe they are reusing the password field.

@Justus-D
Copy link

Justus-D commented Nov 3, 2023

Interesting. I am wondering how they are stored in the db. Maybe they are reusing the password field.

Passkeys are stored in the login cipher. So in the same field as the password and the URL of the login.

Copy link
Owner

@dani-garcia dani-garcia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sometimes the fact that I decided to dump the cipher data from the clients directly into the column as JSON ends up being really convenient, nice haha

@dani-garcia dani-garcia merged commit 93da509 into dani-garcia:main Nov 4, 2023
3 checks passed
arthurgeek referenced this pull request in arthurgeek/vaultwarden-fly-template Nov 12, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [vaultwarden/server](https://togithub.com/dani-garcia/vaultwarden) |
stage | minor | `1.29.2-alpine` -> `1.30.0-alpine` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (vaultwarden/server)</summary>

###
[`v1.30.0`](https://togithub.com/dani-garcia/vaultwarden/releases/tag/1.30.0)

[Compare
Source](https://togithub.com/dani-garcia/vaultwarden/compare/1.29.2...1.30.0)

⚠️ **Note:** The WebSockets service for live sync has been integrated in
the main HTTP server, which means simpler proxy setups that don't
require a separate rule to redirect WS traffic to port 3012. Please
check the updated examples in the
[wiki](https://togithub.com/dani-garcia/vaultwarden/wiki/Proxy-examples).
It's recommended to migrate to this new setup as using the old server on
port 3012 is deprecated, won't receive new features and will be removed
in a future release.

#### Major changes and New Features

- Added `passkey` support, allowing the browser extensions to store and
use your `passkeys`, make sure the extension is updated to version
`2023.10.0` or newer for passkey support.
-   Updated web vault to 2023.10.0.
-   Fixed crashes in ARMv6 devices
- Fixed crashes when trying to create/edit a cipher in the mobile
applications.

#### What's Changed

- Update Rust and Crates by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3808](https://togithub.com/dani-garcia/vaultwarden/pull/3808)
- update web-vault to v2023.8.2 by
[@&#8203;stefan0xC](https://togithub.com/stefan0xC) in
[https://github.com/dani-garcia/vaultwarden/pull/3821](https://togithub.com/dani-garcia/vaultwarden/pull/3821)
- Fix Login With Device without MasterPassword by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3831](https://togithub.com/dani-garcia/vaultwarden/pull/3831)
- Update GitHub Workflow by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3910](https://togithub.com/dani-garcia/vaultwarden/pull/3910)
- Fix arm builds by [@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3911](https://togithub.com/dani-garcia/vaultwarden/pull/3911)
- Fix typos by [@&#8203;tuhanayim](https://togithub.com/tuhanayim) in
[https://github.com/dani-garcia/vaultwarden/pull/3959](https://togithub.com/dani-garcia/vaultwarden/pull/3959)
- csp: rename anonaddy.com to addy.io by
[@&#8203;stefan0xC](https://togithub.com/stefan0xC) in
[https://github.com/dani-garcia/vaultwarden/pull/3950](https://togithub.com/dani-garcia/vaultwarden/pull/3950)
- filter handlebars logs by
[@&#8203;stefan0xC](https://togithub.com/stefan0xC) in
[https://github.com/dani-garcia/vaultwarden/pull/3859](https://togithub.com/dani-garcia/vaultwarden/pull/3859)
- Remove unnecessary variable clone by
[@&#8203;mvalois](https://togithub.com/mvalois) in
[https://github.com/dani-garcia/vaultwarden/pull/3981](https://togithub.com/dani-garcia/vaultwarden/pull/3981)
- README.md: Fix grammar nit by
[@&#8203;AndreasHGK](https://togithub.com/AndreasHGK) in
[https://github.com/dani-garcia/vaultwarden/pull/3965](https://togithub.com/dani-garcia/vaultwarden/pull/3965)
- Fix small issues by [@&#8203;BlackDex](https://togithub.com/BlackDex)
in
[https://github.com/dani-garcia/vaultwarden/pull/3964](https://togithub.com/dani-garcia/vaultwarden/pull/3964)
- Adds LastActive on /admin/users API route by
[@&#8203;mvalois](https://togithub.com/mvalois) in
[https://github.com/dani-garcia/vaultwarden/pull/3951](https://togithub.com/dani-garcia/vaultwarden/pull/3951)
- Reopen log file on SIGHUP by
[@&#8203;tobiasmboelz](https://togithub.com/tobiasmboelz) in
[https://github.com/dani-garcia/vaultwarden/pull/3909](https://togithub.com/dani-garcia/vaultwarden/pull/3909)
- Fix External ID not set during DC Sync by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3804](https://togithub.com/dani-garcia/vaultwarden/pull/3804)
- New config option disable email change by
[@&#8203;admav](https://togithub.com/admav) in
[https://github.com/dani-garcia/vaultwarden/pull/3986](https://togithub.com/dani-garcia/vaultwarden/pull/3986)
- 2FA Confirmation Code Email subject line change to fix triggering
Google spam blocker by
[@&#8203;aureateflux](https://togithub.com/aureateflux) in
[https://github.com/dani-garcia/vaultwarden/pull/3572](https://togithub.com/dani-garcia/vaultwarden/pull/3572)
- Implement cipher key encryption by
[@&#8203;dani-garcia](https://togithub.com/dani-garcia) in
[https://github.com/dani-garcia/vaultwarden/pull/3990](https://togithub.com/dani-garcia/vaultwarden/pull/3990)
- Container building changes by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3958](https://togithub.com/dani-garcia/vaultwarden/pull/3958)
- Fix issue with MariaDB/MySQL migrations by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3994](https://togithub.com/dani-garcia/vaultwarden/pull/3994)
- feat: Working passkeys storage by
[@&#8203;GeekCornerGH](https://togithub.com/GeekCornerGH) in
[https://github.com/dani-garcia/vaultwarden/pull/4025](https://togithub.com/dani-garcia/vaultwarden/pull/4025)
- ci: add trivy workflow by
[@&#8203;mightyBroccoli](https://togithub.com/mightyBroccoli) in
[https://github.com/dani-garcia/vaultwarden/pull/3997](https://togithub.com/dani-garcia/vaultwarden/pull/3997)
- Fix importing Bitwarden exports by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/4030](https://togithub.com/dani-garcia/vaultwarden/pull/4030)

#### New Contributors

- [@&#8203;tuhanayim](https://togithub.com/tuhanayim) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3959](https://togithub.com/dani-garcia/vaultwarden/pull/3959)
- [@&#8203;mvalois](https://togithub.com/mvalois) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3981](https://togithub.com/dani-garcia/vaultwarden/pull/3981)
- [@&#8203;AndreasHGK](https://togithub.com/AndreasHGK) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3965](https://togithub.com/dani-garcia/vaultwarden/pull/3965)
- [@&#8203;tobiasmboelz](https://togithub.com/tobiasmboelz) made their
first contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3909](https://togithub.com/dani-garcia/vaultwarden/pull/3909)
- [@&#8203;admav](https://togithub.com/admav) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3986](https://togithub.com/dani-garcia/vaultwarden/pull/3986)
- [@&#8203;aureateflux](https://togithub.com/aureateflux) made their
first contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3572](https://togithub.com/dani-garcia/vaultwarden/pull/3572)
- [@&#8203;mightyBroccoli](https://togithub.com/mightyBroccoli) made
their first contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3997](https://togithub.com/dani-garcia/vaultwarden/pull/3997)

**Full Changelog**:
dani-garcia/vaultwarden@1.29.2...1.30.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on saturday" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/arthurgeek/vaultwarden-fly-template).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40Ni4wIiwidXBkYXRlZEluVmVyIjoiMzcuNDYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
arthurgeek referenced this pull request in arthurgeek/vaultwarden-fly Nov 12, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [vaultwarden/server](https://togithub.com/dani-garcia/vaultwarden) |
stage | minor | `1.29.2-alpine` -> `1.30.0-alpine` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (vaultwarden/server)</summary>

###
[`v1.30.0`](https://togithub.com/dani-garcia/vaultwarden/releases/tag/1.30.0)

[Compare
Source](https://togithub.com/dani-garcia/vaultwarden/compare/1.29.2...1.30.0)

⚠️ **Note:** The WebSockets service for live sync has been integrated in
the main HTTP server, which means simpler proxy setups that don't
require a separate rule to redirect WS traffic to port 3012. Please
check the updated examples in the
[wiki](https://togithub.com/dani-garcia/vaultwarden/wiki/Proxy-examples).
It's recommended to migrate to this new setup as using the old server on
port 3012 is deprecated, won't receive new features and will be removed
in a future release.

#### Major changes and New Features

- Added `passkey` support, allowing the browser extensions to store and
use your `passkeys`, make sure the extension is updated to version
`2023.10.0` or newer for passkey support.
-   Updated web vault to 2023.10.0.
-   Fixed crashes in ARMv6 devices
- Fixed crashes when trying to create/edit a cipher in the mobile
applications.

#### What's Changed

- Update Rust and Crates by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3808](https://togithub.com/dani-garcia/vaultwarden/pull/3808)
- update web-vault to v2023.8.2 by
[@&#8203;stefan0xC](https://togithub.com/stefan0xC) in
[https://github.com/dani-garcia/vaultwarden/pull/3821](https://togithub.com/dani-garcia/vaultwarden/pull/3821)
- Fix Login With Device without MasterPassword by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3831](https://togithub.com/dani-garcia/vaultwarden/pull/3831)
- Update GitHub Workflow by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3910](https://togithub.com/dani-garcia/vaultwarden/pull/3910)
- Fix arm builds by [@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3911](https://togithub.com/dani-garcia/vaultwarden/pull/3911)
- Fix typos by [@&#8203;tuhanayim](https://togithub.com/tuhanayim) in
[https://github.com/dani-garcia/vaultwarden/pull/3959](https://togithub.com/dani-garcia/vaultwarden/pull/3959)
- csp: rename anonaddy.com to addy.io by
[@&#8203;stefan0xC](https://togithub.com/stefan0xC) in
[https://github.com/dani-garcia/vaultwarden/pull/3950](https://togithub.com/dani-garcia/vaultwarden/pull/3950)
- filter handlebars logs by
[@&#8203;stefan0xC](https://togithub.com/stefan0xC) in
[https://github.com/dani-garcia/vaultwarden/pull/3859](https://togithub.com/dani-garcia/vaultwarden/pull/3859)
- Remove unnecessary variable clone by
[@&#8203;mvalois](https://togithub.com/mvalois) in
[https://github.com/dani-garcia/vaultwarden/pull/3981](https://togithub.com/dani-garcia/vaultwarden/pull/3981)
- README.md: Fix grammar nit by
[@&#8203;AndreasHGK](https://togithub.com/AndreasHGK) in
[https://github.com/dani-garcia/vaultwarden/pull/3965](https://togithub.com/dani-garcia/vaultwarden/pull/3965)
- Fix small issues by [@&#8203;BlackDex](https://togithub.com/BlackDex)
in
[https://github.com/dani-garcia/vaultwarden/pull/3964](https://togithub.com/dani-garcia/vaultwarden/pull/3964)
- Adds LastActive on /admin/users API route by
[@&#8203;mvalois](https://togithub.com/mvalois) in
[https://github.com/dani-garcia/vaultwarden/pull/3951](https://togithub.com/dani-garcia/vaultwarden/pull/3951)
- Reopen log file on SIGHUP by
[@&#8203;tobiasmboelz](https://togithub.com/tobiasmboelz) in
[https://github.com/dani-garcia/vaultwarden/pull/3909](https://togithub.com/dani-garcia/vaultwarden/pull/3909)
- Fix External ID not set during DC Sync by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3804](https://togithub.com/dani-garcia/vaultwarden/pull/3804)
- New config option disable email change by
[@&#8203;admav](https://togithub.com/admav) in
[https://github.com/dani-garcia/vaultwarden/pull/3986](https://togithub.com/dani-garcia/vaultwarden/pull/3986)
- 2FA Confirmation Code Email subject line change to fix triggering
Google spam blocker by
[@&#8203;aureateflux](https://togithub.com/aureateflux) in
[https://github.com/dani-garcia/vaultwarden/pull/3572](https://togithub.com/dani-garcia/vaultwarden/pull/3572)
- Implement cipher key encryption by
[@&#8203;dani-garcia](https://togithub.com/dani-garcia) in
[https://github.com/dani-garcia/vaultwarden/pull/3990](https://togithub.com/dani-garcia/vaultwarden/pull/3990)
- Container building changes by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3958](https://togithub.com/dani-garcia/vaultwarden/pull/3958)
- Fix issue with MariaDB/MySQL migrations by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/3994](https://togithub.com/dani-garcia/vaultwarden/pull/3994)
- feat: Working passkeys storage by
[@&#8203;GeekCornerGH](https://togithub.com/GeekCornerGH) in
[https://github.com/dani-garcia/vaultwarden/pull/4025](https://togithub.com/dani-garcia/vaultwarden/pull/4025)
- ci: add trivy workflow by
[@&#8203;mightyBroccoli](https://togithub.com/mightyBroccoli) in
[https://github.com/dani-garcia/vaultwarden/pull/3997](https://togithub.com/dani-garcia/vaultwarden/pull/3997)
- Fix importing Bitwarden exports by
[@&#8203;BlackDex](https://togithub.com/BlackDex) in
[https://github.com/dani-garcia/vaultwarden/pull/4030](https://togithub.com/dani-garcia/vaultwarden/pull/4030)

#### New Contributors

- [@&#8203;tuhanayim](https://togithub.com/tuhanayim) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3959](https://togithub.com/dani-garcia/vaultwarden/pull/3959)
- [@&#8203;mvalois](https://togithub.com/mvalois) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3981](https://togithub.com/dani-garcia/vaultwarden/pull/3981)
- [@&#8203;AndreasHGK](https://togithub.com/AndreasHGK) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3965](https://togithub.com/dani-garcia/vaultwarden/pull/3965)
- [@&#8203;tobiasmboelz](https://togithub.com/tobiasmboelz) made their
first contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3909](https://togithub.com/dani-garcia/vaultwarden/pull/3909)
- [@&#8203;admav](https://togithub.com/admav) made their first
contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3986](https://togithub.com/dani-garcia/vaultwarden/pull/3986)
- [@&#8203;aureateflux](https://togithub.com/aureateflux) made their
first contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3572](https://togithub.com/dani-garcia/vaultwarden/pull/3572)
- [@&#8203;mightyBroccoli](https://togithub.com/mightyBroccoli) made
their first contribution in
[https://github.com/dani-garcia/vaultwarden/pull/3997](https://togithub.com/dani-garcia/vaultwarden/pull/3997)

**Full Changelog**:
dani-garcia/vaultwarden@1.29.2...1.30.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on saturday" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/arthurgeek/vaultwarden-fly).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40Ni4wIiwidXBkYXRlZEluVmVyIjoiMzcuNDYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants