Release v1.27.0 (2022-12-24)

[dani-garcia]

New features

Event logs for organizations

With this feature enabled, actions occurring inside an organization will be recorded in a log, viewable by organization admins and owners. Check the official documentation to learn more: https://bitwarden.com/help/event-logs/ (Note that the Public API is not yet implemented, so the events are only viewable in the Web Vault)

To enable this feature, set ORG_EVENTS_ENABLED=true. By default all events will be stored indefinitely, if you want to limit that, you can use the EVENTS_DAYS_RETAIN option. You can also tune the cleanup schedule with EVENT_CLEANUP_SCHEDULE.

Group support (beta)

Enables the creation and use of groups inside an organization. At the moment this is in beta because there are some known issues (#2989). Still, the more this feature is tested, the faster we will be able to stabilize it.

To enable this feature, set ORG_GROUPS_ENABLED=true, make sure to make proper backups of your instance before hand.

What's Changed

• Group support | applied .diff by @MFijak in Group support | applied .diff #2846
• Add Organizational event logging feature by @BlackDex in Add Organizational event logging feature #2868
• Updated web vault to 2022.12.0 by @dani-garcia
• Update diesel to 2.0.2 by @dani-garcia in Update diesel to 2.0.2 #2724
• Limit Cipher Note encrypted string size by @BlackDex in Limit Cipher Note encrypted string size #2945
• fix invitations of new users when mail is disabled by @stefan0xC in fix invitations of new users when mail is disabled #2773
• attach images in email by @stefan0xC in attach images in email #2784
• allow registration without invite link by @stefan0xC in allow registration without invite link #2799
• Fix master password hint update not working. by @BlackDex in Fix master password hint update not working. #2834
• Sync global_domains.json by @jjlin in Sync global_domains.json #2840
• verify email on registration by invite by @stefan0xC in verify email on registration by invite #2804
• Take ROCKET_ADDRESS into account in the Docker healthcheck by @jjlin in Take ROCKET_ADDRESS into account in the Docker healthcheck #2844
• Update github workflows by @BlackDex in Update github workflows #2852
• feat: Bump web-vault to v2022.10.1 by @GeekCornerGH in feat: Bump web-vault to v2022.10.1 #2859
• Update Rust version, deps and workflow by @BlackDex in Update Rust version, deps and workflow #2888
• Add /devices/knowndevice endpoint by @BlackDex in Add /devices/knowndevice endpoint #2893
• fix: removed a double space by @GeekCornerGH in fix: removed a double space #2894
• Support Org Export for v2022.11 clients by @BlackDex in Support Org Export for v2022.11 clients #2899
• Use constant size generic parameter for random bytes generation by @samueltardieu in Use constant size generic parameter for random bytes generation #2910
• Update config comment to reflect rfc8314. by @skid9000 in Update config comment to reflect rfc8314. #2911
• Set "Bypass admin page security" as read-only by @BlackDex in Set "Bypass admin page security" as read-only #2918
• Fully remove DuckDuckGo email service. by @BlackDex in Fully remove DuckDuckGo email service. #2919
• Added missing register endpoint to identity by @BlackDex in Added missing register endpoint to identity #2920
• Prevent DNS leak when icon regex is configured by @BlackDex in Prevent DNS leak when icon regex is configured #2921
• Update settings description by @karbobc in Update settings description #2928
• allow managers to set groups of a collection by @stefan0xC in allow managers to set groups of a collection #2933
• Update Vaultwarden Logo's by @BlackDex in Update Vaultwarden Logo's #2940
• check if sqlite folder exists by @stefan0xC in check if sqlite folder exists #2873
• redirect to admin login page when forward fails by @stefan0xC in redirect to admin login page when forward fails #2886
• Cleanups and Fixes for Emergency Access by @BlackDex in Cleanups and Fixes for Emergency Access #2936
• Update dependencies for Rust and Admin interface. by @BlackDex in Update dependencies for Rust and Admin interface. #2941
• Fix admin repost warning. by @BlackDex in Fix admin repost warning. #2953
• Add dev-only query logging support by @BlackDex in Add dev-only query logging support #2954
• Fix managers and groups link by @BlackDex in Fix managers and groups link #2947
• use a custom 404 page by @stefan0xC in use a custom 404 page #2948
• Increase privacy of masked config by @BlackDex in Increase privacy of masked config #2963
• Improve comments by @tessus in Improve comments #2969
• use black favicon for /admin by @tessus in use black favicon for /admin #2970
• Remove ctrlc crate and some updates by @BlackDex in Remove ctrlc crate and some updates #2971
• Fix org export (again) by @BlackDex in Fix org export (again) #2973
• Revert collection queries back to left_join by @BlackDex in Revert collection queries back to left_join #2976
• Fix recover-2fa not working. by @BlackDex in Fix recover-2fa not working. #2994
• Disable groups by default and Some optimizations by @BlackDex in Disable groups by default and Some optimizations #2995
• Fix a panic during Yubikey register/login by @BlackDex in Fix a panic during Yubikey register/login #3006

New Contributors

• @MFijak made their first contribution in Group support | applied .diff #2846
• @GeekCornerGH made their first contribution in feat: Bump web-vault to v2022.10.1 #2859
• @samueltardieu made their first contribution in Use constant size generic parameter for random bytes generation #2910
• @skid9000 made their first contribution in Update config comment to reflect rfc8314. #2911
• @karbobc made their first contribution in Update settings description #2928
• @tessus made their first contribution in Improve comments #2969

Full Changelog: 1.26.0...1.27.0

---

This discussion was created from the release 1.27.0.