vaultwarden

mirror of https://github.com/dani-garcia/vaultwarden.git synced 2025-01-27 14:43:23 -05:00

History

When you are not loggedin, and have no cookie etc.. we always returned a 401.
This was mainly to allow the login page on all the sub pages, and after
login being redirected to the requested page, for these pages a 401 is a
valid response, since, you do not have access.

But for the main `/admin` page, it should just respond with a `200` and
show the login page.

This PR fixes this flow and response. It should prevent people using
Fail2ban, or other tools being triggered by only accessing the login page.

Resolves #3540

2023-05-25 23:40:36 +02:00

api

Prevent 401 on main admin page

2023-05-25 23:40:36 +02:00

check if reset policy is enabled

2023-04-06 22:34:05 +02:00

static

Sync global_domains.json to bitwarden/server@8dda73a (Pinterest)

2023-05-17 12:04:31 -07:00

auth.rs

Change String to &str for all Rocket functions

2023-04-30 17:18:12 +02:00