shuaiplus fa611dc843 fix: require master password for admin and wipe-device actions ...

Gate invite management, user ban/delete, and delete-all-devices behind
masterPasswordHash verification, matching backup step-up auth. The web UI
prompts for the master password in the shared confirm dialog.

2026-07-12 20:43:27 +08:00

..

config

fix(security): harden auth and request limits

2026-07-05 23:43:49 +08:00

durable

fix(backup): verify remote deletes and validate archives

2026-07-05 23:44:25 +08:00

handlers

fix: require master password for admin and wipe-device actions

2026-07-12 20:43:27 +08:00

services

fix: block IPv6 loopback in backup destination URL checks

2026-07-12 20:21:45 +08:00

static

feat: improve JSON formatting for global domains and custom domains

2026-05-06 01:20:20 +08:00

types

Remove WEBSITE_ICONS_ENABLED and always enable website icons

2026-07-06 22:56:36 +08:00

utils

feat: update FIDO2 origins and enable direct unlock for account passkeys

2026-07-10 14:22:24 +08:00

index.ts

feat: add fill-assist, assetlinks check, and web-bootstrap to worker-handled paths

2026-07-10 14:23:45 +08:00

router-admin-backup.ts

Harden backup and download token flows

2026-07-06 19:06:24 +08:00

router-admin.ts

fix(security): harden auth and request limits

2026-07-05 23:43:49 +08:00

router-authenticated.ts

fix: add admin auth request compatibility

2026-07-06 01:35:26 +08:00

router-devices.ts

fix: add Bitwarden device registration endpoints

2026-07-06 01:35:19 +08:00

router-public.ts

Remove WEBSITE_ICONS_ENABLED and always enable website icons

2026-07-06 22:56:36 +08:00

router.ts

Harden WebAuthn extension origins

2026-07-06 17:43:57 +08:00