vaultwarden/migrations/sqlite
BlackDex de86aa671e Fix Key Rotation during password change
When ticking the 'Also rotate my account's encryption key' box, the key
rotated ciphers are posted after the change of password.

During the password change the security stamp was reseted which made
the posted key's return an invalid auth. This reset is needed to prevent other clients from still being able to read/write.

This fixes this by adding a new database column which stores a stamp exception which includes the allowed route and the current security stamp before it gets reseted.
When the security stamp check fails it will check if there is a stamp exception and tries to match the route and security stamp.

Currently it only allows for one exception. But if needed we could expand it by using a Vec<UserStampException> and change the functions accordingly.

fixes #1240
2020-12-14 19:58:23 +01:00
..
2018-01-14-171611_create_tables
2018-02-17-205753_create_collections_and_orgs
2018-04-27-155151_create_users_ciphers
2018-05-08-161616_create_collection_cipher_map
2018-05-25-232323_update_attachments_reference
2018-06-01-112529_update_devices_twofactor_remember
2018-07-11-181453_create_u2f_twofactor
2018-08-27-172114_update_ciphers
2018-09-10-111213_add_invites
2018-09-19-144557_add_kdf_columns
2018-11-27-152651_add_att_key_columns
2019-05-26-216651_rename_key_and_type_columns
2019-10-10-083032_add_column_to_twofactor
2019-11-17-011009_add_email_verification
2020-03-13-205045_add_policy_table
2020-04-09-235005_add_cipher_delete_date
2020-07-01-214531_add_hide_passwords Add support for hiding passwords in a collection 2020-07-02 21:51:20 -07:00
2020-08-02-025025_add_favorites_table Transfer favorite status for user-owned ciphers 2020-08-22 17:14:05 -07:00
2020-11-30-224000_add_user_enabled Implement admin ability to enable/disable users 2020-11-30 23:12:56 +01:00
2020-12-09-173101_add_stamp_exception Fix Key Rotation during password change 2020-12-14 19:58:23 +01:00