vaultwarden/migrations/postgresql
BlackDex de86aa671e Fix Key Rotation during password change
When ticking the 'Also rotate my account's encryption key' box, the key
rotated ciphers are posted after the change of password.

During the password change the security stamp was reseted which made
the posted key's return an invalid auth. This reset is needed to prevent other clients from still being able to read/write.

This fixes this by adding a new database column which stores a stamp exception which includes the allowed route and the current security stamp before it gets reseted.
When the security stamp check fails it will check if there is a stamp exception and tries to match the route and security stamp.

Currently it only allows for one exception. But if needed we could expand it by using a Vec<UserStampException> and change the functions accordingly.

fixes #1240
2020-12-14 19:58:23 +01:00
..
2019-09-12-100000_create_tables
2019-09-16-150000_fix_attachments
2019-10-10-083032_add_column_to_twofactor
2019-11-17-011009_add_email_verification
2020-03-13-205045_add_policy_table
2020-04-09-235005_add_cipher_delete_date
2020-07-01-214531_add_hide_passwords
2020-08-02-025025_add_favorites_table
2020-11-30-224000_add_user_enabled
2020-12-09-173101_add_stamp_exception