Merge pull request #174 from dezeroku/sso-auth

Add support for SSO login

Author: doy

Cargo.lock

@@ -66,6 +66,9 @@ tokio-tungstenite = { version = "0.21", features = ["rustls-tls-native-roots"] }
 is-terminal = "0.4.12"
 regex = "1.10.4"
 rustix = { version = "0.38.33", features = ["termios", "procfs", "process", "pipe"] }
+open = "5.1.2"
+urlencoding = "2.1.3"
+axum = "0.7.5"
 
 [package.metadata.deb]
 depends = "pinentry"

Cargo.toml

@@ -66,11 +66,14 @@ configuration options:
 
 * `email`: The email address to use as the account name when logging into the
   Bitwarden server. Required.
+* `sso_id`: The SSO organization ID. Defaults to regular login process if unset.
 * `base_url`: The URL of the Bitwarden server to use. Defaults to the official
   server at `https://api.bitwarden.com/` if unset.
 * `identity_url`: The URL of the Bitwarden identity server to use. If unset,
   will use the `/identity` path on the configured `base_url`, or
   `https://identity.bitwarden.com/` if no `base_url` is set.
+* `ui_url`: The URL of the Bitwarden UI to use. If unset,
+  will default to `https://vault.bitwarden.com/`.
 * `notifications_url`: The URL of the Bitwarden notifications server to use.
   If unset, will use the `/notifications` path on the configured `base_url`,
   or `https://notifications.bitwarden.com/` if no `base_url` is set.

README.md

@@ -42,6 +42,7 @@ pub async fn login(
     let (access_token, refresh_token, protected_key) = client
         .login(
             email,
+            config.sso_id.as_deref(),
             &crate::config::device_id(&config).await?,
             &identity.master_password_hash,
             two_factor_token,
@@ -336,6 +337,7 @@ fn api_client() -> Result<(crate::api::Client, crate::config::Config)> {
     let client = crate::api::Client::new(
         &config.base_url(),
         &config.identity_url(),
+        &config.ui_url(),
         config.client_cert_path(),
     );
     Ok((client, config))
@@ -347,6 +349,7 @@ async fn api_client_async(
     let client = crate::api::Client::new(
         &config.base_url(),
         &config.identity_url(),
+        &config.ui_url(),
         config.client_cert_path(),
     );
     Ok((client, config))