Web Vault OIDC builds for Vaultwarden

This project is not associated with the Bitwarden project nor Bitwarden, Inc.

---

This is a repository to store custom builds of the Bitwarden web vault patched to work with vaultwarden and patched again to obtain a cleaner flow when using an SSO.

This generate three different versions :

• button closest to what is expected to be merge into bw_web_builds)
  • restore the SSO login button (patch) (
  • allow organization invitation to survive sso account creation (patch)
• override add additionally :
  • set #sso as the default redirect url
  • remove some unnecessary logic (patch)
  • display SSO errors and redirect to start of the flow (patch)
• experimental which stop sending the Master password hash to the server (patch)

Building the web-vault

To build the web-vault you need node and npm installed.

Using node 18 and npm

For a quick and easy local build you can run:

./build_webvault.sh

This will :

• Clone a specific version of the Bitwarden web vault
• Clone a specific version of the VaultWarden web vault builds
• Copy ressources from the VaultWarden web vault project
• Apply the VaultWarden web vault patch
• Apply the button patch
• Apply the invite patch
• Build the web vault application
• Package it as oidc_button_web_vault.tar.gz.
• Apply the override patch to improve SSO flow
• Apply the override patch to improve SSO errors handling
• Apply the messages patch
• Build the web vault application
• Package it as oidc_override_web_vault.tar.gz.
• Apply the experimental patch to improve SSO errors handling
• Build the web vault application
• Package it as oidc_experimental_web_vault.tar.gz.

More information

For more information see: Install the web-vault

Pre-build

The builds are available in the releases page, and can be replicated with the scripts in this repo.