Passbolt Windows App 1.3.0: Bug Fixes and 4.9.0 Browser Extension Support

Passbolt Windows App 1.3.0: Bug Fixes and 4.9.0 Browser Extension Support

Passbolt Windows application 1.3.0 is a significant update that addresses long-standing user requests, enhances performance, and fixes bugs reported by the community.

In this release, a highly requested feature was introduced where the grid now displays the location of resources. This addition provides extra meta information to help users efficiently identify passwords and where they are located. Additionally, the search functionality has been improved to use resource locations as meta information. Users can now retrieve a resource by using the names of its parent folders, which can greatly simplify the process of finding passwords depending on your organisation's classification system.

Fig. 1 Search a resource in a folder & folder location in the grid (source: passbolt)

The team has also focused on various performance improvements to meet the growing needs of organisations managing an increasing number of passwords. These enhancements also prepare the way for the upcoming v5.0.0, which will support more content types and include an additional encryption layer. Both the API and the browser extension have been optimised, resulting in a 50% improvement in retrieving and treating collections of resources, according to our benchmarks.

Fig. 2 Performances, Chrome profiling (source: Chrome)

We extend our gratitude to the community for their feedback and assistance in testing this release. We hope these updates enhance your experience with Passbolt and we look forward to hearing from you.

Added

  • PB-33439 As a user I want to hide entropy on passphrases passwords
  • PB-33441 As a signed-in user I can search on folder metadata
  • PB-33853 As a signed-in user I should see location in grid
  • PB-33857 Get folder hierarchy from resourceWorkspaceContext

Improved

  • PB-14173 As Logged out user, I shouldn't be able to view a previously viewed password
  • PB-33824 As a user I should not see other dialog open except the session expired
  • PB-33880 As a user I should see tooltip always visible in any position
  • PB-33919 As a user searching for users to share a resource/folder with I can see the user full name and username of proposed users
  • PB-33920 As a user searching for users to share a resource/folder with I can see information icon next to a very long user full name
    Security
  • PB-33746 Update NPM dependency Braces
  • PB-33825 Upgrade vulnerable library ws

Fixed

  • PB-33915 When a an unexpected error is displayed, the 'try again' button seems to have no effect
  • PB-3409 Fix the import account kit button after the webview refreshing
  • PB-33916 On import/auth screen the heart icons tooltip displays "Server 1.2.0" instead of "Client 1.2.0”
  • PB-23294 As LU I should not see a comment overlapping
  • PB-25246 As signed-in user I should not see a blank page when I delete the parent folder of the folder I view the details
  • PB-33436 As a user when an error happen during authentication the button try again should reload the tab
  • PB-33638 Fix hiding entropy behind tooltip in the quickaccess
  • PB-33743 Fix padding icon on account recovery sidebar in the user workspace
  • PB-33750 Fix passphrase entropy computation
  • PB-33751 Fix avatar in activity section
  • PB-33802 Fix icon attention required in the resource grid
  • PB-33803 Fix button size and alignment for small screen on the resource workspace
  • PB-33833 As a user I should not see a grid size issue after a browser update
  • PB-33922 Fix broken documentation links and unnecessary redirections

Maintenance

  • PB-32891 Entities validating null in anyOf should use nullable schema property
  • PB-33179 Reuse testing pgpkeys assets served by styleguide and remove browser extension duplicate
  • PB-33188 Reuse testing account recovery assets served by styleguide and remove browser extension duplicate
  • PB-33191 Cover GroupUser entity with test and ensure non regression on validation changes
  • PB-33215 Add optional ignoreInvalid parameter to group entity in order to ignore associated groups users which could be invalid
  • PB-33216 Add optional ignoreInvalid parameter to user entity in order to ignore associated groups users which could be invalid
  • PB-33221 Migrate GroupsCollections to v2 and cover group model sanitization with tests
  • PB-33222 Ensure groups users are sanitized from groups users collection associated to a group using ignore strategy from collection v2
  • PB-33226 Ensure groups users are sanitized from groups users collection associated to a users using ignore strategy from collection v2
  • PB-33227 Migrate UsersCollection to v2 and cover user model sanitization with tests
  • PB-33230 Ensure performance creating groups collection with large dataset remains effective
  • PB-33236 Ensure performance creating users collection with large dataset remains effective
  • PB-33264 Validate entities schemas with anyOf null option
  • PB-33267 Validate PermissionEntity schema
  • PB-33300 Validate SecretEntity schema
  • PB-33302 Cover FavoriteEntity schema
  • PB-33303 Cover TagEntity schema
  • PB-33306 Switch ResourcesSecretsCollection to EntityV2Collection
  • PB-33319 Switch TagsCollection to EntityV2Collection
  • PB-33320 Switch PermissionsCollection to EntityV2Collection
  • PB-33327 Switch ResourcesCollection to EntityV2Collection
  • PB-33447 Ensure EntityV2Collection is treating items at the abstract constructor level
  • PB-33454 Ensure collection v2 schema is validated at the abstract class level
  • PB-33459 Ensure resource entity and associated entities schemas are validated at an abstract class level - EntityV2 migration
  • PB-33533 Collections and entities schemas of folders and associated should be cached, migrate to v2
  • PB-33606 As an administrator, when the error is not related, I should not see "Could not verify the server key"
  • PB-33615 As a user browsing the application, I should not refresh users and groups local storages when I do not need these information
  • PB-33640 Performance: filter users.json by is-my-buddy to get only users I know
  • PB-33648 Performance: filter group.json by is-my-buddy to get only groups I know
  • PB-33796 As a signed in user when I navigate to the resource workspace, my browser extension does not load the users and the groups data
  • PB-33797 As a signed in user when I navigate to the resource workspace, my browser extension only loads the groups data I am member of
  • PB-33798 As a signed in user when I open the information section of the sidebar, I can see all the information
  • PB-33799 As a signed in user when I display the share dialog, the autocomplete research is performed on the API instead of the local storage
  • PB-33815 Selecting a group should not trigger a refresh of the local storage of the folders and resources
  • PB-33816 - fix lint
  • PB-33816 As a signed-in user I should see in the information section the location icon folder shared if relevant
  • PB-33843 As a user I should retrieve the GPG keys of other users only when required and necessary
  • PB-33921 Avoid gpgkeys sync when loading the autocomplete component