Quasaro Password Safe

Integrated a password manager feature into Quasaro, designed to enhance user security and streamline password management across the platform.

• Secure Storage: Added a secure storage for encrypted passwords using AES-CBC and RSA-OAEP
• Password Safes: Added shared spaces for collaborative work on access credentials.
• Improved User Password Hashing: Passwords are now client-side hashed using bcrypt before being hashed server-side using argon2id
• KeePass Support: Introduced support for KeePass import and export, allowing users to seamlessly migrate their existing password databases into Quasaro
• User-Friendly Interface: Developed an intuitive and user-friendly interface for managing passwords, making it easier for users to access and organize their credentials
• Password Generation: Built-in password generator to help users create strong, secure passwords effortlessly
• Recovery Control: Enhanced access control features, including the ability recover passwords using a recovery key. This feature can be disabled

Additional Changes

• General security enhancements across the platform to support the password manager functionalities
• WebDAV authentication is now performed using device tokens, which can be generated in the User Profile tab
• Added functionality for admins to view which projects and folders a user has access to.
• Added functionality for admins to manage which groups a user belongs to
• Project permissions can now be changed without removing the user/group from the project
• User Overview can now be sorted by quota
• Users can now see who else has access to files and folders in projects