v0.3.0

Changes for users and callers

• Bitwarden servers on plain http:// are refused unless they are on this machine (ErrInsecureServer).
• Keyring files move to a new format when they are rewritten. Older binaries cannot read them afterwards.
• A locked collection can no longer be deleted, and an alias cannot move onto or off one.
• vault.Host.Logout takes a context and asks the server to revoke the session. Bitwarden and Vaultwarden servers cannot revoke, so the token stays valid until it expires (ErrRevocationUnsupported).

Commits

bitwarden

• a server that cannot revoke is not a failed logout (33ccb51)
• the vault's clock counts suspended time (37d07b7)
• upkeep sleeps until it has something to do (548f1f5)
• Logout asks the server to revoke the session (9dd610f)

keyring

• say once when a key cannot be locked against swap (b80c612)
• a tampered file is not a wrong password (96168d5)
• locking always destroys the key, and deleting seals nothing (90473e3)

nix

• a docs commit does not change the package (73305e3)

service

• the idle fixture has its item before it hands it over (2edbe35)
• collections can lock when idle and when the screen locks (a9952a8)
• an alias cannot move off or onto a locked collection (600cb96)
• LockService locks the vault whether it shows as a collection or not (bf5e33a)
• a locked collection cannot be deleted (1775e9b)

vault

• refuse plain HTTP servers except on this machine (86fefed)