30c9d6d2df
chore: Clippy fixes
2026-05-26 18:26:02 +00:00
74841b6711
refactor: Represent route auth information in the type system
2026-05-26 18:26:02 +00:00
dabbdc7517
fix: Don't be so aggressive when validating policy server signatures
2026-05-26 16:16:48 +01:00
793d399477
chore(deps): update node-patch-updates to v2.0.13
2026-05-26 13:12:29 +00:00
15d69aefbb
chore(deps): update rust crate minicbor-serde to 0.7.0
2026-05-26 13:12:09 +00:00
77b1652f4a
chore(deps): lock file maintenance
2026-05-26 11:59:18 +00:00
5f9594363d
chore(deps): update github-actions-digest
2026-05-26 05:18:06 +00:00
5cba4b126f
style: Combine "unsupported version" checks
2026-05-25 19:44:40 +01:00
d8a7f7c7ca
perf: Skip updating child/parent spaces in upgrade when sender is not joined
2026-05-25 19:40:15 +01:00
d3fca86dec
style: Drop unstable prefix in function definitions
2026-05-25 19:38:17 +01:00
5f88abf341
fix: Correctly copy parents and children during upgrade
2026-05-25 19:37:29 +01:00
416814094c
fix: Correctly update space children on upgrade
2026-05-25 19:37:29 +01:00
5b8799e71f
fix: Include sender in older room versions
2026-05-25 19:37:29 +01:00
cc5349ee57
fix: Don't de-power creators when downgrading from v12 to earlier versions
2026-05-25 19:37:29 +01:00
7b68572b2e
fix: Don't give v12 rooms room IDs
2026-05-25 19:37:29 +01:00
057eb9f644
fix: Adhere to MSC4168 more strongly & in definition order
2026-05-25 19:37:29 +01:00
253603edbc
refactor: Fix several bugs in upgrade endpoint, update MSC4168 impl
2026-05-25 19:37:25 +01:00
b771b9d160
style: Fix typo
2026-05-25 18:26:48 +01:00
eb829c2951
fix: Ensure event_id is correctly stripped before verifying policy server signature
2026-05-25 18:20:57 +01:00
d32b39181a
fix: Don't return early if the policy server does something stupid
...
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
72b99a1f84
style: Reformat
2026-05-25 18:17:40 +01:00
ae37f218a2
perf: Avoid cloning incoming PDUs to check them
...
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
40cecca103
feat: Add extract_signature helper
2026-05-25 18:17:13 +01:00
2a80a82f74
style: Document functions
2026-05-25 18:17:13 +01:00
fbf4eac2dc
fix: Ensure event_id is removed before policy-checking event
2026-05-25 18:17:13 +01:00
4784010702
fix: Ensure policy server signed with the correct key
2026-05-25 18:17:13 +01:00
1c88854a54
feat: Enable shutdown interrupt in ratelimit handler
2026-05-25 18:17:12 +01:00
e0fe71c708
feat: Follow spec more closely, code clean up, use ruma request type
2026-05-25 18:17:12 +01:00
0f0dcb4f58
fix: Return Forbidden instead of internal error when PS doesn't sign
2026-05-25 18:17:12 +01:00
367c42ad28
fix: Treat malformed policy config events as missing
2026-05-25 18:17:12 +01:00
c8e0f7ebd3
style: Reformat
2026-05-25 18:17:10 +01:00
fdc9aec534
fix: Verify policy server signatures on all events, not just timeline ones
...
style: Clarifications
style: Clippy
2026-05-25 18:16:55 +01:00
5f9cc83b18
feat: Support advertising a policy server public key in well-known
...
# Conflicts:
# src/api/client/well_known.rs
# src/core/config/mod.rs
2026-05-25 18:14:58 +01:00
47051af392
feat: Update policy server implementation to be closer to latest spec
...
Untested
chore: Add news fragment
feat: Support stable policy servers
feat: Don't attempt erroneous loopback federation for policy server checks
refactor: Update PS upgrade to use new ruma
fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
c1a6e649da
feat: Combine local & remote force join
2026-05-25 18:01:08 +01:00
1d172be503
style: Authentication -> authorization
2026-05-25 17:55:44 +01:00
f01e119890
style: Make graph output easier to comprehend
2026-05-25 17:53:53 +01:00
4d27a935d6
perf: Move rejected events check
2026-05-25 17:27:56 +01:00
512a96f832
style: Warn -> debug_warn
2026-05-25 17:18:25 +01:00
6715f63acc
fix: Don't serve events over s2s that are rejected
2026-05-25 17:18:25 +01:00
3764faeefc
style: Reformat
2026-05-25 17:18:25 +01:00
5d4b7bfea3
fix: Store PDUs as outliers even when rejected
...
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
4df08779e3
chore: Update newsfrag
2026-05-25 17:18:24 +01:00
6b835a327d
style: Rename unmark_pdu to clear_pdu_markers
2026-05-25 17:18:24 +01:00
7dd61cd560
feat: Add !admin debug show-auth-chain
...
Because why not am I right lads
2026-05-25 17:18:24 +01:00
d9535eccf1
feat: Make !admin debug get-pdu more informative
2026-05-25 17:18:24 +01:00
a97f91e079
fix: Don't hard fail on events which depend on soft-failed events
2026-05-25 17:18:24 +01:00
f0401b4fc7
fix: Mark events as rejected in more places, correct soft-fail extremity behaviour
2026-05-25 17:18:24 +01:00
cda64b880a
chore: Add news fragment for 1747
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
1f6cab9e2e
feat: Implement event rejection
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
Ginger
timedout
Renovate Bot