timedout
f84f0c46b1
feat: Add user creation endpoint
2026-05-26 14:30:36 -04:00
timedout
cef2260dc7
feat: Include predecessor and successor information in room list
2026-05-26 14:30:35 -04:00
timedout
4ffe321b6a
feat: Add pagination to rooms list & include more information
2026-05-26 14:30:35 -04:00
timedout
61a3749c24
feat: Enable pagination for the users list route
2026-05-26 14:30:34 -04:00
timedout
374a216fc8
feat: Define routes for listing and creating users
2026-05-26 14:30:34 -04:00
timedout
e9f6dc29b6
feat: Add version part to admin API URLs
...
This is a surprise tool that will help us later
2026-05-26 14:30:33 -04:00
timedout
688855631e
chore: Add some documentation to API stuff
2026-05-26 14:30:33 -04:00
timedout
0c0ae68070
feat: Drop ruminuwuity msc4323 definitions
2026-05-26 14:30:33 -04:00
timedout
c8c14f248b
feat: Use upstream ruma defs for msc4323, add locking endpoints
2026-05-26 14:30:33 -04:00
timedout
dabbdc7517
fix: Don't be so aggressive when validating policy server signatures
2026-05-26 16:16:48 +01:00
timedout
5cba4b126f
style: Combine "unsupported version" checks
2026-05-25 19:44:40 +01:00
timedout
d8a7f7c7ca
perf: Skip updating child/parent spaces in upgrade when sender is not joined
2026-05-25 19:40:15 +01:00
timedout
d3fca86dec
style: Drop unstable prefix in function definitions
2026-05-25 19:38:17 +01:00
timedout
5f88abf341
fix: Correctly copy parents and children during upgrade
2026-05-25 19:37:29 +01:00
timedout
416814094c
fix: Correctly update space children on upgrade
2026-05-25 19:37:29 +01:00
timedout
5b8799e71f
fix: Include sender in older room versions
2026-05-25 19:37:29 +01:00
timedout
cc5349ee57
fix: Don't de-power creators when downgrading from v12 to earlier versions
2026-05-25 19:37:29 +01:00
timedout
7b68572b2e
fix: Don't give v12 rooms room IDs
2026-05-25 19:37:29 +01:00
timedout
057eb9f644
fix: Adhere to MSC4168 more strongly & in definition order
2026-05-25 19:37:29 +01:00
timedout
253603edbc
refactor: Fix several bugs in upgrade endpoint, update MSC4168 impl
2026-05-25 19:37:25 +01:00
timedout
b771b9d160
style: Fix typo
2026-05-25 18:26:48 +01:00
timedout
eb829c2951
fix: Ensure event_id is correctly stripped before verifying policy server signature
2026-05-25 18:20:57 +01:00
timedout
d32b39181a
fix: Don't return early if the policy server does something stupid
...
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
timedout
72b99a1f84
style: Reformat
2026-05-25 18:17:40 +01:00
timedout
ae37f218a2
perf: Avoid cloning incoming PDUs to check them
...
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
timedout
40cecca103
feat: Add extract_signature helper
2026-05-25 18:17:13 +01:00
timedout
2a80a82f74
style: Document functions
2026-05-25 18:17:13 +01:00
timedout
fbf4eac2dc
fix: Ensure event_id is removed before policy-checking event
2026-05-25 18:17:13 +01:00
timedout
4784010702
fix: Ensure policy server signed with the correct key
2026-05-25 18:17:13 +01:00
timedout
1c88854a54
feat: Enable shutdown interrupt in ratelimit handler
2026-05-25 18:17:12 +01:00
timedout
e0fe71c708
feat: Follow spec more closely, code clean up, use ruma request type
2026-05-25 18:17:12 +01:00
timedout
0f0dcb4f58
fix: Return Forbidden instead of internal error when PS doesn't sign
2026-05-25 18:17:12 +01:00
timedout
367c42ad28
fix: Treat malformed policy config events as missing
2026-05-25 18:17:12 +01:00
timedout
c8e0f7ebd3
style: Reformat
2026-05-25 18:17:10 +01:00
timedout
fdc9aec534
fix: Verify policy server signatures on all events, not just timeline ones
...
style: Clarifications
style: Clippy
2026-05-25 18:16:55 +01:00
timedout
5f9cc83b18
feat: Support advertising a policy server public key in well-known
...
# Conflicts:
# src/api/client/well_known.rs
# src/core/config/mod.rs
2026-05-25 18:14:58 +01:00
timedout
47051af392
feat: Update policy server implementation to be closer to latest spec
...
Untested
chore: Add news fragment
feat: Support stable policy servers
feat: Don't attempt erroneous loopback federation for policy server checks
refactor: Update PS upgrade to use new ruma
fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
timedout
c1a6e649da
feat: Combine local & remote force join
2026-05-25 18:01:08 +01:00
timedout
1d172be503
style: Authentication -> authorization
2026-05-25 17:55:44 +01:00
timedout
f01e119890
style: Make graph output easier to comprehend
2026-05-25 17:53:53 +01:00
timedout
4d27a935d6
perf: Move rejected events check
2026-05-25 17:27:56 +01:00
timedout
512a96f832
style: Warn -> debug_warn
2026-05-25 17:18:25 +01:00
timedout
6715f63acc
fix: Don't serve events over s2s that are rejected
2026-05-25 17:18:25 +01:00
timedout
3764faeefc
style: Reformat
2026-05-25 17:18:25 +01:00
timedout
5d4b7bfea3
fix: Store PDUs as outliers even when rejected
...
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
timedout
4df08779e3
chore: Update newsfrag
2026-05-25 17:18:24 +01:00
timedout
6b835a327d
style: Rename unmark_pdu to clear_pdu_markers
2026-05-25 17:18:24 +01:00
timedout
7dd61cd560
feat: Add !admin debug show-auth-chain
...
Because why not am I right lads
2026-05-25 17:18:24 +01:00
timedout
d9535eccf1
feat: Make !admin debug get-pdu more informative
2026-05-25 17:18:24 +01:00
timedout
a97f91e079
fix: Don't hard fail on events which depend on soft-failed events
2026-05-25 17:18:24 +01:00
timedout
f0401b4fc7
fix: Mark events as rejected in more places, correct soft-fail extremity behaviour
2026-05-25 17:18:24 +01:00
timedout and star
cda64b880a
chore: Add news fragment for 1747
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
timedout and star
1f6cab9e2e
feat: Implement event rejection
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
timedout
1bba4fd252
style: Reformat
2026-05-18 03:15:15 +01:00
timedout
8af0662a18
feat: Verify custom room ID has been used after creating the room
2026-05-18 01:21:13 +01:00
timedout
2804278e9b
fix: Restore custom room ID functionality
2026-05-18 01:05:12 +01:00
timedout
10dd8bebfe
fix: Don't advertise stable MSC2666
...
Turns out ruma doesn't have the stable definition yet, will need a version bump.
Reverts 088fa3e725
2026-05-11 23:27:00 +01:00
timedout
4fef0a7ff2
chore: Publish admin announcement
2026-05-08 00:20:23 +01:00
timedout
2f37b446bc
chore: Bump version
2026-05-07 22:27:44 +01:00
timedout
6185841b6a
fix: Restore event auth check 4 in v12 rooms
...
Reviewed-By: Jacob Taylor <jacob@explodie.org >
2026-05-07 21:10:32 +01:00
timedout
9ba406761b
chore: Regenerate example config
2026-05-04 21:14:22 +01:00
timedout
4c1638e495
style: Resolve end-of-line lint failure
2026-05-04 14:57:21 +01:00
timedout and Ginger
4a99de0d28
fix: Store incoming federated invite membership events correctly
...
Co-Authored-By: Ginger <ginger@gingershaped.computer >
Reviewed-By: Ginger <ginger@gingershaped.computer >
2026-05-01 14:49:27 +01:00
timedout
f3fb218652
style: Clippy conflicts with cargo fmt, apparently
2026-04-27 22:15:52 +00:00
timedout
0924b7d27e
style: Use debug assert instead of a normal assert
2026-04-27 22:15:52 +00:00
timedout
8575f191a0
style: Simplify build_local_dag return
2026-04-27 22:15:52 +00:00
timedout
fe7cfd96e7
feat: Assert that no events were dropped during sorting
2026-04-27 22:15:52 +00:00
timedout
8b0e86a05d
fix: Don't consider out-of-scope nodes as prev events before sorting incoming events
2026-04-27 22:15:52 +00:00
timedout
5f4cd47d88
fix: Add workaround for handling malformed PDUs
...
Signed-off-by: timedout <git@nexy7574.co.uk >
Reviewed-On: https://forgejo.ellis.link/continuwuation/continuwuity-sec/pulls/7
Reviewed-By: Jade Ellis <jade@ellis.link >
2026-04-23 20:48:11 +01:00
timedout
01f6893c07
feat: Reduce verbosity of "remote server couldn't process pdu" warning
...
(cherry picked from commit 8b206564aa
2026-04-18 01:11:48 +01:00
timedout
5110930add
fix: Allow server admins and v12 room creators to publish rooms
2026-04-12 14:09:53 +00:00
timedout
839138c02e
chore: Add news frag
2026-04-08 20:49:59 +00:00
timedout
e03c90c2ac
fix: Sign restricted joins when we're the authorising server
2026-04-08 20:49:59 +00:00
timedout
09bfe79a44
perf: Don't needlessly sign and re-hash events in send_join
2026-04-08 17:17:15 +00:00
timedout
d041adadc8
style: Fix large future clippy errors
2026-04-08 17:17:15 +00:00
timedout
189ed1c394
style: Fix large future clippy error
2026-04-08 17:17:15 +00:00
timedout
36c32938ae
fix: Don't try to sign events that don't originate from us
2026-04-08 17:17:15 +00:00
timedout
1ce9ae2cbf
chore: Update example configuration file
2026-04-06 17:45:04 +00:00
timedout
688cd8f46a
fix: Forbid creating events sent by remote users
2026-04-05 22:34:11 +01:00
timedout
3ab1f102dd
fix: Switch lettre to ring backend
2026-04-05 21:07:45 +00:00
timedout
480a32e4d4
chore: Add newsfrag
2026-04-05 21:04:27 +01:00
timedout
fadd559837
feat: Add admin commands to delete pushers
2026-04-05 20:58:11 +01:00
timedout
79c63c17fc
feat: Delete pushers when a user logs out
2026-04-05 20:48:03 +01:00
timedout
cdc772ba10
feat: Delete all pushers for a user during deactivation
2026-04-05 20:42:08 +01:00
timedout
5f1b80a47c
chore: Add newsfrag
2026-04-05 20:15:52 +01:00
timedout
0f8b56f521
feat: Add admin command to reset user push rules
2026-04-05 20:12:21 +01:00
timedout
0cc1e4685c
style: Make main green again
2026-03-31 18:07:44 +01:00
timedout
f0c3fdfe3a
fix: Well-known read errors no longer crash resolver flow
...
Reviewed-By: Jade Ellis <jade@ellis.link >
2026-03-27 00:54:17 +00:00
timedout
677c407755
chore: Bump ruwuma
...
# Conflicts:
# Cargo.lock
# Cargo.toml
2026-03-21 16:24:05 +00:00
timedout
906c3df953
style: Reduce migration warning verbosity to info
...
They aren't actually warning of anything
2026-03-09 13:30:24 +00:00
timedout
33e5fdc16f
style: Reduce verbosity of fix_corrupt_msc4133_fields
2026-03-09 13:30:24 +00:00
timedout
77ac17855a
fix: Don't fail on invalid stripped state entries during migration
2026-03-09 13:30:24 +00:00
timedout
65ffcd2884
perf: Insert missed migration markers into fresh databases
2026-03-09 13:30:24 +00:00
timedout
7ec88bdbfe
feat: Make noise about migrations and make errors more informative
2026-03-09 13:30:24 +00:00
timedout
40b1dabcca
chore: Add news fragment
2026-03-06 14:32:13 +00:00
timedout
94c5af40cf
fix: Automatically remove corrupted appservice registrations
2026-03-06 14:21:04 +00:00
timedout
d725e98220
fix(ci): Special case ubuntu-latest
2026-03-03 23:07:55 +00:00
timedout
37888fb670
fix: Limit body read size of remote requests (CWE-409)
...
Reviewed-By: Jade Ellis <jade@ellis.link >
2026-03-03 19:54:34 +00:00
timedout
b507898c62
fix: Bump ruwuma again
2026-03-03 18:10:28 +00:00
nexy7574
f4af67575e
fix: Bump ruwuma to resolve duplicate state error
2026-03-03 06:01:02 +00:00
timedout
