Commit Graph
251 Commits
Author SHA1 Message Date
Ginger b32264dc4d fix: Don't let OIDC users try to deactivate their accounts 2026-09-10 19:55:50 +00:00
Ginger 7997cda678 fix: Don't show a broken back link when removing a device 2026-09-10 19:54:45 +00:00
Erwan Leboucher 59b1652f4a fix(sync): Keep sync positions of rooms outside a list's window 2026-09-10 17:11:33 +02:00
Erwan Leboucher fe38efbb63 feat(oidc): Show the provider's name and icon on the login page 2026-09-10 14:08:03 +00:00
Erwan Leboucher 0060a4aac4 feat(rtc): Advertise MSC4143 in /versions 2026-09-08 13:30:35 -04:00
timedout 5a19e9404f chore: Add newsfrag 2026-09-01 16:24:18 +00:00
Erwan Leboucher f92032f6da fix(sync): Retain overlapping sync positions 2026-08-29 17:08:01 +00:00
timedout 6919f9681e fix: Remove OTKs and fallback keys when deleting a device 2026-08-29 14:51:19 +01:00
Erwan Leboucher c731ec5421 fix: Stop applying MSC4155 invite filtering to outgoing invites 2026-08-29 13:38:51 +00:00
Erwan Leboucher 4dc7e06c90 fix(admin): Own pushkeys before deleting all of a user's pushers 2026-08-27 15:36:43 +00:00
timedout b784b64576 chore: Add news fragment
Some people might be interested I guess
2026-08-26 18:14:10 +01:00
Erwan Leboucher 18b0a87b2d fix(sync): Order sliding sync rooms by activity 2026-08-25 13:59:18 +00:00
Erwan Leboucher 16ebb1fcf7 fix(sync): Deliver device list updates for timeline-only rooms 2026-08-25 00:01:14 +00:00
Erwan Leboucher 2d633a5ee1 fix(spaces): Honour suggested_only when listing children_state 2026-08-24 23:59:17 +00:00
timedout 7ebe89402e chore: Release v26.8.0 2026-08-22 21:08:29 +01:00
timedout 1cc6fb1130 chore: Add newsfrag and re-run cargo fmt 2026-08-22 20:14:43 +01:00
Erwan Leboucher df95abf5ab fix(federation): Queue PDUs during remote joins 2026-08-22 18:29:54 +00:00
Erwan Leboucher 82149397b0 fix(admin): Complete MSC4323 suspend and lock endpoints 2026-08-20 00:58:30 +00:00
timedout 862fded4e4 chore: Add newsfrag 2026-08-20 00:57:11 +00:00
Erwan Leboucher 1ecfb21aea fix(spaces): Correct hierarchy traversal 2026-08-19 03:33:41 +00:00
Erwan Leboucher 39b08f73f7 fix(state-res): Derive sender power from the create event when sorting 2026-08-18 20:22:38 +00:00
Erwan Leboucher 3efb66c76c fix: Do not make late-arriving events forward extremities 2026-08-18 16:55:47 +00:00
Erwan Leboucher 1cdf369a80 fix(sync): Populate sliding sync num_live 2026-08-18 15:44:52 +00:00
Erwan Leboucher 1d655fda53 fix(timeline): Keep extremities a local event did not reference 2026-08-18 15:38:43 +00:00
timedout 75e857dffe chore: Add newsfrag 2026-08-15 16:10:39 +00:00
stratself aa417aa0f8 chore: Add changelog for Livekit Docker loopback changes 2026-08-15 15:08:18 +00:00
Erwan Leboucher 918070c512 fix(spaces): Expose restricted children over federation 2026-08-14 12:51:09 +02:00
timedout 08d3d8445f chore: Merge branch 'nex/feat/registration-messages' 2026-08-12 14:25:15 +01:00
Ginger ad182417da fix: SEC26
Reviewed-By: timedout <git@nexy7574.co.uk>
Reviewed-By: Ginger <ginger@gingershaped.computer>
2026-08-11 17:56:29 -04:00
Ginger 7377074f6d fix: SEC28 2026-08-11 17:56:29 -04:00
Erwan Leboucher 7472faa096 fix(sync): Remove sync wake before membership commit point 2026-08-11 14:10:23 +00:00
Erwan Leboucher 2998dc9b40 fix(sync): Deliver left rooms missing from timeline index 2026-08-11 14:10:23 +00:00
Erwan Leboucher 18139ea891 feat(sync): Add MSC4508 typing extension 2026-08-08 14:07:08 +00:00
stratself 9c8c38496d chore: Add changelog because it seems important 2026-08-08 05:44:06 +00:00
Michel-Marie MAUDET f0493a7ba8 fix(oauth): Use unauthorized_client for unregistered grant types
The token endpoint already refused grant types the client had not
registered, but reported it as `invalid_grant`. RFC 6749 section 5.2
reserves `invalid_grant` for an authorization grant which is "invalid,
expired, revoked, does not match the redirection URI used in the
authorization request, or was issued to another client", and defines
`unauthorized_client` for a client which "is not authorized to use this
authorization grant type".

Report the condition with the error code the specification assigns to it,
matching the device authorization endpoint.
2026-08-07 08:52:20 +00:00
Michel-Marie MAUDET 8c1bbf3d1a fix(oauth): Reject device code requests from unauthorised clients
The device authorization endpoint issued a device code to any registered
client, without checking that the client had registered the
`urn:ietf:params:oauth:grant-type:device_code` grant type. Such a client
could therefore start a device authorization flow and have the server
show an approval prompt to a user, even though the subsequent token
request was always going to be refused.

RFC 8628 section 3.2 states that, in the event of an error such as an
invalidly configured client, the device authorization endpoint responds
in the same way as the token endpoint specified in RFC 6749 section 5.2,
which defines `unauthorized_client` as "the authenticated client is not
authorized to use this authorization grant type".

Apply the same grant type check the token endpoint already performs, and
add the `unauthorized_client` error code it requires.
2026-08-07 08:52:20 +00:00
renegadespork 30be07fe8f chore: Fix changelog news fragment formatting 2026-08-06 14:18:32 +00:00
renegadespork a530eaa3a8 chore: Add changelog for config documentation. 2026-08-06 14:18:32 +00:00
Erwan Leboucher 1b6bc83b9f fix(sync): Preserve batched read receipts 2026-08-06 14:01:52 +00:00
PerformativeJade cdf07a8811 chore: Add changelog line 2026-08-06 12:18:26 +00:00
timedout d79ffe6ef0 chore: Throwing newsfrag! 2026-08-05 21:11:05 +00:00
stratself 5402c4f208 chore: Add changelog for docker command change 2026-08-05 18:00:11 +00:00
stratself e19f634ffa chore: Add changelogs for some important doc things 2026-08-05 18:00:11 +00:00
alexia 4e9ed55c6b chore: add changelog 2026-08-04 19:03:13 +00:00
stratself 4fea19b0e3 fix: Separate changelogs for important configuration changes 2026-08-04 18:18:54 +00:00
stratself 61be6aa7c6 chore: Fix changelog to better reflect changes 2026-08-04 18:18:54 +00:00
stratself e14a86026a chore: Update changelogs 2026-08-04 18:18:54 +00:00
stratself c2641488bf chore: Update changelog in detail 2026-08-04 18:18:54 +00:00
stratself a7b5fa4edc chore: Add changelog and fix trailing whitespace 2026-08-04 18:18:54 +00:00
Erwan Leboucher aa884fad6b feat(sync): Add MSC4480 sticky events 2026-08-03 14:35:53 +00:00