1ad0bd5d0d
fix: Don't be so aggressive when validating policy server signatures
2026-05-26 08:20:06 -07:00
5958c6c2dd
exponential backoff is now just bees. did you want bees? no? well you have them now. congrats
2026-05-26 08:14:16 -07:00
b771b9d160
style: Fix typo
2026-05-25 18:26:48 +01:00
eb829c2951
fix: Ensure event_id is correctly stripped before verifying policy server signature
2026-05-25 18:20:57 +01:00
d32b39181a
fix: Don't return early if the policy server does something stupid
...
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
72b99a1f84
style: Reformat
2026-05-25 18:17:40 +01:00
ae37f218a2
perf: Avoid cloning incoming PDUs to check them
...
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
40cecca103
feat: Add extract_signature helper
2026-05-25 18:17:13 +01:00
2a80a82f74
style: Document functions
2026-05-25 18:17:13 +01:00
fbf4eac2dc
fix: Ensure event_id is removed before policy-checking event
2026-05-25 18:17:13 +01:00
4784010702
fix: Ensure policy server signed with the correct key
2026-05-25 18:17:13 +01:00
1c88854a54
feat: Enable shutdown interrupt in ratelimit handler
2026-05-25 18:17:12 +01:00
e0fe71c708
feat: Follow spec more closely, code clean up, use ruma request type
2026-05-25 18:17:12 +01:00
0f0dcb4f58
fix: Return Forbidden instead of internal error when PS doesn't sign
2026-05-25 18:17:12 +01:00
367c42ad28
fix: Treat malformed policy config events as missing
2026-05-25 18:17:12 +01:00
c8e0f7ebd3
style: Reformat
2026-05-25 18:17:10 +01:00
fdc9aec534
fix: Verify policy server signatures on all events, not just timeline ones
...
style: Clarifications
style: Clippy
2026-05-25 18:16:55 +01:00
47051af392
feat: Update policy server implementation to be closer to latest spec
...
Untested
chore: Add news fragment
feat: Support stable policy servers
feat: Don't attempt erroneous loopback federation for policy server checks
refactor: Update PS upgrade to use new ruma
fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
c1a6e649da
feat: Combine local & remote force join
2026-05-25 18:01:08 +01:00
1d172be503
style: Authentication -> authorization
2026-05-25 17:55:44 +01:00
4d27a935d6
perf: Move rejected events check
2026-05-25 17:27:56 +01:00
512a96f832
style: Warn -> debug_warn
2026-05-25 17:18:25 +01:00
3764faeefc
style: Reformat
2026-05-25 17:18:25 +01:00
5d4b7bfea3
fix: Store PDUs as outliers even when rejected
...
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
a97f91e079
fix: Don't hard fail on events which depend on soft-failed events
2026-05-25 17:18:24 +01:00
f0401b4fc7
fix: Mark events as rejected in more places, correct soft-fail extremity behaviour
2026-05-25 17:18:24 +01:00
1f6cab9e2e
feat: Implement event rejection
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
e34fd76dc0
fix: Re-add support for MSC4293
2026-04-28 09:16:57 -04:00
e70004c98f
chore: Clippy fixes
2026-04-28 09:16:56 -04:00
bf9c9716eb
refactor: Add function to state_accessor to get create event
2026-04-28 09:16:51 -04:00
24f7e1d658
chore: Clippy fixes
2026-04-28 09:16:51 -04:00
d62eeda130
refactor: Replace more uses of RoomVersionId with RoomVersionRules
2026-04-28 09:16:51 -04:00
a4e64383b7
refactor: Ruma upstraming, bake a little more
2026-04-28 09:16:51 -04:00
204bc1367e
refactor: Ruma upstreaming, half-baked edition
...
Co-authored-by: Jade Ellis <jade@ellis.link >
2026-04-28 09:16:51 -04:00
5f4cd47d88
fix: Add workaround for handling malformed PDUs
...
Signed-off-by: timedout <git@nexy7574.co.uk >
Reviewed-On: https://forgejo.ellis.link/continuwuation/continuwuity-sec/pulls/7
Reviewed-By: Jade Ellis <jade@ellis.link >
2026-04-23 20:48:11 +01:00
8dd4b71e0e
fix: make dropped PDU warning less useless
2026-03-04 14:58:01 +00:00
b507898c62
fix: Bump ruwuma again
2026-03-03 18:10:28 +00:00
dc6bd4e541
fix: Silence unnecessary policy server errors in debug builds
2026-02-15 18:05:42 +00:00
117c581948
fix: Correct incorrectly inverted boolean expression
2026-02-15 16:11:19 +00:00
cb846a3ad1
style: Invert pending_invite_state check
2026-02-15 16:11:19 +00:00
81b984b2cc
style: Compress should_rescind_invite
2026-02-15 16:11:19 +00:00
e2961390ee
feat: Support rescinding invites over federation
2026-02-15 16:11:19 +00:00
082ed5b70c
feat: Use info level logs for residency check failures
2026-02-03 20:09:41 +00:00
a047199fb4
perf: Don't handle PDUs for rooms we aren't in
2026-02-03 20:09:41 +00:00
52a51f1de0
fix: Remove useless timestamp check in outlier upgrade process
2026-01-09 02:50:04 +00:00
aed15f246a
refactor: Clean up logging issues
...
Primary issues: Double escapes (debug fmt), spans without levels
2026-01-05 18:28:57 +00:00
86450da705
style: Run clippy
2025-12-18 19:48:26 +00:00
8538b21860
feat: Check for incoming signatures
2025-12-18 19:03:32 +00:00
63e4aacd2b
style: Reword TODO comment
2025-12-18 18:24:00 +00:00
72f0eb9493
feat: Fetch policy server signatures
2025-12-18 18:23:54 +00:00
timedout
Jacob Taylor
Ginger
Jade Ellis
31a05b9c