Ginger
e963adf524
feat: Add support for MSC4363
2026-10-05 14:22:53 +00:00
Ginger
af84202ba4
fix: Don't bail on unrecognized OAuth scopes
2026-10-05 14:22:53 +00:00
Ginger
823ee9f6e1
feat: Add support for MSC4484
2026-10-05 14:22:53 +00:00
Ginger
3a20ad7ff2
refactor: Adjust auth check logic structure
2026-10-05 14:22:53 +00:00
Jade Ellis
1e34bd2ed9
style: Run formatting
2026-10-05 00:27:12 +01:00
Clubs
ea16e78092
fix: ensure that registration is enabled before giving tokens from !admin token issue
2026-10-03 15:37:58 +00:00
Erwan Leboucher
56c2d8d901
refactor(media): Simplify preview image handling
2026-10-03 15:35:18 +00:00
Erwan Leboucher
7d8a5f6bab
fix(media): Preserve remote preview dimensions without decoding images
2026-10-03 15:35:18 +00:00
Erwan Leboucher
de578c2163
fix(media): Validate preview image downloads
2026-10-03 15:35:18 +00:00
timedout
c94fa39fd1
fix: Don't panic when a join doesn't include a create event
2026-10-03 15:19:10 +00:00
Ginger
2773ff3e16
feat: Import images correctly from OIDC claims
2026-10-03 15:04:07 +00:00
Ginger
6bbea25034
feat: Allow configuring additional trusted OIDC audiences
2026-10-03 15:03:47 +00:00
Ginger
39bee607c0
refactor: Remove recaptcha-verify
2026-10-03 15:03:34 +00:00
timedout
935ddf1d0f
style: Change Allow to Default etc
...
`ExplicitAllow` -> `Allow`
2026-10-02 18:10:18 +01:00
timedout
495eeedd24
style: Don't return Allow in an else block
2026-10-02 18:10:17 +01:00
timedout
63294f8775
fix: Inverted check
2026-10-02 18:10:17 +01:00
timedout
43ee11bb00
feat: Support MSC4494
2026-10-02 18:10:17 +01:00
Ginger
f1d9537b14
fix: Fix startup panic in old migrations
2026-10-02 11:41:37 -04:00
Ginger
cb7af18bc2
fix: Make unembed_unsigned_info infallible
2026-10-01 18:43:54 +00:00
Ginger
a6fae7498d
fix: Don't bump version if it's already bumped
2026-10-01 18:43:54 +00:00
Ginger
48c36d6f17
refactor: Remove some unnecessary macro logic
2026-10-01 18:43:54 +00:00
Ginger
23d07e3d4f
refactor: Clean up migration logic
2026-10-01 18:43:54 +00:00
Ginger
931686e84e
fix: Fix panic in room creation
2026-09-30 18:49:03 +00:00
Ginger
eb602e83a1
chore: Fix clippy lints
2026-09-30 14:47:46 -04:00
timedout
58d135bc57
fix: Return the actual state at in !admin debug get-state-at
...
Previously this command actually returned the state *before*, which made debugging with it confusing.
2026-09-29 22:06:48 +01:00
Clubs
684820c7c1
fix: check for user account status before attemping to process email change.
2026-09-29 18:36:35 +00:00
Ginger
cbdf978b84
fix: Preserve custom fields in create event content
2026-09-29 17:52:32 +00:00
Ginger
38b7987335
fix: Add invitees as creators for v12+ trusted private chats
2026-09-29 17:52:32 +00:00
timedout
550dd0160a
fix: SEC8
...
Reviewed-By: Ginger <ginger@gingershaped.computer >
Reviewed-By: Jade <jade@ellis.link >
Reviewed-By: Jacob Taylor <jacob@explodie.org >
2026-09-28 02:00:37 +01:00
timedout
c0ad864d57
fix: Make unembed unsigned run in bg
2026-09-27 22:58:08 +01:00
timedout
a61026912c
feat: Add a migration to fix up unsigned data
2026-09-27 18:31:46 +01:00
timedout
05d6922351
style: Take an optional context instead of deconstructed parameters
2026-09-27 17:33:26 +01:00
timedout
f0a0596d12
fix: Remove undocumented prev_sender unsigned field
2026-09-27 17:32:47 +01:00
timedout
fbedf994db
fix: Don't unnecessarily embed prev_content in populate_unsigned
2026-09-27 17:32:47 +01:00
timedout
1de16fed9e
style: English is a difficult language
2026-09-27 17:32:47 +01:00
timedout
4812837d13
fix: Don't allow set_unsigned to panic
...
While an error in this function is probably bad, detonating a metric tonne of TNT on the call tree is probably worse
2026-09-27 17:32:47 +01:00
timedout
90793eaaf4
fix: Actually set unsigned in PDU after set_unsigned
2026-09-27 17:32:47 +01:00
timedout
744928b206
style: Update docstring for Pdu.set_unsigned
2026-09-27 17:32:47 +01:00
timedout
05ee24df7d
fix: Move helper to helpers.rs, rename field, don't recurse unsigned in redacted_because
...
Renamed `redacted_because_id` to `org.continuwuity.redacted_by` for proper namespacing; `get_unsigned_context` now lives in helpers.rs instead of `mod.rs`. The helper function also now explicitly wipes `unsigned` for `redacted_because` to avoid leaks (see comment).
2026-09-27 17:32:46 +01:00
timedout
89eecd2bf7
fix: Record redacted_because_id instead of redacted_because
2026-09-27 17:32:46 +01:00
timedout
b2072baf59
perf: Strip unsigned over federation and generate it on the fly locally
2026-09-27 17:32:46 +01:00
timedout
286897de88
feat: Don't send unsigned data over federation
2026-09-27 17:32:46 +01:00
Renovate Bot and Ginger
02d245afe5
chore(deps): Update ruma digest to e7384f0
...
Co-authored-by: Ginger <ginger@gingershaped.computer >
2026-09-24 14:16:55 -04:00
Ginger
4ea4e15edb
chore: Reformat with latest nightly
2026-09-24 09:53:59 -04:00
Erwan Leboucher
cee69b4c8d
fix: Walk auth events once instead of re-queueing parents
2026-09-22 21:19:25 +02:00
timedout
d3ed175264
fix(stateres): Inject dummy create event when none is available
...
I'm not sure how this doesn't cause more panics. When running an auth check on the create event during iterative auth checks, there's obviously no create event in the base state nor auth map, so the call to fetch_state() will return nothing and thus panic.
This just inserts the incoming event if it's a create event and there isn't an existing one in the auth state. It's not used for the create event checks anyway so this has no effect aside from plugging the panic.
2026-09-22 02:04:39 +01:00
timedout
7924e96589
chore: add todo to fix
2026-09-22 00:16:27 +00:00
timedout
d1b1274900
style: Unchain if statement
2026-09-22 00:16:27 +00:00
timedout
6299df3552
style: Document fetch_and_handle_auth_events control flow
2026-09-22 00:16:27 +00:00
Erwan Leboucher
20d146bd5e
fix: Throttle client-triggered remote event fetches
2026-09-22 00:16:27 +00:00
Ginger
Jade Ellis
Clubs
Erwan Leboucher
timedout
Renovate BotandGinger