Commit Graph

4217 Commits

Author SHA1 Message Date
Ginger 3c07857e1f feat: Implement support for prompt=create in the authorization code flow 2026-05-26 14:27:09 -04:00
Ginger 851d6e219f fix: Don't let logged-in users access the registration page 2026-05-26 14:27:09 -04:00
Ginger 66aba9d5d0 feat: Allow self-service deactivation to be disabled 2026-05-26 14:27:09 -04:00
Ginger 5ca1341bf7 refactor: Use more consistent terminology for email validation pages 2026-05-26 14:27:09 -04:00
Ginger baf76cd4dc feat: Add support for registering accounts with the web UI 2026-05-26 14:27:09 -04:00
Ginger 53d51cf831 refactor: Change template context to allow using a CSP nonce 2026-05-26 14:27:09 -04:00
Ginger 9bfc331a26 fix: Minor CSS improvements 2026-05-26 14:27:09 -04:00
Ginger 1cda559a18 fix: Remove errant whitespace in device details 2026-05-26 14:27:09 -04:00
Ginger 4bbbbb854e feat: Allow configuring the OAuth compatibility mode 2026-05-26 14:27:09 -04:00
Ginger 81388162f0 fix: Use button styling for account management link on index page 2026-05-26 14:27:09 -04:00
Ginger a912dcc106 fix: Use the right text color on input elements 2026-05-26 14:27:09 -04:00
Ginger 950d7ae3d9 feat: Add support for account management deeplinks 2026-05-26 14:27:09 -04:00
Ginger 7f36c44763 fix: Return the correct error code for expired access tokens 2026-05-26 14:27:09 -04:00
Ginger 3e8403de64 feat: Add a page for viewing a device's details 2026-05-26 14:27:09 -04:00
Ginger 2ef8a1edd7 fix: Use SameSite=Lax for session cookie 2026-05-26 14:27:09 -04:00
Ginger 6f17868525 feat: Allow devices to be removed from the account panel 2026-05-26 14:27:09 -04:00
Ginger ee73a2b36d feat: Implement oauth token revocation 2026-05-26 14:27:09 -04:00
Ginger 3dc4c7d4fc chore: Clippy fixes 2026-05-26 14:27:09 -04:00
Ginger 13917bb5c3 feat: Implement oauth auth code and refresh token flows 2026-05-26 14:27:09 -04:00
Ginger f269fb5cfc chore: Clippy fixes 2026-05-26 14:27:09 -04:00
Ginger 6b0b8344d4 feat: Implement a web-based account management dashboard 2026-05-26 14:27:09 -04:00
Ginger 02948960fa feat: Implement oauth service and client registration 2026-05-26 14:27:09 -04:00
Ginger 30c9d6d2df chore: Clippy fixes 2026-05-26 18:26:02 +00:00
Ginger 74841b6711 refactor: Represent route auth information in the type system 2026-05-26 18:26:02 +00:00
timedout dabbdc7517 fix: Don't be so aggressive when validating policy server signatures 2026-05-26 16:16:48 +01:00
timedout 5cba4b126f style: Combine "unsupported version" checks 2026-05-25 19:44:40 +01:00
timedout d8a7f7c7ca perf: Skip updating child/parent spaces in upgrade when sender is not joined 2026-05-25 19:40:15 +01:00
timedout d3fca86dec style: Drop unstable prefix in function definitions 2026-05-25 19:38:17 +01:00
timedout 5f88abf341 fix: Correctly copy parents and children during upgrade 2026-05-25 19:37:29 +01:00
timedout 416814094c fix: Correctly update space children on upgrade 2026-05-25 19:37:29 +01:00
timedout 5b8799e71f fix: Include sender in older room versions 2026-05-25 19:37:29 +01:00
timedout cc5349ee57 fix: Don't de-power creators when downgrading from v12 to earlier versions 2026-05-25 19:37:29 +01:00
timedout 7b68572b2e fix: Don't give v12 rooms room IDs 2026-05-25 19:37:29 +01:00
timedout 057eb9f644 fix: Adhere to MSC4168 more strongly & in definition order 2026-05-25 19:37:29 +01:00
timedout 253603edbc refactor: Fix several bugs in upgrade endpoint, update MSC4168 impl 2026-05-25 19:37:25 +01:00
timedout b771b9d160 style: Fix typo 2026-05-25 18:26:48 +01:00
timedout eb829c2951 fix: Ensure event_id is correctly stripped before verifying policy server signature 2026-05-25 18:20:57 +01:00
timedout d32b39181a fix: Don't return early if the policy server does something stupid
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
timedout 72b99a1f84 style: Reformat 2026-05-25 18:17:40 +01:00
timedout ae37f218a2 perf: Avoid cloning incoming PDUs to check them
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
timedout 40cecca103 feat: Add extract_signature helper 2026-05-25 18:17:13 +01:00
timedout 2a80a82f74 style: Document functions 2026-05-25 18:17:13 +01:00
timedout fbf4eac2dc fix: Ensure event_id is removed before policy-checking event 2026-05-25 18:17:13 +01:00
timedout 4784010702 fix: Ensure policy server signed with the correct key 2026-05-25 18:17:13 +01:00
timedout 1c88854a54 feat: Enable shutdown interrupt in ratelimit handler 2026-05-25 18:17:12 +01:00
timedout e0fe71c708 feat: Follow spec more closely, code clean up, use ruma request type 2026-05-25 18:17:12 +01:00
timedout 0f0dcb4f58 fix: Return Forbidden instead of internal error when PS doesn't sign 2026-05-25 18:17:12 +01:00
timedout 367c42ad28 fix: Treat malformed policy config events as missing 2026-05-25 18:17:12 +01:00
timedout c8e0f7ebd3 style: Reformat 2026-05-25 18:17:10 +01:00
timedout fdc9aec534 fix: Verify policy server signatures on all events, not just timeline ones
style: Clarifications

style: Clippy
2026-05-25 18:16:55 +01:00