Ginger
9e9eb19331
refactor: Use more consistent terminology for email validation pages
2026-06-16 12:50:43 -04:00
Ginger
4f333ed173
feat: Add support for registering accounts with the web UI
2026-06-16 12:50:43 -04:00
Ginger
1840549332
refactor: Change template context to allow using a CSP nonce
2026-06-16 12:50:43 -04:00
Ginger
25144ecceb
feat: Allow configuring the OAuth compatibility mode
2026-06-16 12:50:43 -04:00
Ginger
a8c49a3034
feat: Add support for account management deeplinks
2026-06-16 12:50:43 -04:00
Ginger
35f3b44e46
fix: Return the correct error code for expired access tokens
2026-06-16 12:50:43 -04:00
Ginger
2ffbead621
feat: Add a page for viewing a device's details
2026-06-16 12:50:43 -04:00
Ginger
0974481066
feat: Implement oauth token revocation
2026-06-16 12:50:43 -04:00
Ginger
5ac3ef7372
chore: Clippy fixes
2026-06-16 12:50:43 -04:00
Ginger
53a0ca9ae5
feat: Implement oauth auth code and refresh token flows
2026-06-16 12:50:43 -04:00
Ginger
b5956368bc
chore: Clippy fixes
2026-06-16 12:50:43 -04:00
Ginger
e143da969a
feat: Implement a web-based account management dashboard
2026-06-16 12:50:43 -04:00
Ginger
7631250278
feat: Implement oauth service and client registration
2026-06-16 12:50:43 -04:00
Ginger
0932c929c3
chore: Clippy fixes >:(
2026-06-16 12:36:24 -04:00
Ginger
8f4e95b4b9
fix: Fix compile errors caused by hickory upgrade
2026-06-16 12:19:37 -04:00
Jonathan Bouligny
0ece17b6a0
fix: Trim whitespace in is_admin_command
...
Lets users run commands even with a space before the !admin prefix.
2026-06-11 15:20:34 +00:00
Henry-Hiles
58e41d48c7
fix: grammar in delete all media command not found error
2026-06-01 13:40:44 -04:00
Ginger
74841b6711
refactor: Represent route auth information in the type system
2026-05-26 18:26:02 +00:00
timedout
dabbdc7517
fix: Don't be so aggressive when validating policy server signatures
2026-05-26 16:16:48 +01:00
timedout
b771b9d160
style: Fix typo
2026-05-25 18:26:48 +01:00
timedout
eb829c2951
fix: Ensure event_id is correctly stripped before verifying policy server signature
2026-05-25 18:20:57 +01:00
timedout
d32b39181a
fix: Don't return early if the policy server does something stupid
...
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
timedout
72b99a1f84
style: Reformat
2026-05-25 18:17:40 +01:00
timedout
ae37f218a2
perf: Avoid cloning incoming PDUs to check them
...
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
timedout
40cecca103
feat: Add extract_signature helper
2026-05-25 18:17:13 +01:00
timedout
2a80a82f74
style: Document functions
2026-05-25 18:17:13 +01:00
timedout
fbf4eac2dc
fix: Ensure event_id is removed before policy-checking event
2026-05-25 18:17:13 +01:00
timedout
4784010702
fix: Ensure policy server signed with the correct key
2026-05-25 18:17:13 +01:00
timedout
1c88854a54
feat: Enable shutdown interrupt in ratelimit handler
2026-05-25 18:17:12 +01:00
timedout
e0fe71c708
feat: Follow spec more closely, code clean up, use ruma request type
2026-05-25 18:17:12 +01:00
timedout
0f0dcb4f58
fix: Return Forbidden instead of internal error when PS doesn't sign
2026-05-25 18:17:12 +01:00
timedout
367c42ad28
fix: Treat malformed policy config events as missing
2026-05-25 18:17:12 +01:00
timedout
c8e0f7ebd3
style: Reformat
2026-05-25 18:17:10 +01:00
timedout
fdc9aec534
fix: Verify policy server signatures on all events, not just timeline ones
...
style: Clarifications
style: Clippy
2026-05-25 18:16:55 +01:00
timedout
47051af392
feat: Update policy server implementation to be closer to latest spec
...
Untested
chore: Add news fragment
feat: Support stable policy servers
feat: Don't attempt erroneous loopback federation for policy server checks
refactor: Update PS upgrade to use new ruma
fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
timedout
c1a6e649da
feat: Combine local & remote force join
2026-05-25 18:01:08 +01:00
timedout
1d172be503
style: Authentication -> authorization
2026-05-25 17:55:44 +01:00
timedout
4d27a935d6
perf: Move rejected events check
2026-05-25 17:27:56 +01:00
timedout
512a96f832
style: Warn -> debug_warn
2026-05-25 17:18:25 +01:00
timedout
3764faeefc
style: Reformat
2026-05-25 17:18:25 +01:00
timedout
5d4b7bfea3
fix: Store PDUs as outliers even when rejected
...
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
timedout
6b835a327d
style: Rename unmark_pdu to clear_pdu_markers
2026-05-25 17:18:24 +01:00
timedout
a97f91e079
fix: Don't hard fail on events which depend on soft-failed events
2026-05-25 17:18:24 +01:00
timedout
f0401b4fc7
fix: Mark events as rejected in more places, correct soft-fail extremity behaviour
2026-05-25 17:18:24 +01:00
timedout and star
1f6cab9e2e
feat: Implement event rejection
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
Ginger
ba2c123e82
feat: Remove support for server-side blurhashing
2026-05-14 13:22:17 +00:00
Ginger
6f83925a4f
fix: Use correct service name in membership service
2026-05-13 08:53:15 -04:00
Ginger
39a882c4a1
chore: Clippy fixes
2026-05-08 12:41:57 -04:00
Ginger
f091d3a732
fix: Correctly check for local users' existence
2026-05-08 11:48:20 -04:00
nex
ebf9a08cd1
fix: Correct typo that prevented state compressor service being loaded
2026-05-08 03:10:28 +00:00
Ginger
Jonathan Bouligny
Henry-Hiles
timedout
nex