Michel-Marie MAUDET
8c1bbf3d1a
fix(oauth): Reject device code requests from unauthorised clients
...
The device authorization endpoint issued a device code to any registered
client, without checking that the client had registered the
`urn:ietf:params:oauth:grant-type:device_code` grant type. Such a client
could therefore start a device authorization flow and have the server
show an approval prompt to a user, even though the subsequent token
request was always going to be refused.
RFC 8628 section 3.2 states that, in the event of an error such as an
invalidly configured client, the device authorization endpoint responds
in the same way as the token endpoint specified in RFC 6749 section 5.2,
which defines `unauthorized_client` as "the authenticated client is not
authorized to use this authorization grant type".
Apply the same grant type check the token endpoint already performs, and
add the `unauthorized_client` error code it requires.
2026-08-07 08:52:20 +00:00
renegadespork
02bee2e898
docs: Reference latest version of matrix spec
2026-08-06 15:34:46 -07:00
renegadespork
1c23cf3a93
docs: Fix servernameevent_data_cache_capacity default description.
2026-08-06 14:18:32 +00:00
renegadespork
30be07fe8f
chore: Fix changelog news fragment formatting
2026-08-06 14:18:32 +00:00
renegadespork
a530eaa3a8
chore: Add changelog for config documentation.
2026-08-06 14:18:32 +00:00
renegadespork
97d37a9bb3
docs: Corrected description of auth chain logic.
2026-08-06 14:18:32 +00:00
renegadespork
4ff7a88df0
docs: Add missing documentation to config parameters.
2026-08-06 14:18:32 +00:00
Erwan Leboucher
1b6bc83b9f
fix(sync): Preserve batched read receipts
2026-08-06 14:01:52 +00:00
PerformativeJade
cdf07a8811
chore: Add changelog line
2026-08-06 12:18:26 +00:00
PerformativeJade
69b6431213
refactor: Swapped admin command names and aliases
2026-08-06 12:18:26 +00:00
timedout
21ea9d3ea7
feat: Validate event references in prev and auth events
...
Also threw in some lovely unit tests, as a treat.
2026-08-05 21:11:05 +00:00
timedout
d79ffe6ef0
chore: Throwing newsfrag!
2026-08-05 21:11:05 +00:00
timedout
8f0c7a99d7
fix: Don't accidentally continue with fallback room version
...
Fixes a potential issue where continuwuity correctly defaults to room v1
when encountering an unknown room version, but then fails to *stop*
processing when it encounters the room version it doesn't actually
understand.
2026-08-05 21:11:05 +00:00
Jacob Taylor
f1755dd36f
fix: Fix link preview unfurl source
2026-08-05 18:02:14 +00:00
stratself
3b4665a171
fix: Small grammar
2026-08-05 18:00:11 +00:00
stratself
9c9d15d601
fix(docs): Incorporate change requests from PR comments II
2026-08-05 18:00:11 +00:00
stratself
5402c4f208
chore: Add changelog for docker command change
2026-08-05 18:00:11 +00:00
stratself
c7160edc13
docs: Replace docker-compose with docker compose
2026-08-05 18:00:11 +00:00
stratself
2144317933
fix(docs): Incorporate change requests from PR comments
...
These are mostly grammar fixes. Furthermore:
* docs(docker,delegation): Use `important` admonitions in some places
* docs(maintenance): Elaborate on `immutable` directive in media header
2026-08-05 18:00:11 +00:00
stratself
e19f634ffa
chore: Add changelogs for some important doc things
2026-08-05 18:00:11 +00:00
stratself
7b020e8563
docs(maintenance): Remove S3 and MMR reference
...
* Also subsectioned btrfs stuff for database
2026-08-05 18:00:11 +00:00
stratself
d24245a68e
fix: Minor changes from feedback of PR
2026-08-05 18:00:11 +00:00
stratself
3c3e3b5316
fix(docs): Small fixes
2026-08-05 18:00:11 +00:00
stratself
d0ca302347
docs(maintenance): Update the database backup section
...
* Also update some links and media mgmt functionality
2026-08-05 18:00:11 +00:00
stratself
37ddb8f37f
docs(troubleshooting,performance): Small changes
...
Add links to admin command reference pages and reword some nits
2026-08-05 18:00:11 +00:00
stratself
a5fe5b531d
docs(docker): Add update instructions
2026-08-05 18:00:11 +00:00
stratself
144ff89447
docs(docker,delegation): Edit compose examples with Caddy
...
* Use 2-spaces indentation instead of 4
* Use `proxy` as network name instead of `caddy` to be consistent
* Mount Caddyfile for delegated example as well
2026-08-05 18:00:11 +00:00
stratself
6915bca11c
docs(dns): Add workaround notes for connecting to containers via IPs
...
* docs(appservices): Fix registration command and also add Docker DNS caveats
* docs(docker): A word
2026-08-05 18:00:11 +00:00
stratself
519ebc96cc
docs(docker): Use Caddyfile mount for Caddy example
...
The `configs.content` approach only works for Docker, so doing this
would be more inclusive for Podman users
Also removed Nexy's forge as it is currently limited access
2026-08-05 18:00:11 +00:00
stratself
39ca63afe5
docs(delegation): Improve structure and wording
...
* Delineate 2 options for serving well-knowns
* Move SRV stuff to Appendix section
* Other small changes
2026-08-05 18:00:11 +00:00
stratself
77c22ca82d
docs: Add title and version caveat for config file reference
2026-08-05 18:00:11 +00:00
Renovate Bot
f463cbab4f
chore(deps): update pre-commit hook crate-ci/typos to v1.49.0
2026-08-05 13:04:52 +01:00
nex
80e98a2299
fix: Fixup v26.7.2 link in announcement
2026-08-04 23:35:20 +00:00
nex
20cdcee68c
chore: Backdate release notes
...
I am a very responsible and organised maintainer and this was a deliberate plan to see how many users are keeping an active watch on the project's releases /j
2026-08-04 21:29:27 +00:00
alexia
6647d405f4
chore(ci): fix formatting so prek/CI doesn't complain
2026-08-04 19:03:13 +00:00
alexia
4e9ed55c6b
chore: add changelog
2026-08-04 19:03:13 +00:00
alexia
679b75eb66
chore: update generated config file
2026-08-04 19:03:13 +00:00
alexia
c3bd6d697a
docs: fix default user-agent example being outdated
...
is it fine that this is wrapped? :p
2026-08-04 19:03:13 +00:00
stratself
4fea19b0e3
fix: Separate changelogs for important configuration changes
2026-08-04 18:18:54 +00:00
stratself
ecb52af225
fix: Fix grammatical vulnerability reported by @thetayloredman
2026-08-04 18:18:54 +00:00
stratself
61be6aa7c6
chore: Fix changelog to better reflect changes
2026-08-04 18:18:54 +00:00
stratself
95dfa2c389
docs(livekit): Add more Element Call UI error cases
2026-08-04 18:18:54 +00:00
stratself
5ca21de3ca
docs(livekit): Make room.auto_create false following recs
...
Recs from lk-jwt-service README page, also:
* Remove statement about Docker-only LiveKit
* Retitle some section
2026-08-04 18:18:54 +00:00
stratself
c11a30bb0d
docs(turn,livekit): Add troubleshooting steps for incorrect IPs
2026-08-04 18:18:54 +00:00
stratself
a73cdbeff2
docs(turn,livekit): Small changes
...
* Small wording changes on calls.mdx
* Add env var sample for livekit foci
* Simplify TURNS-over-443 Caddyfile (livekit + turn)
* Improve TURNS-over-443 wordings (livekit + turn)
* Link to MRTC room on turn documentation
2026-08-04 18:18:54 +00:00
stratself
e14a86026a
chore: Update changelogs
2026-08-04 18:18:54 +00:00
stratself
e62d74197e
docs(turn): Use coturn for compose
2026-08-04 18:18:54 +00:00
stratself
7b4729e48c
docs(livekit): Add caveat for livekit + caddy-in-docker
2026-08-04 18:18:54 +00:00
stratself
3b5aa44229
docs(livekit): Rewrite TURN stuff with 443-TLS and move to Appendix section
2026-08-04 18:18:54 +00:00
stratself
da547a7b89
docs: Remove guest access section due to feature removal
2026-08-04 18:18:54 +00:00