b771b9d160
style: Fix typo
2026-05-25 18:26:48 +01:00
eb829c2951
fix: Ensure event_id is correctly stripped before verifying policy server signature
2026-05-25 18:20:57 +01:00
d32b39181a
fix: Don't return early if the policy server does something stupid
...
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
72b99a1f84
style: Reformat
2026-05-25 18:17:40 +01:00
ae37f218a2
perf: Avoid cloning incoming PDUs to check them
...
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
40cecca103
feat: Add extract_signature helper
2026-05-25 18:17:13 +01:00
2a80a82f74
style: Document functions
2026-05-25 18:17:13 +01:00
fbf4eac2dc
fix: Ensure event_id is removed before policy-checking event
2026-05-25 18:17:13 +01:00
4784010702
fix: Ensure policy server signed with the correct key
2026-05-25 18:17:13 +01:00
1c88854a54
feat: Enable shutdown interrupt in ratelimit handler
2026-05-25 18:17:12 +01:00
e0fe71c708
feat: Follow spec more closely, code clean up, use ruma request type
2026-05-25 18:17:12 +01:00
0f0dcb4f58
fix: Return Forbidden instead of internal error when PS doesn't sign
2026-05-25 18:17:12 +01:00
367c42ad28
fix: Treat malformed policy config events as missing
2026-05-25 18:17:12 +01:00
c8e0f7ebd3
style: Reformat
2026-05-25 18:17:10 +01:00
fdc9aec534
fix: Verify policy server signatures on all events, not just timeline ones
...
style: Clarifications
style: Clippy
2026-05-25 18:16:55 +01:00
5f9cc83b18
feat: Support advertising a policy server public key in well-known
...
# Conflicts:
# src/api/client/well_known.rs
# src/core/config/mod.rs
2026-05-25 18:14:58 +01:00
47051af392
feat: Update policy server implementation to be closer to latest spec
...
Untested
chore: Add news fragment
feat: Support stable policy servers
feat: Don't attempt erroneous loopback federation for policy server checks
refactor: Update PS upgrade to use new ruma
fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
c1a6e649da
feat: Combine local & remote force join
2026-05-25 18:01:08 +01:00
1d172be503
style: Authentication -> authorization
2026-05-25 17:55:44 +01:00
f01e119890
style: Make graph output easier to comprehend
2026-05-25 17:53:53 +01:00
4d27a935d6
perf: Move rejected events check
2026-05-25 17:27:56 +01:00
512a96f832
style: Warn -> debug_warn
2026-05-25 17:18:25 +01:00
6715f63acc
fix: Don't serve events over s2s that are rejected
2026-05-25 17:18:25 +01:00
3764faeefc
style: Reformat
2026-05-25 17:18:25 +01:00
5d4b7bfea3
fix: Store PDUs as outliers even when rejected
...
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
6b835a327d
style: Rename unmark_pdu to clear_pdu_markers
2026-05-25 17:18:24 +01:00
7dd61cd560
feat: Add !admin debug show-auth-chain
...
Because why not am I right lads
2026-05-25 17:18:24 +01:00
d9535eccf1
feat: Make !admin debug get-pdu more informative
2026-05-25 17:18:24 +01:00
a97f91e079
fix: Don't hard fail on events which depend on soft-failed events
2026-05-25 17:18:24 +01:00
f0401b4fc7
fix: Mark events as rejected in more places, correct soft-fail extremity behaviour
2026-05-25 17:18:24 +01:00
1f6cab9e2e
feat: Implement event rejection
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
02409c06b8
feat: Add config check to make sure default ACL doesn't self-ban the server
2026-05-21 17:09:43 +00:00
834f2caffe
feat: Add config option for a default ACL on room creation
...
This allows for rooms to be created with a m.room.server_acl event by
default. This event can be thought of as part of the initial_state
events, although it is not provided by the client.
Implements #775
2026-05-21 17:09:43 +00:00
035bfea93c
fix: Correct error code
2026-05-21 12:11:03 +00:00
185f8c42dc
fix: Properly check forbidden_remote_server_names for incoming requests
2026-05-21 12:11:03 +00:00
d5fc81d39e
fix: Remove check for active user when propagating profile updates
2026-05-21 12:10:58 +00:00
1cd0228d87
fix: Restore functionality of require_auth_for_profile_requests
2026-05-21 12:10:48 +00:00
4968d4c8b7
docs: Clarify documentation for require_email_for_registration
2026-05-21 12:10:44 +00:00
3987331c3b
chore: Fix clippy warnings
2026-05-19 20:26:04 +01:00
1bba4fd252
style: Reformat
2026-05-18 03:15:15 +01:00
8af0662a18
feat: Verify custom room ID has been used after creating the room
2026-05-18 01:21:13 +01:00
2804278e9b
fix: Restore custom room ID functionality
2026-05-18 01:05:12 +01:00
820485da57
fix: reliance on external constants being stable
2026-05-16 10:43:24 +00:00
ba2c123e82
feat: Remove support for server-side blurhashing
2026-05-14 13:22:17 +00:00
6f83925a4f
fix: Use correct service name in membership service
2026-05-13 08:53:15 -04:00
c57fe66d8d
fix: query account-data account-data-get output
2026-05-12 14:18:35 +00:00
ff28fd0927
fix: Disable debugging parameter in Askama template
2026-05-12 14:17:23 +00:00
7307f2dc80
fix: Remove deprecated MatrixRTC focus config option
2026-05-12 14:17:23 +00:00
10dd8bebfe
fix: Don't advertise stable MSC2666
...
Turns out ruma doesn't have the stable definition yet, will need a version bump.
Reverts 088fa3e725
2026-05-11 23:27:00 +01:00
088fa3e725
fix: Use stable ID for Mutual Rooms support
2026-05-10 03:48:25 +00:00
timedout
new-years-eve
Ginger
Jade Ellis
31a05b9c
Henry-Hiles