baf76cd4dc
feat: Add support for registering accounts with the web UI
2026-05-26 14:27:09 -04:00
53d51cf831
refactor: Change template context to allow using a CSP nonce
2026-05-26 14:27:09 -04:00
4bbbbb854e
feat: Allow configuring the OAuth compatibility mode
2026-05-26 14:27:09 -04:00
950d7ae3d9
feat: Add support for account management deeplinks
2026-05-26 14:27:09 -04:00
7f36c44763
fix: Return the correct error code for expired access tokens
2026-05-26 14:27:09 -04:00
3e8403de64
feat: Add a page for viewing a device's details
2026-05-26 14:27:09 -04:00
ee73a2b36d
feat: Implement oauth token revocation
2026-05-26 14:27:09 -04:00
3dc4c7d4fc
chore: Clippy fixes
2026-05-26 14:27:09 -04:00
13917bb5c3
feat: Implement oauth auth code and refresh token flows
2026-05-26 14:27:09 -04:00
f269fb5cfc
chore: Clippy fixes
2026-05-26 14:27:09 -04:00
6b0b8344d4
feat: Implement a web-based account management dashboard
2026-05-26 14:27:09 -04:00
02948960fa
feat: Implement oauth service and client registration
2026-05-26 14:27:09 -04:00
74841b6711
refactor: Represent route auth information in the type system
2026-05-26 18:26:02 +00:00
dabbdc7517
fix: Don't be so aggressive when validating policy server signatures
2026-05-26 16:16:48 +01:00
b771b9d160
style: Fix typo
2026-05-25 18:26:48 +01:00
eb829c2951
fix: Ensure event_id is correctly stripped before verifying policy server signature
2026-05-25 18:20:57 +01:00
d32b39181a
fix: Don't return early if the policy server does something stupid
...
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
72b99a1f84
style: Reformat
2026-05-25 18:17:40 +01:00
ae37f218a2
perf: Avoid cloning incoming PDUs to check them
...
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
40cecca103
feat: Add extract_signature helper
2026-05-25 18:17:13 +01:00
2a80a82f74
style: Document functions
2026-05-25 18:17:13 +01:00
fbf4eac2dc
fix: Ensure event_id is removed before policy-checking event
2026-05-25 18:17:13 +01:00
4784010702
fix: Ensure policy server signed with the correct key
2026-05-25 18:17:13 +01:00
1c88854a54
feat: Enable shutdown interrupt in ratelimit handler
2026-05-25 18:17:12 +01:00
e0fe71c708
feat: Follow spec more closely, code clean up, use ruma request type
2026-05-25 18:17:12 +01:00
0f0dcb4f58
fix: Return Forbidden instead of internal error when PS doesn't sign
2026-05-25 18:17:12 +01:00
367c42ad28
fix: Treat malformed policy config events as missing
2026-05-25 18:17:12 +01:00
c8e0f7ebd3
style: Reformat
2026-05-25 18:17:10 +01:00
fdc9aec534
fix: Verify policy server signatures on all events, not just timeline ones
...
style: Clarifications
style: Clippy
2026-05-25 18:16:55 +01:00
47051af392
feat: Update policy server implementation to be closer to latest spec
...
Untested
chore: Add news fragment
feat: Support stable policy servers
feat: Don't attempt erroneous loopback federation for policy server checks
refactor: Update PS upgrade to use new ruma
fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
c1a6e649da
feat: Combine local & remote force join
2026-05-25 18:01:08 +01:00
1d172be503
style: Authentication -> authorization
2026-05-25 17:55:44 +01:00
4d27a935d6
perf: Move rejected events check
2026-05-25 17:27:56 +01:00
512a96f832
style: Warn -> debug_warn
2026-05-25 17:18:25 +01:00
3764faeefc
style: Reformat
2026-05-25 17:18:25 +01:00
5d4b7bfea3
fix: Store PDUs as outliers even when rejected
...
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
6b835a327d
style: Rename unmark_pdu to clear_pdu_markers
2026-05-25 17:18:24 +01:00
a97f91e079
fix: Don't hard fail on events which depend on soft-failed events
2026-05-25 17:18:24 +01:00
f0401b4fc7
fix: Mark events as rejected in more places, correct soft-fail extremity behaviour
2026-05-25 17:18:24 +01:00
1f6cab9e2e
feat: Implement event rejection
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
ba2c123e82
feat: Remove support for server-side blurhashing
2026-05-14 13:22:17 +00:00
6f83925a4f
fix: Use correct service name in membership service
2026-05-13 08:53:15 -04:00
39a882c4a1
chore: Clippy fixes
2026-05-08 12:41:57 -04:00
f091d3a732
fix: Correctly check for local users' existence
2026-05-08 11:48:20 -04:00
ebf9a08cd1
fix: Correct typo that prevented state compressor service being loaded
2026-05-08 03:10:28 +00:00
0d2eeed567
refactor: Move room joining logic into a new service
2026-05-06 14:01:50 -04:00
e212c91ebf
fix: Address review comments
2026-05-05 13:35:35 -04:00
8c2cf67783
refactor: Remove support for guest user registration
2026-05-05 09:09:48 -04:00
833216256b
feat: Add support for fallback keys
...
Fallback keys can be provided by client devices to be used in case the
supply of one-time keys run out. The server will store one fallback key
per user, per device, per algorithm. The server will keep track of
whether this fallback key has been used or not.
The /keys/claim endpoint now provides a fallback key
if no one-time key is found
The /keys/upload endpoint now accepts fallback keys
The /sync endpoint now informs the client of the algorithms for which it
has an unused fallback key in stock.
2026-05-04 20:05:26 +00:00
52d1ed24a9
refactor: Remove LDAP support
2026-05-04 11:27:47 -04:00
Ginger
timedout
nex
new-years-eve