Matthias Ahouansou
556e78214a
fix: only allow the server user to set the admin alias
...
Should make it safer to move the alias if the admin room broke on a public server.
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-06-12 14:04:47 -04:00
Matthias Ahouansou and strawberry
f712c0cefb
fix: restrict who can remove aliases
...
Previously, anyone could remove any local alias, meaning that someone could re-route a popular alias elsewhere
Now, only the creator of the alias, users who can set canonical aliases for the room, server admins and the server user can delete aliases
added some additional changes/fixes to adapt to our codebase
Co-authored-by: strawberry <strawberry@puppygock.gay >
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-06-12 14:04:47 -04:00
Matthias Ahouansou
26d103d314
fix: only process admin commands if server user is in the room
...
Should prevent some edge cases with a misconfigured admin room
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-06-12 14:04:47 -04:00
Matthias Ahouansou
19e4befcb8
feat(appservice): ensure users/aliases outside of namespaces are not accessed
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-17 14:51:08 -04:00
Matthias Ahouansou
59be0b3ddc
sync upstream token/appservice auth code
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-17 14:51:08 -04:00
Matthias Ahouansou
a0b65eda1e
merge the huge authentication MR mess (reject requests with authentication when not used)
...
and (fix: allow invalid auth when no auth is required)
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-14 22:35:23 -04:00
Matthias Ahouansou
8eda3be9ce
disable federation at the router level too
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-14 22:35:23 -04:00
Matthias Ahouansou
2d4877f9a5
feat(federation): implement /make_leave and /send_leave
...
also fixed some clippy lints, and added "event_id" field
removal check for room v1 and 2
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-14 22:35:23 -04:00
Matthias Ahouansou
c946352e7f
fix(sync): send phoney leave event where room state is unknown on invite rejection
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-09 15:26:45 -04:00
Matthias Ahouansou
3b5794b5bd
fix(membership): check if server is in room to decide whether to do remote leaves
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-09 15:26:45 -04:00
Matthias Ahouansou
6078b5ee9d
fixup! feat: support /make_join and /send_join for restricted rooms
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-09 15:26:45 -04:00
Matthias Ahouansou
d8949d55c4
refactor(state_accessor): add method to check if a user can invite another user
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-09 15:26:45 -04:00
Matthias Ahouansou
f0b91461a0
refactor(state_accessor): add method to check if a user can invite another user
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-05 22:15:16 -04:00
Matthias Ahouansou
321a6ca0fe
feat(membership): check if user already has the membership that is requested to be set
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-05 22:15:16 -04:00
Matthias Ahouansou
5c30d2b2b0
fix(membership): perform stricter checks when choosing an authorized user
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-05 22:15:16 -04:00
Matthias Ahouansou
68e64392f0
fix(membership): remove join_authorized_via_users_server field on state update
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-05 22:15:16 -04:00
Matthias Ahouansou
172d71e365
check if user is joined in the room in user_can_invite
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-05 22:15:16 -04:00
Matthias Ahouansou
49eb418786
feat: support /make_join and /send_join for restricted rooms
...
from https://gitlab.com/famedly/conduit/-/merge_requests/618
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-05 22:15:16 -04:00
Matthias Ahouansou
ed960f41ac
feat: recurse relationships (and fix some lints)
...
from https://gitlab.com/famedly/conduit/-/merge_requests/613
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-05 22:15:16 -04:00
Matthias Ahouansou
c31fb7134a
fix: do not expect that all http requests are valid reqwest requests
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-02 00:32:41 -04:00
Matthias Ahouansou
2a48e562e6
fix: return error when trying to unregister unknown appservice id
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-02 00:32:41 -04:00
Matthias Ahouansou
c61aee4f1c
fix: reject /register requests when there is no token and the type is appservice
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-04-02 00:32:41 -04:00
Matthias Ahouansou
60f2471f59
refactor appservice type stuff
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-03-23 01:49:27 -04:00
Matthias Ahouansou
e7c6b8c91b
feat(spaces): hierarchy over federation
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-03-19 00:17:41 -04:00
Matthias Ahouansou
4c841cd909
refactor: check if federation is disabled inside the authcheck where possible
...
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-03-19 00:17:41 -04:00
Matthias Ahouansou and strawberry
c48535ef32
fix: avoid panics when admin room is not available
...
Co-authored-by: strawberry <strawberry@puppygock.gay >
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-03-19 00:17:41 -04:00
Matthias Ahouansou and strawberry
5ab76a1332
update ruma appservice Registration type MR
...
from https://gitlab.com/famedly/conduit/-/merge_requests/583
and fixed panic from blocking async call in timeline/mod.rs
Co-authored-by: strawberry <strawberry@puppygock.gay >
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-03-08 12:51:21 -05:00
Matthias Ahouansou
4ec2d3ecb5
refactor: use async-aware RwLocks and Mutexes where possible
...
squashed from https://gitlab.com/famedly/conduit/-/merge_requests/595
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-03-08 12:51:21 -05:00
Matthias Ahouansou
fc93b29abe
feat: forbid certain usernames & room aliases
...
squashed from https://gitlab.com/famedly/conduit/-/merge_requests/582
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-02-11 21:56:55 -05:00
Matthias Ahouansou
784d307425
revamp appservice registration to ruma's Registration type
...
squashed from https://gitlab.com/famedly/conduit/-/merge_requests/583
Signed-off-by: strawberry <strawberry@puppygock.gay >
2024-02-11 21:56:55 -05:00
Matthias Ahouansou
