Jade Ellis
16de2a2cc0
feat: Add ability to inspect build information and features at runtime
...
Also re-adds ability to inspect used features
2026-04-09 17:24:44 +01:00
timedout
189ed1c394
style: Fix large future clippy error
2026-04-08 17:17:15 +00:00
timedout
36c32938ae
fix: Don't try to sign events that don't originate from us
2026-04-08 17:17:15 +00:00
Ginger
b7a6c819b7
chore: News fragment
2026-04-07 12:55:56 +00:00
Ginger
eccc878ee9
feat: Add support for terms and conditions when registering
2026-04-07 12:55:56 +00:00
Tulir Asokan
8b762cf2e6
fix: Server name caching for SRV remotes
2026-04-06 19:57:05 +00:00
timedout
688cd8f46a
fix: Forbid creating events sent by remote users
2026-04-05 22:34:11 +01:00
Ginger
e1c54f4dec
fix: Don't allow UIAA stages to be completed if no flow includes them
2026-03-31 02:20:59 +00:00
ginger
0c9fa3b7e5
feat: Add a notice about email to the first-run banner
2026-03-31 02:20:59 +00:00
Ginger
f32599e030
feat: Supply more informative error message if email is disabled
2026-03-31 02:20:59 +00:00
Ginger
b6f0b41d3d
feat: Ratelimit sending threepid validation emails
2026-03-31 02:20:59 +00:00
Ginger
d5675b85cf
fix: Release session lock before sending threepid validation email
2026-03-31 02:20:59 +00:00
Ginger
951b5abe19
refactor: Remove UiaaStatus enum
2026-03-31 02:20:59 +00:00
Ginger
3885e43b5d
feat: Add support for 3pid management
2026-03-31 02:20:59 +00:00
Ginger
717d319708
feat: Add support for logging in with an email address
2026-03-31 02:20:59 +00:00
Ginger
0b04757bef
feat: Add support for password resets via email
2026-03-31 02:20:59 +00:00
Ginger
f2b7dd6519
feat: Add a webpage for threepid validation links
2026-03-31 02:20:59 +00:00
Ginger
9d06208a7a
feat: Store threepid validation sessions in memory instead of the database
2026-03-31 02:20:59 +00:00
Ginger
955da3a74f
feat: Add admin commands for managing users' email addresses
2026-03-31 02:20:59 +00:00
Ginger
f5db4d17d6
feat: Refactor UIAA service, add support for email stage
2026-03-31 02:20:59 +00:00
Ginger
54fd1d313f
feat: Implement threepid service
2026-03-31 02:20:59 +00:00
Ginger
bb7fd9efc1
feat: Implement mailer service for sending emails
2026-03-31 02:20:59 +00:00
timedout
f0c3fdfe3a
fix: Well-known read errors no longer crash resolver flow
...
Reviewed-By: Jade Ellis <jade@ellis.link >
2026-03-27 00:54:17 +00:00
Niklas Wojtkowiak
8e7846c644
fix(alias): preserve room alias enumeration on delete
2026-03-26 19:23:24 +00:00
Ginger
67d5619ccb
fix: Fix password reset page appearance in light mode
2026-03-18 12:42:55 -04:00
Ginger
ae2b87f03f
fix: Fix M_NOT_FOUND for users with no origin set
2026-03-18 12:42:55 -04:00
Ginger
d13801e976
fix: Disallow issuing password reset tokens for deactivated users
2026-03-18 12:42:55 -04:00
Ginger
5716c36b47
chore: Change password reset page path
2026-03-18 12:42:55 -04:00
Ginger
ffa3c53847
feat: Implement a webpage for self-service password resets
2026-03-18 12:42:55 -04:00
Ginger
da8833fca4
feat: Implement a command for issuing password reset links
2026-03-18 12:42:55 -04:00
Ginger
267feb3c09
feat: Add a new service for handling password resets
2026-03-18 12:42:55 -04:00
Renovate Bot
acef746d26
fix(deps): Update rust crate recaptcha-verify to 0.2.0
2026-03-17 13:20:50 +00:00
Shane Jaroch
ff85145ee8
fix: missing logic inversion for acquired keys (should speed up room joins)
2026-03-13 20:54:38 -04:00
timedout
906c3df953
style: Reduce migration warning verbosity to info
...
They aren't actually warning of anything
2026-03-09 13:30:24 +00:00
timedout
33e5fdc16f
style: Reduce verbosity of fix_corrupt_msc4133_fields
2026-03-09 13:30:24 +00:00
timedout
77ac17855a
fix: Don't fail on invalid stripped state entries during migration
2026-03-09 13:30:24 +00:00
timedout
65ffcd2884
perf: Insert missed migration markers into fresh databases
2026-03-09 13:30:24 +00:00
timedout
7ec88bdbfe
feat: Make noise about migrations and make errors more informative
2026-03-09 13:30:24 +00:00
Ginger
da3fac8cb4
fix: Use more robust check for max_request_size
2026-03-09 13:27:39 +00:00
Trash Panda
3366113939
fix: Retrieve content_type and video width/height
2026-03-09 13:27:39 +00:00
Trash Panda
9039784f41
fix: Clippy lints
2026-03-09 13:27:39 +00:00
Trash Panda
7f165e5bbe
fix: Refactor and block media downloads larger than max_request_size
2026-03-09 13:27:39 +00:00
Trash Panda
e8746760fa
feat(url-preview): Optionally download audio/video files for url preview requests
2026-03-09 13:27:39 +00:00
timedout
94c5af40cf
fix: Automatically remove corrupted appservice registrations
2026-03-06 14:21:04 +00:00
Ben Botwin
5eb74bc1dd
feat: Readded support for reading registration tokens from a file
...
Co-authored-by: Ginger <ginger@gingershaped.computer >
2026-03-04 15:06:26 +00:00
Niklas Wojtkowiak
80c9bb4796
fix(rooms): prevent removing admin room alias
...
Only the server user can now remove the #admins alias, matching the
existing check for setting the alias. This prevents users from
accidentally breaking the admin room functionality.
fixes #1408
2026-03-04 15:05:24 +00:00
Ginger
83883a002c
fix(complement): Fix complement conflicting with first-run
...
- Disabled first-run mode when running Complement tests
- Updated logging config under complement to be a bit less verbose
- Changed test result and log output locations
2026-03-04 15:04:37 +00:00
31a05b9c
8dd4b71e0e
fix: make dropped PDU warning less useless
2026-03-04 14:58:01 +00:00
Jade Ellis
754959e80d
fix: Don't process admin escape commands for local users from federation
...
Reviewed-By: timedout <git@nexy7574.co.uk >
2026-03-03 19:55:50 +00:00
timedout
37888fb670
fix: Limit body read size of remote requests (CWE-409)
...
Reviewed-By: Jade Ellis <jade@ellis.link >
2026-03-03 19:54:34 +00:00