Commit Graph
127 Commits
Author SHA1 Message Date
timedout 7a6bea70b2 fix: SEC34
Reviewed-By: Jade Ellis <jade@ellis.link>
Reviewed-By: Ginger <ginger@gingershaped.computer>
Reviewed-By: Jacob Taylor <jacob@explodie.org>
2026-11-10 20:41:19 +00:00
Ginger 4d7a7d6cdc chore(deps): Clean up features and remove unused dependencies 2026-11-10 13:24:05 -05:00
Jade Ellis 6075e6e3ad chore: Upgrade other dependencies 2026-11-08 17:41:23 +00:00
Renovate Bot 7358712fb9 chore(deps): update rust crate tower-sec-fetch to 0.2.0 2026-10-29 13:40:37 +00:00
Jade Ellis 18f5f4fbfa refactor(threepid): Use SyncMutex and decouple guard from ValidSession
Change threepid sessions and send_attempts to SyncMutex and avoid

holding the sessions mutex across callers of get_valid_session.
2026-10-28 21:47:09 +00:00
Jade Ellis 98ae1fcaa1 refactor(oauth): Avoid holding pending grants lock across async calls
Convert pending grants and tickets to SyncMutex and scope locks tightly

before awaiting external calls in grant_info and redeem_token.
2026-10-28 21:46:29 +00:00
Ginger 81c62c4a35 fix: Silence tower_sessions warning 2026-10-25 13:47:36 -04:00
Ginger ef1378509e fix: Remove deactivate link from account page 2026-10-24 15:14:01 -04:00
timedout 9c27441acf style: Reformat with nightly 2026-10-23 23:37:51 +02:00
Ginger 783a68cc90 fix: Add link to the account management panel to the first run web UI 2026-10-21 18:27:42 -04:00
Ginger 18f2118c42 fix: Make missing scope descriptions very obvious 2026-10-05 14:22:53 +00:00
Ginger 240c806d70 fix: Small cosmetic fixes 2026-10-05 14:22:53 +00:00
Ginger 0d48c9681d feat: Give scope lists and device cards a fresh coat of paint 2026-10-05 14:22:53 +00:00
Ginger e963adf524 feat: Add support for MSC4363 2026-10-05 14:22:53 +00:00
Ginger 823ee9f6e1 feat: Add support for MSC4484 2026-10-05 14:22:53 +00:00
Ginger 39bee607c0 refactor: Remove recaptcha-verify 2026-10-03 15:03:34 +00:00
Lake 8ab842b198 deps: shear the dependencies again 2026-09-12 15:07:42 -05:00
Lake 439f266d8f chore: resolve conflicts with main 2026-09-12 15:07:35 -05:00
Ginger 644d247007 fix: Size background gradient relative to the viewport 2026-09-11 14:14:39 +00:00
Ginger 32c8ff5b1b feat: Show profile banners in web UI 2026-09-11 14:14:39 +00:00
Ginger b32264dc4d fix: Don't let OIDC users try to deactivate their accounts 2026-09-10 19:55:50 +00:00
Ginger 7997cda678 fix: Don't show a broken back link when removing a device 2026-09-10 19:54:45 +00:00
Erwan Leboucher fe38efbb63 feat(oidc): Show the provider's name and icon on the login page 2026-09-10 14:08:03 +00:00
Ginger 9fbabe2210 chore: Reformat with latest nightly 2026-09-01 12:55:05 -04:00
timedout dd5b9c6c46 feat: Disable challengeless registration without signing a waiver 2026-08-26 18:01:24 +01:00
timedout 7b3e3a26bb fix: Don't panic when receiving PDUs with illegal auth events
Apparently some servers do this??
2026-08-18 17:50:18 +01:00
ginger b502f74c34 fix: Remove mystery additional admin room notice 2026-08-17 17:55:59 +00:00
timedout 08d3d8445f chore: Merge branch 'nex/feat/registration-messages' 2026-08-12 14:25:15 +01:00
Renovate Bot 9080494464 chore(deps): update rust crate validator to 0.21.0 2026-08-08 12:25:34 +00:00
Henry-Hiles 9f20633457 fix: Add missing double quote in about template 2026-08-04 15:16:47 +00:00
Ginger 226a3917af feat: Show dehydrated devices in account panel 2026-07-27 14:36:01 -04:00
timedout 399005abc6 chore: Move registration notice logic 2026-07-27 16:46:36 +01:00
timedout 7fdc7f9216 fix: Ensure client IP is logged in all registration alert paths 2026-07-27 15:20:07 +00:00
timedout 795cdd3740 fix: Re-introduce registration alerts 2026-07-27 15:20:07 +00:00
timedout 0c96170063 fix: Ensure client IP is logged in all registration alert paths 2026-07-27 16:07:32 +01:00
timedout 9a80f1c2a1 fix: Re-introduce registration alerts 2026-07-27 15:33:38 +01:00
ginger 4f1af01bdc chore: Formatting 2026-07-21 18:26:02 +00:00
ginger 1ff0d8d5a4 fix: Fix oauth auth code flow grant page being broken 2026-07-21 18:23:39 +00:00
Ginger 4c9426a13f feat: Add support for OAuth2 device auth flow 2026-07-21 13:42:50 +00:00
Lake 75b725908a style(web): format Cargo.toml 2026-07-17 17:02:21 -05:00
Lake bb8703e0f0 build: shear unused dependencies 2026-07-17 17:02:20 -05:00
Ginger 3e55d08488 fix: Only return create prompt if registration is enabled 2026-07-17 12:49:15 +00:00
Koen Oostveen 446ae93ad7 fix(web): Change incorrect deeplink for deleting a device 2026-07-13 13:45:46 +00:00
Ginger d9c2f04d73 fix: Correctly handle preferred_username claim 2026-07-11 19:21:33 +00:00
Ginger 0b1e24a9ad fix: Add admin command to ensure all appservice puppets are active 2026-07-11 14:55:43 +00:00
Ginger 7e6bb7822e fix: Make "remove device" link on device details page more obvious 2026-07-09 18:11:26 +00:00
Ginger 5f9d609029 fix: Horizontally scroll overflowing pres 2026-07-09 18:11:26 +00:00
Ginger f866b94818 fix: Explicitly constrain avatar size 2026-07-09 18:11:26 +00:00
Ginger 8714fa2ea7 fix: Minor CSS and layout tweaks 2026-07-09 18:11:26 +00:00
Ginger 021dfc2424 fix: Fix error page on small screens 2026-07-09 18:11:26 +00:00