lafleur
d916bb9f21
support OIDC private clients
2025-11-11 11:34:26 -05:00
lafleur
4e50064740
oidc: add debug/trace logs
2025-11-11 11:34:26 -05:00
lafleur
56bd11013f
oidc authorize: make response_mode optional
2025-11-11 11:34:26 -05:00
lafleur
8893bd1613
fix build warning : explicit cast
2025-11-11 11:34:26 -05:00
nexy7574
e7b9446b5a
fix build errors
2025-11-11 11:34:26 -05:00
Jade Ellis
bc23071dd4
fixup! fix OidcResponse: reimplement IntoResponse
2025-11-11 11:34:26 -05:00
lafleur
b602be0921
fix OidcResponse: reimplement IntoResponse
2025-11-11 11:34:26 -05:00
Jade Ellis
0c333c9a05
chore: fix up
2025-11-11 11:34:26 -05:00
lafleur
b9b3a466f4
oidc: small cosmetics + typos
2025-11-11 11:34:26 -05:00
lafleur
3803f06392
remove stale debugging logs
...
I don't have the hd space to do debug builds, so I use tracing::info to debug
on release builds. Silly, right ?
2025-11-11 11:34:26 -05:00
lafleur
cadcbd7d49
use config.server_name as title in OIDC pages
2025-11-11 11:34:26 -05:00
lafleur
144036f58b
fix oidc_provider discovery message and docstrings
2025-11-11 11:34:26 -05:00
lafleur
2afe656e12
typos oidc_provider discovery
2025-11-11 11:34:26 -05:00
lafleur
c89dfe38da
fix oidc_provider config section's doc generation
2025-11-11 11:34:26 -05:00
Jade Ellis
1ce1254514
fix: Don't crash when the client URL doesn't have a domain
...
Having a URL with an IP literal, for example, is allowed
2025-11-11 11:34:26 -05:00
Jade Ellis
5bd1bedad0
fix: Use correct CSP for login page
2025-11-11 11:34:26 -05:00
Jade Ellis
68ca6eabe3
chore: Ignore formatting PR in blame
2025-11-11 11:34:26 -05:00
Jade Ellis
e75f5cbbed
chore: Fix most clippy issue, format & typos
2025-11-11 11:34:26 -05:00
lafleur
97c692b052
remove stale dependency oxide-auth-axum
2025-11-11 11:34:26 -05:00
lafleur
a586ea390c
feat(oidc_provider) use askama templates
...
Implements a custom OidcResponse with CSP headers and oxide-auth processing
compatibility.
2025-11-11 11:34:26 -05:00
lafleur
dba528a5e0
rebase on current main
2025-11-11 11:34:26 -05:00
lafleur
aafc93f6fb
impl MSC2966: register clients dynamically
2025-11-11 11:34:26 -05:00
lafleur
cd0c3886fb
impl MSC2964: OIDC token flow
2025-11-11 11:34:26 -05:00
lafleur
be4ccbc11b
impl MSC2965: self-advertise as OIDC authentication provider
...
MSC2965 proposes to let the homeserver advertise its current OIDC authentication
issuer. These changes let conduwuit advertise itself as the issuer when
[global.auth.enable_oidc_login] is set. It also advertises its account management
endpoint if [global.auth.enable_oidc_account_management] is set.
None of these endpoints are implemented. This commit only implements the bare
advertisement, as requested by the MSC.
2025-11-11 11:34:26 -05:00
Ginger
9a5ba6171f
ci: Remove hardcoded default in setup-rust action
2025-11-11 10:37:03 -05:00
renovate
da3efa05b5
chore(Nix): Updated flake hashes
2025-11-11 15:07:05 +00:00
Ginger
b53ba2eef4
ci: Give flake hashes workflow permissions to push
2025-11-11 15:07:05 +00:00
Jade Ellis
33019c4529
chore: Update rust
2025-11-11 15:07:05 +00:00
Jade Ellis
f7bd9eaba8
chore(clippy): Remove old redundant lint
2025-11-11 13:59:12 +00:00
Jade Ellis
f9c42bbadc
refactor(clippy): Unused self
2025-11-11 13:59:12 +00:00
Jade Ellis
fe62c39501
style(clippy): Remove unneeded allocation
2025-11-11 13:59:12 +00:00
Jade Ellis
35320cf0d4
style(clippy): Elide lifetimes
2025-11-11 13:59:12 +00:00
Jade Ellis
eaf6a889c2
style(clippy): Unnecessary move
...
Function is used in a single place and the move doesn't seem to provide
any safety benefits, so 💨
2025-11-11 13:59:12 +00:00
Jade Ellis
b04f1332db
style(clippy): Remove dead code
...
Looks like this has been dead since we forked at least, seems pretty
safe to remove
2025-11-11 13:59:12 +00:00
Jade Ellis
9e4bcda17b
style(clippy): Make the event graph generic over the hasher
2025-11-11 13:59:12 +00:00
Jade
45e4053883
fix: Don't break when encountering the server user, as there may be real users after
2025-11-10 23:56:02 +00:00
Jade Ellis
c0b617f4f1
feat(sentry): Include the commit hash in the release name
2025-11-10 16:57:24 +00:00
Jade Ellis
a28cfd284b
chore(deps): Upgrade tracing / telemetry ecosystem
...
We no longer need the tracing patches, so I've removed those and
unpinned them in renovate.
otel's jaeger propagator is deprecated too, so it's replaced with the
builtin W3C TraceContext propagator
2025-11-10 16:42:28 +00:00
Jade Ellis
a5b9cb69bd
fix(deps): Pin hyper-util back to the patched version
2025-11-10 15:56:09 +00:00
Renovate Bot
3c8f252a14
chore(deps): update opentelemetry-rust monorepo to 0.31.0
2025-11-10 05:03:16 +00:00
Jade
8a63818f31
feat: Enable sentry compilation feature
2025-11-10 01:33:50 +00:00
Renovate Bot
5b5e26e529
chore(deps): update dependency cargo-bins/cargo-binstall to v1.15.10
2025-11-09 19:05:26 +00:00
aviac
866769c054
chore: replace serde-yml with serde-saphyr
...
- serde-yml has an un-addressed [security issue][sec-issue]
- [saphyr][saphyr] is a pretty recent and active crate that deals with YAML parsing
- based on that, someone recently created [serde-saphyr][serde-saphyr]
---
The change was pretty straightforward and mostly "just a search and replace". The new crate has it's `Error` type split
into serialization and derserialization errors. Hence I created one Continuwuity-Error variant for each instead of just
having a single `Yaml` variant. This was already done previously with the `Toml` errors so I thought this would be
rather acceptable.
[sec-issue]: https://github.com/advisories/GHSA-gfxp-f68g-8x78
[saphyr]: https://github.com/saphyr-rs/saphyr
[serde-saphyr]: https://github.com/saphyr-rs/saphyr/issues/66#issuecomment-3353212289
2025-11-09 11:23:32 +01:00
Renovate Bot
2e3b71f5f1
chore(deps): update rust-patch-updates
2025-11-08 23:57:36 +00:00
Jade
1312d61141
revert f7867cf6ca
...
revert ci: Clean up old images
2025-11-08 23:56:02 +00:00
Jade Ellis
f7867cf6ca
ci: Clean up old images
2025-11-08 23:29:25 +00:00
Jade Ellis
2ca6887a5d
chore(ci): Fix merge error
2025-11-08 23:08:10 +00:00
Jade Ellis
368685f8cd
ci: Re-run mirror script when files change
2025-11-08 23:00:37 +00:00
Jade Ellis
ad2d192b94
ci: Use PATs for github registry
...
https://stackoverflow.com/questions/76821352/how-can-you-authenticate-to-the-github-container-registry-using-a-github-app
thx github
2025-11-08 23:00:31 +00:00
Jade Ellis
3214e94cdb
ci: Mirror to ghcr
2025-11-08 22:59:27 +00:00