Commit Graph

1515 Commits

Author SHA1 Message Date
Ginger 6756bacfc8 refactor: Update logic for checking if a username is available 2026-05-26 14:27:10 -04:00
Ginger 4da00fa28a feat: Add a page with some information about the server 2026-05-26 14:27:10 -04:00
Ginger 3c07857e1f feat: Implement support for prompt=create in the authorization code flow 2026-05-26 14:27:09 -04:00
Ginger 5ca1341bf7 refactor: Use more consistent terminology for email validation pages 2026-05-26 14:27:09 -04:00
Ginger baf76cd4dc feat: Add support for registering accounts with the web UI 2026-05-26 14:27:09 -04:00
Ginger 53d51cf831 refactor: Change template context to allow using a CSP nonce 2026-05-26 14:27:09 -04:00
Ginger 4bbbbb854e feat: Allow configuring the OAuth compatibility mode 2026-05-26 14:27:09 -04:00
Ginger 950d7ae3d9 feat: Add support for account management deeplinks 2026-05-26 14:27:09 -04:00
Ginger 7f36c44763 fix: Return the correct error code for expired access tokens 2026-05-26 14:27:09 -04:00
Ginger 3e8403de64 feat: Add a page for viewing a device's details 2026-05-26 14:27:09 -04:00
Ginger ee73a2b36d feat: Implement oauth token revocation 2026-05-26 14:27:09 -04:00
Ginger 3dc4c7d4fc chore: Clippy fixes 2026-05-26 14:27:09 -04:00
Ginger 13917bb5c3 feat: Implement oauth auth code and refresh token flows 2026-05-26 14:27:09 -04:00
Ginger f269fb5cfc chore: Clippy fixes 2026-05-26 14:27:09 -04:00
Ginger 6b0b8344d4 feat: Implement a web-based account management dashboard 2026-05-26 14:27:09 -04:00
Ginger 02948960fa feat: Implement oauth service and client registration 2026-05-26 14:27:09 -04:00
Ginger 74841b6711 refactor: Represent route auth information in the type system 2026-05-26 18:26:02 +00:00
timedout dabbdc7517 fix: Don't be so aggressive when validating policy server signatures 2026-05-26 16:16:48 +01:00
timedout b771b9d160 style: Fix typo 2026-05-25 18:26:48 +01:00
timedout eb829c2951 fix: Ensure event_id is correctly stripped before verifying policy server signature 2026-05-25 18:20:57 +01:00
timedout d32b39181a fix: Don't return early if the policy server does something stupid
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
timedout 72b99a1f84 style: Reformat 2026-05-25 18:17:40 +01:00
timedout ae37f218a2 perf: Avoid cloning incoming PDUs to check them
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
timedout 40cecca103 feat: Add extract_signature helper 2026-05-25 18:17:13 +01:00
timedout 2a80a82f74 style: Document functions 2026-05-25 18:17:13 +01:00
timedout fbf4eac2dc fix: Ensure event_id is removed before policy-checking event 2026-05-25 18:17:13 +01:00
timedout 4784010702 fix: Ensure policy server signed with the correct key 2026-05-25 18:17:13 +01:00
timedout 1c88854a54 feat: Enable shutdown interrupt in ratelimit handler 2026-05-25 18:17:12 +01:00
timedout e0fe71c708 feat: Follow spec more closely, code clean up, use ruma request type 2026-05-25 18:17:12 +01:00
timedout 0f0dcb4f58 fix: Return Forbidden instead of internal error when PS doesn't sign 2026-05-25 18:17:12 +01:00
timedout 367c42ad28 fix: Treat malformed policy config events as missing 2026-05-25 18:17:12 +01:00
timedout c8e0f7ebd3 style: Reformat 2026-05-25 18:17:10 +01:00
timedout fdc9aec534 fix: Verify policy server signatures on all events, not just timeline ones
style: Clarifications

style: Clippy
2026-05-25 18:16:55 +01:00
timedout 47051af392 feat: Update policy server implementation to be closer to latest spec
Untested

chore: Add news fragment

feat: Support stable policy servers

feat: Don't attempt erroneous loopback federation for policy server checks

refactor: Update PS upgrade to use new ruma

fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
timedout c1a6e649da feat: Combine local & remote force join 2026-05-25 18:01:08 +01:00
timedout 1d172be503 style: Authentication -> authorization 2026-05-25 17:55:44 +01:00
timedout 4d27a935d6 perf: Move rejected events check 2026-05-25 17:27:56 +01:00
timedout 512a96f832 style: Warn -> debug_warn 2026-05-25 17:18:25 +01:00
timedout 3764faeefc style: Reformat 2026-05-25 17:18:25 +01:00
timedout 5d4b7bfea3 fix: Store PDUs as outliers even when rejected
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
timedout 6b835a327d style: Rename unmark_pdu to clear_pdu_markers 2026-05-25 17:18:24 +01:00
timedout a97f91e079 fix: Don't hard fail on events which depend on soft-failed events 2026-05-25 17:18:24 +01:00
timedout f0401b4fc7 fix: Mark events as rejected in more places, correct soft-fail extremity behaviour 2026-05-25 17:18:24 +01:00
timedout 1f6cab9e2e feat: Implement event rejection
Co-Authored-By: star <star@nexy7574.co.uk>
2026-05-25 17:18:23 +01:00
Ginger ba2c123e82 feat: Remove support for server-side blurhashing 2026-05-14 13:22:17 +00:00
Ginger 6f83925a4f fix: Use correct service name in membership service 2026-05-13 08:53:15 -04:00
Ginger 39a882c4a1 chore: Clippy fixes 2026-05-08 12:41:57 -04:00
Ginger f091d3a732 fix: Correctly check for local users' existence 2026-05-08 11:48:20 -04:00
nex ebf9a08cd1 fix: Correct typo that prevented state compressor service being loaded 2026-05-08 03:10:28 +00:00
Ginger 0d2eeed567 refactor: Move room joining logic into a new service 2026-05-06 14:01:50 -04:00