Ginger
6756bacfc8
refactor: Update logic for checking if a username is available
2026-05-26 14:27:10 -04:00
Ginger
4da00fa28a
feat: Add a page with some information about the server
2026-05-26 14:27:10 -04:00
Ginger
3c07857e1f
feat: Implement support for prompt=create in the authorization code flow
2026-05-26 14:27:09 -04:00
Ginger
5ca1341bf7
refactor: Use more consistent terminology for email validation pages
2026-05-26 14:27:09 -04:00
Ginger
baf76cd4dc
feat: Add support for registering accounts with the web UI
2026-05-26 14:27:09 -04:00
Ginger
53d51cf831
refactor: Change template context to allow using a CSP nonce
2026-05-26 14:27:09 -04:00
Ginger
4bbbbb854e
feat: Allow configuring the OAuth compatibility mode
2026-05-26 14:27:09 -04:00
Ginger
950d7ae3d9
feat: Add support for account management deeplinks
2026-05-26 14:27:09 -04:00
Ginger
7f36c44763
fix: Return the correct error code for expired access tokens
2026-05-26 14:27:09 -04:00
Ginger
3e8403de64
feat: Add a page for viewing a device's details
2026-05-26 14:27:09 -04:00
Ginger
ee73a2b36d
feat: Implement oauth token revocation
2026-05-26 14:27:09 -04:00
Ginger
3dc4c7d4fc
chore: Clippy fixes
2026-05-26 14:27:09 -04:00
Ginger
13917bb5c3
feat: Implement oauth auth code and refresh token flows
2026-05-26 14:27:09 -04:00
Ginger
f269fb5cfc
chore: Clippy fixes
2026-05-26 14:27:09 -04:00
Ginger
6b0b8344d4
feat: Implement a web-based account management dashboard
2026-05-26 14:27:09 -04:00
Ginger
02948960fa
feat: Implement oauth service and client registration
2026-05-26 14:27:09 -04:00
Ginger
74841b6711
refactor: Represent route auth information in the type system
2026-05-26 18:26:02 +00:00
timedout
dabbdc7517
fix: Don't be so aggressive when validating policy server signatures
2026-05-26 16:16:48 +01:00
timedout
b771b9d160
style: Fix typo
2026-05-25 18:26:48 +01:00
timedout
eb829c2951
fix: Ensure event_id is correctly stripped before verifying policy server signature
2026-05-25 18:20:57 +01:00
timedout
d32b39181a
fix: Don't return early if the policy server does something stupid
...
Spec compliance is for nerds I guess
2026-05-25 18:17:41 +01:00
timedout
72b99a1f84
style: Reformat
2026-05-25 18:17:40 +01:00
timedout
ae37f218a2
perf: Avoid cloning incoming PDUs to check them
...
Also allows us to store signatures on PDUs received over federation that we got a fresh signature for
2026-05-25 18:17:29 +01:00
timedout
40cecca103
feat: Add extract_signature helper
2026-05-25 18:17:13 +01:00
timedout
2a80a82f74
style: Document functions
2026-05-25 18:17:13 +01:00
timedout
fbf4eac2dc
fix: Ensure event_id is removed before policy-checking event
2026-05-25 18:17:13 +01:00
timedout
4784010702
fix: Ensure policy server signed with the correct key
2026-05-25 18:17:13 +01:00
timedout
1c88854a54
feat: Enable shutdown interrupt in ratelimit handler
2026-05-25 18:17:12 +01:00
timedout
e0fe71c708
feat: Follow spec more closely, code clean up, use ruma request type
2026-05-25 18:17:12 +01:00
timedout
0f0dcb4f58
fix: Return Forbidden instead of internal error when PS doesn't sign
2026-05-25 18:17:12 +01:00
timedout
367c42ad28
fix: Treat malformed policy config events as missing
2026-05-25 18:17:12 +01:00
timedout
c8e0f7ebd3
style: Reformat
2026-05-25 18:17:10 +01:00
timedout
fdc9aec534
fix: Verify policy server signatures on all events, not just timeline ones
...
style: Clarifications
style: Clippy
2026-05-25 18:16:55 +01:00
timedout
47051af392
feat: Update policy server implementation to be closer to latest spec
...
Untested
chore: Add news fragment
feat: Support stable policy servers
feat: Don't attempt erroneous loopback federation for policy server checks
refactor: Update PS upgrade to use new ruma
fix: Only check loopback via after attempting incoming verification
2026-05-25 18:14:54 +01:00
timedout
c1a6e649da
feat: Combine local & remote force join
2026-05-25 18:01:08 +01:00
timedout
1d172be503
style: Authentication -> authorization
2026-05-25 17:55:44 +01:00
timedout
4d27a935d6
perf: Move rejected events check
2026-05-25 17:27:56 +01:00
timedout
512a96f832
style: Warn -> debug_warn
2026-05-25 17:18:25 +01:00
timedout
3764faeefc
style: Reformat
2026-05-25 17:18:25 +01:00
timedout
5d4b7bfea3
fix: Store PDUs as outliers even when rejected
...
This prevents future network lookups if we've already rejected an event and see a reference to it again
2026-05-25 17:18:24 +01:00
timedout
6b835a327d
style: Rename unmark_pdu to clear_pdu_markers
2026-05-25 17:18:24 +01:00
timedout
a97f91e079
fix: Don't hard fail on events which depend on soft-failed events
2026-05-25 17:18:24 +01:00
timedout
f0401b4fc7
fix: Mark events as rejected in more places, correct soft-fail extremity behaviour
2026-05-25 17:18:24 +01:00
timedout
1f6cab9e2e
feat: Implement event rejection
...
Co-Authored-By: star <star@nexy7574.co.uk >
2026-05-25 17:18:23 +01:00
Ginger
ba2c123e82
feat: Remove support for server-side blurhashing
2026-05-14 13:22:17 +00:00
Ginger
6f83925a4f
fix: Use correct service name in membership service
2026-05-13 08:53:15 -04:00
Ginger
39a882c4a1
chore: Clippy fixes
2026-05-08 12:41:57 -04:00
Ginger
f091d3a732
fix: Correctly check for local users' existence
2026-05-08 11:48:20 -04:00
nex
ebf9a08cd1
fix: Correct typo that prevented state compressor service being loaded
2026-05-08 03:10:28 +00:00
Ginger
0d2eeed567
refactor: Move room joining logic into a new service
2026-05-06 14:01:50 -04:00