Logan Devine
480e975877
chore: clean up unused imports of ClientIp
2026-07-21 14:31:16 +00:00
Ginger
4c9426a13f
feat: Add support for OAuth2 device auth flow
2026-07-21 13:42:50 +00:00
Deniel9204
25264308ab
fix: Use the requested device ID when an appservice creates a device
...
The appservice branch of update_device_route (MSC4190 device creation)
generated a random device ID instead of using the one from the request
path, and dropped the requested display name. The PUT returned 200, but
the device the appservice asked for never existed, so every subsequent
request masquerading as that device failed with M_FORBIDDEN and one
orphaned random-ID device was left behind per attempt.
This made encrypted mautrix (bridgev2) bridges unable to start on
OIDC-enabled servers, where MSC4190 is the only available device
creation mechanism: /keys/upload failed on first start and /keys/query
on every restart. Combined with the pre-1f5e178c3f behaviour (400
"Token conflicts with an existing appservice token"), MSC4190 device
creation has never worked end-to-end in any release.
Create the device under the requested ID and forward the requested
display name.
2026-07-21 08:21:09 +02:00
Lake
bb8703e0f0
build: shear unused dependencies
2026-07-17 17:02:20 -05:00
timedout
789589ef37
chore: Remove redundant client IP extractions on individual routes
2026-07-17 12:57:48 +00:00
Ginger
3e55d08488
fix: Only return create prompt if registration is enabled
2026-07-17 12:49:15 +00:00
Erwan Leboucher
3a74ce6151
fix(client-ip): Fall back to peer IP instead of returning 500
2026-07-17 12:46:11 +00:00
Erwan Leboucher
eff454218c
fix(sync): Send full state for newly-joined rooms in incremental sync
2026-07-17 02:48:28 +00:00
Erwan Leboucher
8945cc9e10
fix(federation): Sign restricted join events before verification
2026-07-16 19:46:42 +00:00
N00byKing
232ec3f620
fix: Return 201 instead of 200 on oauth registration
...
See RFC 7591 at 3.2.1: "The server responds with an HTTP 201 Created status code [...]"
Fixes a failure in matrix-dart-sdk
2026-07-14 11:00:34 +02:00
Ginger
24c6474bd1
fix: Allow unstable and stable device id query together
2026-07-13 20:38:10 +00:00
Ginger
1f5e178c3f
fix: Properly handle appservice device creation
2026-07-13 08:50:48 -04:00
timedout
4001b99261
style: Make send_join's docstring more useful
2026-07-12 02:11:50 +00:00
timedout
fbf81fcdeb
fix: Opportunistically re-use room format rules when parsing incoming PDUs
2026-07-12 02:11:50 +00:00
timedout
87030a3a22
fix: Ensure PDU returned by create_hash_and_sign_event is itself signed
2026-07-12 02:11:50 +00:00
timedout
4f509fa113
fix: Convert room summary to federation format when sending invites
2026-07-12 02:11:50 +00:00
timedout
aa7ed885c0
fix: Check correct field name when determining event type
2026-07-12 02:11:50 +00:00
timedout
d5e6e617d1
fix: Remove redundant banned room server checks
...
These don't make sense here anyway
2026-07-12 02:11:50 +00:00
timedout
1f7680ad5f
feat: Give send_join the invite treatment
2026-07-12 02:11:50 +00:00
timedout
0c37a542d4
feat: Give send_leave the invite treatment
2026-07-12 02:11:50 +00:00
timedout
efd07da0d7
feat: Give send_knock the invite treatment
2026-07-12 02:11:50 +00:00
timedout
f0590e882a
fix: Only run ACL checks when we know we have live state
...
Prevents a potential bug where we might inadvertently reject valid invites because we have a stale state cache that blocks the sender or even ourselves
Also fixes the banned remote server room check by using the create event instead of room ID
2026-07-12 02:11:50 +00:00
timedout
7225bf25ae
feat: Persist create events received during the invite process
2026-07-12 02:11:50 +00:00
timedout
e52bb5db69
style: Move invite validation into own functions
2026-07-12 02:11:50 +00:00
timedout
995726923b
feat: Enforce new federation invite checks
...
These were introduced in spec v1.16 however we didn't implement them until now for compatibility.
2026-07-12 02:11:50 +00:00
Ginger
cfbe590f1c
fix: Do not require an access token on 3pid token request route
2026-07-11 19:40:25 +00:00
Ginger
ada0b3184b
fix: Properly sync newly created rooms
2026-07-11 19:21:19 +00:00
timedout
9d2ce72f73
style: Remove redundant length check for dag build
2026-07-11 17:27:42 +01:00
timedout
5868510df1
fix: Remove redundant "correct room ID" filter
2026-07-11 17:27:42 +01:00
timedout
b51a34c1c1
fix: Address review feedback
2026-07-11 17:27:42 +01:00
timedout
64a08262ca
perf: Change signature of build_local_dag to remove refmap hacks
2026-07-11 17:27:42 +01:00
timedout
99a5f2a9fb
refactor: Reduce complexity of incoming PDU handling
...
* Ignores any events pushed without a room ID
* Removes needless clones for PDU size checking
* Removes incorrect ACL check in incoming handler
* Fast-path handling already handled outlier events
* Remove redundant same-room checks, replace with useful ones
* Combine event rejection and persistence in a single function
* Additional safety assertions in upgrade task
* Split upgrade task into multiple subroutines for reduced cognitive complexity
* Only mutate current state and forward extremities in tandem
* Improve code documentation to better explain the logic flow
2026-07-11 17:27:42 +01:00
timedout
f9b532162f
fix: SEC20
...
Reviewed-By: Ginger <ginger@gingershaped.computer >
2026-07-09 17:58:59 +01:00
Ginger
ad4f7973cb
refactor: Remove list_local_users function
2026-07-07 11:33:47 -04:00
Ginger
431fb7330e
refactor: Remove /_conduwuit/ routes
2026-07-07 11:33:47 -04:00
Ginger
3467dffd94
fix: Adjust sync watcher logic to be more explicit
2026-07-05 00:42:44 +00:00
31a05b9c
6aab456466
fix: appservice masquerading requirement check
2026-07-04 18:21:51 +00:00
Ginger
d2b795d8cf
refactor: Logic cleanup
2026-07-04 13:15:54 -04:00
Ginger
e0a754483a
fix: Give invitees creator status when creating a trusted private v12 room
2026-07-04 13:06:49 -04:00
Ginger
514c3bbcbf
fix: Properly show email in account page when OIDC email_claim is set
2026-07-02 16:57:21 -04:00
Ginger
06afe4f1a3
feat: Add support for importing profile data from claims
2026-07-02 16:34:38 -04:00
Ginger
53d6887b86
refactor: Move profile field setting logic into users service
2026-07-02 16:34:38 -04:00
Ginger
c0cb4afd8a
feat: Initial implementation of OIDC
2026-07-02 16:34:38 -04:00
Ginger
69163b5391
refactor: Split remote and deactivated users into their own columns
2026-07-02 16:24:07 -04:00
Jade Ellis
eee4ef50d2
chore: merge 1818 nex/perf/get-missing-events
2026-07-01 18:45:08 +00:00
timedout
9b80a99aa7
style: De-duplicate build_local_dag definitions, replace outdated comment on unwrap safety
2026-07-01 19:15:22 +01:00
Ginger
2eff454787
feat: Finish implementing MSC4190
2026-06-29 16:46:07 +01:00
timedout
496ca52987
style: Missing semicolon on line 50
2026-06-29 13:56:22 +00:00
timedout
72f4c3cc53
chore: Remove unstable features that are now stable or abandoned
2026-06-29 13:56:22 +00:00
timedout
6a8a114197
feat: Update capabilities and advertise spec version v1.18
2026-06-29 13:56:22 +00:00
Logan Devine
Ginger
Deniel9204
Lake
timedout
Erwan Leboucher
N00byKing
31a05b9c
Jade Ellis