Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Stop putting a time caveat on access tokens | Richard van der Hoff | 2016-11-29 | 1 | -12/+0 |
| | | | | | | | | The 'time' caveat on the access tokens was something of a lie, since we weren't enforcing it; more pertinently its presence stops us ever adding useful time caveats. Let's move in the right direction by not lying in our caveats. | ||||
* | rest/client/v1/register: use the correct requester in createUser | Patrik Oldsberg | 2016-10-06 | 1 | -3/+6 |
| | | | | Signed-off-by: Patrik Oldsberg <patrik.oldsberg@ericsson.com> | ||||
* | storage/appservice: make appservice methods only relying on the cache ↵ | Patrik Oldsberg | 2016-10-06 | 1 | -1/+1 |
| | | | | synchronous | ||||
* | Add helper function for getting access_tokens from requests | Mark Haines | 2016-09-09 | 1 | -7/+5 |
| | | | | | | Rather than reimplementing the token parsing in the various places. This will make it easier to change the token parsing to allow access_tokens in HTTP headers. | ||||
* | Dont invoke get_handlers fromClientV1RestServlet | Erik Johnston | 2016-08-12 | 1 | -0/+2 |
| | | | | | | hs.get_handlers() can not be invoked from split out processes. Moving the invocations down a level means that we can slowly split out individual servlets. | ||||
* | Merge pull request #933 from matrix-org/rav/type_annotations | Richard van der Hoff | 2016-07-20 | 1 | -0/+4 |
|\ | | | | | Type annotations | ||||
| * | Type annotations | Richard van der Hoff | 2016-07-19 | 1 | -0/+4 |
| | | | | | | | | | | Add some type annotations to help PyCharm (in particular) to figure out the types of a bunch of things. | ||||
* | | Further registration refactoring | Richard van der Hoff | 2016-07-19 | 1 | -1/+3 |
|/ | | | | | | | | | | | | | | * `RegistrationHandler.appservice_register` no longer issues an access token: instead it is left for the caller to do it. (There are two of these, one in `synapse/rest/client/v1/register.py`, which now simply calls `AuthHandler.issue_access_token`, and the other in `synapse/rest/client/v2_alpha/register.py`, which is covered below). * In `synapse/rest/client/v2_alpha/register.py`, move the generation of access_tokens into `_create_registration_details`. This means that the normal flow no longer needs to call `AuthHandler.issue_access_token`; the shared-secret flow can tell `RegistrationHandler.register` not to generate a token; and the appservice flow continues to work despite the above change. | ||||
* | Bug fix: expire invalid access tokens | Negar Fazeli | 2016-07-13 | 1 | -1/+1 |
| | |||||
* | Check that there are no null bytes in user and passsword | Erik Johnston | 2016-07-06 | 1 | -0/+6 |
| | |||||
* | Add null separator to hmac | Erik Johnston | 2016-07-06 | 1 | -0/+2 |
| | |||||
* | Add an admin option to shared secret registration | Erik Johnston | 2016-07-05 | 1 | -0/+1 |
| | |||||
* | Protect password when registering using shared secret | Erik Johnston | 2016-07-05 | 1 | -4/+7 |
| | |||||
* | Fix style violations | Kent Shikama | 2016-07-04 | 1 | -1/+2 |
| | | | | Signed-off-by: Kent Shikama <kent@kentshikama.com> | ||||
* | Use .get() instead of [] to access password_hash | Kent Shikama | 2016-07-04 | 1 | -1/+1 |
| | |||||
* | Optionally include password hash in createUser endpoint | Kent Shikama | 2016-07-03 | 1 | -1/+3 |
| | | | | Signed-off-by: Kent Shikama <kent@kentshikama.com> | ||||
* | Create user with expiry | Negi Fazeli | 2016-05-13 | 1 | -0/+71 |
| | | | | | | - Add unittests for client, api and handler Signed-off-by: Negar Fazeli <negar.fazeli@ericsson.com> | ||||
* | Add a parse_json_object function | Mark Haines | 2016-03-09 | 1 | -12/+2 |
| | | | | | to deduplicate all the copy+pasted _parse_json functions. Also document the parse_.* functions. | ||||
* | Fix relative imports so they work in both py3 and py27 | Mark Haines | 2016-03-08 | 1 | -1/+1 |
| | |||||
* | Rename config field to reflect yaml name | Daniel Wagner-Hall | 2016-02-03 | 1 | -2/+2 |
| | |||||
* | Fix flake8 warnings for new flake8 | Daniel Wagner-Hall | 2016-02-02 | 1 | -1/+2 |
| | |||||
* | copyrights | Matthew Hodgson | 2016-01-07 | 1 | -1/+1 |
| | |||||
* | Update endpoints to reflect current spec | Daniel Wagner-Hall | 2015-12-02 | 1 | -1/+1 |
| | |||||
* | Host /unstable and /r0 versions of r0 APIs | Daniel Wagner-Hall | 2015-12-01 | 1 | -2/+2 |
| | |||||
* | Factor out user id validation checks | Erik Johnston | 2015-03-18 | 1 | -9/+5 |
| | |||||
* | Do more validation of incoming request | Erik Johnston | 2015-03-18 | 1 | -3/+3 |
| | |||||
* | Use 403 instead of 400 | Erik Johnston | 2015-03-16 | 1 | -1/+1 |
| | |||||
* | Implement registering with shared secret. | Erik Johnston | 2015-03-13 | 1 | -2/+55 |
| | |||||
* | Always allow AS to register | Erik Johnston | 2015-02-20 | 1 | -3/+5 |
| | |||||
* | Disable registration if config option was set. | Erik Johnston | 2015-02-19 | 1 | -0/+4 |
| | |||||
* | Merge pull request #50 from matrix-org/application-services | Mark Haines | 2015-02-13 | 1 | -1/+23 |
|\ | | | | | Application Services | ||||
| * | Add m.login.application_service registration procedure. | Kegan Dougal | 2015-02-05 | 1 | -1/+23 |
| | | | | | | | | | | This allows known application services to register any user ID under their own user namespace(s). | ||||
* | | Blunty replace json with simplejson | Erik Johnston | 2015-02-11 | 1 | -1/+1 |
|/ | |||||
* | Extract the client v1 base RestServlet to a separate class | Mark Haines | 2015-01-23 | 1 | -2/+2 |
| | |||||
* | Move rest APIs back under the rest directory | Mark Haines | 2015-01-22 | 1 | -0/+291 |