summary refs log tree commit diff
Commit message (Collapse)AuthorAgeFilesLines
* Reject unknown UI auth sessions (instead of silently generating a new one) ↵Patrick Cloke2020-04-202-65/+95
| | | | (#7268)
* On catchup, process each row with its own stream id (#7286)Richard van der Hoff2020-04-203-5/+72
| | | | | | Other parts of the code (such as the StreamChangeCache) assume that there will not be multiple changes with the same stream id. This code was introduced in #7024, and I hope this fixes #7206.
* Use a template for the SSO success page to allow for customization. (#7279)Patrick Cloke2020-04-176-37/+66
|
* Added explicit Python build tools to snap requirements (#7213)James2020-04-172-0/+5
| | | Signed-off-by: James Hebden <james@ec0.io>
* Improve type checking in `replication.tcp.Stream` (#7291)Richard van der Hoff2020-04-175-122/+143
| | | | | | | The general idea here is to get rid of the type: ignore annotations on all of the current_token and update_function assignments, which would have caught #7290. After a bit of experimentation, it seems like the least-awful way to do this is to pass the offending functions in as parameters to the Stream constructor. Unfortunately that means that the concrete implementations no longer have the same constructor signature as Stream itself, which means that it gets hard to correctly annotate STREAMS_MAP. I've also introduced a couple of new types, to take out some duplication.
* Clarify the comments for media_storage_providers options (#7272)Tristan Lins2020-04-173-8/+7
|
* Do not treat display names as globs for push rules. (#7271)Patrick Cloke2020-04-164-30/+106
|
* Fix 'generator object is not subscriptable' error (#7290)Richard van der Hoff2020-04-162-1/+3
| | | | | | Some of the query functions return generators rather than lists, so we can't index into the result. Happily we already have a copy of the results. (think this was introduced in #7024)
* Convert auth handler to async/await (#7261)Patrick Cloke2020-04-1510-170/+224
|
* Add notes to the changelog about an additional SSO template. (#7259)Patrick Cloke2020-04-152-4/+9
|
* Allow specifying the value of Accept-Language header for URL previews (#7265)Andrew Morgan2020-04-155-2/+116
|
* Fix a potentially-huge sql query (#7274)Richard van der Hoff2020-04-152-7/+17
| | | | | We could end up looking up tens of thousands of events, which could cause large amounts of data to be logged to the postgres log.
* Fix the parameters of a test fixture (#7243)Zay11Zay2020-04-142-1/+2
|
* Only register devices edu handler on the master process (#7255)Andrew Morgan2020-04-142-7/+12
|
* Add setting to nginx configuration to allow larger file uploads (#7251)Ryan Hovland2020-04-132-0/+4
|
* Check on room creation if the user is allowed to publish the room to the ↵PeerD2020-04-132-0/+8
| | | | room directory. (#7260)
* typosMatthew Hodgson2020-04-112-2/+2
|
* Default PL100 to enable encryption in a room (#7230)Andrew Morgan2020-04-094-4/+299
|
* Do not allow a deactivated user to login via SSO. (#7240)Patrick Cloke2020-04-098-10/+110
|
* Unblacklist /upgrade creates a new room (#7228)Andrew Morgan2020-04-092-2/+1
| | | | | | This commit was originally merged in #7228 but reverted in #7254 as the associated sytest was not ready yet. Now that it is, we can merge this again.
* Add matrix-synapse-shared-secret-auth as an example password provider (#7248)Andrew Morgan2020-04-092-0/+2
|
* Revert "Unblacklist /upgrade creates a new room (#7228)" (#7254)Andrew Morgan2020-04-092-1/+2
| | | This reverts commit 59f0ca8b87c15a314859d94978d90a8aa0e7543b.
* Unblacklist /upgrade creates a new room (#7228)Andrew Morgan2020-04-092-2/+1
|
* Fix --help commandline argument (#7249)Richard van der Hoff2020-04-092-16/+9
| | | | | | | | I don't really remember why this was so complicated; I think it dates back to the time when we had to instantiate the Config classes before we could call `add_arguments` - ie before #5597. In any case, I don't think there's a good reason for it any more, and the impact of it being complicated is that `--help` doesn't work correctly.
* Make it clearer to the user that they haven't overridden onLogin/Register ↵Andrew Morgan2020-04-093-3/+3
| | | | (#7237)
* Upgrade jQuery to 3.x on fallback login/registration screens (#7236)Andrew Morgan2020-04-099-16/+15
|
* Fix bad merge of CHANGES.mdRichard van der Hoff2020-04-081-5/+1
|
* Remove redundant checks on `daemonize` from synctl (#7233)Richard van der Hoff2020-04-082-9/+12
| | | | | We pass --daemonize on the commandline, which (since at least #4853) overrides whatever the config file, so there is no need for it to be set in the config file.
* Make systemd-with-workers doc official (#7234)Richard van der Hoff2020-04-0810-194/+134
| | | | Simplify and update this documentation, and make it part of the core dist.
* Fix changelog for #7235Brendan Abolivier2020-04-082-1/+1
|
* Add documentation to password_providers config option (#7238)Andrew Morgan2020-04-084-4/+32
|
* bg update to clear out duplicate outbound_device_list_pokes (#7193)Richard van der Hoff2020-04-076-13/+234
| | | | We seem to have some duplicates, which could do with being cleared out.
* Merge pull request #7239 from matrix-org/rav/replication_cleanupRichard van der Hoff2020-04-074-32/+36
|\ | | | | Miscellaneous cleanups to replication code
| * changelogRichard van der Hoff2020-04-071-0/+1
| |
| * Handle one-word replication commands correctlyRichard van der Hoff2020-04-071-3/+11
| | | | | | | | | | `REPLICATE` is now a valid command, and it's nice if you can issue it from the console without remembering to call it `REPLICATE ` with a trailing space.
| * Fix warnings about not calling superclass constructorRichard van der Hoff2020-04-071-15/+24
| | | | | | | | | | | | Separate `SimpleCommand` from `Command`, so that things which don't want to use the `data` property don't have to, and thus fix the warnings PyCharm was giving me about not calling `__init__` in the base class.
| * Remove vestigal references to SYNC replication commandRichard van der Hoff2020-04-072-14/+0
| | | | | | | | We've ripped pretty much all of this out: let's remove the remains.
* | Convert delete_url_cache_media to async/await. (#7241)Patrick Cloke2020-04-072-2/+3
| |
* | Add typing information to federation_server. (#7219)Patrick Cloke2020-04-073-66/+109
| |
* | Fix typo in the login fallback javascript (#7235)Brendan Abolivier2020-04-072-1/+2
|/ | | | | * Fix typo in the login fallback javascript * Changelog
* Remove sent outbound device list pokes from the database (#7192)Richard van der Hoff2020-04-073-2/+24
| | | They just get in the way.
* Fix race in replication (#7226)Erik Johnston2020-04-074-49/+68
| | | | Fixes a race between handling `POSITION` and `RDATA` commands. We do this by simply linearizing handling of them.
* Move server command handling out of TCP protocol (#7187)Erik Johnston2020-04-074-269/+237
| | | This completes the merging of server and client command processing.
* Add information about .well-known to Debian installation. (#7227)Patrick Cloke2020-04-063-7/+18
|
* Remove stream before/after debug log lines (#7207)Andrew Morgan2020-04-062-2/+1
|
* Improve error responses when a remote server doesn't allow you to access its ↵Andrew Morgan2020-04-063-24/+33
| | | | public rooms list (#6899)
* Move client command handling out of TCP protocol (#7185)Erik Johnston2020-04-0612-371/+378
| | | The aim here is to move the command handling out of the TCP protocol classes and to also merge the client and server command handling (so that we can reuse them for redis protocol). This PR simply moves the client paths to the new `ReplicationCommandHandler`, a future PR will move the server paths too.
* Server notices: Dissociate room creation/lookup from invite (#7199)Brendan Abolivier2020-04-044-22/+154
| | | | | | | | | Fixes #6815 Before figuring out whether we should alert a user on MAU, we call get_notice_room_for_user to get some info on the existing server notices room for this user. This function, if the room doesn't exist, creates it and invites the user in it. This means that, if we decide later that no server notice is needed, the user gets invited in a room with no message in it. This happens at every restart of the server, since the room ID returned by get_notice_room_for_user is cached. This PR fixes that by moving the inviting bit to a dedicated function, that's only called when the server actually needs to send a notice to the user. A potential issue with this approach is that the room that's created by get_notice_room_for_user doesn't match how that same function looks for an existing room (i.e. it creates a room that doesn't have an invite or a join for the current user in it, so it could lead to a new room being created each time a user syncs), but I'm not sure this is a problem given it's cached until the server restarts, so that function won't run very often. It also renames get_notice_room_for_user into get_or_create_notice_room_for_user to make what it does clearer.
* Support CAS in UI Auth flows. (#7186)Patrick Cloke2020-04-035-83/+131
|
* Extend web_client_location to handle absolute URLs (#7006)Martin Milata2020-04-034-9/+30
| | | | | Log warning when filesystem path is used. Signed-off-by: Martin Milata <martin@martinmilata.cz>
* Add some benchmarks for LruCache (#6446)Amber Brown2020-04-035-5/+91
|
* Convert http.HTTPStatus objects to their int equivalent (#7188)Andrew Morgan2020-04-032-1/+9
|
* Reduce the number of calls to `resource.getrusage` (#7183)Richard van der Hoff2020-04-032-39/+64
| | | Let's just call `getrusage` once on each logcontext change, rather than twice.
* Merge pull request #7190 from matrix-org/rav/one_bg_update_at_a_timeRichard van der Hoff2020-04-036-72/+99
|\ | | | | Only run one background update at a time
| * Update docstring per review commentsRichard van der Hoff2020-04-031-1/+1
| |
| * review commentRichard van der Hoff2020-04-021-1/+1
| |
| * changelogRichard van der Hoff2020-03-311-0/+1
| |
| * Only run one background update at a timeRichard van der Hoff2020-03-313-27/+68
| |
| * Make do_next_background_update return a boolRichard van der Hoff2020-03-312-10/+8
| | | | | | | | returning a None or an int that we don't use is confusing.
| * Set a logging context while running the bg updatesRichard van der Hoff2020-03-311-4/+7
| | | | | | | | | | This mostly just reduces the amount of "running from sentinel context" spam during unittest setup.
| * Make `has_completed_background_updates` asyncRichard van der Hoff2020-03-312-5/+6
| | | | | | | | (Almost) everywhere that uses it is happy with an awaitable.
| * Remove unused `start_background_update`Richard van der Hoff2020-03-312-26/+9
| | | | | | | | This was only used in a unit test, so let's just inline it in the test.
* | Remove some `run_in_background` calls in replication code (#7203)Richard van der Hoff2020-04-032-8/+9
| | | | | | | | | | | | By running this stuff with `run_in_background`, it won't be correctly reported against the relevant CPU usage stats. Fixes #7202
* | Merge branch 'master' into developRichard van der Hoff2020-04-034-7/+62
|\ \
| * | Revert "Revert "Merge pull request #7153 from ↵Richard van der Hoff2020-04-034-1/+28
| | | | | | | | | | | | | | | | | | matrix-org/babolivier/sso_whitelist_login_fallback"" This reverts commit 0122ef1037c8bfe826ea09d9fc7cd63fb9c59fd1.
| * | Revert "Revert "Improve the UX of the login fallback when using SSO (#7152)""Richard van der Hoff2020-04-033-22/+32
| | | | | | | | | | | | This reverts commit 8d4cbdeaa9765ae0d87ec82b053f12ed8162f6f5.
| * | Merge tag 'v1.12.3'Richard van der Hoff2020-04-035-10/+46
| |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | Synapse 1.12.3 (2020-04-03) =========================== - Remove the the pin to Pillow 7.0 which was introduced in Synapse 1.12.2, and correctly fix the issue with building the Debian packages. ([\#7212](https://github.com/matrix-org/synapse/issues/7212))
| | * | tweak changelog v1.12.3 github/release-v1.12.3 release-v1.12.3Richard van der Hoff2020-04-031-5/+2
| | | |
| | * | 1.12.3Richard van der Hoff2020-04-034-4/+16
| | | |
| | * | Fix the debian build in a better way. (#7212)Richard van der Hoff2020-04-034-9/+36
| | | |
| * | | Merge tag 'v1.12.2'Richard van der Hoff2020-04-034-2/+20
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Synapse 1.12.2 (2020-04-02) =========================== This release fixes [an issue](https://github.com/matrix-org/synapse/issues/7208) with building the debian packages. No other significant changes since 1.12.1.
| | * | Fix changelog wording v1.12.2 github/release-v1.12.2 release-v1.12.2Andrew Morgan2020-04-021-1/+1
| | | |
| | * | 1.12.2Andrew Morgan2020-04-023-1/+17
| | | |
| | * | Pin Pillow>=4.3.0,<7.1.0 to fix dep issueAndrew Morgan2020-04-021-1/+3
| | | |
| | * | 1.12.1Andrew Morgan2020-04-023-1/+13
| | | |
| * | | Revert "Merge pull request #7153 from ↵Richard van der Hoff2020-04-034-28/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | matrix-org/babolivier/sso_whitelist_login_fallback" This was incorrectly merged to master. This reverts commit 319c41f573eb14a966367b60b2e6e93bf6b028d9, reversing changes made to 229eb81498b0fe1da81e9b5b333a0285acde9446.
| * | | Revert "Improve the UX of the login fallback when using SSO (#7152)"Richard van der Hoff2020-04-033-32/+22
| | | | | | | | | | | | | | | | | | | | | | | | This was incorrectly merged to `master` instead of develop. This reverts commit 90246344e340bce3417fb330da6be9338a701c5c.
* | | | Fix device list update stream ids going backward (#7158)Richard van der Hoff2020-04-033-2/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Occasionally we could get a federation device list update transaction which looked like: ``` [ {'edu_type': 'm.device_list_update', 'content': {'user_id': '@user:test', 'device_id': 'D2', 'prev_id': [], 'stream_id': 12, 'deleted': True}}, {'edu_type': 'm.device_list_update', 'content': {'user_id': '@user:test', 'device_id': 'D1', 'prev_id': [12], 'stream_id': 11, 'deleted': True}}, {'edu_type': 'm.device_list_update', 'content': {'user_id': '@user:test', 'device_id': 'D3', 'prev_id': [11], 'stream_id': 13, 'deleted': True}} ] ``` Having `stream_ids` which are lower than `prev_ids` looks odd. It might work (I'm not actually sure), but in any case it doesn't seem like a reasonable thing to expect other implementations to support.
* | | | Merge branch 'master' into developAndrew Morgan2020-04-024-4/+26
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * master: 1.12.1 Note where bugs were introduced 1.12.1rc1 Newsfile Rewrite changelog Add changelog Only import sqlite3 when type checking Fix another instance Only setdefault for signatures if device has key_json Fix starting workers when federation sending not split out. Attempt to clarify Python version requirements (#7161) Improve the UX of the login fallback when using SSO (#7152) Update the wording of the config comment Lint Changelog Regenerate sample config Whitelist the login fallback by default for SSO
| * | | Merge tag 'v1.12.1'Andrew Morgan2020-04-026-13/+55
| |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Synapse 1.12.1 (2020-04-02) =========================== No significant changes since 1.12.1rc1. Synapse 1.12.1rc1 (2020-03-31) ============================== Bugfixes -------- - Fix starting workers when federation sending not split out. ([\#7133](https://github.com/matrix-org/synapse/issues/7133)). Introduced in v1.12.0. - Avoid importing `sqlite3` when using the postgres backend. Contributed by David Vo. ([\#7155](https://github.com/matrix-org/synapse/issues/7155)). Introduced in v1.12.0rc1. - Fix a bug which could cause outbound federation traffic to stop working if a client uploaded an incorrect e2e device signature. ([\#7177](https://github.com/matrix-org/synapse/issues/7177)). Introduced in v1.11.0. * tag 'v1.12.1': 1.12.1 Note where bugs were introduced 1.12.1rc1 Newsfile Rewrite changelog Add changelog Only import sqlite3 when type checking Fix another instance Only setdefault for signatures if device has key_json Fix starting workers when federation sending not split out.
| | * | | 1.12.1 v1.12.1 github/release-v1.12.1 release-v1.12.1Andrew Morgan2020-04-023-1/+13
| | |/ /
| | * | Note where bugs were introduced v1.12.1rc1Andrew Morgan2020-03-311-3/+3
| | | |
| | * | 1.12.1rc1Andrew Morgan2020-03-315-4/+12
| | | |
| | * | NewsfileErik Johnston2020-03-311-0/+1
| | | |
| | * | Rewrite changelogAndrew Morgan2020-03-311-1/+1
| | | |
| | * | Add changelogAndrew Morgan2020-03-311-0/+1
| | | |
| | * | Only import sqlite3 when type checkingDavid Vo2020-03-312-2/+6
| | | | | | | | | | | | | | | | | | | | Fixes: #7127 Signed-off-by: David Vo <david@vovo.id.au>
| | * | Fix another instanceAndrew Morgan2020-03-311-5/+7
| | | |
| | * | Only setdefault for signatures if device has key_jsonAndrew Morgan2020-03-311-5/+7
| | | |
| | * | Fix starting workers when federation sending not split out.Erik Johnston2020-03-311-0/+12
| | | |
| * | | Attempt to clarify Python version requirements (#7161)Richard van der Hoff2020-03-301-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular, we depend on `typing.TYPE_CHECKING`, which is only present in 3.5.2. It turns out that Ubuntu Xenial, despite having a package called `python 3 (3.5.1-3)`, actually has python 3.5.2, so I think this is fine.
| * | | Improve the UX of the login fallback when using SSO (#7152)Brendan Abolivier2020-03-273-22/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Don't show the login forms if we're currently logging in with a password or a token. * Submit directly the SSO login form, showing only a spinner to the user, in order to eliminate from the clunkiness of SSO through this fallback.
| * | | Merge pull request #7153 from matrix-org/babolivier/sso_whitelist_login_fallbackBrendan Abolivier2020-03-274-1/+28
| |\ \ \ | | | | | | | | | | Always whitelist the login fallback for SSO
| | * | | Update the wording of the config commentBrendan Abolivier2020-03-272-6/+6
| | | | |
| | * | | LintBrendan Abolivier2020-03-261-5/+1
| | | | |
| | * | | ChangelogBrendan Abolivier2020-03-261-0/+1
| | | | |
| | * | | Regenerate sample configBrendan Abolivier2020-03-261-1/+5
| | | | |
| | * | | Whitelist the login fallback by default for SSOBrendan Abolivier2020-03-262-2/+28
| | |/ /
* | | | Support SAML in the user interactive authentication workflow. (#7102)Patrick Cloke2020-04-0111-44/+227
| | | |
* | | | Allow admins to create aliases when they are not in the room (#7191)Patrick Cloke2020-04-013-1/+68
| | | |
* | | | Update postgres.md (#7119)siroccal2020-04-012-1/+28
| | | |
* | | | Remove connections per replication stream metric. (#7195)Erik Johnston2020-04-012-16/+1
| | | | | | | | | | | | | | | | | | | | This broke in a recent PR (#7024) and is no longer useful due to all replication clients implicitly subscribing to all streams, so let's just remove it.
* | | | Improve TURN documentation. (#7167)Jostein Kjønigsen2020-03-312-0/+8
| |_|/ |/| |
* | | Fix "'NoneType' has no attribute start|stop" logcontext errors (#7181)Richard van der Hoff2020-03-313-7/+12
| | | | | | | | | | | | Fixes #7179.
* | | Fill in the 'default' field for user-defined push rules (#6639)Karlinde2020-03-312-0/+2
| | | | | | | | | Signed-off-by: Karl Linderhed <git@karlinde.se>
* | | Only setdefault for signatures if device has key_json (#7177)Andrew Morgan2020-03-312-10/+15
| | |
* | | Fix use of async/await in media code (#7184)Patrick Cloke2020-03-312-2/+3
| | |
* | | Fix a bug which could cause incorrect 'cyclic dependency' error. (#7178)Richard van der Hoff2020-03-312-12/+11
| | | | | | | | | | | | | | | | | | | | | | | | If there was an exception setting up one of the attributes of the Homeserver god object, then future attempts to fetch that attribute would raise a confusing "Cyclic dependency" error. Let's make sure that we clear the `building` flag so that we just get the original exception. Ref: #7169
* | | Rewrite prune_old_outbound_device_pokes for efficiency (#7159)Richard van der Hoff2020-03-305-37/+173
| | | | | | | | | | | | make sure we clear out all but one update for the user
* | | Transfer alias mappings when joining an upgraded room (#6946)Andrew Morgan2020-03-303-3/+27
| | |
* | | Fix a small typo in the `metrics_flags` config option. (#7171)Andrew Morgan2020-03-303-2/+3
| | |
* | | Remove usage of "conn_id" for presence. (#7128)Erik Johnston2020-03-309-22/+86
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Remove `conn_id` usage for UserSyncCommand. Each tcp replication connection is assigned a "conn_id", which is used to give an ID to a remotely connected worker. In a redis world, there will no longer be a one to one mapping between connection and instance, so instead we need to replace such usages with an ID generated by the remote instances and included in the replicaiton commands. This really only effects UserSyncCommand. * Add CLEAR_USER_SYNCS command that is sent on shutdown. This should help with the case where a synchrotron gets restarted gracefully, rather than rely on 5 minute timeout.
* | | Merge pull request #7160 from ↵David Baker2020-03-303-3/+19
|\ \ \ | | | | | | | | | | | | | | | | matrix-org/dbkr/always_send_own_device_list_updates Always send the user updates to their own device list
| * | | Add explanatory commentAndrew Morgan2020-03-302-1/+4
| | | |
| * | | blackDavid Baker2020-03-301-1/+3
| | | |
| * | | Just add own user ID to the list we track device changes forDavid Baker2020-03-302-7/+11
| | | |
| * | | Fix undefined variable & remove debug loggingDavid Baker2020-03-271-10/+2
| | | |
| * | | blackDavid Baker2020-03-271-4/+4
| | | |
| * | | changelogDavid Baker2020-03-271-0/+1
| | | |
| * | | Always send the user updates to their own device listDavid Baker2020-03-272-6/+20
| | | | | | | | | | | | | | | | | | | | This will allow clients to notify users about new devices even if the user isn't in any rooms (yet).
* | | | Merge pull request #7157 from matrix-org/rev.outbound_device_pokes_testsRichard van der Hoff2020-03-3011-22/+318
|\ \ \ \ | | | | | | | | | | Add tests for outbound device pokes
| * | | | Add tests for outbound device pokesRichard van der Hoff2020-03-273-3/+302
| | | | |
| * | | | Remove spurious "name" parameter to `default_config`Richard van der Hoff2020-03-249-19/+16
| | | | | | | | | | | | | | | | | | | | | | | | | this is never set to anything other than "test", and is a source of unnecessary boilerplate.
* | | | | Add developer documentation for running a local CAS server (#7147)Patrick Cloke2020-03-303-2/+71
| | | | |
* | | | | Always whitelist the login fallback for SSO (#7153)Richard van der Hoff2020-03-274-1/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | That fallback sets the redirect URL to itself (so it can process the login token then return gracefully to the client). This would make it pointless to ask the user for confirmation, since the URL the confirmation page would be showing wouldn't be the client's.
* | | | | Improve the UX of the login fallback when using SSO (#7152)Brendan Abolivier2020-03-273-22/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Don't show the login forms if we're currently logging in with a password or a token. * Submit directly the SSO login form, showing only a spinner to the user, in order to eliminate from the clunkiness of SSO through this fallback.
* | | | | Admin API to join users to a room. (#7051)Dirk Klimpel2020-03-275-4/+405
| | | | |
* | | | | Add options to prevent users from changing their profile. (#7096)Dirk Klimpel2020-03-277-1/+449
| | | | |
* | | | | update debian installation instructions to recommend installing `virtualenv` ↵txt-file2020-03-272-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | instead of `python3-virtualenv` (#6892) * change debian package from python3-virtualenv to virtualenv The virtualenv package is needed for the virtualenv command. The virtualenv package depends on python3-virtualenv (at least since debian jessie) so there is no need to specify python3-virtualenv additionally. Signed-off-by: Vieno Hakkerinen <vieno@hakkerinen.eu> * Add changelog Co-authored-by: Andrew Morgan <andrew@amorgan.xyz>
* | | | | Ensure is_verified on /_matrix/client/r0/room_keys/keys is a boolean (#7150)Andrew Morgan2020-03-273-2/+4
| | | | |
* | | | | Only import sqlite3 when type checking (#7155)David Vo2020-03-272-2/+6
| |/ / / |/| | | | | | | | | | | Fixes: #7127 Signed-off-by: David Vo <david@vovo.id.au>
* | | | Merge pull request #7151 from matrix-org/jaywink/saml-redirect-fixJason Robinson2020-03-262-0/+5
|\ \ \ \ | | | | | | | | | | Allow RedirectResponse in SAML response handler
| * | | | Update changelog.d/7151.bugfixJason Robinson2020-03-261-1/+1
| | | | | | | | | | | | | | | Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
| * | | | Allow RedirectResponse in SAML response handlerJason Robinson2020-03-262-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow custom SAML handlers to redirect after processing an auth response. Fixes #7149 Signed-off-by: Jason Robinson <jasonr@matrix.org>
* | | | | Refactor the CAS code (move the logic out of the REST layer to a handler) ↵Patrick Cloke2020-03-265-155/+227
| | | | | | | | | | | | | | | | | | | | (#7136)
* | | | | Don't default to an invalid sqlite config if no database configuration is ↵Nektarios Katakis2020-03-262-22/+48
| | | | | | | | | | | | | | | | | | | | provided (#6573)
* | | | | Allow server admins to define and enforce a password policy (MSC2000). (#7118)Dirk Klimpel2020-03-2611-0/+437
|/ / / /
* | | | Validate that the session is not modified during UI-Auth (#7068)Patrick Cloke2020-03-268-14/+117
| | | |
* | | | Remove unused captcha_bypass_secret option (#7137)Aaron Raimist2020-03-253-9/+1
| | | | | | | | | | | | Signed-off-by: Aaron Raimist <aaron@raim.ist>
* | | | Move catchup of replication streams to worker. (#7024)Erik Johnston2020-03-2524-487/+635
| | | | | | | | | | | | This changes the replication protocol so that the server does not send down `RDATA` for rows that happened before the client connected. Instead, the server will send a `POSITION` and clients then query the database (or master out of band) to get up to date.
* | | | Various cleanups to INSTALL.md (#7141)Andrew Morgan2020-03-252-59/+40
| | | |
* | | | Merge pull request #7133 from matrix-org/erikj/fix_worker_startupErik Johnston2020-03-252-0/+13
|\ \ \ \ | | | | | | | | | | Fix starting workers when federation sending not split out.
| * | | | NewsfileErik Johnston2020-03-241-0/+1
| | | | |
| * | | | Fix starting workers when federation sending not split out.Erik Johnston2020-03-241-0/+12
| | |/ / | |/| |
* | | | Clean up some LoggingContext stuff (#7120)Richard van der Hoff2020-03-2424-222/+232
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Pull Sentinel out of LoggingContext ... and drop a few unnecessary references to it * Factor out LoggingContext.current_context move `current_context` and `set_context` out to top-level functions. Mostly this means that I can more easily trace what's actually referring to LoggingContext, but I think it's generally neater. * move copy-to-parent into `stop` this really just makes `start` and `stop` more symetric. It also means that it behaves correctly if you manually `set_log_context` rather than using the context manager. * Replace `LoggingContext.alive` with `finished` Turn `alive` into `finished` and make it a bit better defined.
* | | Fix CAS redirect url (#6634)Naugrimm2020-03-242-11/+17
| | | | | | | | | Build the same service URL when requesting the CAS ticket and when calling the proxyValidate URL.
* | | Use the proper error code when a canonical alias that does not exist is ↵Patrick Cloke2020-03-232-19/+39
| | | | | | | | | | | | used. (#7109)
* | | Update pre-built package name for FreeBSD (#7107). (#7107)Kartikaya Gupta (kats)2020-03-232-1/+2
| | | | | | | | | Signed-off-by: Kartikaya Gupta <kats@trevize.staktrace.com>
* | | Convert `*StreamRow` classes to inner classes (#7116)Richard van der Hoff2020-03-236-100/+106
| | | | | | | | | | | | | | | This just helps keep the rows closer to their streams, so that it's easier to see what the format of each stream is.
* | | Merge branch 'master' into developRichard van der Hoff2020-03-234-3/+68
|\| |
| * | Merge tag 'v1.12.0'Richard van der Hoff2020-03-23166-3778/+4329
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Synapse 1.12.0 (2020-03-23) =========================== No significant changes since 1.12.0rc1. Debian packages and Docker images are rebuilt using the latest versions of dependency libraries, including Twisted 20.3.0. **Please see security advisory below**. Security advisory ----------------- Synapse may be vulnerable to request-smuggling attacks when it is used with a reverse-proxy. The vulnerabilties are fixed in Twisted 20.3.0, and are described in [CVE-2020-10108](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10108) and [CVE-2020-10109](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10109). For a good introduction to this class of request-smuggling attacks, see https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn. We are not aware of these vulnerabilities being exploited in the wild, and do not believe that they are exploitable with current versions of any reverse proxies. Nevertheless, we recommend that all Synapse administrators ensure that they have the latest versions of the Twisted library to ensure that their installation remains secure. * Administrators using the [`matrix.org` Docker image](https://hub.docker.com/r/matrixdotorg/synapse/) or the [Debian/Ubuntu packages from `matrix.org`](https://github.com/matrix-org/synapse/blob/master/INSTALL.md#matrixorg-packages) should ensure that they have version 1.12.0 installed: these images include Twisted 20.3.0. * Administrators who have [installed Synapse from source](https://github.com/matrix-org/synapse/blob/master/INSTALL.md#installing-from-source) should upgrade Twisted within their virtualenv by running: ```sh <path_to_virtualenv>/bin/pip install 'Twisted>=20.3.0' ``` * Administrators who have installed Synapse from distribution packages should consult the information from their distributions. The `matrix.org` Synapse instance was not vulnerable to these vulnerabilities. Advance notice of change to the default `git` branch for Synapse ---------------------------------------------------------------- Currently, the default `git` branch for Synapse is `master`, which tracks the latest release. After the release of Synapse 1.13.0, we intend to change this default to `develop`, which is the development tip. This is more consistent with common practice and modern `git` usage. Although we try to keep `develop` in a stable state, there may be occasions where regressions creep in. Developers and distributors who have scripts which run builds using the default branch of `Synapse` should therefore consider pinning their scripts to `master`. Synapse 1.12.0rc1 (2020-03-19) ============================== Features -------- - Changes related to room alias management ([MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432)): - Publishing/removing a room from the room directory now requires the user to have a power level capable of modifying the canonical alias, instead of the room aliases. ([\#6965](https://github.com/matrix-org/synapse/issues/6965)) - Validate the `alt_aliases` property of canonical alias events. ([\#6971](https://github.com/matrix-org/synapse/issues/6971)) - Users with a power level sufficient to modify the canonical alias of a room can now delete room aliases. ([\#6986](https://github.com/matrix-org/synapse/issues/6986)) - Implement updated authorization rules and redaction rules for aliases events, from [MSC2261](https://github.com/matrix-org/matrix-doc/pull/2261) and [MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432). ([\#7037](https://github.com/matrix-org/synapse/issues/7037)) - Stop sending m.room.aliases events during room creation and upgrade. ([\#6941](https://github.com/matrix-org/synapse/issues/6941)) - Synapse no longer uses room alias events to calculate room names for push notifications. ([\#6966](https://github.com/matrix-org/synapse/issues/6966)) - The room list endpoint no longer returns a list of aliases. ([\#6970](https://github.com/matrix-org/synapse/issues/6970)) - Remove special handling of aliases events from [MSC2260](https://github.com/matrix-org/matrix-doc/pull/2260) added in v1.10.0rc1. ([\#7034](https://github.com/matrix-org/synapse/issues/7034)) - Expose the `synctl`, `hash_password` and `generate_config` commands in the snapcraft package. Contributed by @devec0. ([\#6315](https://github.com/matrix-org/synapse/issues/6315)) - Check that server_name is correctly set before running database updates. ([\#6982](https://github.com/matrix-org/synapse/issues/6982)) - Break down monthly active users by `appservice_id` and emit via Prometheus. ([\#7030](https://github.com/matrix-org/synapse/issues/7030)) - Render a configurable and comprehensible error page if something goes wrong during the SAML2 authentication process. ([\#7058](https://github.com/matrix-org/synapse/issues/7058), [\#7067](https://github.com/matrix-org/synapse/issues/7067)) - Add an optional parameter to control whether other sessions are logged out when a user's password is modified. ([\#7085](https://github.com/matrix-org/synapse/issues/7085)) - Add prometheus metrics for the number of active pushers. ([\#7103](https://github.com/matrix-org/synapse/issues/7103), [\#7106](https://github.com/matrix-org/synapse/issues/7106)) - Improve performance when making HTTPS requests to sygnal, sydent, etc, by sharing the SSL context object between connections. ([\#7094](https://github.com/matrix-org/synapse/issues/7094)) Bugfixes -------- - When a user's profile is updated via the admin API, also generate a displayname/avatar update for that user in each room. ([\#6572](https://github.com/matrix-org/synapse/issues/6572)) - Fix a couple of bugs in email configuration handling. ([\#6962](https://github.com/matrix-org/synapse/issues/6962)) - Fix an issue affecting worker-based deployments where replication would stop working, necessitating a full restart, after joining a large room. ([\#6967](https://github.com/matrix-org/synapse/issues/6967)) - Fix `duplicate key` error which was logged when rejoining a room over federation. ([\#6968](https://github.com/matrix-org/synapse/issues/6968)) - Prevent user from setting 'deactivated' to anything other than a bool on the v2 PUT /users Admin API. ([\#6990](https://github.com/matrix-org/synapse/issues/6990)) - Fix py35-old CI by using native tox package. ([\#7018](https://github.com/matrix-org/synapse/issues/7018)) - Fix a bug causing `org.matrix.dummy_event` to be included in responses from `/sync`. ([\#7035](https://github.com/matrix-org/synapse/issues/7035)) - Fix a bug that renders UTF-8 text files incorrectly when loaded from media. Contributed by @TheStranjer. ([\#7044](https://github.com/matrix-org/synapse/issues/7044)) - Fix a bug that would cause Synapse to respond with an error about event visibility if a client tried to request the state of a room at a given token. ([\#7066](https://github.com/matrix-org/synapse/issues/7066)) - Repair a data-corruption issue which was introduced in Synapse 1.10, and fixed in Synapse 1.11, and which could cause `/sync` to return with 404 errors about missing events and unknown rooms. ([\#7070](https://github.com/matrix-org/synapse/issues/7070)) - Fix a bug causing account validity renewal emails to be sent even if the feature is turned off in some cases. ([\#7074](https://github.com/matrix-org/synapse/issues/7074)) Improved Documentation ---------------------- - Updated CentOS8 install instructions. Contributed by Richard Kellner. ([\#6925](https://github.com/matrix-org/synapse/issues/6925)) - Fix `POSTGRES_INITDB_ARGS` in the `contrib/docker/docker-compose.yml` example docker-compose configuration. ([\#6984](https://github.com/matrix-org/synapse/issues/6984)) - Change date in [INSTALL.md](./INSTALL.md#tls-certificates) for last date of getting TLS certificates to November 2019. ([\#7015](https://github.com/matrix-org/synapse/issues/7015)) - Document that the fallback auth endpoints must be routed to the same worker node as the register endpoints. ([\#7048](https://github.com/matrix-org/synapse/issues/7048)) Deprecations and Removals ------------------------- - Remove the unused query_auth federation endpoint per [MSC2451](https://github.com/matrix-org/matrix-doc/pull/2451). ([\#7026](https://github.com/matrix-org/synapse/issues/7026)) Internal Changes ---------------- - Add type hints to `logging/context.py`. ([\#6309](https://github.com/matrix-org/synapse/issues/6309)) - Add some clarifications to `README.md` in the database schema directory. ([\#6615](https://github.com/matrix-org/synapse/issues/6615)) - Refactoring work in preparation for changing the event redaction algorithm. ([\#6874](https://github.com/matrix-org/synapse/issues/6874), [\#6875](https://github.com/matrix-org/synapse/issues/6875), [\#6983](https://github.com/matrix-org/synapse/issues/6983), [\#7003](https://github.com/matrix-org/synapse/issues/7003)) - Improve performance of v2 state resolution for large rooms. ([\#6952](https://github.com/matrix-org/synapse/issues/6952), [\#7095](https://github.com/matrix-org/synapse/issues/7095)) - Reduce time spent doing GC, by freezing objects on startup. ([\#6953](https://github.com/matrix-org/synapse/issues/6953)) - Minor perfermance fixes to `get_auth_chain_ids`. ([\#6954](https://github.com/matrix-org/synapse/issues/6954)) - Don't record remote cross-signing keys in the `devices` table. ([\#6956](https://github.com/matrix-org/synapse/issues/6956)) - Use flake8-comprehensions to enforce good hygiene of list/set/dict comprehensions. ([\#6957](https://github.com/matrix-org/synapse/issues/6957)) - Merge worker apps together. ([\#6964](https://github.com/matrix-org/synapse/issues/6964), [\#7002](https://github.com/matrix-org/synapse/issues/7002), [\#7055](https://github.com/matrix-org/synapse/issues/7055), [\#7104](https://github.com/matrix-org/synapse/issues/7104)) - Remove redundant `store_room` call from `FederationHandler._process_received_pdu`. ([\#6979](https://github.com/matrix-org/synapse/issues/6979)) - Update warning for incorrect database collation/ctype to include link to documentation. ([\#6985](https://github.com/matrix-org/synapse/issues/6985)) - Add some type annotations to the database storage classes. ([\#6987](https://github.com/matrix-org/synapse/issues/6987)) - Port `synapse.handlers.presence` to async/await. ([\#6991](https://github.com/matrix-org/synapse/issues/6991), [\#7019](https://github.com/matrix-org/synapse/issues/7019)) - Add some type annotations to the federation base & client classes. ([\#6995](https://github.com/matrix-org/synapse/issues/6995)) - Port `synapse.rest.keys` to async/await. ([\#7020](https://github.com/matrix-org/synapse/issues/7020)) - Add a type check to `is_verified` when processing room keys. ([\#7045](https://github.com/matrix-org/synapse/issues/7045)) - Add type annotations and comments to the auth handler. ([\#7063](https://github.com/matrix-org/synapse/issues/7063))
| | * matrix.org was fine v1.12.0 github/release-v1.12.0 release-v1.12.0Richard van der Hoff2020-03-231-0/+2
| | |
| | * Update CHANGES.mdNeil Johnson2020-03-231-1/+1
| | |
| | * changelog typosRichard van der Hoff2020-03-231-3/+3
| | |
| | * 1.12.0 changelogRichard van der Hoff2020-03-231-1/+53
| | |
| | * 1.12.0Richard van der Hoff2020-03-233-1/+13
| | |
| * | Update postgres.mdRichard van der Hoff2020-03-171-2/+1
| | | | | | | | | fix broken link
* | | Fix processing of `groups` stream, and use symbolic names for streams (#7117)Richard van der Hoff2020-03-233-30/+76
| | | | | | | | | | | | | | | | | | `groups` != `receipts` Introduced in #6964
* | | Set Referrer-Policy to no-referrer for media (#7009)Dionysis Grigoropoulos2020-03-232-0/+4
| | |
* | | Clean-up some auth/login REST code (#7115)Patrick Cloke2020-03-203-41/+21
| | |
* | | Improve database configuration docs (#6988)Richard van der Hoff2020-03-206-71/+132
| | | | | | | | | | | | | | | Attempts to clarify the sample config for databases, and add some stuff about tcp keepalives to `postgres.md`.
* | | Remove concept of a non-limited stream. (#7011)Erik Johnston2020-03-208-67/+71
| | |
* | | Convert some of the media REST code to async/await (#7110)Patrick Cloke2020-03-204-111/+91
| | |
* | | Fix a bug in the federation API which could cause occasional "Failed to get ↵Patrick Cloke2020-03-194-30/+22
| | | | | | | | | | | | PDU" errors (#7089).
* | | Change device list streams to have one row per ID (#7010)Erik Johnston2020-03-197-130/+112
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add 'device_lists_outbound_pokes' as extra table. This makes sure we check all the relevant tables to get the current max stream ID. Currently not doing so isn't problematic as the max stream ID in `device_lists_outbound_pokes` is the same as in `device_lists_stream`, however that will change. * Change device lists stream to have one row per id. This will make it possible to process the streams more incrementally, avoiding having to process large chunks at once. * Change device list replication to match new semantics. Instead of sending down batches of user ID/host tuples, send down a row per entity (user ID or host). * Newsfile * Remove handling of multiple rows per ID * Fix worker handling * Comments from review
| * | Comments from reviewErik Johnston2020-03-183-8/+25
| | |
| * | Merge branch 'develop' of github.com:matrix-org/synapse into ↵Erik Johnston2020-03-0213-40/+55
| |\ \ | | | | | | | | | | | | erikj/fixup_devices_stream
| * | | Fix worker handlingErik Johnston2020-03-021-2/+3
| | | |
| * | | Remove handling of multiple rows per IDErik Johnston2020-02-282-79/+1
| | | |
| * | | NewsfileErik Johnston2020-02-281-0/+1
| | | |
| * | | Change device list replication to match new semantics.Erik Johnston2020-02-284-23/+32
| | | | | | | | | | | | | | | | | | | | Instead of sending down batches of user ID/host tuples, send down a row per entity (user ID or host).
| * | | Change device lists stream to have one row per id.Erik Johnston2020-02-281-18/+41
| | | | | | | | | | | | | | | | | | | | This will make it possible to process the streams more incrementally, avoiding having to process large chunks at once.
| * | | Add 'device_lists_outbound_pokes' as extra table.Erik Johnston2020-02-282-2/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes sure we check all the relevant tables to get the current max stream ID. Currently not doing so isn't problematic as the max stream ID in `device_lists_outbound_pokes` is the same as in `device_lists_stream`, however that will change.
* | | | more changelog v1.12.0rc1Richard van der Hoff2020-03-191-1/+1
| | | |
* | | | changelog fixesRichard van der Hoff2020-03-191-3/+3
| | | |
* | | | fix typoRichard van der Hoff2020-03-191-2/+2
| | | |
* | | | 1.12.0rc1Richard van der Hoff2020-03-1960-59/+78
| | | |
* | | | update grafana dashboardRichard van der Hoff2020-03-191-32/+213
| | | |
* | | | Fix concurrent modification errors in pusher metrics (#7106)Richard van der Hoff2020-03-192-9/+19
| | | | | | | | | | | | add a lock to try to make this metric actually work
* | | | Add prometheus metrics for the number of active pushers (#7103)Richard van der Hoff2020-03-195-8/+36
| | | |
* | | | Move pusherpool startup into _base.setup (#7104)Richard van der Hoff2020-03-193-1/+2
| | | | | | | | | | | | | | | | | | | | This should be safe to do on all workers/masters because it is guarded by a config option which will ensure it is only actually done on the worker assigned as a pusher.
* | | | Improve get auth chain difference algorithm. (#7095)Erik Johnston2020-03-186-71/+310
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was originally implemented by pulling the full auth chain of all state sets out of the database and doing set comparison. However, that can take a lot work if the state and auth chains are large. Instead, lets try and fetch the auth chains at the same time and calculate the difference on the fly, allowing us to bail early if all the auth chains converge. Assuming that the auth chains do converge more often than not, this should improve performance. Hopefully.
* | | | Add an option to the set password API to choose whether to logout other ↵Patrick Cloke2020-03-185-20/+39
| | | | | | | | | | | | | | | | devices. (#7085)
* | | | Update INSTALL.md updated CentOS8 install instructions (#6925)Richard von Kellner2020-03-172-2/+12
| | | |
* | | | Share SSL contexts for non-federation requests (#7094)Richard van der Hoff2020-03-177-44/+71
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Extends #5794 etc to the SimpleHttpClient so that it also applies to non-federation requests. Fixes #7092.
* | | | Set charset to utf-8 when adding headers for certain text content types (#7044)The Stranjer2020-03-172-1/+25
| | | | | | | | | | | | | | | | Fixes #7043
* | | | Remove unused federation endpoint (`query_auth`) (#7026)Patrick Cloke2020-03-175-146/+80
| | | |
* | | | Remove special casing of `m.room.aliases` events (#7034)Patrick Cloke2020-03-175-42/+35
| | | |
* | | | Revert "Add options to disable setting profile info for prevent changes. ↵Richard van der Hoff2020-03-177-398/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | (#7053)" This reverts commit 54dd28621b070ca67de9f773fe9a89e1f4dc19da, reversing changes made to 6640460d054e8f4444046a34bdf638921b31c01e.
* | | | Populate the room version from state events (#7070)Brendan Abolivier2020-03-163-0/+63
| | | | | | | | | | | | | | | | | | | | Fixes #7065 This is basically the same as https://github.com/matrix-org/synapse/pull/6847 except it tries to populate events from `state_events` rather than `current_state_events`, since the latter might have been cleared from the state of some rooms too early, leaving them with a `NULL` room version.
* | | | Fix buggy condition in account validity handler (#7074)Brendan Abolivier2020-03-162-1/+6
| | | |
* | | | Merge pull request #7067 from matrix-org/babolivier/saml_error_moarBrendan Abolivier2020-03-134-28/+90
|\ \ \ \ | | | | | | | | | | Move the default SAML2 error HTML to a dedicated file
| * | | | Use innerText instead of innerHTMLBrendan Abolivier2020-03-131-1/+2
| | | | |
| * | | | LintBrendan Abolivier2020-03-111-2/+1
| | | | |
| * | | | Put the file in the templates directoryBrendan Abolivier2020-03-112-19/+37
| | | | |
| * | | | Update wording and configBrendan Abolivier2020-03-113-2/+8
| | | | |
| * | | | ChangelogBrendan Abolivier2020-03-111-0/+1
| | | | |
| * | | | Move the default SAML2 error HTML to a dedicated fileBrendan Abolivier2020-03-112-18/+55
| | | | | | | | | | | | | | | | | | | | | | | | | Also add some JS to it to process any error we might have in the URI (see #6893).
* | | | | Add type annotations and comments to auth handler (#7063)Patrick Cloke2020-03-123-89/+106
| | | | |
* | | | | Merge pull request #7066 from matrix-org/babolivier/dummy_events_stateBrendan Abolivier2020-03-113-31/+37
|\ \ \ \ \ | |/ / / / |/| | | | Skip the correct visibility checks when checking the visibility of the state at a given event
| * | | | Refactor a bitBrendan Abolivier2020-03-111-28/+30
| | | | |
| * | | | Also don't fail on aliases events in this caseBrendan Abolivier2020-03-111-1/+1
| | | | |
| * | | | LintBrendan Abolivier2020-03-111-1/+5
| | | | |
| * | | | ChangelogBrendan Abolivier2020-03-111-0/+1
| | | | |
| * | | | Also don't filter out events sent by ignored users when checking state ↵Brendan Abolivier2020-03-111-1/+1
| | | | | | | | | | | | | | | | | | | | visibility
| * | | | Fix conditionBrendan Abolivier2020-03-111-1/+1
| | | | |
| * | | | Don't filter out dummy events when we're checking the visibility of stateBrendan Abolivier2020-03-112-9/+8
|/ / / /
* | | | Add options to disable setting profile info for prevent changes. (#7053)Brendan Abolivier2020-03-107-1/+398
|\ \ \ \
| * | | | Update sample_config.yamlDirk Klimpel2020-03-101-1/+1
| | | | |
| * | | | Update synapse/config/registration.pyDirk Klimpel2020-03-101-1/+1
| | | | | | | | | | | | | | | Co-Authored-By: Brendan Abolivier <github@brendanabolivier.com>
| * | | | lint, fix testsdklimpel2020-03-092-3/+5
| | | | |
| * | | | updates after reviewdklimpel2020-03-097-37/+40
| | | | |
| * | | | fix testsdklimpel2020-03-091-2/+2
| | | | |
| * | | | lintdklimpel2020-03-091-10/+8
| | | | |
| * | | | add testsdklimpel2020-03-092-3/+311
| | | | |
| * | | | add disable_3pid_changesdklimpel2020-03-083-0/+21
| | | | |
| * | | | lint2dklimpel2020-03-082-4/+4
| | | | |
| * | | | lintdklimpel2020-03-081-4/+2
| | | | |
| * | | | changelogdklimpel2020-03-084-4/+19
| | | | |
| * | | | Add options to disable setting profile info for prevent changes.dklimpel2020-03-083-1/+53
| | |/ / | |/| |
* | | | Merge pull request #7058 from matrix-org/babolivier/saml_error_htmlBrendan Abolivier2020-03-107-6/+81
|\ \ \ \ | | | | | | | | | | SAML2: render a comprehensible error page if something goes wrong
| * | | | Rephrase default messageBrendan Abolivier2020-03-101-2/+2
| | | | |
| * | | | Hopefully mypy is happy nowBrendan Abolivier2020-03-102-3/+10
| | | | |
| * | | | Attempt at appeasing the gods of mypyBrendan Abolivier2020-03-101-1/+1
| | | | |
| * | | | LintBrendan Abolivier2020-03-101-1/+1
| | | | |
| * | | | ChangelogBrendan Abolivier2020-03-101-0/+1
| | | | |
| * | | | Update sample configBrendan Abolivier2020-03-101-0/+7
| | | | |
| * | | | SAML2: render a comprehensible error page if something goes wrongBrendan Abolivier2020-03-103-2/+62
|/ / / / | | | | | | | | | | | | | | | | | | | | If an error happened while processing a SAML AuthN response, or a client ends up doing a `GET` request to `/authn_response`, then render a customisable error page rather than a confusing error.
* | | | Merge pull request #7055 from ↵Brendan Abolivier2020-03-093-18/+21
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | matrix-org/babolivier/get_time_of_last_push_action_before Move get_time_of_last_push_action_before to the EventPushActionsWorkerStore
| * | | | ChangelogBrendan Abolivier2020-03-091-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | It's the same as in #6964 since it's the most likely cause of the bug and that change hasn't been released yet.
| * | | | Fix undefined `room_id` in `make_summary_text`Brendan Abolivier2020-03-091-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | This would break notifications about un-named rooms when processing notifications in a batch.
| * | | | Move `get_time_of_last_push_action_before` to the `EventPushActionsWorkerStore`Brendan Abolivier2020-03-091-17/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #7054 I also had a look at the rest of the functions in `EventPushActionsStore` and in the push notifications send code and it looks to me like there shouldn't be any other method with this issue in this part of the codebase.
* | | | | Remove special auth and redaction rules for aliases events in experimental ↵Patrick Cloke2020-03-098-22/+148
| | | | | | | | | | | | | | | | | | | | room ver. (#7037)
* | | | | Update routing of fallback auth in the worker docs. (#7048)Patrick Cloke2020-03-092-0/+2
| | | | |
* | | | | Merge pull request #7045 from matrix-org/babolivier/room_keys_checkBrendan Abolivier2020-03-092-0/+8
|\ \ \ \ \ | | | | | | | | | | | | Make sure that is_verified is a boolean when processing room keys
| * | | | | LintBrendan Abolivier2020-03-061-2/+1
| | | | | |
| * | | | | Mention the session ID in the error messageBrendan Abolivier2020-03-061-2/+3
| | | | | |
| * | | | | LintBrendan Abolivier2020-03-061-1/+2
| | | | | |
| * | | | | ChangelogBrendan Abolivier2020-03-061-0/+1
| | | | | |
| * | | | | Make sure that is_verified is a boolean when processing room keysBrendan Abolivier2020-03-061-0/+6
| |/ / / /
* | | | | Add type hints to logging/context.py (#6309)Neil Pilgrim2020-03-072-47/+75
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add type hints to logging/context.py Signed-off-by: neiljp (Neil Pilgrim) <github@kepier.clara.net>
* | | | | Break down monthly active users by appservice_id (#7030)Neil Johnson2020-03-064-1/+87
|/ / / / | | | | | | | | | | | | | | | | * Break down monthly active users by appservice_id and emit via prometheus. Co-authored-by: Brendan Abolivier <babolivier@matrix.org>
* | | | Convert remote key resource REST layer to async/await. (#7020)Patrick Cloke2020-03-052-7/+5
| | | |
* | | | Store room_versions in EventBase objects (#6875)Richard van der Hoff2020-03-055-32/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bit fiddly because it all has to be done on one fell swoop: * Wherever we create a new event, pass in the room version (and check it matches the format version) * When we prune an event, use the room version of the unpruned event to create the pruned version. * When we pass an event over the replication protocol, pass the room version over alongside it, and use it when deserialising the event again.
* | | | Merge pull request #7035 from matrix-org/babolivier/hide_dummy_eventsBrendan Abolivier2020-03-052-0/+4
|\ \ \ \ | | | | | | | | | | Hide extremities dummy events from clients
| * | | | ChangelogBrendan Abolivier2020-03-041-0/+1
| | | | |
| * | | | Hide extremities dummy events from clientsBrendan Abolivier2020-03-041-0/+3
|/ / / /
* | | | Allow deleting an alias if the user has sufficient power level (#6986)Patrick Cloke2020-03-045-64/+182
| | | |
* | | | Read the room version from database when fetching events (#6874)Richard van der Hoff2020-03-043-16/+79
| | | | | | | | | | | | | | | | | | | | This is a precursor to giving EventBase objects the knowledge of which room version they belong to.
* | | | Merge branch 'master' into developBrendan Abolivier2020-03-0314-35/+401
|\ \ \ \ | | |_|/ | |/| |