Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add stricter mypy options (#15694) | Patrick Cloke | 2023-05-31 | 1 | -1/+1 |
| | | | | Enable warn_unused_configs, strict_concatenate, disallow_subclassing_any, and disallow_incomplete_defs. | ||||
* | Enforce that an admin token also has the basic Matrix API scope | Quentin Gliech | 2023-05-30 | 1 | -5/+2 |
| | |||||
* | Reject tokens with multiple device scopes | Quentin Gliech | 2023-05-30 | 1 | -6/+24 |
| | |||||
* | Make OIDC scope constants | Quentin Gliech | 2023-05-30 | 1 | -10/+15 |
| | |||||
* | Handle errors when introspecting tokens | Quentin Gliech | 2023-05-30 | 1 | -5/+37 |
| | | | | | This returns a proper 503 when the introspection endpoint is not working for some reason, which should avoid logging out clients in those cases. | ||||
* | Make AS tokens work & allow ASes to /register | Quentin Gliech | 2023-05-30 | 3 | -83/+88 |
| | |||||
* | Add an admin token for MAS -> Synapse calls | Quentin Gliech | 2023-05-30 | 1 | -0/+15 |
| | |||||
* | Refactor config to be an experimental feature | Hugh Nimmo-Smith | 2023-05-30 | 1 | -25/+28 |
| | | | | Also enforce you can't combine it with incompatible config options | ||||
* | Actually enforce guest + return www-authenticate header | Hugh Nimmo-Smith | 2023-05-30 | 1 | -2/+16 |
| | |||||
* | MSC2967: Check access token scope for use as user and add guest support | Hugh Nimmo-Smith | 2023-05-30 | 1 | -10/+20 |
| | |||||
* | Use `name` claim as display name when registering users on the fly. | Hugh Nimmo-Smith | 2023-05-30 | 1 | -1/+8 |
| | | | | | This makes is so that the `name` claim got when introspecting the token is used as the display name when registering a user on the fly. | ||||
* | Record the `sub` claims as an external_id | Quentin Gliech | 2023-05-30 | 1 | -22/+37 |
| | |||||
* | Handle the Synapse admin scope | Quentin Gliech | 2023-05-30 | 1 | -0/+3 |
| | |||||
* | Save the scopes in the requester | Quentin Gliech | 2023-05-30 | 1 | -0/+1 |
| | |||||
* | Initial MSC3964 support: delegation of auth to OIDC server | Quentin Gliech | 2023-05-30 | 1 | -0/+227 |
| | |||||
* | Make the api.auth.Auth a Protocol | Quentin Gliech | 2023-05-30 | 3 | -0/+817 |