| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add stricter mypy options (#15694) | Patrick Cloke | 2023-05-31 | 1 | -1/+1 |
| | | | | | Enable warn_unused_configs, strict_concatenate, disallow_subclassing_any, and disallow_incomplete_defs. | ||||
| * | Enforce that an admin token also has the basic Matrix API scope | Quentin Gliech | 2023-05-30 | 1 | -5/+2 |
| | | |||||
| * | Reject tokens with multiple device scopes | Quentin Gliech | 2023-05-30 | 1 | -6/+24 |
| | | |||||
| * | Make OIDC scope constants | Quentin Gliech | 2023-05-30 | 1 | -10/+15 |
| | | |||||
| * | Handle errors when introspecting tokens | Quentin Gliech | 2023-05-30 | 1 | -5/+37 |
| | | | | | | This returns a proper 503 when the introspection endpoint is not working for some reason, which should avoid logging out clients in those cases. | ||||
| * | Make AS tokens work & allow ASes to /register | Quentin Gliech | 2023-05-30 | 3 | -83/+88 |
| | | |||||
| * | Add an admin token for MAS -> Synapse calls | Quentin Gliech | 2023-05-30 | 1 | -0/+15 |
| | | |||||
| * | Refactor config to be an experimental feature | Hugh Nimmo-Smith | 2023-05-30 | 1 | -25/+28 |
| | | | | | Also enforce you can't combine it with incompatible config options | ||||
| * | Actually enforce guest + return www-authenticate header | Hugh Nimmo-Smith | 2023-05-30 | 1 | -2/+16 |
| | | |||||
| * | MSC2967: Check access token scope for use as user and add guest support | Hugh Nimmo-Smith | 2023-05-30 | 1 | -10/+20 |
| | | |||||
| * | Use `name` claim as display name when registering users on the fly. | Hugh Nimmo-Smith | 2023-05-30 | 1 | -1/+8 |
| | | | | | | This makes is so that the `name` claim got when introspecting the token is used as the display name when registering a user on the fly. | ||||
| * | Record the `sub` claims as an external_id | Quentin Gliech | 2023-05-30 | 1 | -22/+37 |
| | | |||||
| * | Handle the Synapse admin scope | Quentin Gliech | 2023-05-30 | 1 | -0/+3 |
| | | |||||
| * | Save the scopes in the requester | Quentin Gliech | 2023-05-30 | 1 | -0/+1 |
| | | |||||
| * | Initial MSC3964 support: delegation of auth to OIDC server | Quentin Gliech | 2023-05-30 | 1 | -0/+227 |
| | | |||||
| * | Make the api.auth.Auth a Protocol | Quentin Gliech | 2023-05-30 | 3 | -0/+817 |
