Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove debug logging and make diff nicer | Andrew Morgan | 2019-06-06 | 1 | -1/+1 |
| | |||||
* | lint | Andrew Morgan | 2019-06-06 | 1 | -1/+1 |
| | |||||
* | update endpoint | Andrew Morgan | 2019-06-06 | 1 | -2/+7 |
| | |||||
* | Merge branch 'anoa/hs_password_reset_sending_email' into anoa/hs_password_reset | Andrew Morgan | 2019-06-06 | 1 | -35/+29 |
|\ | |||||
| * | Remove CI test | Andrew Morgan | 2019-06-06 | 1 | -2/+2 |
| | | |||||
| * | test for ci | Andrew Morgan | 2019-06-06 | 1 | -3/+3 |
| | | |||||
| * | Address review comments | Andrew Morgan | 2019-06-06 | 1 | -35/+29 |
| | | |||||
* | | Merge branch 'anoa/hs_password_reset_sending_email' into anoa/hs_password_reset | Andrew Morgan | 2019-06-06 | 1 | -42/+72 |
|\| | |||||
| * | infer ability to reset password from email config | Andrew Morgan | 2019-06-05 | 1 | -1/+9 |
| | | |||||
| * | Update templates and make password reset option work | Andrew Morgan | 2019-06-05 | 1 | -2/+3 |
| | | |||||
| * | Move templates. New option to disable password resets | Andrew Morgan | 2019-06-05 | 1 | -2/+2 |
| | | |||||
| * | Revert "Modify check for smtp settings to be kinder to CI" | Andrew Morgan | 2019-06-05 | 1 | -7/+14 |
| | | | | | | | | This reverts commit 6d2d3c9fd3fb5cf2f954cc9ec0929832a3112124. | ||||
| * | Change template_dir to originate from synapse root dir | Andrew Morgan | 2019-06-05 | 1 | -1/+1 |
| | | |||||
| * | silly linting rules | Andrew Morgan | 2019-06-05 | 1 | -1/+2 |
| | | |||||
| * | Modify check for smtp settings to be kinder to CI | Andrew Morgan | 2019-06-05 | 1 | -14/+6 |
| | | |||||
| * | Fix validation token lifetime email_ prefix | Andrew Morgan | 2019-06-04 | 1 | -1/+1 |
| | | |||||
| * | Merge branch 'develop' into anoa/hs_password_reset_sending_email | Andrew Morgan | 2019-06-04 | 1 | -40/+65 |
| |\ | |||||
| | * | Only parse from email if provided | Brendan Abolivier | 2019-06-04 | 1 | -4/+5 |
| | | | |||||
| | * | Lint | Brendan Abolivier | 2019-06-04 | 1 | -1/+0 |
| | | | |||||
| | * | Make account validity renewal emails work when email notifs are disabled | Brendan Abolivier | 2019-06-04 | 1 | -42/+57 |
| | | | |||||
| * | | Ability to send password reset emails | Andrew Morgan | 2019-06-04 | 1 | -52/+140 |
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This changes the default behaviour of Synapse to send password reset emails itself rather than through an identity server. The reasoning behind the change is to prevent a malicious identity server from being able to initiate a password reset attempt and then answering it, successfully resetting their password, all without the user's knowledge. This also aides in decentralisation by putting less trust on the identity server itself, which traditionally is quite centralised. If users wish to continue with the old behaviour of proxying password reset requests through the user's configured identity server, they can do so by setting email.enable_password_reset_from_is to True in Synapse's config. Users should be able that with that option disabled (the default), password resets will now no longer work unless email sending has been enabled and set up correctly. | ||||
* / | Reimplementation of /submitToken on the homeserver side. Only used by ↵ | Andrew Morgan | 2019-06-06 | 1 | -52/+161 |
|/ | | | | | | | | | | | | | | password resets This PR creates an endpoint GET/POST /_matrix/identity/api/v1/validate/email/submitToken which mirrors the same endpoint on the identity server used for submitting tokens used for validating 3PID addresses. When the token is submitted, it is checked along with the client_secret and session_id in the db and if it matches and isn't expired, we mark the session as validated. Then, when the user attempts to change their password, we check if the session is valid, and if so allow it. We also delete the session at this point, as as far as I can tell there's no further use for it. | ||||
* | Don't crash on lack of expiry templates | Brendan Abolivier | 2019-04-18 | 1 | -2/+6 |
| | |||||
* | Send out emails with links to extend an account's validity period | Brendan Abolivier | 2019-04-17 | 1 | -1/+6 |
| | |||||
* | Calculate absolute path for email templates | Richard van der Hoff | 2018-10-19 | 1 | -22/+18 |
| | |||||
* | Put the warning blob at the top of the file | Richard van der Hoff | 2018-10-17 | 1 | -6/+9 |
| | |||||
* | Ship the email templates as package_data | Richard van der Hoff | 2018-10-17 | 1 | -3/+30 |
| | | | | | | | | | | move the example email templates into the synapse package so that they can be used as package data, which should mean that all of the packaging mechanisms (pip, docker, debian, arch, etc) should now come with the example templates. In order to grandfather in people who relied on the templates being in the old place, check for that situation and fall back to using the defaults if the templates directory does not exist. | ||||
* | Support authenticated SMTP | Daniel Dent | 2017-04-05 | 1 | -0/+16 |
| | | | | | | Closes (SYN-714) #1385 Signed-off-by: Daniel Dent <matrixcontrib@contactdaniel.net> | ||||
* | Allow configuring the Riot URL used in notification emails | Adrian Perez de Castro | 2017-01-13 | 1 | -0/+7 |
| | | | | | | | | | | The URLs used for notification emails were hardcoded to use either matrix.to or vector.im; but for self-hosted setups where Riot is also self-hosted it may be desirable to allow configuring an alternative Riot URL. Fixes #1809. Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> | ||||
* | brand the email from header | Matthew Hodgson | 2016-06-02 | 1 | -1/+1 |
| | |||||
* | More consistent config naming | David Baker | 2016-05-10 | 1 | -1/+1 |
| | |||||
* | Add config option to not send email notifs for new users | David Baker | 2016-05-10 | 1 | -0/+4 |
| | |||||
* | fix layout; handle app naming in synapse, not jinja | Matthew Hodgson | 2016-05-05 | 1 | -0/+5 |
| | |||||
* | fix assorted typos in default config | Matthew Hodgson | 2016-05-04 | 1 | -3/+3 |
| | |||||
* | Try imports in config | David Baker | 2016-04-29 | 1 | -0/+7 |
| | |||||
* | Default enable email notifs to False | David Baker | 2016-04-29 | 1 | -1/+1 |
| | |||||
* | Nicer get() shorthand | David Baker | 2016-04-29 | 1 | -3/+2 |
| | |||||
* | Remove redundant docstring | David Baker | 2016-04-29 | 1 | -4/+0 |
| | |||||
* | Correct default template and add text template | David Baker | 2016-04-29 | 1 | -1/+2 |
| | |||||
* | Send mail notifs with a plaintext part too | David Baker | 2016-04-29 | 1 | -0/+2 |
| | |||||
* | pep8 | David Baker | 2016-04-28 | 1 | -1/+1 |
| | |||||
* | Hopefully all remaining bits for email notifs | David Baker | 2016-04-27 | 1 | -1/+8 |
| | | | | Add public facing base url to the server so synapse knows what URL to use when converting mxc to http urls for use in emails | ||||
* | Generate mails from a template | David Baker | 2016-04-20 | 1 | -10/+25 |
| | |||||
* | Send a rather basic email notif | David Baker | 2016-04-20 | 1 | -0/+62 |
Also pep8 fixes |