Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make registration idempotent, part 2: be idempotent if the client specifies ↵ | David Baker | 2016-03-16 | 1 | -1/+11 |
| | | | | a username. | ||||
* | Store appservice ID on register | Daniel Wagner-Hall | 2016-03-10 | 1 | -1/+4 |
| | |||||
* | Use syntax that works on both py2.7 and py3 | Mark Haines | 2016-03-07 | 1 | -1/+1 |
| | |||||
* | handlers/register: make sure another user id is generated when a collision ↵ | Patrik Oldsberg | 2016-02-29 | 1 | -0/+1 |
| | | | | | | occurs Signed-off-by: Patrik Oldsberg <patrik.oldsberg@ericsson.com> | ||||
* | Generate guest access token on 3pid invites | Daniel Wagner-Hall | 2016-02-24 | 1 | -0/+15 |
| | | | | | | | | | This means that following the same link across multiple sessions or devices can re-use the same guest account. Note that this is somewhat of an abuse vector; we can't throw up captchas on this flow, so this is a way of registering ephemeral accounts for spam, whose sign-up we don't rate limit. | ||||
* | Enforce user_id exclusivity for AS registrations | Daniel Wagner-Hall | 2016-02-11 | 1 | -5/+12 |
| | | | | | This whole set of checks is kind of an ugly mess, which I may clean up at some point, but for now let's be correct. | ||||
* | Fix up logcontexts | Erik Johnston | 2016-02-08 | 1 | -1/+1 |
| | |||||
* | Allocate guest user IDs numericcally | Daniel Wagner-Hall | 2016-02-05 | 1 | -19/+36 |
| | | | | | | | | | The current random IDs are ugly and confusing when presented in UIs. This makes them prettier and easier to read. Also, disable non-automated registration of numeric IDs so that we don't need to worry so much about people carving out our automated address space and us needing to keep retrying ID registration. | ||||
* | Fix flake8 warnings for new flake8 | Daniel Wagner-Hall | 2016-02-02 | 1 | -1/+1 |
| | |||||
* | Pass make_guest whne we autogen a user ID | David Baker | 2016-02-02 | 1 | -1/+3 |
| | |||||
* | Underscores are allowed in user ids | Erik Johnston | 2016-01-22 | 1 | -1/+1 |
| | |||||
* | Don't explode when given a unicode username in /register/ | Erik Johnston | 2016-01-20 | 1 | -3/+2 |
| | |||||
* | M_INVALID_USERNAME to be consistent with the parameter name | David Baker | 2016-01-15 | 1 | -1/+1 |
| | |||||
* | Add specific error code for invalid user names. | David Baker | 2016-01-14 | 1 | -1/+2 |
| | |||||
* | comma style | David Baker | 2016-01-06 | 1 | -1/+1 |
| | |||||
* | Add is_guest flag to users db to track whether a user is a guest user or ↵ | David Baker | 2016-01-06 | 1 | -1/+3 |
| | | | | not. Use this so we can run _filter_events_for_client when calculating event_push_actions. | ||||
* | Allow guests to upgrade their accounts | Daniel Wagner-Hall | 2016-01-05 | 1 | -10/+27 |
| | |||||
* | Merge pull request #450 from matrix-org/matthew/no-identicons | Matthew Hodgson | 2015-12-18 | 1 | -19/+3 |
|\ | | | | | Matthew/no identicons | ||||
| * | fix indentation level | Matthew Hodgson | 2015-12-17 | 1 | -3/+3 |
| | | |||||
| * | stop generating default identicons. reverts most of ↵ | Matthew Hodgson | 2015-12-17 | 1 | -19/+3 |
| | | | | | | | | 582019f870adbc4a8a8a9ef97b527e0fead77761 and solves vector-web/vector-im#346 | ||||
* | | Fix typo that broke registration on the mobile clients | David Baker | 2015-12-18 | 1 | -1/+1 |
|/ | |||||
* | Reuse the captcha client rather than creating a new one for each request | Mark Haines | 2015-12-03 | 1 | -4/+2 |
| | |||||
* | Wrap calls to distributor.fire in appropriately named functions so that ↵ | Mark Haines | 2015-12-01 | 1 | -4/+8 |
| | | | | static analysis can work out want is calling what | ||||
* | Allow guests to register and call /events?room_id= | Daniel Wagner-Hall | 2015-11-04 | 1 | -5/+7 |
| | | | | | | | This follows the same flows-based flow as regular registration, but as the only implemented flow has no requirements, it auto-succeeds. In the future, other flows (e.g. captcha) may be required, so clients should treat this like the regular registration flow choices. | ||||
* | Remove unused import | Daniel Wagner-Hall | 2015-08-26 | 1 | -1/+0 |
| | |||||
* | Swap out bcrypt for md5 in tests | Daniel Wagner-Hall | 2015-08-26 | 1 | -1/+1 |
| | | | | This reduces our ~8 second sequential test time down to ~7 seconds | ||||
* | Merge erikj/user_dedup to develop | Daniel Wagner-Hall | 2015-08-26 | 1 | -2/+2 |
| | |||||
* | Move token generation to auth handler | Daniel Wagner-Hall | 2015-08-20 | 1 | -19/+7 |
| | | | | | I prefer the auth handler to worry about all auth, and register to call into it as needed, than to smatter auth logic between the two. | ||||
* | Re-add whitespace around caveat operators | Daniel Wagner-Hall | 2015-08-19 | 1 | -4/+4 |
| | |||||
* | Remove padding space around caveat operators | Daniel Wagner-Hall | 2015-08-18 | 1 | -4/+4 |
| | |||||
* | Fix some formatting to use tuples | Daniel Wagner-Hall | 2015-08-18 | 1 | -4/+4 |
| | |||||
* | Issue macaroons as opaque auth tokens | Daniel Wagner-Hall | 2015-08-18 | 1 | -6/+13 |
| | | | | | | | | | | | | | This just replaces random bytes with macaroons. The macaroons are not inspected by the client or server. In particular, they claim to have an expiry time, but nothing verifies that they have not expired. Follow-up commits will actually enforce the expiration, and allow for token refresh. See https://bit.ly/matrix-auth for more information | ||||
* | Simplify LoginHander and AuthHandler | Daniel Wagner-Hall | 2015-08-12 | 1 | -5/+5 |
| | | | | | | | | | * Merge LoginHandler -> AuthHandler * Add a bunch of documentation * Improve some naming * Remove unused branches I will start merging the actual logic of the two handlers shortly | ||||
* | Fix v2_alpha registration. Add unit tests. | Kegan Dougal | 2015-07-28 | 1 | -1/+2 |
| | | | | | | | | V2 Registration forced everyone (including ASes) to create a password for a user, when ASes should be able to omit passwords. Also unbreak AS registration in general which checked too early if the given username was claimed by an AS; it was checked before knowing if the AS was the one doing the registration! Add unit tests for AS reg, user reg and disabled_registration flag. | ||||
* | code beautify | Muthu Subramanian | 2015-07-08 | 1 | -1/+0 |
| | |||||
* | Integrate SAML2 basic authentication - uses pysaml2 | Muthu Subramanian | 2015-07-08 | 1 | -0/+30 |
| | |||||
* | revert accidental bcrypt gensalt round reduction from loadtesting | Mark Haines | 2015-05-07 | 1 | -1/+1 |
| | |||||
* | pynacl-0.3.0 was released so we can finally start using it directly from pypi | Mark Haines | 2015-05-07 | 1 | -1/+1 |
| | |||||
* | pep8 | David Baker | 2015-04-17 | 1 | -4/+1 |
| | |||||
* | Need to yield the username check, otherwise very very weird things happen. | David Baker | 2015-04-17 | 1 | -1/+1 |
| | |||||
* | Oops, left debugging in. | David Baker | 2015-04-16 | 1 | -6/+0 |
| | |||||
* | Return user ID in use error straight away | David Baker | 2015-04-16 | 1 | -63/+39 |
| | |||||
* | Regstration with email in v2 | David Baker | 2015-04-15 | 1 | -1/+5 |
| | |||||
* | New registration for C/S API v2. Only ReCAPTCHA working currently. | David Baker | 2015-03-30 | 1 | -1/+10 |
| | |||||
* | Factor out user id validation checks | Erik Johnston | 2015-03-18 | 1 | -0/+8 |
| | |||||
* | Implement exclusive namespace checks. | Kegan Dougal | 2015-02-27 | 1 | -5/+6 |
| | |||||
* | Merge branch 'develop' into application-services | Kegan Dougal | 2015-02-11 | 1 | -5/+8 |
|\ | |||||
| * | Code-style fixes | Mark Haines | 2015-02-10 | 1 | -5/+8 |
| | | |||||
* | | Merge branch 'develop' into application-services | Kegan Dougal | 2015-02-09 | 1 | -0/+17 |
|\| | |||||
| * | don't give up if we can't create default avatars during tests | Matthew Hodgson | 2015-02-07 | 1 | -9/+12 |
| | | |||||
| * | ...and here's the actual impl. git fail. | Matthew Hodgson | 2015-02-07 | 1 | -0/+14 |
| | | |||||
* | | Add errcodes for appservice registrations. | Kegan Dougal | 2015-02-06 | 1 | -4/+7 |
| | | |||||
* | | Add m.login.application_service registration procedure. | Kegan Dougal | 2015-02-05 | 1 | -0/+20 |
| | | | | | | | | | | This allows known application services to register any user ID under their own user namespace(s). | ||||
* | | Prevent user IDs in AS namespaces being created/deleted by humans. | Kegan Dougal | 2015-02-05 | 1 | -0/+16 |
| | | |||||
* | | Modify API for SimpleHttpClient.get_json and update usages. | Kegan Dougal | 2015-02-04 | 1 | -23/+33 |
|/ | | | | | | | | | | Previously, this would only return the HTTP body as JSON, and discard other response information (e.g. the HTTP response code). This has now been changed to throw a CodeMessageException on a non-2xx response, with the response code and body, which can then be parsed as JSON. Affected modules include: - Registration/Login (when using an email for IS auth) | ||||
* | Add matrix.org as a trusted ID server because it's now passed through on ↵ | David Baker | 2015-01-28 | 1 | -1/+1 |
| | | | | ports 80/443 and the web client defaults to that now. Fixes email validation (including signing up with an email address). | ||||
* | Update copyright notices | Mark Haines | 2015-01-06 | 1 | -1/+1 |
| | |||||
* | Fix registration | Erik Johnston | 2014-12-08 | 1 | -2/+4 |
| | |||||
* | Fix pep8 and pyflakes warnings | Mark Haines | 2014-11-20 | 1 | -2/+7 |
| | |||||
* | Merge branch 'develop' into http_client_refactor | David Baker | 2014-11-20 | 1 | -1/+1 |
|\ | |||||
| * | Add a few missing yields, Move deferred lists inside PreserveLoggingContext ↵ | Mark Haines | 2014-11-20 | 1 | -1/+1 |
| | | | | | | | | because they don't interact well with the logging contexts | ||||
* | | Separate out the matrix http client completely because just about all of its ↵ | David Baker | 2014-11-20 | 1 | -7/+9 |
| | | | | | | | | code it now separate from the simple case we need for standard HTTP(S) | ||||
* | | Oops, I removed this param. | David Baker | 2014-11-20 | 1 | -2/+0 |
| | | |||||
* | | Refactor the HTTP clients a little. | David Baker | 2014-11-20 | 1 | -3/+3 |
|/ | |||||
* | Use python logger, not the twisted logger | Erik Johnston | 2014-11-03 | 1 | -2/+1 |
| | |||||
* | Fix pep8 warnings | Mark Haines | 2014-10-30 | 1 | -6/+9 |
| | |||||
* | Add get_json method to 3pid http client. Better logging for errors in 3pid ↵ | Mark Haines | 2014-10-20 | 1 | -1/+2 |
| | | | | requests | ||||
* | Fix pyflakes errors | Mark Haines | 2014-10-02 | 1 | -1/+1 |
| | |||||
* | Split PlainHttpClient into separate clients for talking to Identity servers ↵ | Mark Haines | 2014-10-02 | 1 | -3/+8 |
| | | | | and talking to Capatcha servers | ||||
* | Split out password/captcha/email logic. | Kegan Dougal | 2014-09-15 | 1 | -56/+64 |
| | |||||
* | Reload captchas when they fail. Cleanup on success. | Kegan Dougal | 2014-09-05 | 1 | -2/+2 |
| | |||||
* | 80 chars please | Kegan Dougal | 2014-09-05 | 1 | -9/+19 |
| | |||||
* | Add config opion for XFF headers when performing ReCaptcha auth. | Kegan Dougal | 2014-09-05 | 1 | -0/+1 |
| | |||||
* | Captchas now work on registration. Missing x-forwarded-for config arg ↵ | Kegan Dougal | 2014-09-05 | 1 | -2/+47 |
| | | | | support. Missing reloading a new captcha on the web client / displaying a sensible error message. | ||||
* | Merge branch 'develop' of github.com:matrix-org/synapse into develop | David Baker | 2014-09-03 | 1 | -1/+1 |
|\ | | | | | | | | | Conflicts: synapse/http/client.py | ||||
| * | fix the copyright holder from matrix.org to OpenMarket Ltd, as matrix.org ↵ | Matthew Hodgson | 2014-09-03 | 1 | -1/+1 |
| | | | | | | | | hasn't been incorporated in time for launch. | ||||
* | | Add support for registering with a threepid to the HS (get credentials from ↵ | David Baker | 2014-09-03 | 1 | -3/+59 |
|/ | | | | the client and check them against an ID server). | ||||
* | add in whitespace after copyright statements to improve legibility | Matthew Hodgson | 2014-08-13 | 1 | -0/+1 |
| | |||||
* | Reference Matrix Home Server | matrix.org | 2014-08-12 | 1 | -0/+100 |