Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | make account shadowing work github/matthew/shadow-server matthew/shadow-server | Matthew Hodgson | 2018-11-04 | 1 | -12/+22 |
| | |||||
* | send access_tokens correctly | Matthew Hodgson | 2018-11-03 | 1 | -9/+6 |
| | |||||
* | send json rather than urlencoded to AS API | Matthew Hodgson | 2018-11-03 | 1 | -3/+3 |
| | |||||
* | fix up config thinkos | Matthew Hodgson | 2018-11-03 | 1 | -9/+9 |
| | |||||
* | Merge branch 'dinsic' into matthew/shadow-server | Matthew Hodgson | 2018-11-03 | 1 | -4/+12 |
|\ | |||||
| * | merge master into dinsic, again... | Matthew Hodgson | 2018-11-03 | 1 | -4/+12 |
| |\ | |||||
| | * | improve human readable error messages | Neil Johnson | 2018-09-04 | 1 | -4/+12 |
| | | | |||||
* | | | more comment | Matthew Hodgson | 2018-11-03 | 1 | -1/+4 |
| | | | |||||
* | | | fix missing clients | Matthew Hodgson | 2018-11-03 | 1 | -0/+2 |
| | | | |||||
* | | | add shadowing for /password and fix bugs | Matthew Hodgson | 2018-11-03 | 1 | -16/+40 |
| | | | |||||
* | | | shadow support for 3pid binding/unbinding (untested) | Matthew Hodgson | 2018-11-02 | 1 | -10/+47 |
|/ / | |||||
* | | merge in master | Matthew Hodgson | 2018-10-22 | 1 | -4/+18 |
|\| | |||||
| * | Don't fail requests to unbind 3pids for non supporting ID servers | Erik Johnston | 2018-08-08 | 1 | -4/+18 |
| | | | | | | | | | | | | | | | | | | | | Older identity servers may not support the unbind 3pid request, so we shouldn't fail the requests if we received one of 400/404/501. The request still fails if we receive e.g. 500 responses, allowing clients to retry requests on transient identity server errors that otherwise do support the API. Fixes #3661 | ||||
* | | Merge remote-tracking branch 'origin/master' into dinsic | David Baker | 2018-07-19 | 1 | -36/+16 |
|\| | |||||
| * | Merge pull request #3534 from krombel/use_parse_and_asserts_from_servlet | Amber Brown | 2018-07-14 | 1 | -34/+12 |
| |\ | | | | | | | Use parse and asserts from http.servlet | ||||
| | * | rename assert_params_in_request to assert_params_in_dict | Krombel | 2018-07-13 | 1 | -7/+7 |
| | | | | | | | | | | | | | | | | | | the method "assert_params_in_request" does handle dicts and not requests. A request body has to be parsed to json before this method can be used | ||||
| | * | Use parse_{int,str} and assert from http.servlet | Krombel | 2018-07-13 | 1 | -31/+9 |
| | | | | | | | | | | | | | | | | | | | | | parse_integer and parse_string can take a request and raise errors in case we have wrong or missing params. This PR tries to use them more to deduplicate some code and make it better readable | ||||
| * | | Make auth & transactions more testable (#3499) | Amber Brown | 2018-07-14 | 1 | -2/+1 |
| |/ | |||||
| * | run isort | Amber Brown | 2018-07-09 | 1 | -1/+4 |
| | | |||||
* | | More run_on_reactor | David Baker | 2018-07-19 | 1 | -2/+0 |
| | | |||||
* | | run_on_reactor is dead | David Baker | 2018-07-19 | 1 | -2/+0 |
| | | |||||
* | | Merge remote-tracking branch 'origin/master' into dinsic | David Baker | 2018-07-17 | 1 | -8/+21 |
|\| | |||||
| * | Revert "Revert "Merge pull request #3431 from ↵ | Erik Johnston | 2018-06-25 | 1 | -2/+11 |
| | | | | | | | | | | | | matrix-org/rav/erasure_visibility"" This reverts commit 1d009013b3c3e814177afc59f066e02a202b21cd. | ||||
| * | Revert "Merge pull request #3431 from matrix-org/rav/erasure_visibility" | Richard van der Hoff | 2018-06-22 | 1 | -11/+2 |
| | | | | | | | | | | This reverts commit ce0d911156b355c5bf452120bfb08653dad96497, reversing changes made to b4a5d767a94f1680d07edfd583aae54ce422573e. | ||||
| * | Merge pull request #3431 from matrix-org/rav/erasure_visibility | Erik Johnston | 2018-06-22 | 1 | -2/+11 |
| |\ | | | | | | | Support hiding events from deleted users | ||||
| | * | mark accounts as erased when requested | Richard van der Hoff | 2018-06-12 | 1 | -2/+11 |
| | | | |||||
| * | | Remove run_on_reactor (#3395) | Amber Brown | 2018-06-14 | 1 | -7/+0 |
| |/ | |||||
| * | pep8 | David Baker | 2018-05-24 | 1 | -1/+1 |
| | | |||||
| * | Unbind 3pids when they're deleted too | David Baker | 2018-05-24 | 1 | -3/+10 |
| | | |||||
* | | unbreak 3pid deletion | Matrix | 2018-05-03 | 1 | -0/+1 |
| | | |||||
* | | add option to disable changes to the 3PIDs for an account. | Matthew Hodgson | 2018-05-03 | 1 | -0/+6 |
| | | | | | | | | | | | | | | This only considers the /account/3pid API, which should be sufficient as currently we can't change emails associated with push notifs (which are provisioned at registration), and we can't directly create mappings for accounts in an IS other than by answering an invite | ||||
* | | add yields | Matthew Hodgson | 2018-03-13 | 1 | -4/+4 |
|/ | |||||
* | trailing commas | Matthew Hodgson | 2018-01-19 | 1 | -4/+4 |
| | |||||
* | rewrite based on PR feedback: | Matthew Hodgson | 2018-01-19 | 1 | -1/+2 |
| | | | | | | | | | * [ ] split config options into allowed_local_3pids and registrations_require_3pid * [ ] simplify and comment logic for picking registration flows * [ ] fix docstring and move check_3pid_allowed into a new util module * [ ] use check_3pid_allowed everywhere @erikjohnston PTAL | ||||
* | fix up v1, and improve errors | Matthew Hodgson | 2018-01-19 | 1 | -4/+12 |
| | |||||
* | add registrations_require_3pid | Matthew Hodgson | 2018-01-19 | 1 | -1/+13 |
| | | | | | lets homeservers specify a whitelist for 3PIDs that users are allowed to associate with. Typically useful for stopping people from registering with non-work emails | ||||
* | Factor out a validate_user_via_ui_auth method | Richard van der Hoff | 2017-12-05 | 1 | -60/+47 |
| | | | | Collect together all the places that validate a logged-in user via UI auth. | ||||
* | Refactor UI auth implementation | Richard van der Hoff | 2017-12-05 | 1 | -9/+5 |
| | | | | | Instead of returning False when auth is incomplete, throw an exception which can be caught with a wrapper. | ||||
* | Move set_password into its own handler | Richard van der Hoff | 2017-11-29 | 1 | -1/+2 |
| | | | | | | Non-functional refactoring to move set_password. This means that we'll be able to properly deactivate devices and access tokens without introducing a dependency loop. | ||||
* | Move deactivate_account into its own handler | Richard van der Hoff | 2017-11-29 | 1 | -3/+4 |
| | | | | | | Non-functional refactoring to move deactivate_account. This means that we'll be able to properly deactivate devices and access tokens without introducing a dependency loop. | ||||
* | Remove redundent call | Travis Ralston | 2017-11-13 | 1 | -2/+0 |
| | | | Signed-off-by: Travis Ralston <travpc@gmail.com> | ||||
* | Add a route for determining who you are | Travis Ralston | 2017-11-12 | 1 | -0/+17 |
| | | | | | Useful for applications which may have an access token, but no idea as to who owns it. Signed-off-by: Travis Ralston <travpc@gmail.com> | ||||
* | Move access token deletion into auth handler | Richard van der Hoff | 2017-11-01 | 1 | -11/+4 |
| | | | | | | | Also move duplicated deactivation code into the auth handler. I want to add some hooks when we deactivate an access token, so let's bring it all in here so that there's somewhere to put it. | ||||
* | Allow ASes to deactivate their own users | Richard van der Hoff | 2017-10-27 | 1 | -16/+32 |
| | |||||
* | Fix token request for addition of phone numbers | David Baker | 2017-03-23 | 1 | -1/+1 |
| | |||||
* | Support registration / login with phone number | David Baker | 2017-03-13 | 1 | -20/+94 |
| | | | | Changes from https://github.com/matrix-org/synapse/pull/1971 | ||||
* | Revert "Support registration & login with phone number" | Erik Johnston | 2017-03-13 | 1 | -94/+20 |
| | |||||
* | pep8 | David Baker | 2017-03-08 | 1 | -1/+1 |
| | |||||
* | Pull out datastore in initialiser | David Baker | 2017-03-08 | 1 | -5/+10 |
| | |||||
* | Refector out assert_params_in_request | David Baker | 2017-03-08 | 1 | -19/+9 |
| | | | | and replace requestEmailToken where we meant requestMsisdnToken | ||||
* | Factor out msisdn canonicalisation | David Baker | 2017-03-08 | 1 | -18/+3 |
| | | | | Plus a couple of other minor fixes | ||||
* | Fix pep8 | David Baker | 2017-03-08 | 1 | -2/+2 |
| | |||||
* | WIP support for msisdn 3pid proxy methods | David Baker | 2017-02-14 | 1 | -8/+102 |
| | |||||
* | Lowercase all email addresses before querying db | David Baker | 2017-01-18 | 1 | -0/+5 |
| | | | | | Since we store all emails in the DB in lowercase (https://github.com/matrix-org/synapse/pull/1170) | ||||
* | Add /account/3pid/delete endpoint | David Baker | 2016-12-20 | 1 | -1/+35 |
| | | | | Also fix a typo in a comment | ||||
* | Add hs object | Erik Johnston | 2016-07-14 | 1 | -0/+1 |
| | |||||
* | Only accept password auth | Erik Johnston | 2016-07-14 | 1 | -12/+0 |
| | |||||
* | Add an /account/deactivate endpoint | Erik Johnston | 2016-07-14 | 1 | -0/+55 |
| | |||||
* | be more pythonic | David Baker | 2016-07-12 | 1 | -1/+1 |
| | |||||
* | on_OPTIONS isn't neccessary | David Baker | 2016-07-12 | 1 | -7/+1 |
| | |||||
* | Remove other debug logging | David Baker | 2016-07-12 | 1 | -2/+0 |
| | |||||
* | Separate out requestTokens to separate handlers | David Baker | 2016-07-11 | 1 | -37/+56 |
| | |||||
* | Oops, remove debug logging | David Baker | 2016-07-11 | 1 | -4/+0 |
| | |||||
* | Implement https://github.com/matrix-org/matrix-doc/pull/346/files | David Baker | 2016-07-08 | 1 | -0/+59 |
| | |||||
* | Split out the auth handler | David Baker | 2016-06-02 | 1 | -2/+2 |
| | |||||
* | Fix password reset | David Baker | 2016-04-29 | 1 | -0/+1 |
| | | | | Default requester to None, otherwise it isn't defined when resetting using email auth | ||||
* | take extra return val from check_auth in account too | David Baker | 2016-03-16 | 1 | -1/+1 |
| | |||||
* | Fix cache invalidation so deleting access tokens (which we did when changing ↵ | David Baker | 2016-03-11 | 1 | -1/+1 |
| | | | | password) actually takes effect without HS restart. Reinstate the code to avoid logging out the session that changed the password, removed in 415c2f05491ce65a4fc34326519754cd1edd9c54 | ||||
* | Add a parse_json_object function | Mark Haines | 2016-03-09 | 1 | -4/+4 |
| | | | | | to deduplicate all the copy+pasted _parse_json functions. Also document the parse_.* functions. | ||||
* | Allow three_pid_creds as well as threePidCreds in /account/3pid | Mark Haines | 2016-01-29 | 1 | -2/+3 |
| | |||||
* | Fix change_password | Erik Johnston | 2016-01-20 | 1 | -3/+2 |
| | |||||
* | Introduce a Requester object | Daniel Wagner-Hall | 2016-01-11 | 1 | -9/+11 |
| | | | | | | | | | This tracks data about the entity which made the request. This is instead of passing around a tuple, which requires call-site modifications every time a new piece of optional context is passed around. I tried to introduce a User object. I gave up. | ||||
* | copyrights | Matthew Hodgson | 2016-01-07 | 1 | -1/+1 |
| | |||||
* | Update endpoints to reflect current spec | Daniel Wagner-Hall | 2015-12-02 | 1 | -2/+2 |
| | |||||
* | Host /unstable and /r0 versions of r0 APIs | Daniel Wagner-Hall | 2015-12-01 | 1 | -3/+3 |
| | |||||
* | Allow guests to register and call /events?room_id= | Daniel Wagner-Hall | 2015-11-04 | 1 | -3/+3 |
| | | | | | | | This follows the same flows-based flow as regular registration, but as the only implemented flow has no requirements, it auto-succeeds. In the future, other flows (e.g. captcha) may be required, so clients should treat this like the regular registration flow choices. | ||||
* | Merge pull request #274 from matrix-org/add_threepid_fix | David Baker | 2015-09-10 | 1 | -0/+1 |
|\ | | | | | Fix adding threepids to an existing account | ||||
| * | Fix adding threepids to an existing account | David Baker | 2015-09-10 | 1 | -0/+1 |
| | | |||||
* | | Remove completely unused concepts from codebase | Daniel Wagner-Hall | 2015-08-25 | 1 | -2/+2 |
|/ | | | | | | | | | | Removes device_id and ClientInfo device_id is never actually written, and the matrix.org DB has no non-null entries for it. Right now, it's just cluttering up code. This doesn't remove the columns from the database, because that's fiddly. | ||||
* | Remove spurious extra arg to set_password | David Baker | 2015-08-20 | 1 | -1/+1 |
| | |||||
* | Simplify LoginHander and AuthHandler | Daniel Wagner-Hall | 2015-08-12 | 1 | -5/+3 |
| | | | | | | | | | * Merge LoginHandler -> AuthHandler * Add a bunch of documentation * Improve some naming * Remove unused branches I will start merging the actual logic of the two handlers shortly | ||||
* | user_id now in user_threepids | David Baker | 2015-05-01 | 1 | -3/+3 |
| | |||||
* | pep8 | David Baker | 2015-04-27 | 1 | -1/+2 |
| | |||||
* | logging args | David Baker | 2015-04-27 | 1 | -2/+2 |
| | |||||
* | More underscores | David Baker | 2015-04-24 | 1 | -2/+2 |
| | |||||
* | Dedicated error code for failed 3pid auth verification | David Baker | 2015-04-23 | 1 | -1/+3 |
| | |||||
* | Password reset, finally. | David Baker | 2015-04-17 | 1 | -5/+16 |
| | |||||
* | Add endpoint to get threepids from server | David Baker | 2015-04-17 | 1 | -0/+12 |
| | |||||
* | make add3pid servlet work | David Baker | 2015-04-17 | 1 | -0/+38 |
| | |||||
* | just the once would probably be fine | David Baker | 2015-04-17 | 1 | -1/+0 |
| | |||||
* | Register the 3pid servlet | David Baker | 2015-04-17 | 1 | -1/+3 |
| | |||||
* | password -> account servlet and add start of an 'add 3pid' endpoint | David Baker | 2015-04-17 | 1 | -0/+94 |