Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Change admin_uri to admin_contact in config and errors | Erik Johnston | 2018-08-24 | 1 | -2/+2 |
| | |||||
* | rename error code | Neil Johnson | 2018-08-18 | 1 | -2/+2 |
| | |||||
* | special case server_notices_mxid | Neil Johnson | 2018-08-18 | 1 | -0/+8 |
| | |||||
* | add new error type ResourceLimit | Neil Johnson | 2018-08-16 | 1 | -3/+3 |
| | |||||
* | update error codes for resource limiting | Neil Johnson | 2018-08-15 | 1 | -2/+2 |
| | |||||
* | replace admin_email with admin_uri for greater flexibility | Neil Johnson | 2018-08-15 | 1 | -2/+2 |
| | |||||
* | support admin_email config and pass through into blocking errors, return ↵ | Neil Johnson | 2018-08-13 | 1 | -1/+5 |
| | | | | AuthError in all cases | ||||
* | Revert "support admin_email config and pass through into blocking errors, ↵ | Neil Johnson | 2018-08-13 | 1 | -5/+1 |
| | | | | | | return AuthError in all cases" This reverts commit 0d43f991a19840a224d3dac78d79f13d78212ee6. | ||||
* | support admin_email config and pass through into blocking errors, return ↵ | Neil Johnson | 2018-08-13 | 1 | -1/+5 |
| | | | | AuthError in all cases | ||||
* | Run tests under PostgreSQL (#3423) | Amber Brown | 2018-08-13 | 1 | -1/+1 |
| | |||||
* | Run black. | black | 2018-08-10 | 1 | -41/+35 |
| | |||||
* | disable HS from config | Neil Johnson | 2018-08-04 | 1 | -1/+10 |
| | |||||
* | remove unused import | Neil Johnson | 2018-08-03 | 1 | -1/+1 |
| | |||||
* | bug fixes | Neil Johnson | 2018-08-03 | 1 | -7/+3 |
| | |||||
* | do mau checks based on monthly_active_users table | Neil Johnson | 2018-08-02 | 1 | -1/+30 |
| | |||||
* | Python 3: Convert some unicode/bytes uses (#3569) | Amber Brown | 2018-08-02 | 1 | -16/+19 |
| | |||||
* | run isort | Amber Brown | 2018-07-09 | 1 | -2/+5 |
| | |||||
* | add test | Matthew Hodgson | 2018-06-28 | 1 | -0/+33 |
| | |||||
* | fix tests | Matthew Hodgson | 2018-06-28 | 1 | -3/+15 |
| | |||||
* | Prevent user tokens being used as guest tokens (#1675) | Richard van der Hoff | 2016-12-06 | 1 | -15/+78 |
| | | | | | Make sure that a user cannot pretend to be a guest by adding 'guest = True' caveats. | ||||
* | Fix unit tests | Mark Haines | 2016-09-12 | 1 | -9/+9 |
| | |||||
* | Record device_id in client_ips | Richard van der Hoff | 2016-07-20 | 1 | -1/+9 |
| | | | | | Record the device_id when we add a client ip; it's somewhat redundant as we could get it via the access_token, but it will make querying rather easier. | ||||
* | Bug fix: expire invalid access tokens | Negar Fazeli | 2016-07-13 | 1 | -1/+30 |
| | |||||
* | Create user with expiry | Negi Fazeli | 2016-05-13 | 1 | -6/+6 |
| | | | | | | - Add unittests for client, api and handler Signed-off-by: Negar Fazeli <negar.fazeli@ericsson.com> | ||||
* | Fix flake8 warnings for tests | Mark Haines | 2016-02-19 | 1 | -2/+2 |
| | |||||
* | Introduce a Requester object | Daniel Wagner-Hall | 2016-01-11 | 1 | -6/+6 |
| | | | | | | | | | This tracks data about the entity which made the request. This is instead of passing around a tuple, which requires call-site modifications every time a new piece of optional context is passed around. I tried to introduce a User object. I gave up. | ||||
* | Allow guests to upgrade their accounts | Daniel Wagner-Hall | 2016-01-05 | 1 | -9/+9 |
| | |||||
* | Allow guests to register and call /events?room_id= | Daniel Wagner-Hall | 2015-11-04 | 1 | -3/+22 |
| | | | | | | | This follows the same flows-based flow as regular registration, but as the only implemented flow has no requirements, it auto-succeeds. In the future, other flows (e.g. captcha) may be required, so clients should treat this like the regular registration flow choices. | ||||
* | s/user_id/user/g for consistency | Daniel Wagner-Hall | 2015-09-01 | 1 | -4/+4 |
| | |||||
* | Turn TODO into thing which actually will fail | Daniel Wagner-Hall | 2015-08-26 | 1 | -6/+9 |
| | |||||
* | Attempt to validate macaroons | Daniel Wagner-Hall | 2015-08-26 | 1 | -2/+140 |
| | | | | | | | | | | | | | A couple of weird caveats: * If we can't validate your macaroon, we fall back to checking that your access token is in the DB, and ignoring the failure * Even if we can validate your macaroon, we still have to hit the DB to get the access token ID, which we pretend is a device ID all over the codebase. This mostly adds the interesting code, and points out the two pieces we need to delete (and necessary conditions) in order to fix the above caveats. | ||||
* | Stop looking up "admin", which we never read | Daniel Wagner-Hall | 2015-08-25 | 1 | -2/+0 |
| | |||||
* | Remove completely unused concepts from codebase | Daniel Wagner-Hall | 2015-08-25 | 1 | -5/+3 |
| | | | | | | | | | | Removes device_id and ClientInfo device_id is never actually written, and the matrix.org DB has no non-null entries for it. Right now, it's just cluttering up code. This doesn't remove the columns from the database, because that's fiddly. | ||||
* | s/by_token/by_access_token/g | Daniel Wagner-Hall | 2015-08-20 | 1 | -8/+8 |
| | | | | We're about to have two kinds of token, access and refresh | ||||
* | Remove unused imports. | Kegan Dougal | 2015-02-09 | 1 | -2/+2 |
| | |||||
* | Modify auth.get_user_by_req for authing appservices directly. | Kegan Dougal | 2015-02-09 | 1 | -0/+139 |
Add logic to map the appservice token to the autogenned appservice user ID. Add unit tests for all forms of get_user_by_req (user/appservice, valid/bad/missing tokens) |