Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Enforce that an admin token also has the basic Matrix API scope | Quentin Gliech | 2023-05-30 | 1 | -1/+25 |
| | |||||
* | Reject tokens with multiple device scopes | Quentin Gliech | 2023-05-30 | 1 | -1/+28 |
| | |||||
* | Handle errors when introspecting tokens | Quentin Gliech | 2023-05-30 | 1 | -0/+35 |
| | | | | | This returns a proper 503 when the introspection endpoint is not working for some reason, which should avoid logging out clients in those cases. | ||||
* | Disable incompatible Admin API endpoints | Quentin Gliech | 2023-05-30 | 1 | -0/+19 |
| | |||||
* | Make AS tokens work & allow ASes to /register | Quentin Gliech | 2023-05-30 | 1 | -2/+2 |
| | |||||
* | Refactor config to be an experimental feature | Hugh Nimmo-Smith | 2023-05-30 | 1 | -6/+9 |
| | | | | Also enforce you can't combine it with incompatible config options | ||||
* | Disable account related endpoints when using OAuth delegation | Quentin Gliech | 2023-05-30 | 1 | -3/+177 |
| | |||||
* | Actually enforce guest + return www-authenticate header | Hugh Nimmo-Smith | 2023-05-30 | 1 | -3/+40 |
| | |||||
* | Initial tests for OAuth delegation | Hugh Nimmo-Smith | 2023-05-30 | 1 | -0/+345 |