Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Enable cross-signing key upload without UIA (#17284) | Richard van der Hoff | 2024-06-14 | 1 | -0/+2 |
| | | | | | | Per MSC3967, which is now stable, we should not require UIA when uploading cross-signing keys for the first time. Fixes: #17227 | ||||
* | Correctly mention previous copyright (#16820) | Erik Johnston | 2024-01-23 | 1 | -0/+1 |
| | | | | | During the migration the automated script to update the copyright headers accidentally got rid of some of the existing copyright lines. Reinstate them. | ||||
* | Merge remote-tracking branch 'gitlab/clokep/license-license' into new_develop | Erik Johnston | 2023-12-13 | 1 | -10/+16 |
|\ | |||||
| * | Update license headers | Patrick Cloke | 2023-11-21 | 1 | -10/+16 |
| | | |||||
* | | Keep track of `user_ips` and `monthly_active_users` when delegating auth ↵ | David Robertson | 2023-11-23 | 1 | -14/+115 |
|/ | | | | | | | | | | | | | (#16672) * Describe `insert_client_ip` * Pull out client_ips and MAU tracking to BaseAuth * Define HAS_AUTHLIB once in tests sick of copypasting * Track ips and token usage when delegating auth * Test that we track MAU and user_ips * Don't track `__oidc_admin` | ||||
* | Merge remote-tracking branch 'origin/release-v1.91' into release-v1.92 | Patrick Cloke | 2023-09-06 | 1 | -129/+23 |
|\ | |||||
| * | Revert MSC3861 introspection cache, admin impersonation and account lock ↵ | Quentin Gliech | 2023-09-06 | 1 | -130/+24 |
| | | | | | | | | (#16258) | ||||
* | | Replace simple_async_mock with AsyncMock (#16180) | Patrick Cloke | 2023-08-25 | 1 | -21/+21 |
|/ | | | | Python 3.8 has a native AsyncMock, use it instead of a custom implementation. | ||||
* | Add an admin endpoint to allow authorizing server to signal token ↵ | Shay | 2023-08-22 | 1 | -1/+33 |
| | | | | revocations (#16125) | ||||
* | MSC3861: allow impersonation by an admin using a query param (#16132) | Mathieu Velten | 2023-08-18 | 1 | -0/+35 |
| | |||||
* | Cache token introspection response from OIDC provider (#16117) | Shay | 2023-08-17 | 1 | -0/+62 |
| | |||||
* | Enforce that an admin token also has the basic Matrix API scope | Quentin Gliech | 2023-05-30 | 1 | -1/+25 |
| | |||||
* | Reject tokens with multiple device scopes | Quentin Gliech | 2023-05-30 | 1 | -1/+28 |
| | |||||
* | Handle errors when introspecting tokens | Quentin Gliech | 2023-05-30 | 1 | -0/+35 |
| | | | | | This returns a proper 503 when the introspection endpoint is not working for some reason, which should avoid logging out clients in those cases. | ||||
* | Disable incompatible Admin API endpoints | Quentin Gliech | 2023-05-30 | 1 | -0/+19 |
| | |||||
* | Make AS tokens work & allow ASes to /register | Quentin Gliech | 2023-05-30 | 1 | -2/+2 |
| | |||||
* | Refactor config to be an experimental feature | Hugh Nimmo-Smith | 2023-05-30 | 1 | -6/+9 |
| | | | | Also enforce you can't combine it with incompatible config options | ||||
* | Disable account related endpoints when using OAuth delegation | Quentin Gliech | 2023-05-30 | 1 | -3/+177 |
| | |||||
* | Actually enforce guest + return www-authenticate header | Hugh Nimmo-Smith | 2023-05-30 | 1 | -3/+40 |
| | |||||
* | Initial tests for OAuth delegation | Hugh Nimmo-Smith | 2023-05-30 | 1 | -0/+345 |