Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Improve UsernamePickerTestCase (#9112) | Richard van der Hoff | 2021-01-15 | 1 | -1/+104 |
| | | | | | * make the OIDC bits of the test work at a higher level - via the REST api instead of poking the OIDCHandler directly. * Move it to test_login.py, where I think it fits better. | ||||
* | Remove user's avatar URL and displayname when deactivated. (#8932) | Dirk Klimpel | 2021-01-12 | 1 | -1/+4 |
| | | | This only applies if the user's data is to be erased. | ||||
* | Add some tests for the IDP picker flow | Richard van der Hoff | 2021-01-07 | 1 | -2/+189 |
| | |||||
* | Fix type hints in test_login.py | Richard van der Hoff | 2021-01-07 | 1 | -24/+54 |
| | |||||
* | black-format tests/rest/client/v1/test_login.py | Richard van der Hoff | 2021-01-07 | 1 | -11/+6 |
| | | | | | black seems to want to reformat this, despite `black --check` being happy with it :/ | ||||
* | Skip unit tests which require optional dependencies (#9031) | Richard van der Hoff | 2021-01-07 | 1 | -1/+10 |
| | | | If we are lacking an optional dependency, skip the tests that rely on it. | ||||
* | Combine the SSO Redirect Servlets (#9015) | Richard van der Hoff | 2021-01-04 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Implement CasHandler.handle_redirect_request ... to make it match OidcHandler and SamlHandler * Clean up interface for OidcHandler.handle_redirect_request Make it accept `client_redirect_url=None`. * Clean up interface for `SamlHandler.handle_redirect_request` ... bring it into line with CAS and OIDC by making it take a Request parameter, move the magic for `client_redirect_url` for UIA into the handler, and fix the return type to be a `str` rather than a `bytes`. * Define a common protocol for SSO auth provider impls * Give SsoIdentityProvider an ID and register them * Combine the SSO Redirect servlets Now that the SsoHandler knows about the identity providers, we can combine the various *RedirectServlets into a single implementation which delegates to the right IdP. * changelog | ||||
* | Support PyJWT v2.0.0. (#8986) | Patrick Cloke | 2020-12-22 | 1 | -4/+12 |
| | | | | Tests were broken due to an API changing. The code used in Synapse proper should be compatible with both versions already. | ||||
* | lint | Richard van der Hoff | 2020-12-15 | 1 | -1/+1 |
| | |||||
* | Remove spurious "SynapseRequest" result from `make_request" | Richard van der Hoff | 2020-12-15 | 1 | -52/+32 |
| | | | | This was never used, so let's get rid of it. | ||||
* | Remove redundant `HomeserverTestCase.render` | Richard van der Hoff | 2020-11-16 | 1 | -32/+0 |
| | |||||
* | Allow appservice users to /login (#8320) | Will Hunt | 2020-09-18 | 1 | -1/+133 |
| | | | | | Add ability for ASes to /login using the `uk.half-shot.msc2778.login.application_service` login `type`. Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> | ||||
* | Switch the JSON byte producer from a pull to a push producer. (#8116) | Patrick Cloke | 2020-08-19 | 1 | -11/+5 |
| | |||||
* | Return the proper 403 Forbidden error during errors with JWT logins. (#7844) | Patrick Cloke | 2020-07-15 | 1 | -21/+22 |
| | |||||
* | Add the option to validate the `iss` and `aud` claims for JWT logins. (#7827) | Patrick Cloke | 2020-07-14 | 1 | -6/+100 |
| | |||||
* | Do not use canonicaljson to magically handle decoding bytes from JSON. (#7802) | Patrick Cloke | 2020-07-10 | 1 | -1/+1 |
| | |||||
* | add org.matrix.login.jwt so that m.login.jwt can be deprecated (#7675) | Sorunome | 2020-06-24 | 1 | -3/+7 |
| | |||||
* | Performance improvements and refactor of Ratelimiter (#7595) | Andrew Morgan | 2020-06-05 | 1 | -10/+39 |
| | | | | | | | | | | While working on https://github.com/matrix-org/synapse/issues/5665 I found myself digging into the `Ratelimiter` class and seeing that it was both: * Rather undocumented, and * causing a *lot* of config checks This PR attempts to refactor and comment the `Ratelimiter` class, as well as encourage config file accesses to only be done at instantiation. Best to be reviewed commit-by-commit. | ||||
* | Fix a bug in automatic user creation with m.login.jwt. (#7585) | Olof Johansson | 2020-06-01 | 1 | -0/+153 |
| | |||||
* | Allow expired accounts to logout (#7443) | Andrew Morgan | 2020-05-14 | 1 | -1/+68 |
| | |||||
* | Do not allow a deactivated user to login via SSO. (#7240) | Patrick Cloke | 2020-04-09 | 1 | -3/+39 |
| | |||||
* | Always whitelist the login fallback for SSO (#7153) | Richard van der Hoff | 2020-03-27 | 1 | -1/+8 |
| | | | | | | | That fallback sets the redirect URL to itself (so it can process the login token then return gracefully to the client). This would make it pointless to ask the user for confirmation, since the URL the confirmation page would be showing wouldn't be the client's. | ||||
* | Add a whitelist for the SSO confirmation step. | Richard van der Hoff | 2020-03-02 | 1 | -3/+29 |
| | |||||
* | Add a confirmation step to the SSO login flow | Brendan Abolivier | 2020-03-02 | 1 | -0/+85 |
| | |||||
* | Implement access token expiry (#5660) | Richard van der Hoff | 2019-07-12 | 1 | -0/+108 |
| | | | | Record how long an access token is valid for, and raise a soft-logout once it expires. | ||||
* | Run Black on the tests again (#5170) | Amber Brown | 2019-05-10 | 1 | -27/+9 |
| | |||||
* | Add admin api for sending server_notices (#5121) | Richard van der Hoff | 2019-05-02 | 1 | -1/+1 |
| | |||||
* | Move admin api impl to its own package | Richard van der Hoff | 2019-05-01 | 1 | -2/+3 |
| | | | | It doesn't really belong under rest/client/v1 any more. | ||||
* | Add ratelimiting on failed login attempts (#4865) | Brendan Abolivier | 2019-03-18 | 1 | -0/+45 |
| | |||||
* | Add ratelimiting on login (#4821) | Brendan Abolivier | 2019-03-15 | 1 | -0/+118 |
Add two ratelimiters on login (per-IP address and per-userID). |