timedout
58d135bc57
fix: Return the actual state at in !admin debug get-state-at
...
Previously this command actually returned the state *before*, which made debugging with it confusing.
2026-09-29 22:06:48 +01:00
Clubs
684820c7c1
fix: check for user account status before attemping to process email change.
2026-09-29 18:36:35 +00:00
Ginger
cbdf978b84
fix: Preserve custom fields in create event content
2026-09-29 17:52:32 +00:00
Ginger
38b7987335
fix: Add invitees as creators for v12+ trusted private chats
2026-09-29 17:52:32 +00:00
stratself
612a261b61
docs(auth): with --> to
2026-09-29 16:26:07 +00:00
stratself
b1e51ab0fb
docs(internal auth): Redo rego methods (see commit notes)
...
* Tokens + recaptcha combinations have been removed since they don't
work. Docstring in config tomlto be removed later
* Method 3 expanded to include both static and admin issued tokens
* Methods 1-3 are the "trusted token flow" and 4-6 are the "untrusted
captcha flow"
2026-09-29 16:26:07 +00:00
stratself
8f56f99e2f
docs(oidc): Incorporate wording fixes wrt subject claim from PR review
2026-09-29 16:26:07 +00:00
stratself
95f65fdba4
docs(auth): Wording fixes according to PR review
2026-09-29 16:26:07 +00:00
stratself
23a0fc1b0f
docs(oidc): kanidm --> Kanidm
2026-09-29 16:26:07 +00:00
stratself
f49bda81d2
docs(auth): Incorporate changes from PR review comments
2026-09-29 16:26:07 +00:00
stratself
f35eb7677c
fix: Typo
2026-09-29 16:26:07 +00:00
stratself
b2a90f118d
docs(deploying): Fix OIDC links
...
The deploying stub page will be rewritten sooon and the "What's next"
steps should migrate there. In the meantime this helps npm not break
when building the docs
2026-09-29 16:26:07 +00:00
stratself
4b79acba97
chore: Changelog for #2234
2026-09-29 16:26:07 +00:00
stratself
01a83067c6
docs: Remove OIDC page from Guides section
...
It now resides in the Authentication section
2026-09-29 16:26:07 +00:00
stratself
84cf4196e2
docs(auth): Fix wordings and add links to admin commands
...
* Add confirmed email + reCAPTCHA registration method as well
2026-09-29 16:26:07 +00:00
stratself
83341062af
docs(oidc): Add advanced options section, and more notes for linked accounts
2026-09-29 16:26:07 +00:00
stratself
1d196f24ec
docs(auth): Reword sources section a bit
2026-09-29 16:26:07 +00:00
stratself
4631854325
docs(auth): Address concerns from feedback part 1
2026-09-29 16:26:07 +00:00
stratself
26b8e527aa
docs(oidc): Add important notice to OIDC breaking legacy logins
2026-09-29 16:26:07 +00:00
stratself
c07922fff2
docs(auth): Simplify auth sources section & add client well-known notice
2026-09-29 16:26:07 +00:00
stratself
e41435f13c
docs(auth): Rename rego page to "internal auth" & add pwd reset details
...
* Moved around a few paragraphs to fit new title as well
2026-09-29 16:26:07 +00:00
stratself
8c0fcfd108
chore: Add few todos
2026-09-29 16:26:07 +00:00
stratself
516f94d83f
docs(auth): Copy stuff from the OIDC guide
...
The guide would be removed at a later time
2026-09-29 16:26:07 +00:00
stratself
97533eea05
docs(auth): Writeup on auth sources and flows
2026-09-29 16:26:07 +00:00
stratself
062cb5b412
docs(registration): Remove challengeless rego mentions, add rego platforms
2026-09-29 16:26:07 +00:00
stratself
17084a363b
docs(registration): Number all the rego methods and add admin commands for emails
2026-09-29 16:26:07 +00:00
stratself
ac96b57506
chore(docs): Add some todos
2026-09-29 16:26:07 +00:00
stratself
385f6639c4
docs(auth): Move legacy auth page to rego page (see desc)
...
The commit moves legacy.mdx to registration.mdx and significantly
shortens it. Instead of explaining every registration option now a table
is provided. Renaming the page because besides registration there is not
much else to explain about legacy auth. If anything, those should be
elaborated on the main authentication.mdx page (i.e. difference between
OAuth and UIAA)
The email section has also been updated with (some) relevant info.
2026-09-29 16:26:07 +00:00
stratself
b3a15fc305
docs(auth): Add token-based registration instructions
2026-09-29 16:26:07 +00:00
stratself
979c1b2fc7
docs: Initialize authentication chapter
2026-09-29 16:26:07 +00:00
Ginger
8f2f7f09ed
docs: Remove cards from index page
2026-09-29 15:39:26 +00:00
Renovate Bot
b59e697ed6
chore(deps): update github-actions-digest
2026-09-29 05:01:36 +00:00
nex
9c0b88f67c
chore: Publish admin announcement
2026-09-29 02:30:34 +00:00
Renovate Bot
76e87c93d8
chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.115.13
2026-09-28 05:03:08 +00:00
nex
aa40142b87
fix(ci): Disable GitLab mirror
2026-09-28 03:13:34 +00:00
timedout
046074bbc2
chore: Release
2026-09-28 02:04:54 +01:00
timedout
550dd0160a
fix: SEC8
...
Reviewed-By: Ginger <ginger@gingershaped.computer >
Reviewed-By: Jade <jade@ellis.link >
Reviewed-By: Jacob Taylor <jacob@explodie.org >
2026-09-28 02:00:37 +01:00
timedout
c0ad864d57
fix: Make unembed unsigned run in bg
2026-09-27 22:58:08 +01:00
timedout
451c44800b
chore: Add news frag
2026-09-27 19:19:50 +01:00
timedout
a61026912c
feat: Add a migration to fix up unsigned data
2026-09-27 18:31:46 +01:00
timedout
05d6922351
style: Take an optional context instead of deconstructed parameters
2026-09-27 17:33:26 +01:00
timedout
f0a0596d12
fix: Remove undocumented prev_sender unsigned field
2026-09-27 17:32:47 +01:00
timedout
fbedf994db
fix: Don't unnecessarily embed prev_content in populate_unsigned
2026-09-27 17:32:47 +01:00
timedout
1de16fed9e
style: English is a difficult language
2026-09-27 17:32:47 +01:00
timedout
4812837d13
fix: Don't allow set_unsigned to panic
...
While an error in this function is probably bad, detonating a metric tonne of TNT on the call tree is probably worse
2026-09-27 17:32:47 +01:00
timedout
90793eaaf4
fix: Actually set unsigned in PDU after set_unsigned
2026-09-27 17:32:47 +01:00
timedout
744928b206
style: Update docstring for Pdu.set_unsigned
2026-09-27 17:32:47 +01:00
timedout
05ee24df7d
fix: Move helper to helpers.rs, rename field, don't recurse unsigned in redacted_because
...
Renamed `redacted_because_id` to `org.continuwuity.redacted_by` for proper namespacing; `get_unsigned_context` now lives in helpers.rs instead of `mod.rs`. The helper function also now explicitly wipes `unsigned` for `redacted_because` to avoid leaks (see comment).
2026-09-27 17:32:46 +01:00
timedout
89eecd2bf7
fix: Record redacted_because_id instead of redacted_because
2026-09-27 17:32:46 +01:00
timedout
b2072baf59
perf: Strip unsigned over federation and generate it on the fly locally
2026-09-27 17:32:46 +01:00
timedout