lveneris
aa612baef3
fix(nix): use correct toolchain for rustfmt
2026-07-22 23:53:35 +00:00
Erwan Leboucher
b144b18aef
fix(sync): Verify state for newly-left rooms is in incremental sync
2026-07-21 18:32:34 +00:00
ginger
4f1af01bdc
chore: Formatting
2026-07-21 18:26:02 +00:00
ginger
1ff0d8d5a4
fix: Fix oauth auth code flow grant page being broken
2026-07-21 18:23:39 +00:00
Omar Pakker
bee92b58e7
chore: Add towncrier news fragment
2026-07-21 14:35:55 +00:00
Omar Pakker
b9c6d5956f
feat: Introduce accepted_ip_sources as a multiple options variant of request_ip_source
...
The current `request_ip_source` setting only allows a single option.
While it does fall back to the peer IP if the header is missing as of !2003 ,
which likely covers a lot of regular use, only allowing a single option limits
the deployment options available to more advanced deployments.
Setups where internal and external traffic use different reverse proxies will
end up with the wrong IP and the implicitness of the fallback allows for
situations where the used IP is not the IP expected.
By introducing a setting that allows multiple options to be set,
this limitation is resolved and it becomes possible to have client IP resolution
behind different reverse proxies and also making it possible to decide if and/or
what the fallback should be.
If set, options are evaluated in order. If all fail, the request fails.
2026-07-21 14:35:55 +00:00
Logan Devine
480e975877
chore: clean up unused imports of ClientIp
2026-07-21 14:31:16 +00:00
timedout
6ce0d63733
meta: Update expectations section and call out attribution
2026-07-21 14:19:42 +00:00
timedout
e54252651b
meta: Update security policy
2026-07-21 14:19:42 +00:00
Ginger
8f60648009
fix: Use correct error code for invalid client ID
2026-07-21 13:42:50 +00:00
Ginger
4c9426a13f
feat: Add support for OAuth2 device auth flow
2026-07-21 13:42:50 +00:00
Deniel9204
25264308ab
fix: Use the requested device ID when an appservice creates a device
...
The appservice branch of update_device_route (MSC4190 device creation)
generated a random device ID instead of using the one from the request
path, and dropped the requested display name. The PUT returned 200, but
the device the appservice asked for never existed, so every subsequent
request masquerading as that device failed with M_FORBIDDEN and one
orphaned random-ID device was left behind per attempt.
This made encrypted mautrix (bridgev2) bridges unable to start on
OIDC-enabled servers, where MSC4190 is the only available device
creation mechanism: /keys/upload failed on first start and /keys/query
on every restart. Combined with the pre-1f5e178c3f behaviour (400
"Token conflicts with an existing appservice token"), MSC4190 device
creation has never worked end-to-end in any release.
Create the device under the requested ID and forward the requested
display name.
2026-07-21 08:21:09 +02:00
Renovate Bot
bcd57b9598
chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.272.6
2026-07-21 05:10:42 +00:00
Renovate Bot
b2dee05ccf
chore(deps): update github-actions-digest
2026-07-21 05:02:36 +00:00
timedout
8b3be67860
feat: Increase access token length
...
Reviewed-By: ginger <ginger@gingershaped.computer >
2026-07-19 15:06:23 +01:00
Jade Ellis
153ef3a173
ci: Attempt to delay major rust toolchain updates
2026-07-17 19:18:38 +01:00
renovate
2441dfe436
chore(Nix): Updated flake hashes
2026-07-17 17:58:23 +00:00
Renovate Bot
d149833b7a
chore(deps): update rust to v1.97.1
2026-07-17 17:58:23 +00:00
Erwan Leboucher
b1632ee60b
fix(register): Resolve alias service by correct name for auto-join
2026-07-17 17:57:51 +00:00
timedout
789589ef37
chore: Remove redundant client IP extractions on individual routes
2026-07-17 12:57:48 +00:00
timedout
1e47090f5d
feat: Log client IP in router layer
2026-07-17 12:57:48 +00:00
Ginger
3e55d08488
fix: Only return create prompt if registration is enabled
2026-07-17 12:49:15 +00:00
Erwan Leboucher
3a74ce6151
fix(client-ip): Fall back to peer IP instead of returning 500
2026-07-17 12:46:11 +00:00
Erwan Leboucher
eff454218c
fix(sync): Send full state for newly-joined rooms in incremental sync
2026-07-17 02:48:28 +00:00
Erwan Leboucher
e2eb980b5e
fix(sync): Stop waking sync loops when removing to-device events
2026-07-16 22:15:27 +02:00
Erwan Leboucher
8945cc9e10
fix(federation): Sign restricted join events before verification
2026-07-16 19:46:42 +00:00
Julian Anderson
78adeccda1
docs(deploying/rpm): Update out-of-date statement about Oracle Linux
...
version availability
2026-07-15 23:23:10 -04:00
Renovate Bot
8195373d81
chore(deps): update rust-non-major
2026-07-15 05:05:03 +00:00
Erwan Leboucher
1ac05838dd
docs: Add back binstall with a link to the deps
2026-07-14 19:44:28 +02:00
Erwan Leboucher
7ecd2aa5e2
fix(pdu): Exempt m.room.create from auth_events check
2026-07-14 19:27:46 +02:00
Renovate Bot
69a3145983
chore(deps): update rust-zerover-patch-updates
2026-07-14 13:10:32 +00:00
N00byKing
73b7553b1e
chore: Add changelog entry for #1984
2026-07-14 13:40:28 +02:00
N00byKing
232ec3f620
fix: Return 201 instead of 200 on oauth registration
...
See RFC 7591 at 3.2.1: "The server responds with an HTTP 201 Created status code [...]"
Fixes a failure in matrix-dart-sdk
2026-07-14 11:00:34 +02:00
N00byKing
e52bbeaf94
fix: Correct link for code style guide in CONTRIBUTING.md
2026-07-14 08:59:08 +00:00
Renovate Bot
ad1c194fb0
chore(deps): update github-actions-digest
2026-07-14 05:01:52 +00:00
Ginger
5e2dcd8e79
chore: News fragment
2026-07-13 20:38:10 +00:00
Ginger
24c6474bd1
fix: Allow unstable and stable device id query together
2026-07-13 20:38:10 +00:00
ginger
642d05048b
chore: announce
2026-07-13 18:54:04 +00:00
Koen Oostveen
446ae93ad7
fix(web): Change incorrect deeplink for deleting a device
2026-07-13 13:45:46 +00:00
Renovate Bot
9ca0774b2d
chore(deps): lock file maintenance
2026-07-13 13:44:47 +00:00
Ginger
ce494eb0c0
fix: Properly sync newly created rooms
2026-07-13 08:50:53 -04:00
Ginger
1f5e178c3f
fix: Properly handle appservice device creation
2026-07-13 08:50:48 -04:00
Renovate Bot
ddd050d402
chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.260.2
2026-07-13 05:03:24 +00:00
Ginger
6ad3e679bc
chore: Release
2026-07-12 17:34:16 -04:00
Ginger
65812bb246
chore: Update changelog
2026-07-12 17:33:52 -04:00
theS1LV3R
9f3a7994c7
chore: Changelog
2026-07-12 20:22:19 +02:00
theS1LV3R
baef3289fe
fix(service/admin): Prevent console from being spawned when no TTY is available
2026-07-12 20:22:18 +02:00
Ginger
9a94b93ddd
fix: Fix new database migrations running on every server startup
2026-07-12 12:31:12 -04:00
Ginger
0ac0bd93ae
fix: Default deserialize for compatibility_mode
2026-07-12 16:28:27 +01:00
Ginger
fe9f718c6e
fix: Stop using the federation DNS resolver for non-federation requests
2026-07-12 16:11:00 +01:00
lveneris