Logan Devine
480e975877
chore: clean up unused imports of ClientIp
2026-07-21 14:31:16 +00:00
Ginger
4c9426a13f
feat: Add support for OAuth2 device auth flow
2026-07-21 13:42:50 +00:00
Deniel9204
25264308ab
fix: Use the requested device ID when an appservice creates a device
...
The appservice branch of update_device_route (MSC4190 device creation)
generated a random device ID instead of using the one from the request
path, and dropped the requested display name. The PUT returned 200, but
the device the appservice asked for never existed, so every subsequent
request masquerading as that device failed with M_FORBIDDEN and one
orphaned random-ID device was left behind per attempt.
This made encrypted mautrix (bridgev2) bridges unable to start on
OIDC-enabled servers, where MSC4190 is the only available device
creation mechanism: /keys/upload failed on first start and /keys/query
on every restart. Combined with the pre-1f5e178c3f behaviour (400
"Token conflicts with an existing appservice token"), MSC4190 device
creation has never worked end-to-end in any release.
Create the device under the requested ID and forward the requested
display name.
2026-07-21 08:21:09 +02:00
timedout
789589ef37
chore: Remove redundant client IP extractions on individual routes
2026-07-17 12:57:48 +00:00
Ginger
3e55d08488
fix: Only return create prompt if registration is enabled
2026-07-17 12:49:15 +00:00
Erwan Leboucher
3a74ce6151
fix(client-ip): Fall back to peer IP instead of returning 500
2026-07-17 12:46:11 +00:00
Erwan Leboucher
eff454218c
fix(sync): Send full state for newly-joined rooms in incremental sync
2026-07-17 02:48:28 +00:00
N00byKing
232ec3f620
fix: Return 201 instead of 200 on oauth registration
...
See RFC 7591 at 3.2.1: "The server responds with an HTTP 201 Created status code [...]"
Fixes a failure in matrix-dart-sdk
2026-07-14 11:00:34 +02:00
Ginger
1f5e178c3f
fix: Properly handle appservice device creation
2026-07-13 08:50:48 -04:00
timedout
87030a3a22
fix: Ensure PDU returned by create_hash_and_sign_event is itself signed
2026-07-12 02:11:50 +00:00
timedout
4f509fa113
fix: Convert room summary to federation format when sending invites
2026-07-12 02:11:50 +00:00
Ginger
cfbe590f1c
fix: Do not require an access token on 3pid token request route
2026-07-11 19:40:25 +00:00
Ginger
ada0b3184b
fix: Properly sync newly created rooms
2026-07-11 19:21:19 +00:00
timedout
b51a34c1c1
fix: Address review feedback
2026-07-11 17:27:42 +01:00
Ginger
ad4f7973cb
refactor: Remove list_local_users function
2026-07-07 11:33:47 -04:00
Ginger
431fb7330e
refactor: Remove /_conduwuit/ routes
2026-07-07 11:33:47 -04:00
Ginger
3467dffd94
fix: Adjust sync watcher logic to be more explicit
2026-07-05 00:42:44 +00:00
Ginger
d2b795d8cf
refactor: Logic cleanup
2026-07-04 13:15:54 -04:00
Ginger
e0a754483a
fix: Give invitees creator status when creating a trusted private v12 room
2026-07-04 13:06:49 -04:00
Ginger
514c3bbcbf
fix: Properly show email in account page when OIDC email_claim is set
2026-07-02 16:57:21 -04:00
Ginger
06afe4f1a3
feat: Add support for importing profile data from claims
2026-07-02 16:34:38 -04:00
Ginger
53d6887b86
refactor: Move profile field setting logic into users service
2026-07-02 16:34:38 -04:00
Ginger
c0cb4afd8a
feat: Initial implementation of OIDC
2026-07-02 16:34:38 -04:00
Ginger
69163b5391
refactor: Split remote and deactivated users into their own columns
2026-07-02 16:24:07 -04:00
Jade Ellis
eee4ef50d2
chore: merge 1818 nex/perf/get-missing-events
2026-07-01 18:45:08 +00:00
Ginger
2eff454787
feat: Finish implementing MSC4190
2026-06-29 16:46:07 +01:00
timedout
496ca52987
style: Missing semicolon on line 50
2026-06-29 13:56:22 +00:00
timedout
72f4c3cc53
chore: Remove unstable features that are now stable or abandoned
2026-06-29 13:56:22 +00:00
timedout
6a8a114197
feat: Update capabilities and advertise spec version v1.18
2026-06-29 13:56:22 +00:00
timedout
549864a052
feat: Support MSC4323 locking endpoints
2026-06-29 13:56:22 +00:00
Ginger
aed8e7d769
fix: Adjust error code
2026-06-29 09:35:51 -04:00
Ginger
c56c035c15
fix: Use RFC-compliant error responses for OAuth endpoints
2026-06-29 09:35:51 -04:00
Ginger
47582d1922
refactor: Update logic for checking if a username is available
2026-06-29 09:35:50 -04:00
Ginger
52ec6bc6da
fix: Adjust error codes to comply with MSC4190
2026-06-29 09:35:50 -04:00
Ginger
b35b72c34a
feat: Add a page with some information about the server
2026-06-29 09:35:50 -04:00
Ginger
91afbd122f
feat: Allow self-service deactivation to be disabled
2026-06-29 09:35:50 -04:00
Ginger
e8d6fa565e
feat: Add support for registering accounts with the web UI
2026-06-29 09:35:50 -04:00
Ginger
e60310eacc
feat: Allow configuring the OAuth compatibility mode
2026-06-29 09:35:48 -04:00
Ginger
86d9e9e6a9
feat: Add support for account management deeplinks
2026-06-29 09:35:48 -04:00
Ginger
ed1b175fa4
feat: Allow devices to be removed from the account panel
2026-06-29 09:35:48 -04:00
Ginger
a91fc7041a
feat: Implement oauth token revocation
2026-06-29 09:35:48 -04:00
Ginger
18c59e036f
chore: Clippy fixes
2026-06-29 09:35:48 -04:00
Ginger
df3f646c92
feat: Implement oauth auth code and refresh token flows
2026-06-29 09:35:48 -04:00
Ginger
fb6e5d2838
chore: Clippy fixes
2026-06-29 09:35:48 -04:00
Ginger
33be65a865
feat: Implement a web-based account management dashboard
2026-06-29 09:35:45 -04:00
Ginger
975ec24167
feat: Implement oauth service and client registration
2026-06-29 09:03:54 -04:00
Jade Ellis
5199cde870
feat: Allow sending dummy events to clients
2026-06-28 03:44:23 +01:00
timedout
967e2cc54f
refactor: Split the users service into several modules
...
Also resolvers several lints, including needless async on create_user
2026-06-27 18:37:33 +01:00
timedout
62b58e1a6a
fix: SEC16
2026-06-20 16:03:37 +01:00
Ginger
e3a9549824
fix: Correctly sync newly created rooms
2026-06-16 23:41:51 -04:00
Logan Devine