timedout
f0a0596d12
fix: Remove undocumented prev_sender unsigned field
2026-09-27 17:32:47 +01:00
timedout
fbedf994db
fix: Don't unnecessarily embed prev_content in populate_unsigned
2026-09-27 17:32:47 +01:00
timedout
1de16fed9e
style: English is a difficult language
2026-09-27 17:32:47 +01:00
timedout
4812837d13
fix: Don't allow set_unsigned to panic
...
While an error in this function is probably bad, detonating a metric tonne of TNT on the call tree is probably worse
2026-09-27 17:32:47 +01:00
timedout
90793eaaf4
fix: Actually set unsigned in PDU after set_unsigned
2026-09-27 17:32:47 +01:00
timedout
744928b206
style: Update docstring for Pdu.set_unsigned
2026-09-27 17:32:47 +01:00
timedout
05ee24df7d
fix: Move helper to helpers.rs, rename field, don't recurse unsigned in redacted_because
...
Renamed `redacted_because_id` to `org.continuwuity.redacted_by` for proper namespacing; `get_unsigned_context` now lives in helpers.rs instead of `mod.rs`. The helper function also now explicitly wipes `unsigned` for `redacted_because` to avoid leaks (see comment).
2026-09-27 17:32:46 +01:00
timedout
89eecd2bf7
fix: Record redacted_because_id instead of redacted_because
2026-09-27 17:32:46 +01:00
timedout
b2072baf59
perf: Strip unsigned over federation and generate it on the fly locally
2026-09-27 17:32:46 +01:00
timedout
286897de88
feat: Don't send unsigned data over federation
2026-09-27 17:32:46 +01:00
Renovate Bot and Ginger
02d245afe5
chore(deps): Update ruma digest to e7384f0
...
Co-authored-by: Ginger <ginger@gingershaped.computer >
2026-09-24 14:16:55 -04:00
Ginger
4ea4e15edb
chore: Reformat with latest nightly
2026-09-24 09:53:59 -04:00
Erwan Leboucher
cee69b4c8d
fix: Walk auth events once instead of re-queueing parents
2026-09-22 21:19:25 +02:00
timedout
d3ed175264
fix(stateres): Inject dummy create event when none is available
...
I'm not sure how this doesn't cause more panics. When running an auth check on the create event during iterative auth checks, there's obviously no create event in the base state nor auth map, so the call to fetch_state() will return nothing and thus panic.
This just inserts the incoming event if it's a create event and there isn't an existing one in the auth state. It's not used for the create event checks anyway so this has no effect aside from plugging the panic.
2026-09-22 02:04:39 +01:00
timedout
7924e96589
chore: add todo to fix
2026-09-22 00:16:27 +00:00
timedout
d1b1274900
style: Unchain if statement
2026-09-22 00:16:27 +00:00
timedout
6299df3552
style: Document fetch_and_handle_auth_events control flow
2026-09-22 00:16:27 +00:00
Erwan Leboucher
20d146bd5e
fix: Throttle client-triggered remote event fetches
2026-09-22 00:16:27 +00:00
Erwan Leboucher
03f60c7002
fix: Don't re-fetch auth events that can never be resolved
2026-09-22 00:16:27 +00:00
Erwan Leboucher
ed1e634579
feat(push): Add MSC4174 web push
2026-09-21 23:35:05 +00:00
timedout
8891adfba3
fix(stateres): Enforce state ownership checks against creators too
...
Previously being a room creator short-circuited the `can_send_event`
check, which allowed creators to send state events "owned" (state key
starting with @ but not being the sender's user ID), in effect skipping
auth check 9 in v12 rooms. This removes that short circuit condition,
since `Infinite < Int` always returns false anyway, allowing the state
key check block to execute.
Fixes #2266
2026-09-18 18:57:57 +01:00
timedout
1a8e5ccc09
fix: Gracefully handle extremityless rooms when gapfilling
...
See also: #2259
2026-09-17 00:06:17 +01:00
Allinen
d52d5003b1
refactor: cleaned up code
2026-09-16 17:57:11 +00:00
Allinen
bdaa78340e
style: fix typo
2026-09-16 17:57:11 +00:00
Allinen
89e07ae239
feat(config): connection_uri_file added to config
2026-09-16 17:57:11 +00:00
Jade
ffcf152016
revert d330930bb5
...
revert feat: Add timestamp to event endpoint
This implementation unfortunately resulted in resource exhaustion when run on some rooms.
2026-09-16 13:05:45 +00:00
timedout
77d47f268e
fix(stateres): Don't panic when the create event goes missing
...
I have no idea how this can even happen and frankly I'm scared to look
however that's a problem for another time.
Panicking causes entire transactions to explode, this just makes one
event explode.
2026-09-14 18:14:22 +01:00
timedout
5f31f3fb10
Merge remote-tracking branch 'origin/main' into lake/feature/shear-unused-deps
2026-09-13 19:57:41 +01:00
Erwan Leboucher
ac8b17db1b
fix: Only count non-outlier prev_events in get_missing_events assertion
2026-09-13 18:50:38 +00:00
Erwan Leboucher
9bb203abe8
fix(sync): Omit empty room account data from sliding sync responses
2026-09-13 18:50:26 +00:00
Lake
8ab842b198
deps: shear the dependencies again
2026-09-12 15:07:42 -05:00
Lake
439f266d8f
chore: resolve conflicts with main
2026-09-12 15:07:35 -05:00
ginger
c6f2c5eb39
fix: Log new password when using reset-password --convert-to-local-account
2026-09-12 16:23:46 +00:00
Henry-Hiles
b221a49b77
chore: upgrade argon2
2026-09-11 16:13:03 -04:00
Jade Ellis
71e101a4dc
style: Run formatting
2026-09-11 15:54:42 +01:00
Jade Ellis
0f97eea31f
style: Run formatting
2026-09-11 15:39:54 +01:00
Erwan Leboucher
d330930bb5
feat: Add timestamp to event endpoint
2026-09-11 14:22:11 +00:00
stratself
5fbd4914ca
fix: Disable unauthenticated media by default
2026-09-11 14:21:08 +00:00
Erwan Leboucher
aa92bf8814
fix(federation): Read the backoff window once when gating requests
2026-09-11 14:17:45 +00:00
Erwan Leboucher
9d7c8be390
fix(sender): Only claim a destination when the send is allowed
2026-09-11 14:17:45 +00:00
Ginger
644d247007
fix: Size background gradient relative to the viewport
2026-09-11 14:14:39 +00:00
Ginger
32c8ff5b1b
feat: Show profile banners in web UI
2026-09-11 14:14:39 +00:00
Ginger
b32264dc4d
fix: Don't let OIDC users try to deactivate their accounts
2026-09-10 19:55:50 +00:00
Ginger
7997cda678
fix: Don't show a broken back link when removing a device
2026-09-10 19:54:45 +00:00
Erwan Leboucher
59b1652f4a
fix(sync): Keep sync positions of rooms outside a list's window
2026-09-10 17:11:33 +02:00
Erwan Leboucher
fe38efbb63
feat(oidc): Show the provider's name and icon on the login page
2026-09-10 14:08:03 +00:00
Erwan Leboucher
0060a4aac4
feat(rtc): Advertise MSC4143 in /versions
2026-09-08 13:30:35 -04:00
Ginger
65b9d27fef
fix: Remove duplicate logging for new user registration
2026-09-08 09:18:53 -04:00
Ginger
9fbabe2210
chore: Reformat with latest nightly
2026-09-01 12:55:05 -04:00
timedout
03d669594e
fix: Re-invert prev events filter in fetch_prev_events
2026-09-01 16:24:18 +00:00
timedout