Jason Robinson
6a786dccbc
Add syn2mas flag to ignore missing auth providers
...
Currently `syn2mas` will always error in the Synapse checks phase if it finds auth providers in the `user_external_ids` database table, that are not configured in Synapse config. While normally this the right thing to do, we may have situations where we know what we're doing, and want to ignore invalid looking data in the external identifiers table. If the flag is given, ignore errors and output them as warnings instead.
2026-01-26 14:57:31 +02:00
Hugh Nimmo-Smith
dcac8dc62a
Support for stable MSC3824 names
2025-12-19 18:13:01 +00:00
Quentin Gliech
792022ee18
Only serve pre-compressed gzip and brotli files
2025-12-18 14:39:58 +01:00
Quentin Gliech
78c1ccae80
Merge remote-tracking branch 'origin/main' into quenting/process-metrics
2025-12-16 13:23:10 +01:00
Quentin Gliech
4a28094705
Switch to opentelemetry-instrumentation-tokio crate for Tokio instrumentation
2025-12-15 12:17:31 +01:00
Quentin Gliech
13b3a36983
Expose process metrics on Linux
2025-12-10 16:45:48 +01:00
Quentin Gliech
f6051fdbd9
Better lock and handle missing and modified migrations
...
This rewrites the database migration code to:
- avoid deadlocks when running multiple migration processes at the same
time with a `CREATE INDEX CONCURRENTLY` statement
- allow us to remove some migrations from the code base and mark them as
intentionally removed
- allow us to modify some migrations and declare alternate checksums
for previous versions of the migration
2025-12-04 14:44:16 +01:00
Quentin Gliech
c09898c9f5
Merge remote-tracking branch 'origin/main' into quenting/upstream-oauth/skip-interactive
2025-12-03 10:48:31 +01:00
Quentin Gliech
ee4d1304ab
Add more options to deal with localpart conflicts on upstream OAuth 2.0 logins ( #5295 )
2025-12-03 10:39:05 +01:00
Quentin Gliech
df14076dd0
Merge branch 'quenting/upstream-oauth/better-conflict-options' into quenting/upstream-oauth/skip-interactive
2025-11-28 18:08:09 +01:00
Quentin Gliech
47d411f641
Option to skip confirmation when registering through an upstream OAuth provider
2025-11-28 15:51:43 +01:00
Quentin Gliech
ffb86f6558
Add more options to deal with localpart conflicts on upstream OAuth 2.0 logins
2025-11-28 10:53:28 +01:00
Olivier 'reivilibre
f670577feb
Expose the compat login policy from the policy engine
2025-11-25 18:41:14 +00:00
Olivier 'reivilibre
0c8017fc80
Add experimental and preliminary policy-driven session limiting when logging in OAuth 2 sessions. ( #5221 )
2025-11-25 15:24:02 +00:00
reivilibre
4753aa811b
templates check: Add --stabilise flag to make renders reproducible ( #5214 )
2025-11-24 16:16:11 +00:00
Quentin Gliech
4bdf34719d
Add upstream_oauth2.providers.[].client_secret_file config option ( #4882 )
2025-11-18 11:29:21 +01:00
Olivier 'reivilibre
16f443eba0
Merge branch 'main' into rei/policy_driven_session_limit
2025-11-13 15:54:48 +00:00
networkException
b5a0834faa
Add upstream_oauth2.providers.[].client_secret_file config option
...
This patch factors out the previously introduced config
wrapper for client secrets to also use it for upstream oauth
providers.
See a7e7c3caa1
2025-11-08 16:10:19 +01:00
Quentin Gliech
eeb5d61fe0
Don't extract the parent context if the span is disabled
2025-11-07 13:37:26 +01:00
Quentin Gliech
2a3ea458b3
Fix spurious "Failed to set parent context on span" error
...
This would happen when the `info` log level is surpressed, and therefore
the request span would not be enabled and fail to set the parent OTEL
context.
2025-11-07 11:34:42 +01:00
Olivier 'reivilibre
37e5969374
Use less zero-y timestamp
2025-11-06 15:36:52 +00:00
Olivier 'reivilibre
a73d655351
Add session limit config to policy data
2025-11-06 10:12:14 +00:00
Olivier 'reivilibre
87c897c51a
Add configuration for session limiting
2025-11-06 10:12:14 +00:00
Olivier 'reivilibre
09dd5e6d83
Stub out the vite manifest when stabilising template renders
2025-10-30 16:33:50 +00:00
Olivier 'reivilibre
d3cabf4a4b
cli: templates check: add option to --stabilise date and RNG
2025-10-30 15:14:49 +00:00
Olivier 'reivilibre
f633e4251e
Merge branch 'main' into rei/templatecheck_todisk
2025-10-30 13:52:33 +00:00
Olivier 'reivilibre
e5183f600b
Fix comment and change delimiter to =
2025-10-30 13:51:33 +00:00
Olivier 'reivilibre
16ec04eb95
Change the format of SampleIdentifiers and don't make a subdir per locale
2025-10-30 12:06:09 +00:00
Olivier 'reivilibre
eeeec358c7
Downgrade to SemiStrict in production
2025-10-28 17:20:49 +00:00
Olivier 'reivilibre
7a24a22498
Introduce SampleIdentifiers to stably track samples
...
and use these in output filenames
2025-10-24 17:14:00 +01:00
Olivier 'reivilibre
763e236a0b
cli: templates check: allow rendering to --out-dir
2025-10-24 15:43:19 +01:00
Quentin Gliech
f0ac252fd3
Always initialize OpenTelemetry even if no exporter is configured
2025-10-09 16:28:35 +02:00
Quentin Gliech
cf18ffe7eb
build(deps): bump the opentelemetry group with 2 updates ( #5074 )
2025-10-08 11:20:10 +02:00
Quentin Gliech
acb5290326
Adapt to the new tracing-opentelemetry API
2025-10-08 11:12:30 +02:00
Quentin Gliech
e4844968d3
Add a configuration option to make email optional for password registration
2025-10-07 17:28:01 +02:00
Quentin Gliech
377ef1d390
Inject the version in the app state
2025-10-03 11:41:22 +02:00
Quentin Gliech
ad7fedf6ff
Adapt most code to use the new edges and cursors
2025-09-29 15:08:46 +02:00
Quentin Gliech
815ce17cc5
Simple CLI commands to manage server admins
2025-09-16 12:42:32 +02:00
Quentin Gliech
cc39368223
Merge remote-tracking branch 'origin/main' into quenting/otel-prometheus-text
2025-09-12 15:25:41 +02:00
Quentin Gliech
0a5f05ffe9
Merge branch 'main' into quenting/stable-docs
2025-09-02 14:11:40 +02:00
Quentin Gliech
9b6aa2a970
Fix the wording about admin token vs. secret in the doctor command
2025-09-02 14:08:20 +02:00
Quentin Gliech
6a1d67f452
Merge remote-tracking branch 'origin/main' into feat/login_hint_with_email
2025-08-18 16:43:00 +02:00
Quentin Gliech
68b74db230
Reformat with rustfmt
2025-08-18 13:46:25 +02:00
Quentin Gliech
6a2d341657
Apply suggestions from code review
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-08-18 13:44:10 +02:00
Quentin Gliech
c4e811a7b3
Update mas-cli doctor to suggest the stable MAS integration
2025-08-18 13:23:09 +02:00
Quentin Gliech
9cec8a430d
Switch to opentelemetry-prometheus-text-exporter
2025-08-18 11:44:50 +02:00
Quentin Gliech
45b6b567db
Collapse a few nested if now that we have if let chains
2025-08-18 10:29:30 +02:00
mcalinghee
a55f26c53e
Merge branch 'main' into feat/login_hint_with_email
2025-08-05 17:02:14 +02:00
Quentin Gliech
9969898031
Merge branch 'main' into secret_file
2025-08-05 15:37:32 +02:00
Quentin Gliech
f302711a37
Make MAS use the modern Synapse API by default
2025-08-05 15:03:32 +02:00