Quentin Gliech
e913ddbc9e
docs: explain the new database statistics in log lines
2026-06-22 14:43:05 +02:00
Quentin Gliech
f328d2f62f
Rephrase slightly the request log documentation
2026-06-18 16:36:05 +02:00
Quentin Gliech
393b42ed6e
docs: document the request log line
...
Add a reference page describing the `http.server.response` log line and its
fields (method, status, requester, client address, GraphQL operation, request
id, trace id, …), aimed at administrators feeding the logs into a SIEM, with a
table of well-known operations and how to classify them (login, logout, token
issuance, …).
2026-06-18 13:43:59 +02:00
Quentin Gliech and GitHub
fe622331a8
Admin API: allow listing and viewing of OAuth 2.0 clients ( #5710 )
2026-06-17 17:44:34 +02:00
Quentin Gliech and GitHub
78036a933d
Fix the compat session API definition in the admin API spec ( #5714 )
2026-06-17 17:42:31 +02:00
Quentin Gliech and GitHub
2ea88c6377
Document what user data is stored and how long it is kept ( #5673 )
2026-06-17 17:42:17 +02:00
Quentin Gliech and GitHub
d33577cf4d
Admin API: filter users based on client usage ( #5707 )
2026-06-17 17:12:56 +02:00
Quentin Gliech
9464ca8038
Merge branch 'main' into quenting/admin-api/session-time-filters
2026-06-17 17:01:02 +02:00
Quentin Gliech and GitHub
a8ffce8f13
Admin API: allow filtering OAuth 2.0 sessions by multiple clients ( #5708 )
2026-06-17 16:40:53 +02:00
Quentin Gliech and GitHub
9815902e9b
Allow passing arbitrary values from clients down to upstream OAuth providers ( #5677 )
2026-06-17 16:28:57 +02:00
Olivier 'reivilibre and GitHub
e856e19638
Update Authelia Sample for OIDC upstream ( #5672 )
2026-06-17 14:41:03 +01:00
Quentin Gliech and GitHub
eb0ef6380c
Merge branch 'main' into quenting/upstream-pass-parameters
2026-06-17 14:54:37 +02:00
Quentin Gliech and GitHub
0e9be7881f
Merge branch 'main' into patch-1
2026-06-10 10:57:53 +02:00
Quentin Gliech and GitHub
e31c937f02
Fix a typo in the Synapse configuration instructions in the documentation ( #5726 )
2026-06-10 10:22:44 +02:00
Quentin Gliech and GitHub
db58127117
Merge branch 'main' into patch-1
2026-06-10 10:11:00 +02:00
Quentin Gliech and GitHub
632d64d199
Per-provider registration token requirement ( #5605 )
2026-06-10 10:05:46 +02:00
TuxCoder and GitHub
f3cd388316
Update homeserver.md
...
fix synapse config name
ref: https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html#matrix_authentication_service
2026-06-04 22:52:35 +02:00
Quentin Gliech
6c330ec72e
Fix the compat session API definition in the admin API spec
2026-06-02 10:22:28 +02:00
Quentin Gliech
5104bb84d1
admin-api: filter OAuth2 client list by presence of active sessions
2026-06-01 17:30:16 +02:00
Quentin Gliech
a5a957b0e3
admin-api: filter OAuth2 client list by grant type
2026-06-01 17:30:16 +02:00
Quentin Gliech
25a3e24d8c
admin-api: expose grant_types on OAuth2 client model
2026-06-01 17:30:16 +02:00
Quentin Gliech
b00af1b732
admin-api: add get endpoint for OAuth2 clients
2026-06-01 17:30:16 +02:00
Quentin Gliech
4d5e7c7984
admin-api: filter browser session list by last activity
2026-06-01 17:30:15 +02:00
Quentin Gliech
bb4c8b66d3
admin-api: add list endpoint for OAuth2 clients
2026-06-01 17:30:15 +02:00
Quentin Gliech
77e84e7f86
admin-api: filter browser session list by creation time
2026-06-01 17:30:15 +02:00
Quentin Gliech
6a92be40d3
admin-api: filter compat session list by last activity
2026-06-01 17:30:15 +02:00
Quentin Gliech
c5555b83b8
admin-api: filter compat session list by creation time
2026-06-01 17:30:15 +02:00
Quentin Gliech
31797b4b7c
admin-api: filter OAuth2 session list by last activity
2026-06-01 17:30:15 +02:00
Quentin Gliech
45b0a59a09
admin-api: filter OAuth2 session list by creation time
2026-06-01 17:30:15 +02:00
Quentin Gliech
ce68d63adb
admin-api: allow filtering OAuth2 sessions by multiple clients
...
Make `filter[client]` on `GET /api/admin/v1/oauth2-sessions` repeatable
so admin tooling can fetch sessions belonging to a set of clients in
one request. The field on `FilterParams` changes from `Option<Ulid>`
to `Vec<Ulid>`; the struct was already extracted with
`axum_extra::extract::Query` so the repeated values are not silently
dropped.
Each client ULID is validated to exist (mirroring the previous
single-client `404` behaviour) before being passed to the new
`OAuth2SessionFilter::for_clients` storage filter. The `Display`
impl used to reconstruct cursor links now emits one
`filter[client]=…` segment per client so pagination preserves the
filter. The OpenAPI schema is regenerated via `misc/update.sh` and
now describes the parameter as an array.
2026-06-01 17:30:14 +02:00
Quentin Gliech
4be94f54bb
admin-api: filter user list by presence of active OAuth2 session
2026-06-01 17:30:14 +02:00
Quentin Gliech
ee9a7ccaef
admin-api: filter user list by presence of active compat session
...
Adds `filter[has-active-compat-session]=true|false` to
`GET /api/admin/v1/users`. When `true` (resp. `false`), only users with
(resp. without) at least one active (non-finished) compatibility session
are returned.
2026-06-01 17:30:14 +02:00
Quentin Gliech
be96582e9e
admin-api: filter user list by active OAuth2 session with given clients
...
Adds `filter[active-oauth2-client]` to `GET /api/admin/v1/users`. The
filter is a repeatable ULID query parameter; the semantics are OR across
the supplied clients (a user matches if they have an active OAuth2
session belonging to any of them).
Each supplied client ID is validated up front: a missing client returns
404 (mirroring the pattern in `oauth2-sessions/list`).
2026-06-01 17:30:14 +02:00
Quentin Gliech
3025708520
Add a configuration option to disable device code auto-fill
2026-05-28 13:30:25 +02:00
Quentin Gliech and GitHub
f78917ecbf
Merge branch 'main' into quenting/pnpm
2026-05-25 11:12:18 +02:00
Quentin Gliech and GitHub
07c352ee2e
Admin API - User - Add displayname and avatar url when adding user ( #5671 )
2026-05-21 10:22:30 +02:00
Eric Eastwood
e57e5e41ce
Fix compatibility typo
2026-05-20 17:36:49 -05:00
Eric Eastwood
e8f664e480
Merge branch 'main' into madlittlemods/max-session-threshold
2026-05-20 16:19:09 -05:00
Quentin Gliech and GitHub
11d68cc8c9
Merge branch 'main' into quenting/upstream-pass-parameters
2026-05-20 10:14:00 +02:00
Eric Eastwood
e61653cd2d
Automatic updates
2026-05-14 15:27:36 -05:00
Eric Eastwood
3afca38251
Merge branch 'main' into madlittlemods/soft-limit-account-session-management
2026-05-13 17:43:11 -05:00
Quentin Gliech and GitHub
aecb172209
Add oauth.device_code_grant_enabled configuration option ( #5612 )
2026-05-13 21:40:02 +02:00
Quentin Gliech
6b8decf609
Document MiniJinja templating for additional_authorization_parameters
...
Updates the field doc-comment to describe the new templating semantics
and adds a deprecation note on `forward_login_hint` pointing to the
recommended replacement. Regenerates the JSON schema.
The runtime behavior (template rendering, forward_login_hint
soft-deprecation) is wired up in follow-up commits.
2026-05-13 17:44:15 +02:00
adis veletanlic and GitHub
7ab9e0f518
Merge branch 'main' into upstream-oauth-registration-token
2026-05-13 15:12:18 +02:00
defaultdino
ba72443627
fix style, run update.sh and fix test for SiteConfig
2026-05-13 13:27:23 +02:00
Eric Eastwood
c01ae07c8b
Merge branch 'main' into madlittlemods/soft-limit-account-session-management
2026-05-12 15:54:09 -05:00
Eric Eastwood and GitHub
9db7cf0aac
Document how to manually test login flows ( #5642 )
2026-05-12 15:52:53 -05:00
Eric Eastwood
94a1394d65
Merge branch 'main' into madlittlemods/soft-limit-account-session-management
...
Conflicts:
docs/config.schema.json
2026-05-12 12:17:25 -05:00
Eric Eastwood
df949630a1
Merge branch 'main' into madlittlemods/soft-limit-account-session-management
2026-05-12 11:45:08 -05:00
Eric Eastwood
3e310a4fc1
Merge branch 'madlittlemods/doc-manual-testing-login-flows' of github.com:element-hq/matrix-authentication-service into madlittlemods/doc-manual-testing-login-flows
2026-05-12 11:10:22 -05:00
Quentin Gliech