Quentin Gliech
e4844968d3
Add a configuration option to make email optional for password registration
2025-10-07 17:28:01 +02:00
Quentin Gliech
a3d1148055
Fix a few more clippy lints
2025-08-18 10:45:20 +02:00
Quentin Gliech
6a2492e70b
Fix a few clippy lints, mostly in doc comments
2025-08-18 10:34:28 +02:00
Quentin Gliech
ea873577aa
Fix many clippy warnings
...
This is because the tracing-attributes update made clippy look at those
again. I've removed the `too_many_lines` lint, as it's not really useful
and we ignore it most of the time anyway.
2025-07-30 14:49:38 +02:00
mcalinghee
98912f4ada
allow importing existing users when the localpart matches in upstream OAuth 2.0 logins
2025-07-21 09:52:24 +02:00
Quentin Gliech
e28ffccc3a
Backchannel logout behavior settings on upstream providers
2025-07-04 16:27:10 +02:00
Quentin Gliech
c3707c13ae
Add license headers in most files that missed them
2025-06-12 11:01:07 +02:00
Quentin Gliech
3d96dc9d47
Update license headers to match the actual license
2025-06-12 10:32:16 +02:00
Quentin Gliech
97e83e1467
Define all the dependencies at the workspace level
2025-06-10 14:25:38 +02:00
Quentin Gliech
d4e2d06ed9
Registration token step view
2025-06-03 17:42:53 +02:00
Doug
096ce6037d
Add a configuration for forwarding the login hint to the upstream provider.
2025-05-06 17:50:33 +01:00
Quentin Gliech
488e028f14
Check rendering of templates with all supported locales.
2025-05-05 14:38:24 +02:00
Quentin Gliech
27fa92a0d8
Make sure to check all the templates
2025-05-05 13:51:11 +02:00
Quentin Gliech
3eb8908cba
Make the check functions on templates crate private
...
This will report if we forget to use one of the check function.
2025-05-05 13:49:09 +02:00
Quentin Gliech
7c0eeec347
Generate a device name based on the client name and user agent
2025-04-25 16:55:29 +02:00
Quentin Gliech
fc94c751bc
templates: introduce a parse_user_agent filter and use it in the device consent page
2025-04-25 12:55:30 +02:00
Quentin Gliech
0cfea60fa0
Don't parse the user agent unless we need to
2025-04-24 13:13:26 +02:00
Quentin Gliech
d748f18be6
Replace most remaining #[instrument(err)] annotations
2025-04-18 09:59:29 +02:00
Quentin Gliech
bd737342b9
Always ask for consent, never for reauth ( #4386 )
2025-04-14 15:51:48 +02:00
Quentin Gliech
e22016f85c
Remove the reauth view
2025-04-11 13:35:59 +02:00
mcalinghee
f2a47f9a88
add login by email + feature flag
2025-04-10 17:57:58 +02:00
Quentin Gliech
e776d652d9
Fix Clippy lints introduced by Rust 1.86
2025-04-06 16:18:27 +02:00
Olivier 'reivilibre
0afeb89470
Add dependency on arc-swap to syn2mas, moving it to a workspace dependency
2025-03-12 14:55:03 +00:00
Quentin Gliech
62a4aba08b
Better error pages when a user is deactivated or locked
2025-03-11 17:35:13 +01:00
Quentin Gliech
3d2b67a0b2
Upgrade to Rust 1.85 and edition 2024
2025-02-21 16:15:02 +01:00
Quentin Gliech
7e6ab8ffc3
Disclose that email is already in use after verification
2025-01-23 18:18:19 +01:00
Quentin Gliech
f50a386b10
Registration step to set a display name
2025-01-15 15:28:48 +01:00
Quentin Gliech
f8517a5982
Implement email verification in the registration flow
2025-01-15 15:28:48 +01:00
Quentin Gliech
0bedaf3745
Make the password registration create a user_registration
2025-01-14 16:30:44 +01:00
Quentin Gliech
3da27afc91
Move the registration-related views into a sub-module
2025-01-14 16:30:44 +01:00
Quentin Gliech
5f5fc44fbd
Job to send the new email authentication codes
2025-01-14 15:47:17 +01:00
Quentin Gliech
0513f198d8
Rip out the email verification codes
...
This considers all user_emails as confirmed, and removes the verification code.
It will be replaced by a new email authentication code flow
2025-01-14 15:46:45 +01:00
Quentin Gliech
1f83b39313
Remove the dedicated page to add an email address
2025-01-14 15:46:39 +01:00
Quentin Gliech
342eaefa81
Split the base registration page with local password registration
2025-01-07 11:49:01 +01:00
Quentin Gliech
d16049524b
Propagate more specific error messages from the policy on registration
...
This makes some policy errors translatable
2025-01-06 10:15:08 +01:00
Mathieu Velten
af1282b510
Allow response_mode to be null and if so do not add the query param ( #3700 )
2024-12-18 18:18:39 +01:00
Quentin Gliech
a97d2daa3d
Make the issue optional on upstream OAuth 2.0 providers
2024-12-17 13:40:34 +01:00
Mathieu Velten
80903ed629
Add id_token_signed_response_alg and userinfo_signed_response_alg ( #3664 )
2024-12-17 11:54:16 +01:00
Quentin Gliech
2e3b8bdd86
Allow setting an explicit upstream account name ( #3600 )
2024-11-29 12:30:18 +01:00
Quentin Gliech
7296364cd3
Avoid using SameSite=None by re-submitting incoming form data
2024-11-22 08:48:00 +01:00
Tonkku
80fbaaa41c
More format
...
For some reason my cargo disagrees with the use line
2024-11-18 11:42:43 +01:00
Tonkku
32eb5499b9
clippy 📎
2024-11-18 11:42:43 +01:00
Tonkku
edc4604a6c
cargo fmt
2024-11-18 11:42:43 +01:00
Tonkku
c017dd0840
Implement login_hint
2024-11-18 11:42:43 +01:00
Quentin Gliech
4b7aff6049
Enable better minijinja compatibility with the Python implementation
2024-10-28 14:59:36 +01:00
Quentin Gliech
ed4b6c42a7
Remove (C)
2024-09-10 14:28:55 +02:00
Quentin Gliech
f6bb100c0a
License headers change
2024-09-05 13:25:42 +02:00
reivilibre and Quentin Gliech
5d4a4a6fb8
Add rate-limiting for account recovery and registration ( #3093 )
...
* Add rate-limiting for account recovery and registration
* Rename login ratelimiter `per_address` to `per_ip` for consistency
Co-authored-by: Quentin Gliech <quenting@element.io >
2024-08-07 17:57:36 +00:00
Quentin Gliech
3f947025e2
Host a Swagger UI both in the static documentation and by the server
2024-08-01 15:17:14 +02:00
Quentin Gliech
e25c170403
Rate-limit password-based login attempts
2024-07-26 13:56:45 +02:00
Quentin Gliech