Quentin Gliech
|
806a815f75
|
Highlight dangerous scopes when consenting to them
|
2025-10-22 11:29:52 +02:00 |
|
Quentin Gliech
|
e4844968d3
|
Add a configuration option to make email optional for password registration
|
2025-10-07 17:28:01 +02:00 |
|
Quentin Gliech
|
7e018a06aa
|
Merge remote-tracking branch 'origin/main' into quenting/stable-api
|
2025-08-04 16:38:49 +02:00 |
|
Olivier D
|
95ab780fb2
|
update license
Co-authored-by: Quentin Gliech <quenting@element.io>
|
2025-07-21 09:52:24 +02:00 |
|
mcalinghee
|
98912f4ada
|
allow importing existing users when the localpart matches in upstream OAuth 2.0 logins
|
2025-07-21 09:52:24 +02:00 |
|
Quentin Gliech
|
b2a2ba07bf
|
Upgrade @vector-im/compound-web as well
|
2025-07-10 15:20:52 +02:00 |
|
Quentin Gliech
|
b824e697e4
|
Parse the stable scopes in the templates
|
2025-06-13 15:55:42 +02:00 |
|
Quentin Gliech
|
3d96dc9d47
|
Update license headers to match the actual license
|
2025-06-12 10:32:16 +02:00 |
|
Quentin Gliech
|
d4e2d06ed9
|
Registration token step view
|
2025-06-03 17:42:53 +02:00 |
|
Quentin Gliech
|
7c0eeec347
|
Generate a device name based on the client name and user agent
|
2025-04-25 16:55:29 +02:00 |
|
Quentin Gliech
|
fc94c751bc
|
templates: introduce a parse_user_agent filter and use it in the device consent page
|
2025-04-25 12:55:30 +02:00 |
|
mcalinghee
|
77e954e475
|
correct format and translation
|
2025-04-10 17:57:58 +02:00 |
|
mcalinghee
|
f2a47f9a88
|
add login by email + feature flag
|
2025-04-10 17:57:58 +02:00 |
|
Quentin Gliech
|
0643133bc4
|
Fallback link in password recovery emails
|
2025-04-10 11:35:32 +02:00 |
|
hummingbard
|
9f925e6f09
|
Added upstream sample config for Discord, brand logo in templates
|
2025-03-30 15:53:56 +06:00 |
|
Quentin Gliech
|
62a4aba08b
|
Better error pages when a user is deactivated or locked
|
2025-03-11 17:35:13 +01:00 |
|
Quentin Gliech
|
70b561291e
|
Show proper error messages when registering with a banned/not-allowed username
|
2025-03-03 10:45:30 +01:00 |
|
Quentin Gliech
|
bde473faf7
|
Update the compound design tokens, replace the error icon with error-solid
|
2025-02-21 17:04:11 +01:00 |
|
Quentin Gliech
|
0027980cf4
|
Add translatable errors for the email policy constraints
|
2025-02-17 15:53:57 +01:00 |
|
Quentin Gliech
|
44f7b46b63
|
Fix the rendering of the embedded API doc
|
2025-02-12 18:19:25 +01:00 |
|
Quentin Gliech
|
8d50088d1e
|
Apply code style suggestion
Co-authored-by: reivilibre <oliverw@element.io>
|
2025-01-23 18:35:11 +01:00 |
|
Quentin Gliech
|
7e6ab8ffc3
|
Disclose that email is already in use after verification
|
2025-01-23 18:18:19 +01:00 |
|
Quentin Gliech
|
f50a386b10
|
Registration step to set a display name
|
2025-01-15 15:28:48 +01:00 |
|
Quentin Gliech
|
f8517a5982
|
Implement email verification in the registration flow
|
2025-01-15 15:28:48 +01:00 |
|
Quentin Gliech
|
0bedaf3745
|
Make the password registration create a user_registration
|
2025-01-14 16:30:44 +01:00 |
|
Quentin Gliech
|
a294b37e89
|
Fix the post auth action being lost during the registration flow
|
2025-01-14 16:30:44 +01:00 |
|
Quentin Gliech
|
3da27afc91
|
Move the registration-related views into a sub-module
|
2025-01-14 16:30:44 +01:00 |
|
Quentin Gliech
|
5f5fc44fbd
|
Job to send the new email authentication codes
|
2025-01-14 15:47:17 +01:00 |
|
Quentin Gliech
|
1f83b39313
|
Remove the dedicated page to add an email address
|
2025-01-14 15:46:39 +01:00 |
|
Quentin Gliech
|
f6e8a014b8
|
Username on the first registration page is optional
|
2025-01-07 11:49:01 +01:00 |
|
Quentin Gliech
|
342eaefa81
|
Split the base registration page with local password registration
|
2025-01-07 11:49:01 +01:00 |
|
Quentin Gliech
|
3088d35012
|
Update the IDP brand icons from Figma
|
2025-01-07 11:49:01 +01:00 |
|
Quentin Gliech
|
b51a6c02ab
|
Tweak the login page to match the design
|
2025-01-07 11:49:01 +01:00 |
|
Quentin Gliech
|
d16049524b
|
Propagate more specific error messages from the policy on registration
This makes some policy errors translatable
|
2025-01-06 10:15:08 +01:00 |
|
Quentin Gliech
|
2e3b8bdd86
|
Allow setting an explicit upstream account name (#3600)
|
2024-11-29 12:30:18 +01:00 |
|
Quentin Gliech
|
7296364cd3
|
Avoid using SameSite=None by re-submitting incoming form data
|
2024-11-22 08:48:00 +01:00 |
|
Quentin Gliech
|
4b7aff6049
|
Enable better minijinja compatibility with the Python implementation
|
2024-10-28 14:59:36 +01:00 |
|
Quentin Gliech
|
15c02fa643
|
Manual license edit of remaining files
|
2024-09-10 14:28:55 +02:00 |
|
reivilibre
|
5d4a4a6fb8
|
Add rate-limiting for account recovery and registration (#3093)
* Add rate-limiting for account recovery and registration
* Rename login ratelimiter `per_address` to `per_ip` for consistency
Co-authored-by: Quentin Gliech <quenting@element.io>
|
2024-08-07 17:57:36 +00:00 |
|
Quentin Gliech
|
3f947025e2
|
Host a Swagger UI both in the static documentation and by the server
|
2024-08-01 15:17:14 +02:00 |
|
Quentin Gliech
|
e25c170403
|
Rate-limit password-based login attempts
|
2024-07-26 13:56:45 +02:00 |
|
Quentin Gliech
|
e937ea8fa8
|
Rework assets loading to fix splitting CSS chunks
|
2024-07-25 12:59:29 +02:00 |
|
Quentin Gliech
|
756f2c01f8
|
Separate error page when the recovery link was already used
|
2024-06-28 15:59:21 +02:00 |
|
Quentin Gliech
|
96df94104e
|
Show a proper 'link expired' page
|
2024-06-28 15:59:21 +02:00 |
|
Quentin Gliech
|
f9f2f4a3be
|
Gate account recovery behing a configuration flag
|
2024-06-28 15:59:21 +02:00 |
|
Quentin Gliech
|
09fca9fd75
|
Implement the password change form
|
2024-06-28 15:59:21 +02:00 |
|
Quentin Gliech
|
2e4d868385
|
Recovery progress page
|
2024-06-28 15:59:21 +02:00 |
|
Quentin Gliech
|
c156a3891e
|
Actually send emails for recovery
|
2024-06-28 15:59:21 +02:00 |
|
Quentin Gliech
|
319c43abc5
|
Start recovery view
|
2024-06-28 15:59:21 +02:00 |
|
reivilibre
|
7c67630c95
|
Remove the old password change page (#2874)
|
2024-06-27 13:41:24 +01:00 |
|