dandri/matrix-authentication-service
1
0 Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-10-22 21:54:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,881 Commits 88 Branches 115 Tags
3e76fe92e9c94b683b7ac91cbcbbee94e8bacba4
Commit Graph
6881 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Eric Eastwood 3e76fe92e9 Tighten up descriptions 2026-04-06 19:36:27 -05:00
Eric Eastwood 12b837fc80 Assert most recent 2026-04-06 19:29:18 -05:00
Eric Eastwood ec540bf8ff Add test_hard_limit_eviction_compat_login 2026-04-06 18:40:34 -05:00
Eric Eastwood 724e0cf5ca Pass in session_limit_config directly to policy 
Revert changes from
https://github.com/element-hq/matrix-authentication-service/pull/5221. I
assume it was done that way as the "session_limit_config" doesn't change
after the server is created. But this makes downstream usage complicated as
you whenever you create `SiteConfig`, you also have to make sure to configure
whatever else is necessary.

Easier to just pass in `session_limit_config` as necessary whenever
we evaluate the policy
 2026-04-06 18:28:50 -05:00
Eric Eastwood c77afd5243 Add some tests 2026-04-06 17:45:26 -05:00
Eric Eastwood fc3bba48e7 Remove nested valid check 2026-04-06 16:36:10 -05:00
Eric Eastwood 45971fa42f Remove session_counts reference change 2026-04-06 16:28:48 -05:00
Eric Eastwood 04ccd6def5 num_sessions_removed 2026-04-06 16:27:13 -05:00
Eric Eastwood 9d7e941344 Generic process_violations_for_compat_login 2026-04-06 16:25:45 -05:00
Eric Eastwood 611c684e21 Better error 2026-04-06 16:08:02 -05:00
Eric Eastwood dfdc2edf2d Add potential repo.compat_session().finish_bulk(...) plans 2026-04-06 15:25:01 -05:00
Eric Eastwood d75b37c126 Run sh misc/update.sh 2026-04-06 15:13:16 -05:00
Eric Eastwood 6f2f63238a Comment in better place 2026-04-06 15:10:45 -05:00
Eric Eastwood a2eba2891f Fix type problems 2026-04-06 15:01:35 -05:00
Eric Eastwood 8964793f31 Draft: Evict old devices 2026-04-06 14:51:18 -05:00
Eric Eastwood d407efcbe7 Fix warning: it is more idiomatic to use Option<&T> instead of &Option<T>`` 2026-04-03 17:55:31 -05:00
Eric Eastwood ae0e08db14 Thread through some site_config.session_limit 2026-04-03 17:54:29 -05:00
Eric Eastwood 5532c0cda9 Better rustdoc links 2026-04-03 17:42:09 -05:00
Eric Eastwood e4c1be96fc Disabled by default 2026-04-03 16:03:49 -05:00
Eric Eastwood 0927f68d76 More refined figment error 2026-04-03 16:01:17 -05:00
Eric Eastwood 5462277f63 Validation (take 1) 2026-04-03 15:40:12 -05:00
Eric Eastwood 65ae2b6a35 Update session limit doc strings and add hard_limit_eviction 2026-04-03 15:01:19 -05:00
Quentin Gliech 0f4ce9eccb Automatic merge back to main (#5593) 2026-03-31 19:01:43 +02:00
github-actions[bot] 38d8aed2b9 1.15.0-rc.0 v1.15.0-rc.0 2026-03-31 11:54:23 +00:00
Quentin Gliech f43b194bfc Update command to list admin users in CLI docs (#5589) 2026-03-31 13:53:13 +02:00
Quentin Gliech 856fb7aec3 build(deps): bump the opentelemetry group across 1 directory with 2 updates (#5567) 2026-03-31 13:18:52 +02:00
Quentin Gliech b0c878026e Use get_otel_context instead of accessing OtelData directly 
`OtelData` is going to become private in a future version of
`tracing-opentelemetry`. Use the new `get_otel_context` function
introduced in 0.32.1 to extract the trace ID from the span context.
 2026-03-31 12:24:08 +02:00
Quentin Gliech 2c83fcfd56 build(deps-dev): bump the graphql-codegen group in /frontend with 3 updates (#5549) 2026-03-31 12:20:05 +02:00
Quentin Gliech 5f7aed94f9 build(deps-dev): bump happy-dom from 20.5.0 to 20.8.9 in /frontend (#5590) 2026-03-31 12:16:04 +02:00
Quentin Gliech 1ac6ffb5ca build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#5585) 2026-03-31 12:08:09 +02:00
Quentin Gliech 50b574a086 build(deps): bump picomatch in /frontend (#5581) 2026-03-31 12:07:48 +02:00
Quentin Gliech 380671acbc build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 (#5584) 2026-03-31 12:06:41 +02:00
Quentin Gliech baa96bea3a build(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#5583) 2026-03-31 12:06:31 +02:00
Quentin Gliech 551fce45b7 Fix scheduled jobs automatic cleanup not working in some conditions (#5574) 2026-03-31 12:05:33 +02:00
Quentin Gliech 5c2b2de15c Enable the tls-provider-agnostic feature of opentelemetry-otlp 2026-03-31 12:03:55 +02:00
dependabot[bot] 12df0a1651 build(deps-dev): bump happy-dom from 20.5.0 to 20.8.9 in /frontend 
Bumps [happy-dom](https://github.com/capricorn86/happy-dom) from 20.5.0 to 20.8.9.
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](https://github.com/capricorn86/happy-dom/compare/v20.5.0...v20.8.9)

---
updated-dependencies:
- dependency-name: happy-dom
  dependency-version: 20.8.9
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-31 10:03:53 +00:00
dependabot[bot] ee233b0fd1 build(deps-dev): bump the graphql-codegen group 
Bumps the graphql-codegen group in /frontend with 3 updates: [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli), [@graphql-codegen/client-preset](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/presets/client) and [@graphql-codegen/typescript-msw](https://github.com/dotansimha/graphql-code-generator-community/tree/HEAD/packages/plugins/typescript/msw).


Updates `@graphql-codegen/cli` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/typed-document-node@6.1.3/packages/graphql-codegen-cli)

Updates `@graphql-codegen/client-preset` from 5.2.3 to 5.2.4
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/presets/client/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/HEAD/packages/presets/client)

Updates `@graphql-codegen/typescript-msw` from 3.0.1 to 4.0.0
- [Release notes](https://github.com/dotansimha/graphql-code-generator-community/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator-community/blob/main/packages/plugins/typescript/msw/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator-community/commits/@graphql-codegen/typescript-msw@4.0.0/packages/plugins/typescript/msw)

---
updated-dependencies:
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: graphql-codegen
- dependency-name: "@graphql-codegen/client-preset"
  dependency-version: 5.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: graphql-codegen
- dependency-name: "@graphql-codegen/typescript-msw"
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: graphql-codegen
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-31 10:02:25 +00:00
Quentin Gliech d0deaf96f0 build(deps): bump minimatch in /frontend (#5534) 2026-03-31 11:59:10 +02:00
Quentin Gliech b0bd4b08d6 build(deps-dev): bump the vitest group in /frontend with 2 updates (#5576) 2026-03-31 11:58:41 +02:00
Quentin Gliech ed20733dd5 build(deps-dev): bump the storybook group in /frontend with 3 updates (#5561) 2026-03-31 11:58:04 +02:00
beposec e3a0ec75b2 Update command to list admin users in CLI docs 
There was a wrong example in the Codeblock.
 2026-03-27 18:20:13 +01:00
dependabot[bot] d40934b7d2 build(deps): bump the opentelemetry group across 1 directory with 2 updates 
Bumps the opentelemetry group with 2 updates in the / directory: [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) and [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry).


Updates `opentelemetry-otlp` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-otlp-0.31.1)

Updates `tracing-opentelemetry` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases)
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/tracing-opentelemetry/compare/v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: opentelemetry-otlp
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opentelemetry
- dependency-name: tracing-opentelemetry
  dependency-version: 0.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opentelemetry
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 14:04:44 +00:00
dependabot[bot] 55e68b76a7 build(deps-dev): bump the vitest group in /frontend with 2 updates 
Bumps the vitest group in /frontend with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@vitest/coverage-v8` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.1/packages/coverage-v8)

Updates `vitest` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.1/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vitest
- dependency-name: vitest
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vitest
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 14:04:01 +00:00
dependabot[bot] ba332b6153 build(deps-dev): bump the storybook group in /frontend with 3 updates 
Bumps the storybook group in /frontend with 3 updates: [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs), [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).


Updates `@storybook/addon-docs` from 10.2.19 to 10.3.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.3.0/code/addons/docs)

Updates `@storybook/react-vite` from 10.2.19 to 10.3.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.3.0/code/frameworks/react-vite)

Updates `storybook` from 10.2.19 to 10.3.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.3.0/code/core)

---
updated-dependencies:
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: "@storybook/react-vite"
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: storybook
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 14:03:31 +00:00
dependabot[bot] 70884482be build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.2 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v5.5.2...v6.0.0)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 14:02:32 +00:00
dependabot[bot] da156aaf07 build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 14:02:19 +00:00
dependabot[bot] 0b208602e8 build(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](https://github.com/actions/deploy-pages/compare/v4.0.5...v5.0.0)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 14:02:16 +00:00
dependabot[bot] e1113a6f45 build(deps): bump picomatch in /frontend 
Bumps  and [picomatch](https://github.com/micromatch/picomatch). These dependencies needed to be updated together.

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 07:24:03 +00:00
Eric Eastwood 3d4141f1ac Convert ViolationCode into ViolationVariant to allow adding fields on each variant (#5553) 
Concretely, for the [device](https://github.com/element-hq/matrix-authentication-service/issues/4339) [limiting](https://github.com/element-hq/backend-internal/issues/199) stuff, we'll need the policy to be able to tell MAS how many sessions should be removed before the user can log in.
This way the UI will be able to guide the user through it.

Intended to look something like:
```rust
ViolationVariant::TooManySessions {
    /// How many devices to remove
    need_to_remove: u32
}
```
 2026-03-25 17:23:29 -05:00
Eric Eastwood ca76ee370b Add warning/note when removing devices (#5580) 
Part of https://github.com/element-hq/matrix-authentication-service/issues/4339 / https://github.com/element-hq/backend-internal/issues/199 tracking work to limit number of devices.
 2026-03-25 17:20:31 -05:00