Commit Graph

6036 Commits

Author SHA1 Message Date
Olivier 'reivilibre 409f35476a Remove stale comment 2025-10-22 14:23:18 +01:00
Olivier 'reivilibre 80feaffe16 Add comments for the filters 2025-10-22 14:22:10 +01:00
Olivier 'reivilibre 54c025f333 Use is_valid_actor 2025-10-22 14:20:55 +01:00
Olivier 'reivilibre e648c8ecc3 Merge branch 'main' into rei/pat_revoke_on_deactivate 2025-10-22 14:18:17 +01:00
reivilibre d8b5e162da Accept personal access tokens on the Admin API (#5183) 2025-10-22 14:03:59 +01:00
Olivier 'reivilibre e5a54f2d68 Restructure user validity check 2025-10-22 13:29:53 +01:00
Olivier 'reivilibre 84450a7bfb remove redundant #[source] 2025-10-22 13:29:45 +01:00
Olivier 'reivilibre c8ed12512e Relax the validity check of the token actor 2025-10-22 13:15:12 +01:00
Olivier 'reivilibre f51747a666 Check validity of token owner 2025-10-22 13:04:39 +01:00
Olivier 'reivilibre a7d83540c2 Pass through the TokenFormatError 2025-10-22 12:59:49 +01:00
Olivier 'reivilibre c74150f8df Accept PATs on the Admin API 2025-10-22 11:37:04 +01:00
Olivier 'reivilibre b23a35a214 Rename record_personal_session function 2025-10-22 11:37:04 +01:00
Olivier 'reivilibre c5756d4d7f Don't allow creating personal sessions for deactivated users 2025-10-22 11:31:17 +01:00
Olivier 'reivilibre 7d5e9b863d Revoke personal sessions on user deactivation 2025-10-22 11:27:10 +01:00
Olivier 'reivilibre be40e1bed7 Add revoke_bulk for personal sessions storage 2025-10-22 11:27:10 +01:00
reivilibre eeba7e192c Personal Sessions: add create, list, get, revoke, regenerate Admin APIs (#5141)
Introduces some admin API endpoints for Personal Sessions.

- add: Creates a personal session along with its first personal access token, returning both. This is currently the only way to get a personal access token.
- get: Shows the information about a personal session
- list: Shows many personal sessions
- revoke: Revokes a personal session, so it can't be used anymore
- regenerate: Revoke the active personal access token for a session and issue a new one to replace it.
2025-10-22 11:20:02 +01:00
Quentin Gliech 5fa972510e Highlight dangerous scopes when consenting to them (#5180) 2025-10-22 12:11:32 +02:00
Quentin Gliech 820b1d7fde Update extracted translations 2025-10-22 11:50:10 +02:00
Quentin Gliech bc3d3d4235 Align the icons used in the session details page 2025-10-22 11:39:56 +02:00
Quentin Gliech c9fd4653c4 Make the font slightly bolder on dangerous scopes 2025-10-22 11:37:58 +02:00
Quentin Gliech 806a815f75 Highlight dangerous scopes when consenting to them 2025-10-22 11:29:52 +02:00
Olivier 'reivilibre dda3a498b3 (update JSONSchema) 2025-10-21 12:16:45 +01:00
Olivier 'reivilibre 8fb0caf06a fixup! Add expires filter to personal sessions list 2025-10-21 11:30:11 +01:00
Olivier 'reivilibre db3dcce753 use axum_extract's version of Query everywhere 2025-10-21 11:30:11 +01:00
Olivier 'reivilibre a0c55835df fixup! Make expires_in u32 and (on regenerate) not default to the same as last time 2025-10-21 11:21:00 +01:00
Olivier 'reivilibre d516b3dee3 Add scope filter to personal sessions list 2025-10-21 11:03:04 +01:00
Olivier 'reivilibre cc57e33226 axum_extra: enable query feature flag 2025-10-21 11:03:04 +01:00
Olivier 'reivilibre 6102a4b672 Use Option<Ulid> in schemars 2025-10-21 10:16:36 +01:00
Olivier 'reivilibre ba9fc3513c Make expires_in u32 and (on regenerate) not default to the same as last time 2025-10-21 10:13:32 +01:00
Olivier 'reivilibre 52c04c173f Add expires filter to personal sessions list 2025-10-21 10:10:14 +01:00
Olivier 'reivilibre 78b010d3f6 find_active_by_session: take &PersonalSession 2025-10-21 09:43:46 +01:00
reivilibre 0d27c34f10 Support introspection of personal access tokens (#5171)
You can now present a personal access token (mpt_ prefix) at introspection and have it accepted.

This means personal access tokens can be presented to Synapse and used on the client-server API.
2025-10-20 18:25:38 +01:00
Olivier 'reivilibre 66f8814058 note: device_id only used for compat access & refresh tokens 2025-10-20 17:23:31 +01:00
Olivier 'reivilibre 9d80ecc513 Add personal access token introspection test 2025-10-20 17:23:31 +01:00
Olivier 'reivilibre 893e4265c3 Implement activity tracking for personal sessions 2025-10-20 17:23:31 +01:00
Olivier 'reivilibre 11a852e109 introspection: Support personal access tokens 2025-10-20 17:23:31 +01:00
Olivier 'reivilibre 4863026eff drive-by update.sh chmod +x 2025-10-20 16:42:01 +01:00
Olivier 'reivilibre 30abb7c90d drive-by formatting fixes 2025-10-20 16:42:01 +01:00
Olivier 'reivilibre 1fc8145e01 drive-by clippy fixes 2025-10-20 16:42:01 +01:00
Olivier 'reivilibre 4e70f83f41 Add Admin API to regenerate a personal session (getting a new PAT) 2025-10-20 16:42:01 +01:00
Quentin Gliech 5b02453199 build(deps): bump swagger-ui-dist from 5.29.3 to 5.29.5 in /frontend (#5160) 2025-10-20 17:27:58 +02:00
Quentin Gliech ae83ccfaf7 build(deps-dev): bump msw from 2.11.3 to 2.11.6 in /frontend (#5164) 2025-10-20 17:11:09 +02:00
Quentin Gliech 7df0c8b252 build(deps): bump ruma-common from 0.15.4 to 0.16.0 (#5169) 2025-10-20 17:08:54 +02:00
Quentin Gliech 46334d1948 build(deps): bump @tanstack/react-query from 5.90.2 to 5.90.5 in /frontend in the tanstack-query group (#5165) 2025-10-20 17:06:57 +02:00
Quentin Gliech 606fde2262 build(deps): bump the sentry group with 3 updates (#5166) 2025-10-20 17:06:35 +02:00
Quentin Gliech 7af6bd2c61 build(deps-dev): bump vite from 7.1.9 to 7.1.11 in /frontend in the vite group (#5167) 2025-10-20 17:05:33 +02:00
Quentin Gliech 4365607eb7 Update msw to 2.11.6 2025-10-20 17:04:00 +02:00
dependabot[bot] cdb21e09c3 build(deps): bump ruma-common from 0.15.4 to 0.16.0
Bumps [ruma-common](https://github.com/ruma/ruma) from 0.15.4 to 0.16.0.
- [Release notes](https://github.com/ruma/ruma/releases)
- [Commits](https://github.com/ruma/ruma/compare/ruma-common-0.15.4...ruma-common-0.16.0)

---
updated-dependencies:
- dependency-name: ruma-common
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 15:02:06 +00:00
dependabot[bot] 13a16e9931 build(deps-dev): bump vite in /frontend in the vite group
Bumps the vite group in /frontend with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `vite` from 7.1.9 to 7.1.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 14:03:32 +00:00
dependabot[bot] 81a07cc398 build(deps): bump the sentry group with 3 updates
Bumps the sentry group with 3 updates: [sentry](https://github.com/getsentry/sentry-rust), [sentry-tower](https://github.com/getsentry/sentry-rust) and [sentry-tracing](https://github.com/getsentry/sentry-rust).


Updates `sentry` from 0.42.0 to 0.45.0
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-rust/compare/0.42.0...0.45.0)

Updates `sentry-tower` from 0.42.0 to 0.45.0
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-rust/compare/0.42.0...0.45.0)

Updates `sentry-tracing` from 0.42.0 to 0.45.0
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-rust/compare/0.42.0...0.45.0)

---
updated-dependencies:
- dependency-name: sentry
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sentry
- dependency-name: sentry-tower
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sentry
- dependency-name: sentry-tracing
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sentry
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 14:01:18 +00:00