Commit Graph
6271 Commits
Author SHA1 Message Date
Quentin Gliech 47d411f641 Option to skip confirmation when registering through an upstream OAuth provider 2025-11-28 15:51:43 +01:00
Quentin Gliech 82906a83e8 Allow linking upstream accounts to matching users without confirmation (#5293) 2025-11-28 14:43:42 +01:00
Quentin Gliech 7587637943 Add Shibboleth sample configuration to SSO documentation (#5294) 2025-11-27 18:02:28 +01:00
copilot-swe-agent[bot]andsandhose b2fb289c37 Add complete Shibboleth metadata file example
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 16:48:00 +00:00
Quentin GliechandCopilot 7ce1be1fa0 Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-11-27 17:23:10 +01:00
copilot-swe-agent[bot]andsandhose af15767135 Remove deprecated set_email_verification option from docs
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 15:47:37 +00:00
Olivier 'reivilibre 8ad9c097cb Fix documentation of --usage-limit and --unlimited parameters on issue-user-registration-token command. (#5285) 2025-11-27 15:47:16 +00:00
copilot-swe-agent[bot]andsandhose fc7e2e3f57 Remove unnecessary userinfo_endpoint from Shibboleth config
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 15:38:21 +00:00
copilot-swe-agent[bot]andsandhose 0d10e148a7 Add Shibboleth sample configuration to SSO documentation
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 15:31:20 +00:00
copilot-swe-agent[bot] 275a374d5a Initial plan 2025-11-27 15:26:55 +00:00
Quentin Gliech 93b9b174e2 Remove unused login_link.html template 2025-11-27 16:18:18 +01:00
Quentin Gliech c58033a740 Allow linking upstream accounts to matching users without confirmation
This reworks the link flow to handle many edge cases better. One major
functionality change is that when we had a new upstream account with no
user linked, but the localpart matching an existing user, if
`on_conflict` was set to `add`, we prompt the user to link the existing
account. This prompt is now skipped and the user is linked automatically.
2025-11-27 16:18:17 +01:00
Quentin Gliech 4b6c1db5a2 Unify registrations for local passwords and upstream OAuth registrations (#5281) 2025-11-27 16:13:03 +01:00
Quentin Gliech 61ee8dae87 Fix test name 2025-11-27 16:05:13 +01:00
Quentin Gliech 4c3d2bae88 Create the new index CONCURRENTLY 2025-11-27 16:04:23 +01:00
Olivier 'reivilibre bbad15a0b1 Modify example Nginx compatibility-layer location block to also forward /_synapse/mas to Synapse (#5240) 2025-11-27 12:32:26 +00:00
Olivier 'reivilibre 723a948c87 Update docs/setup/reverse-proxy.md 2025-11-27 12:31:48 +00:00
matrixbot 8c2a85ece1 Automatic merge back to main (#5290) 2025-11-26 20:13:37 +01:00
github-actions[bot] c281492189 1.7.0 v1.7.0 2025-11-26 19:06:26 +00:00
matrixbot 2ac519eff1 Translations updates for v1.7 (#5289) 2025-11-26 20:04:57 +01:00
github-actions[bot] 87c603d3f1 Translations updates 2025-11-26 18:57:50 +00:00
Olivier 'reivilibre 0c8017fc80 Add experimental and preliminary policy-driven session limiting when logging in OAuth 2 sessions. (#5221) 2025-11-25 15:24:02 +00:00
Olivier 'reivilibre a89eb28a37 cli docs: Fix --usage-limit and --unlimited 2025-11-25 12:05:32 +00:00
reivilibre 4753aa811b templates check: Add --stabilise flag to make renders reproducible (#5214) 2025-11-24 16:16:11 +00:00
Quentin GliechandCopilot 5fb37d2fa0 Fix typo in error message
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-11-24 17:00:05 +01:00
Quentin Gliech 1e69ea8c22 Create user registrations for upstream OAuth registrations 2025-11-24 16:52:09 +01:00
Quentin Gliech e712c23a84 Associate the upstream link with the new user if present on the
registration
2025-11-21 19:37:05 +01:00
Quentin Gliech fe362d48d6 Don't error out if there is no email associated to the registration
In case an email is required for password auth, we create a user
authentication which we force the user to complete. We used to
double-check that the email is required before completing the
registration, which was only really useful when the config flipped from
not being required to being required, in the 1h window in which running
registrations were still valid. We think this is a fine trade-off.
2025-11-21 19:36:04 +01:00
Quentin Gliech ac4f66920c Store upstream OAuth sessions on user registrations
This will allow us creating user registrations from upstream OAuth auth
sessions
2025-11-21 19:31:37 +01:00
Quentin Gliech f7c8a28592 Allow completing user email authentications using an upstream session
This will let us push emails in user registrations using an upstream
session
2025-11-21 19:28:26 +01:00
Quentin Gliech 2b9ae4411c build(deps): bump the i18next group in /frontend with 2 updates (#5273) 2025-11-21 14:09:33 +01:00
Quentin Gliech 8c30237301 build(deps-dev): bump vite from 7.2.2 to 7.2.4 in /frontend in the vite group (#5272) 2025-11-21 14:09:05 +01:00
dependabot[bot] 340d40e199 build(deps): bump the i18next group in /frontend with 2 updates
Bumps the i18next group in /frontend with 2 updates: [react-i18next](https://github.com/i18next/react-i18next) and [i18next-cli](https://github.com/i18next/i18next-cli).


Updates `react-i18next` from 16.3.4 to 16.3.5
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v16.3.4...v16.3.5)

Updates `i18next-cli` from 1.24.17 to 1.24.20
- [Changelog](https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-cli/compare/v1.24.17...v1.24.20)

---
updated-dependencies:
- dependency-name: react-i18next
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: i18next
- dependency-name: i18next-cli
  dependency-version: 1.24.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: i18next
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-20 13:12:58 +00:00
dependabot[bot] 81b912da0e build(deps-dev): bump vite in /frontend in the vite group
Bumps the vite group in /frontend with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `vite` from 7.2.2 to 7.2.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.2.4/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-20 13:12:42 +00:00
matrixbot 2953212d0c Automatic merge back to main (#5270) 2025-11-19 16:24:25 +01:00
github-actions[bot] fe5f8c44f5 1.7.0-rc.0 v1.7.0-rc.0 2025-11-19 15:17:03 +00:00
matrixbot 63bfc6919f Translations updates for main (#5269) 2025-11-19 16:11:30 +01:00
github-actions[bot] 1e254f2ebe Translations updates 2025-11-19 15:04:18 +00:00
Andrew Morgan 370a29a578 Minor grammatical fix (#5268) 2025-11-19 14:54:58 +00:00
Andrew Morgan d00223e18a Minor grammatical fix 2025-11-19 14:47:04 +00:00
Quentin Gliech 054c548db4 build(deps): bump @vector-im/compound-design-tokens from 6.0.0 to 6.4.0 in /frontend (#5264) 2025-11-19 14:45:13 +01:00
Quentin Gliech 06b17b3dec Merge branch 'main' into dependabot/npm_and_yarn/frontend/vector-im/compound-design-tokens-6.4.0 2025-11-19 14:38:00 +01:00
Quentin Gliech edf6b187d9 build(deps): bump @vector-im/compound-web from 8.2.4 to 8.2.5 in /frontend (#5265) 2025-11-19 14:28:21 +01:00
Quentin Gliech 5dd761902f build(deps): bump hyper-util from 0.1.17 to 0.1.18 (#5266) 2025-11-19 14:28:08 +01:00
Quentin Gliech 2fb970e672 build(deps-dev): bump the types group in /frontend with 3 updates (#5263) 2025-11-19 14:27:30 +01:00
Quentin Gliech c525d9e968 Update icons in the templates 2025-11-19 14:25:04 +01:00
dependabot[bot] 8fbcd077d0 build(deps): bump hyper-util from 0.1.17 to 0.1.18
Bumps [hyper-util](https://github.com/hyperium/hyper-util) from 0.1.17 to 0.1.18.
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hyperium/hyper-util/compare/v0.1.17...v0.1.18)

---
updated-dependencies:
- dependency-name: hyper-util
  dependency-version: 0.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-19 13:19:59 +00:00
dependabot[bot] 8736d82a63 build(deps): bump @vector-im/compound-web in /frontend
Bumps [@vector-im/compound-web](https://github.com/vector-im/compound-web) from 8.2.4 to 8.2.5.
- [Release notes](https://github.com/vector-im/compound-web/releases)
- [Commits](https://github.com/vector-im/compound-web/compare/v8.2.4...v8.2.5)

---
updated-dependencies:
- dependency-name: "@vector-im/compound-web"
  dependency-version: 8.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-19 13:19:42 +00:00
dependabot[bot] 1cb4cb06fe build(deps): bump @vector-im/compound-design-tokens in /frontend
Bumps [@vector-im/compound-design-tokens](https://github.com/element-hq/compound-design-tokens) from 6.0.0 to 6.4.0.
- [Release notes](https://github.com/element-hq/compound-design-tokens/releases)
- [Changelog](https://github.com/element-hq/compound-design-tokens/blob/main/docs/release.md)
- [Commits](https://github.com/element-hq/compound-design-tokens/compare/v6.0.0...v6.4.0)

---
updated-dependencies:
- dependency-name: "@vector-im/compound-design-tokens"
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-19 13:19:33 +00:00
dependabot[bot] b99b230084 build(deps-dev): bump the types group in /frontend with 3 updates
Bumps the types group in /frontend with 3 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom).


Updates `@types/node` from 24.9.1 to 24.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.2 to 19.2.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.2 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: types
- dependency-name: "@types/react"
  dependency-version: 19.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-19 13:19:21 +00:00