dandri/matrix-authentication-service
1
0
Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-09-25 13:24:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,522 Commits 78 Branches 109 Tags
64b71bacabee5b052d9674202ebbf34ff79e2d71
Commit Graph
1874 Commits
Author SHA1 Message Date
dependabot[bot] 02ab9f1a73 build(deps): bump itertools from 0.14.0 to 0.15.0 
Bumps [itertools](https://github.com/rust-itertools/itertools) from 0.14.0 to 0.15.0.
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-itertools/itertools/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: itertools
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 22:25:24 +00:00
Quentin Gliech ffb0d6e8c4 build(deps): bump camino from 1.2.1 to 1.2.3 (#5808) 2026-07-02 23:35:55 +02:00
Quentin Gliech 3ffc945174 build(deps): bump hyper-util from 0.1.18 to 0.1.20 (#5806) 2026-07-02 23:35:37 +02:00
Quentin Gliech b83f2f0139 build(deps): bump bytes from 1.11.1 to 1.12.0 (#5804) 2026-07-02 23:34:46 +02:00
dependabot[bot] 7b5eee53b3 build(deps): bump camino from 1.2.1 to 1.2.3 
Bumps [camino](https://github.com/camino-rs/camino) from 1.2.1 to 1.2.3.
- [Release notes](https://github.com/camino-rs/camino/releases)
- [Changelog](https://github.com/camino-rs/camino/blob/main/CHANGELOG.md)
- [Commits](https://github.com/camino-rs/camino/compare/camino-1.2.1...camino-1.2.3)

---
updated-dependencies:
- dependency-name: camino
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 21:08:05 +00:00
dependabot[bot] de3c5dfc90 build(deps): bump hyper-util from 0.1.18 to 0.1.20 
Bumps [hyper-util](https://github.com/hyperium/hyper-util) from 0.1.18 to 0.1.20.
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hyperium/hyper-util/compare/v0.1.18...v0.1.20)

---
updated-dependencies:
- dependency-name: hyper-util
  dependency-version: 0.1.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 21:07:43 +00:00
dependabot[bot] 85ca331633 build(deps): bump bytes from 1.11.1 to 1.12.0 
Bumps [bytes](https://github.com/tokio-rs/bytes) from 1.11.1 to 1.12.0.
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/bytes/compare/v1.11.1...v1.12.0)

---
updated-dependencies:
- dependency-name: bytes
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 21:07:21 +00:00
dependabot[bot] 9b39ca0f04 build(deps): bump schemars from 1.1.0 to 1.2.1 
Bumps [schemars](https://github.com/GREsau/schemars) from 1.1.0 to 1.2.1.
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](https://github.com/GREsau/schemars/compare/v1.1.0...v1.2.1)

---
updated-dependencies:
- dependency-name: schemars
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 21:06:48 +00:00
Quentin Gliech 489122f287 build(deps): bump sd-notify from 0.4.5 to 0.5.0 (#5796) 2026-07-02 22:50:47 +02:00
dependabot[bot] b55de9e141 build(deps): bump socket2 from 0.6.2 to 0.6.4 
Bumps [socket2](https://github.com/rust-lang/socket2) from 0.6.2 to 0.6.4.
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/socket2/commits)

---
updated-dependencies:
- dependency-name: socket2
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 17:58:17 +00:00
Quentin Gliech 7d31911322 build(deps): bump cookie_store from 0.22.0 to 0.22.1 (#5791) 2026-07-02 19:46:18 +02:00
dependabot[bot] 9f55ebbed7 build(deps): bump sd-notify from 0.4.5 to 0.5.0 
Bumps [sd-notify](https://github.com/lnicola/sd-notify) from 0.4.5 to 0.5.0.
- [Changelog](https://github.com/lnicola/sd-notify/blob/master/CHANGELOG.md)
- [Commits](https://github.com/lnicola/sd-notify/compare/v0.4.5...v0.5.0)

---
updated-dependencies:
- dependency-name: sd-notify
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 17:19:38 +00:00
dependabot[bot] 5489cafc5d build(deps): bump serde_with from 3.14.0 to 3.21.0 
Bumps [serde_with](https://github.com/jonasbb/serde_with) from 3.14.0 to 3.21.0.
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](https://github.com/jonasbb/serde_with/compare/v3.14.0...v3.21.0)

---
updated-dependencies:
- dependency-name: serde_with
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 17:19:13 +00:00
dependabot[bot] fd3ea2eab5 build(deps): bump cookie_store from 0.22.0 to 0.22.1 
Bumps [cookie_store](https://github.com/pfernie/cookie_store) from 0.22.0 to 0.22.1.
- [Changelog](https://github.com/pfernie/cookie_store/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pfernie/cookie_store/compare/v0.22.0...v0.22.1)

---
updated-dependencies:
- dependency-name: cookie_store
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 17:18:23 +00:00
Quentin Gliech 92e355d381 build(deps): bump crc from 3.3.0 to 3.4.0 (#5784) 2026-07-02 18:34:42 +02:00
Quentin Gliech cf130df17b build(deps): bump arc-swap from 1.8.1 to 1.9.1 (#5783) 2026-07-02 18:32:21 +02:00
Quentin Gliech 550c5b782b build(deps): bump rustls-pki-types from 1.13.0 to 1.14.1 (#5781) 2026-07-02 18:31:21 +02:00
dependabot[bot] 13282c3735 build(deps): bump crc from 3.3.0 to 3.4.0 
Bumps [crc](https://github.com/mrhooray/crc-rs) from 3.3.0 to 3.4.0.
- [Commits](https://github.com/mrhooray/crc-rs/compare/3.3.0...3.4.0)

---
updated-dependencies:
- dependency-name: crc
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:48:39 +00:00
dependabot[bot] f04c38ea88 build(deps): bump arc-swap from 1.8.1 to 1.9.1 
Bumps [arc-swap](https://github.com/vorner/arc-swap) from 1.8.1 to 1.9.1.
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/compare/v1.8.1...v1.9.1)

---
updated-dependencies:
- dependency-name: arc-swap
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:48:17 +00:00
dependabot[bot] ef300307e2 build(deps): bump chrono from 0.4.42 to 0.4.45 
Bumps [chrono](https://github.com/chronotope/chrono) from 0.4.42 to 0.4.45.
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.42...v0.4.45)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:47:54 +00:00
dependabot[bot] 3b8ec0ecf1 build(deps): bump rustls-pki-types from 1.13.0 to 1.14.1 
Bumps [rustls-pki-types](https://github.com/rustls/pki-types) from 1.13.0 to 1.14.1.
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](https://github.com/rustls/pki-types/compare/v/1.13.0...v/1.14.1)

---
updated-dependencies:
- dependency-name: rustls-pki-types
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:47:31 +00:00
Quentin Gliech 92318fc368 Upgrade aide, schemars and axum (#5752) 2026-07-02 17:43:41 +02:00
Quentin Gliech a62a9ebdeb Fix the HTTP client not setting the ALPN extension (#5758) 2026-07-02 12:11:09 +02:00
Quentin Gliech fb4d91dbe1 deps: upgrade aide 0.15->0.16.0-alpha.4, axum-extra 0.10->0.12, schemars 0.9->1.0, axum 0.8.6->0.8.9 
aide 0.16, axum-extra 0.12 and schemars 1.0 are a coupled bundle: aide 0.16
requires axum-extra ^0.12 and schemars ^1.0.4, so they must move together.
 2026-07-01 17:09:26 +02:00
Quentin Gliech b8aaa1a980 deps: upgrade icu4x 1.5 -> 2.2 
Bumps all the ICU related dependencies to 2.2 or equivalent
 2026-07-01 17:07:49 +02:00
dependabot[bot] 15812b83e4 build(deps): bump base64ct from 1.8.0 to 1.8.3 
Bumps [base64ct](https://github.com/RustCrypto/formats) from 1.8.0 to 1.8.3.
- [Commits](https://github.com/RustCrypto/formats/compare/base64ct/v1.8.0...base64ct/v1.8.3)

---
updated-dependencies:
- dependency-name: base64ct
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-30 15:45:34 +00:00
github-actions[bot] e575a8ce87 1.20.0-rc.0 2026-06-30 15:12:40 +00:00
Quentin Gliech 938c6aee67 Do not customize the TLS configuration of the HTTP client 
This fixes a bug where we were not sending the ALPN extension, which caused the
HTTP client to always use HTTP/1.1 instead of HTTP/2.

Fixes #5757
 2026-06-30 12:18:47 +02:00
Quentin Gliech 806ae21231 Update anyhow from 1.0.102 to 1.0.103 
Fixes RUSTSEC-2026-0190
 2026-06-29 17:24:45 +02:00
Quentin Gliech a51e222d49 Track and log database statistics for every request and job (#5745) 2026-06-25 18:26:09 +02:00
Quentin Gliech b76f08cf86 deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx (#5744) 2026-06-25 16:45:37 +02:00
Quentin Gliech b3354c1532 Upgrade ulid 2026-06-22 14:46:55 +02:00
Quentin Gliech a0897ac71a mas-storage-pg: add a recording SQL executor and stream 
Introduces a RecordingExecutor (an sqlx Executor wrapper) and the
RecordingStream it returns, which record the SQL as db.query.text and
accumulate per-context query count/timing.
 2026-06-22 14:43:05 +02:00
Quentin Gliech b714fdf870 deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx 
Prepares for the sqlx 0.9 upgrade: sea-query-binder is pinned to sqlx 0.8,
and its sqlx-0.9 successor is the renamed sea-query-sqlx crate which requires
sea-query 1.0. This change does the sea-query 0.32 -> 1.0 major migration while
staying on sqlx 0.8 (via sea-query-sqlx 0.8.1), to keep it decoupled from the
sqlx bump itself.
 2026-06-19 10:40:12 +02:00
Quentin Gliech e42d85d14e Merge branch 'main' into the requester logging branch 2026-06-18 13:43:59 +02:00
Quentin Gliech e0c03b06e8 deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32 
We need to group the sentry and opentelemetry bumps together because they both
upgraded reqwest to 0.13.

- reqwest 0.12 -> 0.13: rename the rustls feature to rustls-no-provider,
  add the now-opt-in 'form' feature.
- sentry 0.46 -> 0.48: add rustls-no-provider so Sentry's reqwest 0.13
  transport reuses our process-wide aws-lc-rs provider.
- opentelemetry 0.31 -> 0.32 / tracing-opentelemetry 0.33: update the
  get_otel_context call in mas-context for the new signature.

opentelemetry-jaeger-propagator 0.32 is deprecated upstream but still
published; we keep it for now (with an expect(deprecated)) and will
vendor it in-tree once it's actually removed.
 2026-06-17 19:00:25 +02:00
Quentin Gliech 715d516430 mas-axum-utils: record the requester at shared auth points 
Add a `RecordAsRequester` trait mapping domain types (User, BrowserSession,
OAuth2 Session, CompatSession, Client) to a `Requester`, and record it from
the two shared auth-resolution points: `SessionInfo::load_active_session`
(browser sessions) and `AccessToken::fetch` (OAuth2 bearer tokens).
 2026-06-17 14:14:23 +02:00
Quentin Gliech c6cd294777 mas-context: add a Requester to the LogContext 
Add a `Requester` enum (a user, an OAuth2 client, or the homeserver) stored
in a set-once slot on the `LogContext`. This lets request handlers record
which entity authenticated a request so it can be logged later.
 2026-06-17 14:14:23 +02:00
github-actions[bot] c7fd1f9862 1.19.0 2026-06-17 10:32:44 +00:00
github-actions[bot] 4791081c53 1.19.0-rc.0 2026-06-10 11:33:51 +00:00
github-actions[bot] 7b6c5aff9e 1.18.0 2026-06-04 11:44:51 +00:00
github-actions[bot] 49c0e6d713 1.18.0-rc.0 2026-05-29 14:34:07 +00:00
dependabot[bot] 50177e6ad0 Bump the tracing group across 1 directory with 2 updates 
Bumps the tracing group with 2 updates in the / directory: [tracing-subscriber](https://github.com/tokio-rs/tracing) and [tracing-appender](https://github.com/tokio-rs/tracing).


Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `tracing-appender` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-appender-0.2.4...tracing-appender-0.2.5)

---
updated-dependencies:
- dependency-name: tracing-appender
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tracing
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tracing
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-25 09:33:53 +00:00
Eric Eastwood 8d39676585 Use assert_matches!(...) 
See https://github.com/element-hq/matrix-authentication-service/pull/5675#discussion_r3275925322
 2026-05-20 15:03:09 -05:00
Eric Eastwood 97b3446f69 Merge branch 'main' into madlittlemods/soft-limit-sso-login-test 2026-05-20 14:44:14 -05:00
github-actions[bot] 3ab421191e 1.17.0 2026-05-19 14:19:56 +00:00
Quentin Gliech e2771abd55 Bump lettre to mitigate RUSTSEC-2026-0141 
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
 2026-05-19 14:57:56 +01:00
Eric Eastwood 68737b361a Merge branch 'main' into madlittlemods/soft-limit-sso-login-test 2026-05-15 18:01:34 -05:00
Quentin Gliech be444b5f1a Bump lettre to mitigate RUSTSEC-2026-0141 
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
 2026-05-15 13:36:08 +02:00
Eric Eastwood 50b49cd38a Back to more normal 2026-05-14 19:27:01 -05:00