dandri/matrix-authentication-service
1
0
Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-09-25 15:34:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,081 Commits 78 Branches 109 Tags
6946e57ffdbd93c402f20d8b4eef3e5ccbe1185d
Commit Graph
7081 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin Gliech 6946e57ffd Fix the release notes reference to the image 2026-05-20 10:58:01 +02:00
Quentin Gliech e833483070 Bump OCI login action to v4.1.0 to match the GHCR login 2026-05-20 10:44:20 +02:00
Quentin Gliech c52161d420 Merge remote-tracking branch 'origin/main' into devon/element-docker 2026-05-20 10:14:18 +02:00
Quentin Gliech bb6efd95b8 Fix the transformation of the Docker build metadata in CI (#5683) 2026-05-20 10:12:00 +02:00
Quentin Gliech 815e9ef19a Skip oci.element.io push on PR-labelled builds 
Tailscale + Vault JWT auth needs a `push`-event OIDC token, so gate the
oci-push registry image and its login steps on `github.event_name == 'push'`.
PR-labelled builds (`Z-Build-Workflow`) push only to ghcr.io.
 2026-05-20 09:50:18 +02:00
Quentin Gliech f0100c4fa8 Disable provenance in the metadata output 2026-05-20 09:34:26 +02:00
matrixbot 4e99e36f87 Automatic merge back to main (#5690) 2026-05-19 16:30:37 +02:00
github-actions[bot] 3ab421191e 1.17.0 v1.17.0 2026-05-19 14:19:56 +00:00
Olivier 'reivilibre de3de3b169 Translations updates for v1.17 (#5689) 2026-05-19 15:17:15 +01:00
Olivier 'reivilibre 53557cb6cd Merge branch 'release/v1.17' into actions/localazy-download/v1.17 2026-05-19 15:08:03 +01:00
Quentin Gliech e2771abd55 Bump lettre to mitigate RUSTSEC-2026-0141 
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
 2026-05-19 14:57:56 +01:00
github-actions[bot] eb58397b05 Translations updates 2026-05-19 13:46:32 +00:00
Quentin Gliech f6195402b1 Merge branch 'main' into quenting/fix-ci-bake-metadata 2026-05-15 13:51:35 +02:00
Quentin Gliech 0b52a8573a Bump lettre to appease cargo-deny on RUSTSEC-2026-0141 (#5684) 2026-05-15 13:51:16 +02:00
Quentin Gliech be444b5f1a Bump lettre to mitigate RUSTSEC-2026-0141 
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
 2026-05-15 13:36:08 +02:00
Quentin Gliech f99f4f5fba Fix the transformation of the Docker build metadata in CI 
This broke in #5664 due to STEPS_BAKE_OUTPUTS_METADATA being too large
to be passed as an argument to a shell script.

This replaces the `jq` call with a javascript action which transforms
the output.
 2026-05-15 13:29:55 +02:00
Eric EastwoodandQuentin Gliech 1cf0243d07 Fix TestState.reset() to retain mock homeserver in-memory state (#5678) 
Spawning from https://github.com/element-hq/matrix-authentication-service/pull/5670#discussion_r3222243619

---------

Co-authored-by: Quentin Gliech <quenting@element.io>
 2026-05-14 12:25:58 -05:00
Eric Eastwood 1e84c6962a Merge branch 'main' into madlittlemods/fix-test-state-reset 2026-05-13 15:56:14 -05:00
Eric Eastwood 2fea1fee7c Fix TestState.reset() to retain mock homeserver im-memory state 2026-05-13 15:43:27 -05:00
Quentin Gliech aecb172209 Add oauth.device_code_grant_enabled configuration option (#5612) 2026-05-13 21:40:02 +02:00
Quentin Gliech 890042e6a9 Drop the device code grant type if it's disabled instead of rejecting the registration 2026-05-13 21:29:04 +02:00
Andrew Morgan 566d67b76f Harden the security of our GitHub Actions (#5664) 2026-05-13 15:08:17 +01:00
Andrew Morgan 451761c39c Note that clippy is synced to the Dockerfile Rust version 2026-05-13 12:50:21 +02:00
Andrew Morgan c69b4e0cc2 Correct STEPS_BAKE_OUTPUTS_METADATA line 
Looks like this is an edge case in zizmor.
 2026-05-13 12:49:06 +02:00
Andrew Morgan ea9f324e75 Use --override to set default toolchain 
And remove now unnecessary rustup default calls.
 2026-05-13 12:45:49 +02:00
Andrew Morgan 49ad5c79e1 Use Rust 1.93.0 for clippy CI job 
Revert from stable (1.95.0), which introduced new lints. We'll tackle those in a separate PR.
 2026-05-13 10:58:26 +02:00
Andrew Morgan 9841b24a0c Revert 1.95.0 clippy lints 
Let's do these in a separate PR.
 2026-05-13 10:58:26 +02:00
Eric Eastwood 9db7cf0aac Document how to manually test login flows (#5642) 2026-05-12 15:52:53 -05:00
Eric Eastwood e91de1aeaf Update policy violation screen when running into the session/device soft_limit in interactive contexts (#5639) 
Interactive contexts like OAuth 2.0 authorization code grants, OAuth 2.0 device authorization grants, legacy `m.login.sso` compatibility login flow

We tell people to remove X number of devices and then try signing in again.

Part of https://github.com/element-hq/matrix-authentication-service/issues/4339 / https://github.com/element-hq/backend-internal/issues/199 tracking work to limit number of devices.
 2026-05-12 12:15:25 -05:00
Eric Eastwood 08c98ff6d2 Merge branch 'main' into madlittlemods/session-soft-limit-for-interactive-contexts 
Conflicts:
	translations/en.json
 2026-05-12 11:44:21 -05:00
Eric Eastwood dcb3ae2560 Fix client linking to none on policy violation screen (#5667) 
Fix client linking to `none` on policy violation screen. This happened when the there is no `client_uri` configured.

`config.yaml`
```yaml
clients:
  - client_id: 00000000000000000000SEC0ND
    client_name: "my-test-client"
    client_auth_method: none
```

Before:

```
<a target="_blank" href="none" class="cpd-link" data-kind="primary">my-test-client</a>
```

After (plain text):

```
my-test-client
```

---

Updated with the following rules:

 - Only link with `client.client_uri`
 - Use `{% set client_display_name = client.client_name or client.client_id %}` for text
 - Use `{% set client_display_uri = ((client.client_uri or "") | simplify_url) or "<no client_uri provided>" %}` where we want to display the URI as text
 2026-05-12 11:23:11 -05:00
Eric Eastwood 3e310a4fc1 Merge branch 'madlittlemods/doc-manual-testing-login-flows' of github.com:element-hq/matrix-authentication-service into madlittlemods/doc-manual-testing-login-flows 2026-05-12 11:10:22 -05:00
Eric Eastwood 184f946611 Link misc/device-code-grant.sh 2026-05-12 11:08:59 -05:00
Eric Eastwood d179584221 Link areweoidcyet.com 2026-05-12 11:05:23 -05:00
Eric Eastwood 2657db9e5d Merge branch 'main' into madlittlemods/doc-manual-testing-login-flows 2026-05-12 10:54:34 -05:00
Eric Eastwood 80ae3db491 Merge branch 'main' into madlittlemods/fix-client-uri-on-policy-violation-screen 
Conflicts:
	translations/en.json
 2026-05-07 20:08:06 -05:00
Eric Eastwood 94d73ef3c6 Automatic changes 2026-05-07 20:05:25 -05:00
Eric Eastwood 31e4f22e5a Remove redundant comments 
(we no longer deal with the `grant` at all to care about explaining)
 2026-05-07 19:57:24 -05:00
Eric Eastwood 4140e83be6 Simplify to only use client_uri 2026-05-07 19:55:29 -05:00
Eric Eastwood 94fd625dd4 Merge branch 'main' into madlittlemods/session-soft-limit-for-interactive-contexts 
Conflicts:
	translations/en.json
 2026-05-07 13:37:35 -05:00
Eric Eastwood 31f00df71b Add a bit more context for *what* bind address couldn't be parsed (#5637) 2026-05-07 10:32:03 -05:00
Eric Eastwood 3c88cd451a Use translation text for "Cancel" button in reauth template (#5666) 2026-05-07 10:21:32 -05:00
matrixbot 1f8d746157 Automatic merge back to main (#5669) 2026-05-07 15:29:46 +02:00
Quentin Gliech 2a58ca9cda build(deps-dev): bump postcss from 8.5.8 to 8.5.12 in /frontend (#5658) 2026-05-07 15:21:33 +02:00
Quentin Gliech 9b6e0b19d1 Fix typo in manual: policy.path -> policy.wasm_module (#5654) 2026-05-07 14:59:38 +02:00
github-actions[bot] 1d138bed7b 1.17.0-rc.0 v1.17.0-rc.0 2026-05-07 12:46:21 +00:00
matrixbot b4f95d8321 Translations updates for main (#5668) 2026-05-07 14:25:38 +02:00
github-actions[bot] e4075021ea Translations updates 2026-05-07 12:14:30 +00:00
Andrew Morgan 8bea3fde66 Run clippy *and* cargo fmt before pushing 2026-05-07 11:58:36 +01:00
Andrew Morgan b210dbb545 good lord all the lints 2026-05-07 11:13:04 +01:00