Commit Graph

47 Commits

Author SHA1 Message Date
Quentin Gliech c156a3891e Actually send emails for recovery 2024-06-28 15:59:21 +02:00
Quentin Gliech 319c43abc5 Start recovery view 2024-06-28 15:59:21 +02:00
reivilibre 7c67630c95 Remove the old password change page (#2874) 2024-06-27 13:41:24 +01:00
Quentin Gliech 4d9d8a8ba3 Actually verify the CAPTCHA during registration 2024-05-15 09:38:10 +02:00
Quentin Gliech 58fd6ab4c1 Allow disabling registrations (#2553) 2024-04-03 09:27:14 +02:00
Quentin Gliech aefcc3cae2 Move the cross signing reset UI in its own page 2024-02-17 09:48:53 +01:00
Quentin Gliech b498e5971d Move the /link/:device endpoint to /device/:device
It prevents browsers to try to autocomplete /link to /link/:device
2024-02-02 18:01:51 +01:00
Quentin Gliech 67ab42155c Implement the device consent logic 2024-02-02 18:01:51 +01:00
Quentin Gliech 50654d2e40 Implement the device code authorisation request 2024-02-02 18:01:51 +01:00
Quentin Gliech 4301fd9378 Setup the device link form page 2024-02-02 18:01:51 +01:00
Quentin Gliech 83bf739538 Implement account management discovery as per MSC2965 2023-12-05 17:40:36 +01:00
Quentin Gliech a0f5f3c642 Enable clippy lints on a workspace level
This enables a lot more lints than before in some crates, so this fixed a lot of warnings as well.
2023-12-05 17:20:42 +01:00
Quentin Gliech df3ca5ae66 Upgrade clippy lints to 1.74.0 & fix warnings 2023-12-05 17:20:42 +01:00
Quentin Gliech 8984cc703b Add instance privacy policy, TOS and imprint, and loads of design cleanups 2023-10-30 15:55:15 +01:00
Quentin Gliech 9b5c8fb44b Allow running the authentication service on a different base path 2023-10-06 14:07:55 +02:00
Quentin Gliech 36f28f82c2 router: fix a test in the url builder because a field changed name 2023-10-05 19:29:23 +02:00
Quentin Gliech b2cd8d83f7 templates: translate a lot more stuff 2023-10-05 19:29:23 +02:00
Quentin Gliech 3303e74123 Add a way to discover the GraphQL endpoint in the .well-known/openid-configuration
This adds a `org.matrix.matrix-authentication-service.graphql_endpoint` key to it
2023-10-05 16:43:13 +02:00
Kerry 17f8dc4e00 Implement MSC2965 action parameter (#1673)
* redirect session_end action to session detail

* fix react key warning in oauth session detail

* move Route type to /routing

* test getRouteActionRedirection

* comment

* frontend: Split the routing-related stuff in multiple files under routing/

* frontend: Cover all the redirections defined by MSC2965

* frontend: fix test

* Make the backend keep query parameters through login to the /account/ interface

* Fix frontend tests & clippy lints

---------

Co-authored-by: Quentin Gliech <quenting@element.io>
2023-09-01 09:42:50 +00:00
Quentin Gliech dc711f8ecb Allow a trailing slash on the compat SSO route 2023-08-08 19:23:07 +02:00
Quentin Gliech 76653f9638 Better frontend assets handling and move the react app to /account/ (#1324)
This makes the Vite assets handling better, namely:

 - make it possible to include any vite assets in the templates
 - include the right `<link rel="preload">` tags for assets
 - include Subresource Integrity hashes
 - pre-compress assets and remove on-the-fly compression by the Rust server
 - build the CSS used by templates through Vite

It also moves the React app from /app/ to /account/, and remove some of the old SSR account screens.
2023-07-06 15:30:26 +02:00
Quentin Gliech 125a6bdf11 Allow setting a different issuer from the public base URL 2023-06-27 12:53:15 +02:00
Quentin Gliech 543b4b229f Support for token revocation 2023-02-21 12:06:30 +01:00
Quentin Gliech ca112d45e1 ci: Update clippy to 1.66 and fix new warnings 2022-12-16 18:16:18 +01:00
Quentin Gliech 1a9fe57d84 router: fix tests 2022-12-08 15:29:15 +01:00
Quentin Gliech 0ea9089f7f template: more cleanups 2022-12-08 15:29:15 +01:00
Quentin Gliech 23fd833d45 Save the post auth action during upstream OAuth login 2022-12-05 19:39:51 +01:00
Quentin Gliech 07636dd9e7 Tidy up upstream linking templates 2022-12-05 19:39:51 +01:00
Quentin Gliech 22a337cd45 WIP: handle account linking 2022-12-05 19:39:51 +01:00
Quentin Gliech bedcf44741 WIP: upstream OIDC provider support 2022-12-05 19:39:51 +01:00
Quentin Gliech 9c0ece7512 Do not embed the templates and static files in the binary 2022-11-18 22:37:55 +01:00
Quentin Gliech e2142f9cd4 Database refactoring 2022-11-02 18:59:00 +01:00
Quentin Gliech 93ce5c797c Mount the static assets on /assets 2022-10-17 11:39:45 +02:00
Quentin Gliech f5715018a6 Remove double must_use 2022-09-13 11:38:49 +02:00
Quentin Gliech c1ed726dc8 Enable the clippy::str_to_string lint 2022-08-08 10:06:20 +02:00
Quentin Gliech 44b2708f7a Bump serde_with 2022-08-01 19:38:22 +02:00
Hugh Nimmo-Smith 7207616657 Use unstable prefix for SSO redirect action param 2022-06-23 17:08:28 +02:00
Hugh Nimmo-Smith 5632f6ba99 feat: support for MSC3824 action param on SSO redirect (#248)
Co-authored-by: Quentin Gliech <quenting@element.io>
2022-06-14 11:34:56 +00:00
Quentin Gliech e0c4b39482 Add an email field in the registration form 2022-06-02 16:18:55 +02:00
Quentin Gliech 125afd61c0 Make email verification mandatory 2022-06-02 16:18:55 +02:00
Quentin Gliech 89597dbf81 Switch email verification to a code-based flow 2022-06-02 16:18:55 +02:00
Quentin Gliech 033d60eb73 Legacy login via m.login.sso 2022-05-23 10:42:25 +02:00
Quentin Gliech 0fcecfa7fb Handle legacy /refresh 2022-05-19 10:17:49 +02:00
Quentin Gliech 660b2d5232 Handle legacy /logout 2022-05-19 10:17:49 +02:00
Quentin Gliech 1ebdd0b731 WIP: Handle /login 2022-05-19 10:17:49 +02:00
Quentin Gliech bf1d96fc23 Add password change discovery
See https://web.dev/change-password-url/
2022-05-12 15:06:37 +02:00
Quentin Gliech f4353b660e Have a unified URL builder/router 2022-05-10 09:52:48 +02:00