Commit Graph
2383 Commits
Author SHA1 Message Date
Quentin Gliech 95af799daa Make mas-cli manage issue-compatibility-token create the device on the homeserver 2025-08-04 11:21:57 +02:00
Quentin Gliech ea873577aa Fix many clippy warnings
This is because the tracing-attributes update made clippy look at those
again. I've removed the `too_many_lines` lint, as it's not really useful
and we ignore it most of the time anyway.
2025-07-30 14:49:38 +02:00
Quentin Gliech 46bb1189f5 Replace usage of deprecated SentryHttpLayer::with_transaction 2025-07-30 14:27:07 +02:00
Quentin Gliech 046f3a24b6 Remove unused Sentry options 2025-07-30 14:27:07 +02:00
Quentin Gliech f377c87411 Properly use rustls-platform-verifier with reqwest 2025-07-30 12:04:30 +02:00
Quentin Gliech 62b9874d6e Use the renamed functions from socket2 2025-07-30 11:24:04 +02:00
networkException ee47713649 fix: don't attempt to set TCP_NODELAY on accepted unix streams
This patch fixes accepting streams from unix sockets resulting
in operation not supported errors.
2025-07-27 02:41:39 +02:00
Quentin Gliech b40c6edaca Fix spec compliance of upstream OAuth 2.0 client auth methods (#4819) 2025-07-24 15:36:25 +02:00
Quentin Gliech 3a8d4dc9e5 Show a better error page in most human-facing pages (#4816) 2025-07-24 15:36:09 +02:00
Quentin Gliech 506f162f10 Don't check for client_id in tests 2025-07-24 11:31:54 +02:00
Quentin Gliech c61d38c5b7 Fix spec compliance of upstream OAuth 2.0 client auth methods
We were sending the `client_id` in all cases, but the spec says it
should only be sent for the `none` and `client_secret_post` methods.
2025-07-24 11:16:00 +02:00
Kai A. Hiller 33096c7c87 Fix typo in secrets config output 2025-07-24 10:21:55 +02:00
Quentin Gliech 0b583b6c6e Human-readable error page on the compat SSO login redirect 2025-07-24 10:01:00 +02:00
Quentin Gliech e3dd0470cf Make the compat_router also recover from errors in human-facing routes 2025-07-23 19:45:59 +02:00
Quentin Gliech 8f6c854827 Include the issuer URLs in the error message when they don't match 2025-07-23 19:36:54 +02:00
Quentin Gliech 60f7365dc2 Human-readable error page on the upstream callback page 2025-07-23 19:36:39 +02:00
Quentin Gliech 58c16a2ee4 Human-readable error page on the upstream authorization page 2025-07-23 19:36:17 +02:00
Quentin Gliech 89a85a2d37 Human-readable error page on the authorization endpoint 2025-07-23 19:35:51 +02:00
Quentin Gliech 9b99057958 Human-readable error page on the consent page 2025-07-23 19:35:28 +02:00
Quentin Gliech d06f7c27d2 Handle device syncs for many devices more quickly (#4815) 2025-07-23 17:40:28 +02:00
Quentin Gliech 44c24e362c Handle device syncs for many devices more quickly 2025-07-23 17:37:25 +02:00
Quentin Gliech 70aba2a086 Fix the user deactivation/reactivation jobs
Those got broken when we switched to using localparts in the
HomeserverConnection in #4801
2025-07-23 10:38:27 +02:00
Quentin Gliech 0629915006 Allow the homeserver to perform introspection using a shared secret (#4808) 2025-07-22 13:30:49 +02:00
Quentin Gliechandreivilibre 85be5e1472 Clarify comment
Co-authored-by: reivilibre <oliverw@element.io>
2025-07-22 13:24:03 +02:00
Quentin Gliech 74bd3fe941 Allow the homeserver to perform introspection using a shared secret 2025-07-22 11:27:56 +02:00
Quentin Gliech cfa9a23d86 Merge branch 'main' into feat/allow_override_user 2025-07-21 17:03:35 +02:00
Quentin Gliech 832244675d Threaten to switch to using the modern API in a few releases. 2025-07-21 13:15:48 +02:00
Quentin Gliech 4c5b7d05b4 Avoid a few unnecessary clones when talking to Synapse 2025-07-21 13:14:38 +02:00
Quentin Gliech fbcfa25cba Remove the spurious password field from the request body 2025-07-21 13:08:36 +02:00
olivier d30dd1e766 simplify unit tests 2025-07-21 11:32:54 +02:00
Quentin Gliech 5a32f00901 Rename create_device -> upsert_device 2025-07-21 10:54:40 +02:00
olivier 87ac7a1989 remove unused function 2025-07-21 10:19:57 +02:00
olivier 776da31c52 fix err return 2025-07-21 10:13:04 +02:00
Olivier DandQuentin Gliech 3e9d572e2f Update crates/handlers/src/upstream_oauth2/link.rs
Co-authored-by: Quentin Gliech <quenting@element.io>
2025-07-21 09:52:24 +02:00
Olivier DandQuentin Gliech 2866f7994d Update crates/handlers/src/upstream_oauth2/link.rs
Co-authored-by: Quentin Gliech <quenting@element.io>
2025-07-21 09:52:24 +02:00
olivier c7b57f7d4c fix rust style 2025-07-21 09:52:24 +02:00
olivier 0a0c062574 add semi column 2025-07-21 09:52:24 +02:00
Olivier DandQuentin Gliech fcfbc5176a fix code style
Co-authored-by: Quentin Gliech <quenting@element.io>
2025-07-21 09:52:24 +02:00
Olivier DandQuentin Gliech 23c97e5931 Update crates/handlers/src/upstream_oauth2/link.rs
Co-authored-by: Quentin Gliech <quenting@element.io>
2025-07-21 09:52:24 +02:00
Olivier DandQuentin Gliech cdc75ffbf3 use match
Co-authored-by: Quentin Gliech <quenting@element.io>
2025-07-21 09:52:24 +02:00
mcalinghee 3644d4c0bf rename is_forced to is_forced_or_required 2025-07-21 09:52:24 +02:00
mcalinghee 3774850c94 use of UpstreamOAuthProviderLocalpartPreference 2025-07-21 09:52:24 +02:00
mcalinghee 98912f4ada allow importing existing users when the localpart matches in upstream OAuth 2.0 logins 2025-07-21 09:52:24 +02:00
Quentin Gliech c649603830 Use the new dedicated Synapse API 2025-07-18 16:39:24 +02:00
Quentin Gliech 8af1b7a3fa Take the localpart instead of the MXID in HomeserverConnection methods 2025-07-18 16:39:24 +02:00
Quentin Gliech 23797eef2c Merge branch 'main' into quenting/rust-1.87 2025-07-17 09:22:28 +02:00
Quentin Gliech b8480b1c97 Support M_USER_LOCKED error for compat sessions (#4789) 2025-07-17 09:17:14 +02:00
Quentin Gliech b83c747f37 Allow skipping GDPR-erasure when deactivating a user through the admin API (#4744) 2025-07-17 09:15:25 +02:00
Quentin Gliech 176c05938f New admin API endpoint to reactivate users & align what lock/unlock/deactivate does in the admin API (#4768) 2025-07-17 09:11:32 +02:00
Quentin Gliech 52c3a36bac Make the admin API provision users synchronously (#4788) 2025-07-17 09:07:41 +02:00