olivier
87ac7a1989
remove unused function
2025-07-21 10:19:57 +02:00
olivier
c7b57f7d4c
fix rust style
2025-07-21 09:52:24 +02:00
mcalinghee
3644d4c0bf
rename is_forced to is_forced_or_required
2025-07-21 09:52:24 +02:00
mcalinghee
3774850c94
use of UpstreamOAuthProviderLocalpartPreference
2025-07-21 09:52:24 +02:00
mcalinghee
98912f4ada
allow importing existing users when the localpart matches in upstream OAuth 2.0 logins
2025-07-21 09:52:24 +02:00
Quentin Gliech
8d6621f00e
Log out oauth & compat sessions when receiving a backchannel logout request
2025-07-04 16:27:10 +02:00
Quentin Gliech
e28ffccc3a
Backchannel logout behavior settings on upstream providers
2025-07-04 16:27:10 +02:00
Quentin Gliech
1c6c6ff8fa
Record the decoded ID token claims on upstream auth sessions
2025-07-04 16:27:09 +02:00
Quentin Gliech
c3707c13ae
Add license headers in most files that missed them
2025-06-12 11:01:07 +02:00
Quentin Gliech
3d96dc9d47
Update license headers to match the actual license
2025-06-12 10:32:16 +02:00
Quentin Gliech
97e83e1467
Define all the dependencies at the workspace level
2025-06-10 14:25:38 +02:00
Quentin Gliech
8df03bf185
Support for experimental plan management tab in UI ( #4549 )
2025-06-10 14:14:24 +02:00
Hugh Nimmo-Smith
d6dd647f79
Make plan_management_iframe_uri be a String not URL
2025-06-06 10:31:45 +01:00
Quentin Gliech
685f4761cd
Add config flag to require registration tokens for password registrations
2025-06-03 17:42:53 +02:00
Quentin Gliech
ccb971d3d3
Data model and repository for user registration tokens
2025-06-03 17:42:52 +02:00
Hugh Nimmo-Smith
5a71d49e06
Lint
2025-05-09 10:58:03 +01:00
Hugh Nimmo-Smith
25de9bcb15
Merge branch 'main' into hughns/plan-management
2025-05-09 10:33:39 +01:00
dependabot[bot]
bc96bae0b2
build(deps): bump crc from 3.2.1 to 3.3.0
...
Bumps [crc](https://github.com/mrhooray/crc-rs ) from 3.2.1 to 3.3.0.
- [Release notes](https://github.com/mrhooray/crc-rs/releases )
- [Commits](https://github.com/mrhooray/crc-rs/commits )
---
updated-dependencies:
- dependency-name: crc
dependency-version: 3.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-08 13:55:32 +00:00
Quentin Gliech
5d58d9df7c
Don't generate and send a nonce for non-OIDC-compliant auth requests
2025-05-07 15:34:27 +02:00
Doug
096ce6037d
Add a configuration for forwarding the login hint to the upstream provider.
2025-05-06 17:50:33 +01:00
Quentin Gliech
3b6581ab3d
storage: add a user-provided human name to OAuth 2.0 sessions
2025-04-25 16:55:29 +02:00
Quentin Gliech
b708c403e3
Save the locale detected when starting an authorization grant
2025-04-25 12:55:22 +02:00
Quentin Gliech
0cfea60fa0
Don't parse the user agent unless we need to
2025-04-24 13:13:26 +02:00
Quentin Gliech
691c283a1e
Compile the user-agent regexes once
2025-04-24 12:36:41 +02:00
Hugh Nimmo-Smith
457ade5a60
WIP support for experimental plan management tab in UI
2025-04-22 13:17:29 +01:00
Quentin Gliech
bd737342b9
Always ask for consent, never for reauth ( #4386 )
2025-04-14 15:51:48 +02:00
Quentin Gliech
cf732ac8f0
Always ask for consent, never for reauth
...
Now that we have deduplicated clients, we're in this weird situation
where authorization grants just… go through.
This is because 4 years ago, I designed it to support prompt=consent and
prompt=none, but that never ended up being used/mentioned in the MSCs.
We also had support for max_age, but that required reauthing, which
doesn't work well with upstream providers.
So this removes support for prompt=consent|none and max_age, and makes
sure we always go through the consent page.
Lots of code deleted, yay!
2025-04-10 19:57:45 +02:00
mcalinghee
f2a47f9a88
add login by email + feature flag
2025-04-10 17:57:58 +02:00
Quentin Gliech
2b81c8a42e
Admin API for adding and removing upstream oauth links ( #4255 )
2025-04-09 13:33:16 +02:00
Quentin Gliech
d310f48a7e
compat login: support using client-provided device ID ( #4342 )
2025-04-07 08:52:29 +02:00
Quentin Gliech
6e375ccfc1
Fix doc comment
2025-04-07 08:31:58 +02:00
Olivier 'reivilibre
1f2eccc645
compat login (sso): support using client-provided device_id
2025-04-04 16:25:01 +01:00
Quentin Gliech
5c13757e1d
Deduplicate client registrations by hashing the metadata
2025-03-25 15:00:23 +01:00
MTRNord
850a9ed81b
Link removal storage API
...
From #3245 with changes from review
2025-03-17 18:31:11 +02:00
Quentin Gliech
6a37fdfe30
Merge branch 'main' into quenting/dynamic-policy-data
2025-03-14 10:16:16 +01:00
Quentin Gliech
19f1091e56
Config option to allow account self-deactivation
2025-03-12 15:58:54 +01:00
Quentin Gliech
6519d6c9ea
Add a deactivated_at flag on users
2025-03-11 17:35:13 +01:00
Quentin Gliech
7c9bb73f67
Merge remote-tracking branch 'origin/main' into quenting/compat-device-id
2025-03-04 13:33:09 +01:00
Quentin Gliech
aa3af157a3
storage: store dynamic policy data in the database
2025-02-25 12:26:22 +01:00
Quentin Gliech
d1d95ee69a
Fix some old Synapse access tokens not being recognized
2025-02-24 11:12:02 +01:00
Quentin Gliech
3d2b67a0b2
Upgrade to Rust 1.85 and edition 2024
2025-02-21 16:15:02 +01:00
Quentin Gliech
9cdc3b9f37
Allow compat session devices to have spaces
2025-02-19 17:55:18 +01:00
Quentin Gliech
935400d87b
Experimental feature to timeout inactive sessions
2025-02-12 17:31:21 +01:00
Quentin Gliech
33fc45605f
Update most Rust dependencies & disable some unused features
2025-02-06 12:50:50 +01:00
Olivier 'reivilibre
1a6932214f
Introduce optional human_name column on compat_sessions
2025-02-05 11:36:51 +01:00
Quentin Gliech
463ba2ea50
Avoid unnecessary clones in the login_hint parser
2025-01-28 17:25:54 +01:00
Quentin Gliech
a5c9468f4e
Utility to extract the localpart from a MXID
2025-01-28 17:25:36 +01:00
reivilibre and Quentin Gliech
0c26dd859a
Support compatibility sessions that do not have devices ( #3801 )
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2025-01-27 14:50:31 +00:00
Quentin Gliech
6092efe949
Merge branch 'main' into quenting/optional-email
2025-01-20 11:31:48 +01:00
reivilibre
21e2c36e89
Recognise macaroons as access tokens from Synapse ( #3797 )
2025-01-17 09:50:13 +00:00
olivier