dandri/matrix-authentication-service
1
0
Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-09-27 07:09:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,463 Commits 78 Branches 109 Tags
6c311afd85fe16791913760da170dc8b9a8575a4
Commit Graph
112 Commits
Author SHA1 Message Date
Quentin Gliech cfa9a23d86 Merge branch 'main' into feat/allow_override_user 2025-07-21 17:03:35 +02:00
Quentin Gliech 832244675d Threaten to switch to using the modern API in a few releases. 2025-07-21 13:15:48 +02:00
mcalinghee 98912f4ada allow importing existing users when the localpart matches in upstream OAuth 2.0 logins 2025-07-21 09:52:24 +02:00
Quentin Gliech c649603830 Use the new dedicated Synapse API 2025-07-18 16:39:24 +02:00
Quentin Gliech 8d6621f00e Log out oauth & compat sessions when receiving a backchannel logout request 2025-07-04 16:27:10 +02:00
Quentin Gliech e28ffccc3a Backchannel logout behavior settings on upstream providers 2025-07-04 16:27:10 +02:00
Quentin Gliech 1546318084 Remove optional features from mas-iana & regenerate 
Also ignores 'TEMPORARY' items in the IANA registry
 2025-06-10 14:25:38 +02:00
Quentin Gliech 8df03bf185 Support for experimental plan management tab in UI (#4549) 2025-06-10 14:14:24 +02:00
Hugh Nimmo-Smith 037d90bb1a Update schemas 2025-06-06 10:45:23 +01:00
Quentin Gliech 50b41a6613 Add secrets.encryption_file config option (#4617) 2025-06-05 15:14:55 +02:00
Quentin Gliech ae71b75ce1 config: Refactor parsing of secrets section (#4602) 2025-06-05 15:13:00 +02:00
Kai A. Hiller 3ac2e983bb Skip encryption serialization if None 
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
 2025-06-04 11:53:43 +02:00
Quentin Gliech 685f4761cd Add config flag to require registration tokens for password registrations 2025-06-03 17:42:53 +02:00
Kai A. Hiller c8cbb7329e Add secrets.encryption_file config option 
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
 2025-06-02 18:39:19 +02:00
Kai A. Hiller ec693edb72 Refactor key options in secret config 
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
 2025-06-02 14:06:43 +02:00
Kai A. Hiller e92d16c35c Refactor password options in secret config 
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
 2025-06-02 14:06:43 +02:00
Kai A. Hiller b0fcf0bf78 Add KeyConfig doc comment 
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
 2025-06-02 14:06:43 +02:00
Quentin Gliech 40cb052d1f Allow applying unicode normalisation to passwords before hashing 2025-05-30 15:42:32 +02:00
Hugh Nimmo-Smith 25de9bcb15 Merge branch 'main' into hughns/plan-management 2025-05-09 10:33:39 +01:00
Quentin Gliech 632904a7ae Make the default scope on upstream providers config openid 2025-05-07 15:34:30 +02:00
Doug 0d1caae379 Update the login schema docs. 2025-05-07 10:21:40 +01:00
Doug 6d29ebb5e7 Generate the schema (which fixes a typo amongst other things 🤦‍♂️) 2025-05-06 18:03:53 +01:00
Doug 096ce6037d Add a configuration for forwarding the login hint to the upstream provider. 2025-05-06 17:50:33 +01:00
Quentin Gliech 9cfecaf5db Insert client_name when upserting statically registered clients (#4417) 2025-04-30 11:50:49 +02:00
Hugh Nimmo-Smith 457ade5a60 WIP support for experimental plan management tab in UI 2025-04-22 13:17:29 +01:00
Quentin Gliech aef5dca40d Move the synapse_idp_id field to the top of the provider section 
This means that when serializing those, it will be at a more obvious place.
 2025-04-18 18:25:46 +02:00
Quentin Gliech b58ad863c5 Make a few password-related options public in the config crate 
It also adds docs to a few of those options
 2025-04-18 18:24:35 +02:00
Adis Veletanlic 6579980924 Run ./misc/update.sh 2025-04-16 13:16:43 +02:00
Adis Veletanlic 754c0d8bab Format project and run misc/update.sh 2025-04-14 13:41:43 +02:00
Adis Veletanlic 0e50c44605 Add private_key_file option for apple sso and edit docs 2025-04-14 12:21:00 +02:00
mcalinghee f2a47f9a88 add login by email + feature flag 2025-04-10 17:57:58 +02:00
Quentin Gliech 12b316198e Expose more Sentry configuration (#4352) 2025-04-07 08:50:27 +02:00
hummingbard 65f4c4dc6c Added Discord to default upstream oauth2 providers, regenerated config schema 2025-04-06 23:21:12 +06:00
Quentin Gliech 5bcc1ec011 Allow setting the OTLP tracing sample rate 2025-04-05 23:19:50 +02:00
Quentin Gliech bb34e9a6b5 Allow setting the Sentry environment & sample rates 
Also record the version in the Sentry release field.
 2025-04-05 23:19:16 +02:00
Quentin Gliech 3543b4048f Change the default value of account_deactivation_allowed to true. 2025-03-13 12:04:57 +01:00
Quentin Gliech 19f1091e56 Config option to allow account self-deactivation 2025-03-12 15:58:54 +01:00
Quentin Gliech d0f1cf4971 Allow configuring the connection to the homeserver to be read-only. 2025-03-03 17:24:15 +01:00
Quentin Gliech 674c1a4ada Upgrade OpenTelemetry to 0.28 2025-02-24 10:44:08 +01:00
Quentin Gliech 935400d87b Experimental feature to timeout inactive sessions 2025-02-12 17:31:21 +01:00
reivilibreandQuentin Gliech e5b6e1e8c2 Add pre-migration checks to syn2mas (#3805) 
This matches or exceeds `advisor.mts` from the old tool.

Co-authored-by: Quentin Gliech <quenting@element.io>
 2025-01-27 18:01:46 +00:00
Quentin Gliech ef077d0e51 Rate-limit email authentications 2025-01-23 12:09:26 +01:00
Quentin Gliech 0513f198d8 Rip out the email verification codes 
This considers all user_emails as confirmed, and removes the verification code.
It will be replaced by a new email authentication code flow
 2025-01-14 15:46:45 +01:00
Quentin Gliech a97d2daa3d Make the issue optional on upstream OAuth 2.0 providers 2024-12-17 13:40:34 +01:00
Mathieu Velten 80903ed629 Add id_token_signed_response_alg and userinfo_signed_response_alg (#3664) 2024-12-17 11:54:16 +01:00
Quentin Gliech 2e3b8bdd86 Allow setting an explicit upstream account name (#3600) 2024-11-29 12:30:18 +01:00
Mathieu Velten 56edcb4e52 Add fetch_userinfo to upstream SSO provider (#3363) 2024-11-26 15:01:03 +00:00
Quentin Gliech 6efe8bf45a Allow setting the response_mode on upstream OAuth 2.0 providers 2024-11-22 08:48:00 +01:00
Quentin Gliech ab4f438464 Support Sign in with Apple 2024-11-22 08:48:00 +01:00
reivilibreandQuentin Gliech 5d4a4a6fb8 Add rate-limiting for account recovery and registration (#3093) 
* Add rate-limiting for account recovery and registration

* Rename login ratelimiter `per_address` to `per_ip` for consistency

Co-authored-by: Quentin Gliech <quenting@element.io>
 2024-08-07 17:57:36 +00:00