Quentin Gliech
1546318084
Remove optional features from mas-iana & regenerate
...
Also ignores 'TEMPORARY' items in the IANA registry
2025-06-10 14:25:38 +02:00
Quentin Gliech
8df03bf185
Support for experimental plan management tab in UI ( #4549 )
2025-06-10 14:14:24 +02:00
Hugh Nimmo-Smith
037d90bb1a
Update schemas
2025-06-06 10:45:23 +01:00
Quentin Gliech
50b41a6613
Add secrets.encryption_file config option ( #4617 )
2025-06-05 15:14:55 +02:00
Quentin Gliech
ae71b75ce1
config: Refactor parsing of secrets section ( #4602 )
2025-06-05 15:13:00 +02:00
Kai A. Hiller
3ac2e983bb
Skip encryption serialization if None
...
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de >
2025-06-04 11:53:43 +02:00
Quentin Gliech
685f4761cd
Add config flag to require registration tokens for password registrations
2025-06-03 17:42:53 +02:00
Kai A. Hiller
c8cbb7329e
Add secrets.encryption_file config option
...
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de >
2025-06-02 18:39:19 +02:00
Kai A. Hiller
ec693edb72
Refactor key options in secret config
...
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de >
2025-06-02 14:06:43 +02:00
Kai A. Hiller
e92d16c35c
Refactor password options in secret config
...
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de >
2025-06-02 14:06:43 +02:00
Kai A. Hiller
b0fcf0bf78
Add KeyConfig doc comment
...
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de >
2025-06-02 14:06:43 +02:00
Quentin Gliech
40cb052d1f
Allow applying unicode normalisation to passwords before hashing
2025-05-30 15:42:32 +02:00
Hugh Nimmo-Smith
25de9bcb15
Merge branch 'main' into hughns/plan-management
2025-05-09 10:33:39 +01:00
Quentin Gliech
632904a7ae
Make the default scope on upstream providers config openid
2025-05-07 15:34:30 +02:00
Doug
0d1caae379
Update the login schema docs.
2025-05-07 10:21:40 +01:00
Doug
6d29ebb5e7
Generate the schema (which fixes a typo amongst other things 🤦♂️ )
2025-05-06 18:03:53 +01:00
Doug
096ce6037d
Add a configuration for forwarding the login hint to the upstream provider.
2025-05-06 17:50:33 +01:00
Quentin Gliech
9cfecaf5db
Insert client_name when upserting statically registered clients ( #4417 )
2025-04-30 11:50:49 +02:00
Hugh Nimmo-Smith
457ade5a60
WIP support for experimental plan management tab in UI
2025-04-22 13:17:29 +01:00
Quentin Gliech
aef5dca40d
Move the synapse_idp_id field to the top of the provider section
...
This means that when serializing those, it will be at a more obvious place.
2025-04-18 18:25:46 +02:00
Quentin Gliech
b58ad863c5
Make a few password-related options public in the config crate
...
It also adds docs to a few of those options
2025-04-18 18:24:35 +02:00
Adis Veletanlic
6579980924
Run ./misc/update.sh
2025-04-16 13:16:43 +02:00
Adis Veletanlic
754c0d8bab
Format project and run misc/update.sh
2025-04-14 13:41:43 +02:00
Adis Veletanlic
0e50c44605
Add private_key_file option for apple sso and edit docs
2025-04-14 12:21:00 +02:00
mcalinghee
f2a47f9a88
add login by email + feature flag
2025-04-10 17:57:58 +02:00
Quentin Gliech
12b316198e
Expose more Sentry configuration ( #4352 )
2025-04-07 08:50:27 +02:00
hummingbard
65f4c4dc6c
Added Discord to default upstream oauth2 providers, regenerated config schema
2025-04-06 23:21:12 +06:00
Quentin Gliech
5bcc1ec011
Allow setting the OTLP tracing sample rate
2025-04-05 23:19:50 +02:00
Quentin Gliech
bb34e9a6b5
Allow setting the Sentry environment & sample rates
...
Also record the version in the Sentry release field.
2025-04-05 23:19:16 +02:00
Quentin Gliech
3543b4048f
Change the default value of account_deactivation_allowed to true.
2025-03-13 12:04:57 +01:00
Quentin Gliech
19f1091e56
Config option to allow account self-deactivation
2025-03-12 15:58:54 +01:00
Quentin Gliech
d0f1cf4971
Allow configuring the connection to the homeserver to be read-only.
2025-03-03 17:24:15 +01:00
Quentin Gliech
674c1a4ada
Upgrade OpenTelemetry to 0.28
2025-02-24 10:44:08 +01:00
Quentin Gliech
935400d87b
Experimental feature to timeout inactive sessions
2025-02-12 17:31:21 +01:00
reivilibre and Quentin Gliech
e5b6e1e8c2
Add pre-migration checks to syn2mas ( #3805 )
...
This matches or exceeds `advisor.mts` from the old tool.
Co-authored-by: Quentin Gliech <quenting@element.io >
2025-01-27 18:01:46 +00:00
Quentin Gliech
ef077d0e51
Rate-limit email authentications
2025-01-23 12:09:26 +01:00
Quentin Gliech
0513f198d8
Rip out the email verification codes
...
This considers all user_emails as confirmed, and removes the verification code.
It will be replaced by a new email authentication code flow
2025-01-14 15:46:45 +01:00
Quentin Gliech
a97d2daa3d
Make the issue optional on upstream OAuth 2.0 providers
2024-12-17 13:40:34 +01:00
Mathieu Velten
80903ed629
Add id_token_signed_response_alg and userinfo_signed_response_alg ( #3664 )
2024-12-17 11:54:16 +01:00
Quentin Gliech
2e3b8bdd86
Allow setting an explicit upstream account name ( #3600 )
2024-11-29 12:30:18 +01:00
Mathieu Velten
56edcb4e52
Add fetch_userinfo to upstream SSO provider ( #3363 )
2024-11-26 15:01:03 +00:00
Quentin Gliech
6efe8bf45a
Allow setting the response_mode on upstream OAuth 2.0 providers
2024-11-22 08:48:00 +01:00
Quentin Gliech
ab4f438464
Support Sign in with Apple
2024-11-22 08:48:00 +01:00
reivilibre and Quentin Gliech
5d4a4a6fb8
Add rate-limiting for account recovery and registration ( #3093 )
...
* Add rate-limiting for account recovery and registration
* Rename login ratelimiter `per_address` to `per_ip` for consistency
Co-authored-by: Quentin Gliech <quenting@element.io >
2024-08-07 17:57:36 +00:00
reivilibre
244f8f5e5e
Add configuration for rate-limiting of logins, replacing hardcoded limits ( #3090 )
2024-08-07 18:36:02 +01:00
Quentin Gliech
1bdad262cd
Disallow OAuth 2.0 use of the GraphQL API by default
2024-08-07 18:09:51 +02:00
Quentin Gliech
8b3451d66f
Move the account-related options out of experimental
2024-08-01 14:50:21 +02:00
Quentin Gliech
76755610cb
config: allow serving the admin API routes
2024-07-26 11:36:55 +02:00
reivilibre
fbc360d1a9
Backend work to support minimum password complexity ( #2965 )
...
* config: Add minimum password complexity option
* PasswordManager: add function for checking if complexity is sufficient
* Enforce password complexity on registration, change and recovery
* cli: Use exit code 1 for weak passwords
This seems preferable to exit code 0, but ideally we should choose one
and document it.
* Expose minimum password complexity score over GraphQL
2024-07-11 10:17:39 +01:00
Christian Tramnitz
3ab733bf3a
Fix RFC1918 network in default proxy configuration ( #2908 )
2024-07-05 08:22:39 +00:00
Quentin Gliech