Commit Graph

164 Commits

Author SHA1 Message Date
reivilibre 93ddaeefc3 Add documentation against using database transaction poolers (#3617) 2024-12-05 11:28:22 +00:00
Quentin Gliech 2e3b8bdd86 Allow setting an explicit upstream account name (#3600) 2024-11-29 12:30:18 +01:00
Mathieu Velten 56edcb4e52 Add fetch_userinfo to upstream SSO provider (#3363) 2024-11-26 15:01:03 +00:00
Phan Trung Thanh a0c2ce67ba Update configuration.md to include a missing parameter 2024-11-26 13:17:52 +01:00
Quentin Gliech 93bbfabf8e Document how to set up Sign-in with Apple 2024-11-22 08:48:00 +01:00
Quentin Gliech 6efe8bf45a Allow setting the response_mode on upstream OAuth 2.0 providers 2024-11-22 08:48:00 +01:00
Quentin Gliech ab4f438464 Support Sign in with Apple 2024-11-22 08:48:00 +01:00
hatch01 ba6d69b4a4 fix sso exemple config for authelia 2024-11-18 08:47:38 +01:00
Tonkku 1a7f34b0ff Add note about password schemes to migration docs 2024-11-18 08:46:51 +01:00
Thilo-Alexander Ginkel c13c8860c5 Add SSO sample configuration for Authelia
Signed-off-by: Thilo-Alexander Ginkel <tg@tgbyte.de>
2024-10-25 09:00:45 +02:00
morguldir 093809cad8 Fix link to setup docs for the mdbook
https://rust-lang.github.io/mdBook/format/markdown.html?highlight=readm#links

"Links to README.md will be converted to index.html. This is done since some services like GitHub render README files automatically, but web servers typically expect the root file to be called index.html."
2024-10-01 14:39:52 +02:00
Quentin Gliech 4ccce4de46 Remove the contacts requirement from the client registration policy 2024-09-20 20:39:04 +02:00
Quentin Gliech 847ccf8bb4 Move the remaining mentions of matrix-org to element-hq 2024-09-10 14:28:55 +02:00
Quentin Gliech 76367ff4ef Move the docker image to ghcr.io/element-hq/matrix-authentication-service 2024-09-10 14:28:55 +02:00
Quentin Gliech 36eb0fb77e Rename @matrix-org/syn2mas to @vector-im/syn2mas 2024-09-10 14:28:55 +02:00
Quentin Gliech 3a05f24b45 Fix the email policy documentation indentation 2024-09-03 17:47:43 +02:00
Marcel b5ed252573 Apply suggestions on wording 2024-09-03 17:33:10 +02:00
Marcel 7fe70aac80 Document policy settings for changing the policy wasm file 2024-09-03 17:33:10 +02:00
Marcel 6d30bc530f Document the email policy in the reference 2024-08-30 13:57:31 +02:00
Quentin Gliech 62e01883b6 Small documentation fixes
- Removes mentions of the `mas-cli templates save` command
 - Removes the old `experimental` flags
 - Removes the old `policy.data.passwords` configs
 - Document the `policy.data.client_registration` flags
 - Remove references to the pre-built macOS binaries
 - Explains how to get syn2mas
 - State that you need to prepare the database before importing data
 - Clean up the reverse proxy documentation
 - Clarify that you don't need to provede templates/policy/assets
   manually when running the docker image
2024-08-19 13:53:43 +02:00
Quentin Gliech 29d6383c5d admin: rename the can_request_admin field to admin 2024-08-07 20:13:43 +02:00
Quentin Gliech 6189abe7b4 admin: set can_request_admin API 2024-08-07 20:13:43 +02:00
reivilibre 5d4a4a6fb8 Add rate-limiting for account recovery and registration (#3093)
* Add rate-limiting for account recovery and registration

* Rename login ratelimiter `per_address` to `per_ip` for consistency

Co-authored-by: Quentin Gliech <quenting@element.io>
2024-08-07 17:57:36 +00:00
reivilibre 244f8f5e5e Add configuration for rate-limiting of logins, replacing hardcoded limits (#3090) 2024-08-07 18:36:02 +01:00
Quentin Gliech 1bdad262cd Disallow OAuth 2.0 use of the GraphQL API by default 2024-08-07 18:09:51 +02:00
Quentin Gliech eb4072f3c3 Document the admin API (#3038)
Co-authored-by: Hugh Nimmo-Smith <hughns@matrix.org>
2024-08-07 17:41:46 +02:00
Quentin Gliech cf9f201337 admin: get OAuth 2.0 session API 2024-08-07 17:41:18 +02:00
Quentin Gliech 4f52840bf3 admin: list OAuth 2.0 sessions API 2024-08-07 17:41:18 +02:00
Quentin Gliech 83e4aa476f admin: setup base for oauth2 sessions endpoints 2024-08-07 17:41:18 +02:00
Quentin Gliech c61a52a3a0 admin: better error when password auth is disabled 2024-08-07 15:10:19 +02:00
Quentin Gliech 475a43df71 admin: check password complexity in password set API 2024-08-07 15:10:19 +02:00
Quentin Gliech 8b5d576018 admin: set password API 2024-08-07 15:10:19 +02:00
Quentin Gliech 9ea77a9562 admin: lock user API 2024-08-06 13:43:13 +02:00
Quentin Gliech 2307c05c69 admin: user unlock API 2024-08-06 13:31:28 +02:00
Quentin Gliech 117e124ddf admin: user deactivation API 2024-08-06 11:48:19 +02:00
Quentin Gliech 65f1c45095 admin: add operation ID on user add operation 2024-08-01 16:23:08 +02:00
Quentin Gliech 94004ce18c Rename the payload struct to appease clippy 2024-08-01 16:23:08 +02:00
Quentin Gliech 221f227baa admin: add API to create users 2024-08-01 16:23:08 +02:00
Quentin Gliech d03dd41345 admin: add operation IDs on user operations & other improvements
This also documents better the user list operation parameters
2024-08-01 15:17:14 +02:00
Quentin Gliech 78e988b7cc Tweak the schema generation and use a common definition for ULIDs 2024-08-01 15:17:14 +02:00
Quentin Gliech cdecac735e Tweak the schema to use summary instead of description and add tags 2024-08-01 15:17:14 +02:00
Quentin Gliech 3f947025e2 Host a Swagger UI both in the static documentation and by the server 2024-08-01 15:17:14 +02:00
Quentin Gliech b261ac0a17 Document the new account-management options 2024-08-01 14:50:21 +02:00
Quentin Gliech 8b3451d66f Move the account-related options out of experimental 2024-08-01 14:50:21 +02:00
Quentin Gliech f5b4caf520 admin: add APIs to list and get users 2024-07-26 11:36:55 +02:00
Quentin Gliech 43ff6dc9d3 doc: auto-generate the API schema in the documentation 2024-07-26 11:36:55 +02:00
Quentin Gliech 76755610cb config: allow serving the admin API routes 2024-07-26 11:36:55 +02:00
Josh Simmons d6a54124c7 update contributing docs with DCO 2024-07-25 10:01:53 +02:00
reivilibre fbc360d1a9 Backend work to support minimum password complexity (#2965)
* config: Add minimum password complexity option

* PasswordManager: add function for checking if complexity is sufficient

* Enforce password complexity on registration, change and recovery

* cli: Use exit code 1 for weak passwords

This seems preferable to exit code 0, but ideally we should choose one
and document it.

* Expose minimum password complexity score over GraphQL
2024-07-11 10:17:39 +01:00
Christian Tramnitz 3ab733bf3a Fix RFC1918 network in default proxy configuration (#2908) 2024-07-05 08:22:39 +00:00