dandri/matrix-authentication-service
1
0 Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-10-22 17:32:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,713 Commits 88 Branches 114 Tags
a5800983b8a1fc2b4e7bb537fb2cb861fb806312
Commit Graph
7713 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin Gliech a5800983b8 build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 (#5888) 2026-08-05 13:37:38 +02:00
Quentin Gliech ee0db1548a build(deps): bump the i18next group with 3 updates (#5899) 2026-08-05 13:37:14 +02:00
Quentin Gliech 396f4419ca build(deps): bump opentelemetry-semantic-conventions from 0.32.0 to 0.32.1 in the opentelemetry group (#5892) 2026-08-05 13:31:09 +02:00
Quentin Gliech 5258872dad build(deps-dev): bump the vite group across 1 directory with 2 updates (#5906) 2026-08-05 13:30:32 +02:00
Quentin Gliech b58efe2a73 build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#5889) 2026-08-05 13:28:31 +02:00
Quentin Gliech 0a6564d4cd build(deps): bump socket2 from 0.6.4 to 0.6.5 (#5895) 2026-08-05 13:28:08 +02:00
Quentin Gliech 9dcd8ad254 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5890) 2026-08-05 13:25:16 +02:00
Quentin Gliech 5ede8ad3ab build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 (#5887) 2026-08-05 13:24:00 +02:00
dependabot[bot] c9e44c8bb8 build(deps): bump the i18next group across 1 directory with 3 updates 
Bumps the i18next group with 3 updates in the / directory: [i18next](https://github.com/i18next/i18next), [react-i18next](https://github.com/i18next/react-i18next) and [i18next-cli](https://github.com/i18next/i18next-cli).


Updates `i18next` from 26.3.4 to 26.3.6
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next/compare/v26.3.4...v26.3.6)

Updates `react-i18next` from 17.0.8 to 17.0.10
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v17.0.8...v17.0.10)

Updates `i18next-cli` from 1.65.0 to 1.66.2
- [Changelog](https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-cli/compare/v1.65.0...v1.66.2)

---
updated-dependencies:
- dependency-name: i18next
  dependency-version: 26.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: i18next
- dependency-name: i18next-cli
  dependency-version: 1.66.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: i18next
- dependency-name: react-i18next
  dependency-version: 17.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: i18next
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:12:26 +00:00
dependabot[bot] 3c1c0705b8 build(deps-dev): bump the vite group across 1 directory with 2 updates 
Bumps the vite group with 2 updates in the / directory: [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@vitejs/plugin-react` from 6.0.3 to 6.0.4
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.4/packages/plugin-react)

Updates `vite` from 8.1.3 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:11:26 +00:00
dependabot[bot] 0949eb68f0 build(deps): bump opentelemetry-semantic-conventions 
Bumps the opentelemetry group with 1 update in the / directory: [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-rust).


Updates `opentelemetry-semantic-conventions` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-rust/compare/opentelemetry-semantic-conventions-0.32.0...opentelemetry-semantic-conventions-0.32.1)

---
updated-dependencies:
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opentelemetry
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:09:55 +00:00
dependabot[bot] a288db8d80 build(deps): bump socket2 from 0.6.4 to 0.6.5 
Bumps [socket2](https://github.com/rust-lang/socket2) from 0.6.4 to 0.6.5.
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/socket2/commits/v0.6.5)

---
updated-dependencies:
- dependency-name: socket2
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:09:45 +00:00
Quentin Gliech 7084ae1752 build(deps): bump clap from 4.5.50 to 4.5.60 (#5896) 2026-08-05 13:08:25 +02:00
dependabot[bot] 54d8cfcc45 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.4.0...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:08:05 +00:00
dependabot[bot] e47779f8ef build(deps): bump docker/login-action from 4.2.0 to 4.4.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:07:36 +00:00
dependabot[bot] cbf91149d5 build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...3d0d9888cb7fd7b750713d6e236d1fcb99157228)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:07:17 +00:00
dependabot[bot] 6e77139c37 build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:07:07 +00:00
Quentin Gliech 2a2741ee00 Read javascript entrypoints configuration from data attributes (#5886) 2026-08-05 13:05:37 +02:00
dependabot[bot] 313ba9f72f build(deps): bump clap from 4.5.50 to 4.5.60 
Bumps [clap](https://github.com/clap-rs/clap) from 4.5.50 to 4.5.60.
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.5.50...clap_complete-v4.5.60)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-04 19:07:05 +00:00
matrixbot 6193fc3569 Automatic merge back to main (#5905) 2026-08-04 21:04:07 +02:00
github-actions[bot] f28451c4e5 1.22.0 v1.22.0 2026-08-04 18:47:51 +00:00
matrixbot 0ed1f96c27 Translations updates for v1.22 (#5904) 2026-08-04 20:24:11 +02:00
github-actions[bot] 24b2bc3c57 Translations updates 2026-08-04 18:03:18 +00:00
Quentin Gliech d174b4a71c Ignore RUSTSEC-2026-0222 as we are not affected by it (#5903) 2026-08-04 18:18:09 +02:00
Quentin Gliech 9c8a56903c Ignore RUSTSEC-2026-0222 as we are not affected by it 2026-08-04 17:49:08 +02:00
Quentin Gliech a1bfbb6cdd Read the entrypoint configuration from data attributes 
Instead of injecting configuration through inline <script> tags setting
window globals, server-rendered templates now carry the configuration
as data attributes on the entrypoint mount node, validated client-side
with a valibot schema over element.dataset. This removes all inline
scripts from the templates, which is friendlier to CSP, and gives the
frontend runtime-validated, typed configuration.

The DOM read and the wiring now happen in the entrypoints themselves:
main.tsx parses the mount node dataset, owns the QueryClient, and
injects the basepath and GraphQL endpoint into the router and request
layer instead of those being module-scope singletons.
 2026-07-30 20:51:01 +02:00
matrixbot 19f3d146a5 Automatic merge back to main (#5884) 2026-07-30 19:01:57 +02:00
github-actions[bot] 735fd4254b 1.22.0-rc.0 v1.22.0-rc.0 2026-07-30 16:44:29 +00:00
matrixbot c40740c799 Translations updates for main (#5883) 2026-07-30 18:42:12 +02:00
github-actions[bot] 813f20437d Translations updates 2026-07-30 16:26:40 +00:00
Quentin Gliech 7abe147ba0 Expose a logged_out variable to upstream authorization parameter templates (#5859) 2026-07-29 17:57:55 +02:00
Quentin GliechandAndrew Morgan cae99ccef3 Adapt punctionation in docs 
Co-Authored-By: Andrew Morgan <andrewm@element.io>
 2026-07-29 14:52:02 +02:00
Quentin Gliech 07857f591f Test that the session is not considered as 'just logged out' after some time 
And fix the 'just logged out' logic
 2026-07-29 14:52:01 +02:00
Quentin Gliech 2f733e90b3 Keep the auth action context when changing accounts (#5843) 2026-07-29 14:02:32 +02:00
Quentin Gliech b1f9a4f7df Speed up the ESS test CI job (#5877) 2026-07-29 11:19:31 +02:00
Quentin Gliech 7aaaaa0ee1 Speed up builds by using thin LTO and default codegen-units for release builds (#5879) 2026-07-28 18:50:17 +02:00
Quentin Gliech f86cf820e3 Accept [ and ~ in OAuth 2.0 scope tokens (#5881) 2026-07-28 18:35:00 +02:00
Quentin GliechandEric Eastwood 2805a6784f Expand the comment on why we're fine with thin LTO 
Co-Authored-By: Eric Eastwood <erice@element.io>
 2026-07-28 18:26:59 +02:00
Quentin Gliech b458faede7 Clean up the tests for allowed characters in scope 2026-07-28 18:08:14 +02:00
Quentin Gliech 7a2ea45678 Accept [ and ~ in OAuth 2.0 scope tokens 
The `nqchar` predicate used exclusive ranges where RFC 6749's NQCHAR
ranges (%x23-5B / %x5D-7E) are inclusive on both ends, so scopes
containing `[` or `~` were rejected with "Invalid scope format". In
particular this broke `urn:matrix:client:device:` scopes for device IDs
containing `~`, which the Matrix spec explicitly allows.

Fixes #5878
 2026-07-28 17:32:44 +02:00
Quentin Gliech 9d521acd02 Replace Unix socket on startup & allow setting permissions (#5858) 2026-07-28 13:48:39 +02:00
Quentin Gliech 40812c0da0 Admin API: allow searching in upstream OAuth links on 'human account name' (#5869) 2026-07-28 13:32:21 +02:00
Quentin Gliech de9257766e Run the buildx builder on the host network so it can reach the local registry 2026-07-28 13:30:41 +02:00
Quentin Gliech 2043d1d6c1 Switch the release profile to thin LTO and default codegen-units 
Experiment to measure the build time and binary size difference against
fat LTO with codegen-units=1, which spends ~10 serial minutes on the
final LTO+codegen pass of mas-cli in CI.
 2026-07-28 13:30:41 +02:00
Quentin Gliech a00c0ce809 Start the ESS CI job right away and overlap its setup with the image build 
Drop the needs gate on the ESS job so it starts as soon as the workflow
does instead of waiting on compile-test-artifacts
 2026-07-28 13:30:41 +02:00
Quentin Gliech 2c062b0a9c Use the Docker build cache in the ESS test suite 
Import the Docker build cache that the Build workflow pushes to ghcr.io on
main, which caches the toolchain, frontend and policy layers
 2026-07-28 13:30:41 +02:00
Quentin GliechandErik Johnston fc94b550db Use Utf8Path::with_added_extension for constructing the temporary socket path 
Co-Authored-By: Erik Johnston <erikj@element.io>
 2026-07-28 13:21:34 +02:00
Quentin Gliech 406d678a6f Add a filter[human-account-name] param to the upstream OAuth links admin API 
Fuzzy (case-insensitive substring) search on the link's human account
name.
 2026-07-27 16:09:01 +02:00
Quentin Gliech 85c902e000 Add a trigram index on upstream_oauth_links.human_account_name 
Backs the ILIKE '%search%' fuzzy filter on the human account name.
 2026-07-27 16:09:01 +02:00
Quentin Gliech f70abb914e Add a human_account_name filter to the upstream OAuth link repository 
Fuzzy (case-insensitive substring) matching on the link's
human_account_name, following the OAuth 2.0 client name filter
precedent.
 2026-07-27 16:09:00 +02:00