ef077d0e51
Rate-limit email authentications
2025-01-23 12:09:26 +01:00
0513f198d8
Rip out the email verification codes
...
This considers all user_emails as confirmed, and removes the verification code.
It will be replaced by a new email authentication code flow
2025-01-14 15:46:45 +01:00
6ba8554bc7
Document the response_mode parameter
2025-01-06 11:59:53 +01:00
cd078cb567
Document the new usptream OAuth 2.0 configuration options
2025-01-06 11:59:53 +01:00
1434429b6c
Include example SSO config for Rauthy. ( #3725 )
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2024-12-19 15:26:02 +00:00
a97d2daa3d
Make the issue optional on upstream OAuth 2.0 providers
2024-12-17 13:40:34 +01:00
80903ed629
Add id_token_signed_response_alg and userinfo_signed_response_alg ( #3664 )
2024-12-17 11:54:16 +01:00
93ddaeefc3
Add documentation against using database transaction poolers ( #3617 )
2024-12-05 11:28:22 +00:00
2e3b8bdd86
Allow setting an explicit upstream account name ( #3600 )
2024-11-29 12:30:18 +01:00
56edcb4e52
Add fetch_userinfo to upstream SSO provider ( #3363 )
2024-11-26 15:01:03 +00:00
a0c2ce67ba
Update configuration.md to include a missing parameter
2024-11-26 13:17:52 +01:00
93bbfabf8e
Document how to set up Sign-in with Apple
2024-11-22 08:48:00 +01:00
6efe8bf45a
Allow setting the response_mode on upstream OAuth 2.0 providers
2024-11-22 08:48:00 +01:00
ab4f438464
Support Sign in with Apple
2024-11-22 08:48:00 +01:00
ba6d69b4a4
fix sso exemple config for authelia
2024-11-18 08:47:38 +01:00
1a7f34b0ff
Add note about password schemes to migration docs
2024-11-18 08:46:51 +01:00
c13c8860c5
Add SSO sample configuration for Authelia
...
Signed-off-by: Thilo-Alexander Ginkel <tg@tgbyte.de >
2024-10-25 09:00:45 +02:00
093809cad8
Fix link to setup docs for the mdbook
...
https://rust-lang.github.io/mdBook/format/markdown.html?highlight=readm#links
"Links to README.md will be converted to index.html. This is done since some services like GitHub render README files automatically, but web servers typically expect the root file to be called index.html."
2024-10-01 14:39:52 +02:00
4ccce4de46
Remove the contacts requirement from the client registration policy
2024-09-20 20:39:04 +02:00
847ccf8bb4
Move the remaining mentions of matrix-org to element-hq
2024-09-10 14:28:55 +02:00
76367ff4ef
Move the docker image to ghcr.io/element-hq/matrix-authentication-service
2024-09-10 14:28:55 +02:00
36eb0fb77e
Rename @matrix-org/syn2mas to @vector-im/syn2mas
2024-09-10 14:28:55 +02:00
3a05f24b45
Fix the email policy documentation indentation
2024-09-03 17:47:43 +02:00
b5ed252573
Apply suggestions on wording
2024-09-03 17:33:10 +02:00
7fe70aac80
Document policy settings for changing the policy wasm file
2024-09-03 17:33:10 +02:00
6d30bc530f
Document the email policy in the reference
2024-08-30 13:57:31 +02:00
62e01883b6
Small documentation fixes
...
- Removes mentions of the `mas-cli templates save` command
- Removes the old `experimental` flags
- Removes the old `policy.data.passwords` configs
- Document the `policy.data.client_registration` flags
- Remove references to the pre-built macOS binaries
- Explains how to get syn2mas
- State that you need to prepare the database before importing data
- Clean up the reverse proxy documentation
- Clarify that you don't need to provede templates/policy/assets
manually when running the docker image
2024-08-19 13:53:43 +02:00
29d6383c5d
admin: rename the can_request_admin field to admin
2024-08-07 20:13:43 +02:00
6189abe7b4
admin: set can_request_admin API
2024-08-07 20:13:43 +02:00
5d4a4a6fb8
Add rate-limiting for account recovery and registration ( #3093 )
...
* Add rate-limiting for account recovery and registration
* Rename login ratelimiter `per_address` to `per_ip` for consistency
Co-authored-by: Quentin Gliech <quenting@element.io >
2024-08-07 17:57:36 +00:00
244f8f5e5e
Add configuration for rate-limiting of logins, replacing hardcoded limits ( #3090 )
2024-08-07 18:36:02 +01:00
1bdad262cd
Disallow OAuth 2.0 use of the GraphQL API by default
2024-08-07 18:09:51 +02:00
eb4072f3c3
Document the admin API ( #3038 )
...
Co-authored-by: Hugh Nimmo-Smith <hughns@matrix.org >
2024-08-07 17:41:46 +02:00
cf9f201337
admin: get OAuth 2.0 session API
2024-08-07 17:41:18 +02:00
4f52840bf3
admin: list OAuth 2.0 sessions API
2024-08-07 17:41:18 +02:00
83e4aa476f
admin: setup base for oauth2 sessions endpoints
2024-08-07 17:41:18 +02:00
c61a52a3a0
admin: better error when password auth is disabled
2024-08-07 15:10:19 +02:00
475a43df71
admin: check password complexity in password set API
2024-08-07 15:10:19 +02:00
8b5d576018
admin: set password API
2024-08-07 15:10:19 +02:00
9ea77a9562
admin: lock user API
2024-08-06 13:43:13 +02:00
2307c05c69
admin: user unlock API
2024-08-06 13:31:28 +02:00
117e124ddf
admin: user deactivation API
2024-08-06 11:48:19 +02:00
65f1c45095
admin: add operation ID on user add operation
2024-08-01 16:23:08 +02:00
94004ce18c
Rename the payload struct to appease clippy
2024-08-01 16:23:08 +02:00
221f227baa
admin: add API to create users
2024-08-01 16:23:08 +02:00
d03dd41345
admin: add operation IDs on user operations & other improvements
...
This also documents better the user list operation parameters
2024-08-01 15:17:14 +02:00
78e988b7cc
Tweak the schema generation and use a common definition for ULIDs
2024-08-01 15:17:14 +02:00
cdecac735e
Tweak the schema to use summary instead of description and add tags
2024-08-01 15:17:14 +02:00
3f947025e2
Host a Swagger UI both in the static documentation and by the server
2024-08-01 15:17:14 +02:00
b261ac0a17
Document the new account-management options
2024-08-01 14:50:21 +02:00
Quentin Gliech