Commit Graph
290 Commits
Author SHA1 Message Date
Andrew Ferrazzutti 972c50d6a3 Require "erase" key in deactivation request body
If body is absent, treat "erase" as true.
If body is present, require "erase" to be present in the body.
2025-07-04 14:30:42 -04:00
Andrew Ferrazzutti aad422110c Add "erase" option to REST deactivate request body
This allows using the endpoint to deactivate a user without deleting it.

TODO: make the request body optional.
2025-07-03 13:22:17 -04:00
Quentin Gliech 6ba9823482 README, contribution and release documentation (#4675) 2025-06-12 09:17:22 +02:00
Quentin GliechandWill Lewis 2c8f8f3623 Apply suggestions from code review
Co-authored-by: Will Lewis <1543626+wrjlewis@users.noreply.github.com>
2025-06-12 09:11:03 +02:00
Quentin Gliech af9765b0e2 Update the contributing guidelines 2025-06-11 15:57:12 +02:00
Quentin Gliech b0b940a20e Release documentation 2025-06-11 15:16:41 +02:00
Quentin Gliech 1546318084 Remove optional features from mas-iana & regenerate
Also ignores 'TEMPORARY' items in the IANA registry
2025-06-10 14:25:38 +02:00
Quentin Gliech 8df03bf185 Support for experimental plan management tab in UI (#4549) 2025-06-10 14:14:24 +02:00
Quentin Gliech ed31b2f4f9 Admin API to un-revoke and edit registration tokens (#4637) 2025-06-06 12:56:43 +02:00
Hugh Nimmo-Smith 037d90bb1a Update schemas 2025-06-06 10:45:23 +01:00
Quentin Gliech 52942ee94e Admin API to edit registration tokens 2025-06-05 18:22:16 +02:00
Quentin Gliech c8f2a2146c Admin API to un-revoke a user registration token. 2025-06-05 16:56:42 +02:00
Quentin Gliech 50b41a6613 Add secrets.encryption_file config option (#4617) 2025-06-05 15:14:55 +02:00
Quentin Gliech ae71b75ce1 config: Refactor parsing of secrets section (#4602) 2025-06-05 15:13:00 +02:00
Kai A. Hiller 187838802d Update encryption secret warning in docs 2025-06-04 14:50:54 +02:00
Kai A. Hiller 3ac2e983bb Skip encryption serialization if None
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-06-04 11:53:43 +02:00
Kai A. Hiller fbee4bfe8c Document secrets.encryption_file
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-06-04 11:42:51 +02:00
Quentin Gliech 12e9d025d7 Add whether the registration is valid or not in the admin API 2025-06-03 17:42:55 +02:00
Quentin Gliech 5d13691acd CLI tool to issue user registration tokens 2025-06-03 17:42:55 +02:00
Quentin Gliech 723302fd97 Admin API to revoke user registration tokens 2025-06-03 17:42:54 +02:00
Quentin Gliech aa7c6b35bc Admin API to create a new user registration token 2025-06-03 17:42:54 +02:00
Quentin Gliech 6000719b29 Admin API to get individual user registration tokens 2025-06-03 17:42:54 +02:00
Quentin Gliech 322c8545bb Admin API to list user registration tokens 2025-06-03 17:42:54 +02:00
Quentin Gliech 685f4761cd Add config flag to require registration tokens for password registrations 2025-06-03 17:42:53 +02:00
Kai A. Hiller c8cbb7329e Add secrets.encryption_file config option
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-06-02 18:39:19 +02:00
Kai A. Hiller ec693edb72 Refactor key options in secret config
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-06-02 14:06:43 +02:00
Kai A. Hiller e92d16c35c Refactor password options in secret config
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-06-02 14:06:43 +02:00
Kai A. Hiller b0fcf0bf78 Add KeyConfig doc comment
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-06-02 14:06:43 +02:00
Quentin Gliech a11610d318 Add the user deactivation state in the admin API 2025-06-02 11:54:16 +02:00
Quentin Gliech 40cb052d1f Allow applying unicode normalisation to passwords before hashing 2025-05-30 15:42:32 +02:00
Hugh Nimmo-Smith 25de9bcb15 Merge branch 'main' into hughns/plan-management 2025-05-09 10:33:39 +01:00
Lomion0815 4024af6b81 Fix Swagger UI callback path 2025-05-07 22:09:46 +02:00
Quentin Gliech 632904a7ae Make the default scope on upstream providers config openid 2025-05-07 15:34:30 +02:00
Quentin Gliech c326d76e2a Make the security schemes relative in the static OpenAPI spec 2025-05-07 14:20:21 +02:00
Quentin Gliech dc2ff768e3 Use absolute URLs in the OAuth 2.0 security scheme in the API spec 2025-05-07 14:05:44 +02:00
Doug e3c7b8054c Update upstream_oauth2.providers docs. 2025-05-07 11:14:10 +01:00
Doug 0d1caae379 Update the login schema docs. 2025-05-07 10:21:40 +01:00
Doug 6d29ebb5e7 Generate the schema (which fixes a typo amongst other things 🤦‍♂️) 2025-05-06 18:03:53 +01:00
Doug 096ce6037d Add a configuration for forwarding the login hint to the upstream provider. 2025-05-06 17:50:33 +01:00
Quentin Gliech 8bfe2d2092 Allow setting custom names on sessions (#4459) 2025-04-30 15:32:25 +02:00
Quentin Gliech 0c16b3320c Remove the old migration tool and document the new one (#4447) 2025-04-30 13:52:31 +02:00
Quentin Gliech 9cfecaf5db Insert client_name when upserting statically registered clients (#4417) 2025-04-30 11:50:49 +02:00
Quentin GliechandWill Lewis 6c0c110503 Apply suggestions from code review
Co-authored-by: Will Lewis <1543626+wrjlewis@users.noreply.github.com>
2025-04-30 11:49:29 +02:00
Quentin Gliech 498c0ac3a7 admin: expose the sessions 'human_name' 2025-04-25 16:55:30 +02:00
Quentin Gliech e3d1b8abfa docs: stop talking about the .well-known/matrix/client changes
These were relevant on an old version of the specs, and just confuses people.
2025-04-23 18:52:34 +02:00
Quentin Gliech 114ae7dd48 Document the new migration tool 2025-04-23 18:50:15 +02:00
Olivier 'reivilibre ff06b5ed5a syn2mas: document new tool 2025-04-23 17:52:09 +02:00
Quentin Gliech 599fc85ca5 Make the new migration tool generally available (#4444) 2025-04-23 17:01:19 +02:00
Quentin Gliech 5e30d50f38 Fix headings in config doc (#4419) 2025-04-23 14:11:33 +02:00
Hugh Nimmo-Smith 2414e147fb Remove reference to unsupported aws_ses email transport 2025-04-22 13:21:07 +01:00