Quentin Gliech
9969898031
Merge branch 'main' into secret_file
2025-08-05 15:37:32 +02:00
Quentin Gliech
f302711a37
Make MAS use the modern Synapse API by default
2025-08-05 15:03:32 +02:00
Quentin Gliech
453e1dbef5
Fix usage of homeserver_connection_from_config
2025-08-05 11:54:28 +02:00
Quentin Gliech
884c66891a
Merge branch 'main' into secret_file
2025-08-05 11:17:39 +02:00
Quentin Gliech
c6ae5c7557
Add clients.[].client_secret_file config option ( #4857 )
2025-08-05 11:17:00 +02:00
Kai A. Hiller
a7e7c3caa1
Add clients.[].client_secret_file config option
2025-08-04 19:32:39 +02:00
Quentin Gliech
7e018a06aa
Merge remote-tracking branch 'origin/main' into quenting/stable-api
2025-08-04 16:38:49 +02:00
Quentin Gliech
95af799daa
Make mas-cli manage issue-compatibility-token create the device on the homeserver
2025-08-04 11:21:57 +02:00
Quentin Gliech
ea873577aa
Fix many clippy warnings
...
This is because the tracing-attributes update made clippy look at those
again. I've removed the `too_many_lines` lint, as it's not really useful
and we ignore it most of the time anyway.
2025-07-30 14:49:38 +02:00
Quentin Gliech
46bb1189f5
Replace usage of deprecated SentryHttpLayer::with_transaction
2025-07-30 14:27:07 +02:00
Quentin Gliech
046f3a24b6
Remove unused Sentry options
2025-07-30 14:27:07 +02:00
Quentin Gliech
f377c87411
Properly use rustls-platform-verifier with reqwest
2025-07-30 12:04:30 +02:00
Quentin Gliech
62b9874d6e
Use the renamed functions from socket2
2025-07-30 11:24:04 +02:00
Kai A. Hiller
d4a318a8ae
Add matrix.secret_file config option
2025-07-29 19:46:07 +02:00
networkException
ee47713649
fix: don't attempt to set TCP_NODELAY on accepted unix streams
...
This patch fixes accepting streams from unix sockets resulting
in operation not supported errors.
2025-07-27 02:41:39 +02:00
Quentin Gliech
b40c6edaca
Fix spec compliance of upstream OAuth 2.0 client auth methods ( #4819 )
2025-07-24 15:36:25 +02:00
Quentin Gliech
3a8d4dc9e5
Show a better error page in most human-facing pages ( #4816 )
2025-07-24 15:36:09 +02:00
Quentin Gliech
506f162f10
Don't check for client_id in tests
2025-07-24 11:31:54 +02:00
Quentin Gliech
c61d38c5b7
Fix spec compliance of upstream OAuth 2.0 client auth methods
...
We were sending the `client_id` in all cases, but the spec says it
should only be sent for the `none` and `client_secret_post` methods.
2025-07-24 11:16:00 +02:00
Kai A. Hiller
33096c7c87
Fix typo in secrets config output
2025-07-24 10:21:55 +02:00
Quentin Gliech
0b583b6c6e
Human-readable error page on the compat SSO login redirect
2025-07-24 10:01:00 +02:00
Quentin Gliech
e3dd0470cf
Make the compat_router also recover from errors in human-facing routes
2025-07-23 19:45:59 +02:00
Quentin Gliech
8f6c854827
Include the issuer URLs in the error message when they don't match
2025-07-23 19:36:54 +02:00
Quentin Gliech
60f7365dc2
Human-readable error page on the upstream callback page
2025-07-23 19:36:39 +02:00
Quentin Gliech
58c16a2ee4
Human-readable error page on the upstream authorization page
2025-07-23 19:36:17 +02:00
Quentin Gliech
89a85a2d37
Human-readable error page on the authorization endpoint
2025-07-23 19:35:51 +02:00
Quentin Gliech
9b99057958
Human-readable error page on the consent page
2025-07-23 19:35:28 +02:00
Quentin Gliech
d06f7c27d2
Handle device syncs for many devices more quickly ( #4815 )
2025-07-23 17:40:28 +02:00
Quentin Gliech
44c24e362c
Handle device syncs for many devices more quickly
2025-07-23 17:37:25 +02:00
Quentin Gliech
70aba2a086
Fix the user deactivation/reactivation jobs
...
Those got broken when we switched to using localparts in the
HomeserverConnection in #4801
2025-07-23 10:38:27 +02:00
Quentin Gliech
0629915006
Allow the homeserver to perform introspection using a shared secret ( #4808 )
2025-07-22 13:30:49 +02:00
Quentin Gliech and reivilibre
85be5e1472
Clarify comment
...
Co-authored-by: reivilibre <oliverw@element.io >
2025-07-22 13:24:03 +02:00
Quentin Gliech
74bd3fe941
Allow the homeserver to perform introspection using a shared secret
2025-07-22 11:27:56 +02:00
Quentin Gliech
cfa9a23d86
Merge branch 'main' into feat/allow_override_user
2025-07-21 17:03:35 +02:00
Quentin Gliech
832244675d
Threaten to switch to using the modern API in a few releases.
2025-07-21 13:15:48 +02:00
Quentin Gliech
4c5b7d05b4
Avoid a few unnecessary clones when talking to Synapse
2025-07-21 13:14:38 +02:00
Quentin Gliech
fbcfa25cba
Remove the spurious password field from the request body
2025-07-21 13:08:36 +02:00
olivier
d30dd1e766
simplify unit tests
2025-07-21 11:32:54 +02:00
Quentin Gliech
5a32f00901
Rename create_device -> upsert_device
2025-07-21 10:54:40 +02:00
olivier
87ac7a1989
remove unused function
2025-07-21 10:19:57 +02:00
olivier
776da31c52
fix err return
2025-07-21 10:13:04 +02:00
Olivier D and Quentin Gliech
3e9d572e2f
Update crates/handlers/src/upstream_oauth2/link.rs
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2025-07-21 09:52:24 +02:00
Olivier D and Quentin Gliech
2866f7994d
Update crates/handlers/src/upstream_oauth2/link.rs
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2025-07-21 09:52:24 +02:00
olivier
c7b57f7d4c
fix rust style
2025-07-21 09:52:24 +02:00
olivier
0a0c062574
add semi column
2025-07-21 09:52:24 +02:00
Olivier D and Quentin Gliech
fcfbc5176a
fix code style
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2025-07-21 09:52:24 +02:00
Olivier D and Quentin Gliech
23c97e5931
Update crates/handlers/src/upstream_oauth2/link.rs
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2025-07-21 09:52:24 +02:00
Olivier D and Quentin Gliech
cdc75ffbf3
use match
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2025-07-21 09:52:24 +02:00
mcalinghee
3644d4c0bf
rename is_forced to is_forced_or_required
2025-07-21 09:52:24 +02:00
mcalinghee
3774850c94
use of UpstreamOAuthProviderLocalpartPreference
2025-07-21 09:52:24 +02:00
Quentin Gliech